last executing test programs: 2.963407928s ago: executing program 1 (id=894): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) ioprio_get$pid(0x1, r0) 2.299813894s ago: executing program 1 (id=902): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.137323975s ago: executing program 4 (id=909): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x2042) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.914527453s ago: executing program 4 (id=915): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x1, 0x1, 0x0, 0x0, 0x0, 0x61}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.702455901s ago: executing program 4 (id=916): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/129, 0x81}], 0x0}, 0x20) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.535619912s ago: executing program 4 (id=919): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x101, 0x0) close(r4) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f334, 0x0) 1.507022696s ago: executing program 0 (id=920): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x60043, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 1.370943933s ago: executing program 0 (id=922): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54801}, 0x0) 1.3169887s ago: executing program 0 (id=923): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=""/156, 0x9c}, 0x6}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, 0x0) 858.782369ms ago: executing program 0 (id=926): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0xb350, 0x800, 0x5, 0x10039}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @loopback, 0x393}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, 0x0, 0x0) 618.66443ms ago: executing program 1 (id=928): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 610.415012ms ago: executing program 0 (id=929): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) fremovexattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6f73782e6d73646f7300f7bd7c0466b193fee713784cb071540b541af0f06470a5e819f84790daec4ddb8ae5dc964f830e265dc700365611e7b3fd1242f6a9"]) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008c0c5, &(0x7f0000000280)={0xa, 0x4c20, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x40002003, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001140)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000001180)="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", 0x407}], 0x2}, 0x4000014) chmod(&(0x7f0000000180)='./file2\x00', 0xea) 610.148641ms ago: executing program 4 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff9, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)='\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x1, 0xe6) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008cb06a781000000000001090224000100003000090400000203000200092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xf, 0x2a, {0x2a, 0x10, "24a640a56df2c6a6580de0d6d7d0b2d4ac7848f19900c6c621eabb37271f5d74f3b3d5e16d769d9e"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f31000000050f3100031f100a5cca04a9b1a422ff1b1d3293a3af0a1003020400f709dd0c03100b008000"/55], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x18, 0xe3, 0xeb, "4080340d", "00000100"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x60, 0x6, 0x4, 0x7f, 0x7, 0x9}}}, &(0x7f0000000700)={0x84, &(0x7f0000000800)={0x40, 0x11, 0xc9, "4521c8d10260d36d84d01e566866ba921c39aeceaff985eb5c44ea04025ba8358ff92b54185183eb986a0a7f5e078796dd02e9c8d6ef2f412be6cd0d82a7f1f24045d76554bc397d0d13a762ab046b00b9def597de9b2b0ca0bb6a08a0d0c9dcbec98d89d24fcdecb9ee9da8fbb8a19e5047ff2a2495385d12bc9a660af91d3720143ba3af6117a4ffdd2ac184ee3149b36a077259dbd0cc1df36f386339c879d7b306d033f08251778995e0bf9236d5e7cb0a15efe1b82769d5b3c6273e1def4b8e05ffe01db32bd5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x800, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1894"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "1836"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0x1e, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x5}}) 541.57496ms ago: executing program 0 (id=933): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESHEX=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 513.748284ms ago: executing program 1 (id=934): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdbb8, 0x0, 0x1, 0x12d}, &(0x7f0000000140)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 492.387926ms ago: executing program 1 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 468.991699ms ago: executing program 3 (id=937): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) dup3(0xffffffffffffffff, r1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) 447.589222ms ago: executing program 3 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) syz_clone(0x20380a00, &(0x7f0000000380)="c89082ee9337de354fa0af6213988bdd4645063ac1660086168f98134c85c6a95f8c2347e11ae171bb258a85fa1fca643e9ff18164b0839012f791eed615e5ef8dd5eb7b4c38656bd310d0f1dceef7885d893ca4015e84dcc0d6ff2a65cf8f80ebc0c3bb3994ce07d459b9aee7e9683c272e63ca900bf52a29d198528004823cc3328f879277e582476835d216f558690f1eaa73", 0x94, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000002080)="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") sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 385.89061ms ago: executing program 2 (id=940): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) 365.395963ms ago: executing program 1 (id=941): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$zero(0xffffffffffffff9c, 0x0, 0x200802, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 327.888778ms ago: executing program 2 (id=942): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r2, &(0x7f0000001000)=[{&(0x7f00000009c0)="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", 0x107}, {&(0x7f0000000080)="f720545dd3b03efebdc5e0fccd4ef36b1286c4a1a8a1d527bd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912955b0b184747fe59b2702f00624d29fe9d579754a11db59c6ccc2e724e9e6c2d064ff735a794b84b70c7eeb76eaccc42fc897986c24d070a414b9367cdd6a1ea8121a08d90b4581cafac8aa279c4538ecd8c6f8e3778c668444b3f8704f4a169b80fbe5e38d91c920dbec7130fb9535897bdcac32f44720dff3286627fea38d6", 0xbb}, {&(0x7f0000001040)="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", 0x23e}], 0x3) sendfile(r2, r1, 0x0, 0x7fffeff9) 259.307047ms ago: executing program 3 (id=943): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26000400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xffffffffffffff76, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 222.926121ms ago: executing program 3 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r0) 199.863864ms ago: executing program 3 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 160.044159ms ago: executing program 2 (id=946): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) 124.235444ms ago: executing program 2 (id=947): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) open$dir(&(0x7f0000000180)='./file0\x00', 0x237e, 0x8a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 123.853904ms ago: executing program 2 (id=948): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) dup3(0xffffffffffffffff, r1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) 121.619504ms ago: executing program 3 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 85.908109ms ago: executing program 2 (id=950): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=951): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000340), 0x1) memfd_create(0x0, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b, 0x40000000, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x80) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x0, 0x200000000dd1}, 0x0, 0x8, 0x10004, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) socket$inet6(0xa, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 33.944109][ T29] audit: type=1400 audit(1768705361.771:62): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.967173][ T29] audit: type=1400 audit(1768705361.791:63): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.969625][ T3309] cgroup: Unknown subsys name 'net' [ 33.994884][ T29] audit: type=1400 audit(1768705361.821:64): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.148410][ T3309] cgroup: Unknown subsys name 'cpuset' [ 34.154677][ T3309] cgroup: Unknown subsys name 'rlimit' [ 34.305269][ T29] audit: type=1400 audit(1768705362.131:65): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.340344][ T29] audit: type=1400 audit(1768705362.131:66): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.360882][ T29] audit: type=1400 audit(1768705362.141:67): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.380161][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.381459][ T29] audit: type=1400 audit(1768705362.141:68): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.410264][ T29] audit: type=1400 audit(1768705362.151:69): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.429148][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.435129][ T29] audit: type=1400 audit(1768705362.151:70): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.466934][ T29] audit: type=1400 audit(1768705362.161:71): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.172828][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.226027][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 36.262323][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.301217][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.308333][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.315452][ T3321] bridge_slave_0: entered allmulticast mode [ 36.322072][ T3321] bridge_slave_0: entered promiscuous mode [ 36.346004][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.353229][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.360423][ T3321] bridge_slave_1: entered allmulticast mode [ 36.366938][ T3321] bridge_slave_1: entered promiscuous mode [ 36.404177][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.421716][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.442528][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.449651][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.456739][ T3326] bridge_slave_0: entered allmulticast mode [ 36.463204][ T3326] bridge_slave_0: entered promiscuous mode [ 36.469859][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.483655][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 36.493499][ T3321] team0: Port device team_slave_0 added [ 36.503772][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.510855][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.518104][ T3326] bridge_slave_1: entered allmulticast mode [ 36.524439][ T3326] bridge_slave_1: entered promiscuous mode [ 36.542101][ T3321] team0: Port device team_slave_1 added [ 36.556468][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.563663][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.570911][ T3322] bridge_slave_0: entered allmulticast mode [ 36.577212][ T3322] bridge_slave_0: entered promiscuous mode [ 36.599968][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.607139][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.614559][ T3322] bridge_slave_1: entered allmulticast mode [ 36.621108][ T3322] bridge_slave_1: entered promiscuous mode [ 36.633091][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.657420][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.666837][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.673824][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.699780][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.724772][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.731737][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.757805][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.772707][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.796372][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.811094][ T3326] team0: Port device team_slave_0 added [ 36.817812][ T3326] team0: Port device team_slave_1 added [ 36.829050][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.836126][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.843369][ T3327] bridge_slave_0: entered allmulticast mode [ 36.849995][ T3327] bridge_slave_0: entered promiscuous mode [ 36.870276][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.877430][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.884710][ T3327] bridge_slave_1: entered allmulticast mode [ 36.891150][ T3327] bridge_slave_1: entered promiscuous mode [ 36.902029][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.909217][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.916379][ T3329] bridge_slave_0: entered allmulticast mode [ 36.922884][ T3329] bridge_slave_0: entered promiscuous mode [ 36.943023][ T3322] team0: Port device team_slave_0 added [ 36.948684][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.955752][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.962954][ T3329] bridge_slave_1: entered allmulticast mode [ 36.969628][ T3329] bridge_slave_1: entered promiscuous mode [ 36.976185][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.983164][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.009215][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.029651][ T3322] team0: Port device team_slave_1 added [ 37.040134][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.047110][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.073165][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.086106][ T3321] hsr_slave_0: entered promiscuous mode [ 37.092397][ T3321] hsr_slave_1: entered promiscuous mode [ 37.099738][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.121526][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.141112][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.156344][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.163393][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.189403][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.205643][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.212662][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.238689][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.250641][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.272889][ T3327] team0: Port device team_slave_0 added [ 37.298831][ T3327] team0: Port device team_slave_1 added [ 37.312509][ T3326] hsr_slave_0: entered promiscuous mode [ 37.318610][ T3326] hsr_slave_1: entered promiscuous mode [ 37.324625][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 37.330432][ T3326] Cannot create hsr debugfs directory [ 37.348855][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.355895][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.381951][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.393606][ T3329] team0: Port device team_slave_0 added [ 37.399557][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.406626][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.432548][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.451444][ T3329] team0: Port device team_slave_1 added [ 37.481052][ T3322] hsr_slave_0: entered promiscuous mode [ 37.487054][ T3322] hsr_slave_1: entered promiscuous mode [ 37.493104][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.498911][ T3322] Cannot create hsr debugfs directory [ 37.509705][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.516709][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.542731][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.561022][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.567987][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.593988][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.633095][ T3327] hsr_slave_0: entered promiscuous mode [ 37.639344][ T3327] hsr_slave_1: entered promiscuous mode [ 37.645201][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 37.651037][ T3327] Cannot create hsr debugfs directory [ 37.705387][ T3329] hsr_slave_0: entered promiscuous mode [ 37.711516][ T3329] hsr_slave_1: entered promiscuous mode [ 37.717431][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 37.723187][ T3329] Cannot create hsr debugfs directory [ 37.835956][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.849431][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.862885][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.876152][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.911244][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.920068][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.930485][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.941522][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.975847][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.985251][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.998025][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.015126][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.040816][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.053224][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.063222][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.074421][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.093590][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.115161][ T3329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.124033][ T3329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.136753][ T3329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.151991][ T3329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.161556][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.180780][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.187969][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.200374][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.215603][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.222688][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.244477][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.271692][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.278845][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.294098][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.301313][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.331522][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.346950][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.373103][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.383574][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.408744][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.422609][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.429704][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.446295][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.466526][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.473713][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.484064][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.494958][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.509553][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.522192][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.529269][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.542547][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.549715][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.566479][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.573615][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.582922][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.590101][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.611021][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.638418][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.754440][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.796985][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.821268][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.835166][ T3321] veth0_vlan: entered promiscuous mode [ 38.853658][ T3321] veth1_vlan: entered promiscuous mode [ 38.916909][ T3322] veth0_vlan: entered promiscuous mode [ 38.929022][ T3321] veth0_macvtap: entered promiscuous mode [ 38.936652][ T3321] veth1_macvtap: entered promiscuous mode [ 38.952068][ T3322] veth1_vlan: entered promiscuous mode [ 38.962913][ T3326] veth0_vlan: entered promiscuous mode [ 38.978313][ T3326] veth1_vlan: entered promiscuous mode [ 38.993226][ T3327] veth0_vlan: entered promiscuous mode [ 39.003808][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.011952][ T3322] veth0_macvtap: entered promiscuous mode [ 39.027124][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.041845][ T3322] veth1_macvtap: entered promiscuous mode [ 39.050493][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.059520][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.071149][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.080297][ T3327] veth1_vlan: entered promiscuous mode [ 39.087355][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113080][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.125165][ T3326] veth0_macvtap: entered promiscuous mode [ 39.132535][ T3329] veth0_vlan: entered promiscuous mode [ 39.143603][ T3326] veth1_macvtap: entered promiscuous mode [ 39.148846][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 39.148884][ T29] audit: type=1400 audit(1768705366.981:85): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.lqd125/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.160592][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.188191][ T29] audit: type=1400 audit(1768705367.011:86): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.206879][ T3329] veth1_vlan: entered promiscuous mode [ 39.210183][ T29] audit: type=1400 audit(1768705367.011:87): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.lqd125/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.210208][ T29] audit: type=1400 audit(1768705367.011:88): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.210230][ T29] audit: type=1400 audit(1768705367.011:89): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.lqd125/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.232641][ T3329] veth0_macvtap: entered promiscuous mode [ 39.241028][ T29] audit: type=1400 audit(1768705367.011:90): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.lqd125/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.269578][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.289368][ T29] audit: type=1400 audit(1768705367.021:91): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.319918][ T3329] veth1_macvtap: entered promiscuous mode [ 39.356188][ T29] audit: type=1400 audit(1768705367.181:92): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.362806][ T3327] veth0_macvtap: entered promiscuous mode [ 39.382310][ T29] audit: type=1400 audit(1768705367.211:93): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="gadgetfs" ino=3801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.409734][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.420856][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.436016][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.451087][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.462907][ T29] audit: type=1400 audit(1768705367.291:94): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.469314][ T3327] veth1_macvtap: entered promiscuous mode [ 39.501902][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.515394][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.531977][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.540120][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549790][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.558560][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.583201][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618895][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650794][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.665454][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.684783][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.695316][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.730993][ T3511] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 39.778575][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.808278][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.822058][ T3516] bond1: Removing last ns target with arp_interval on [ 39.829431][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851706][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861462][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.874130][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.943816][ T3411] IPVS: starting estimator thread 0... [ 40.027139][ T3535] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 40.048149][ T3529] IPVS: using max 2496 ests per chain, 124800 per kthread [ 40.080550][ T3540] capability: warning: `syz.4.16' uses 32-bit capabilities (legacy support in use) [ 40.242574][ T3558] loop1: detected capacity change from 0 to 128 [ 40.275862][ T3558] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 40.297158][ T3558] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.357617][ T3329] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.400219][ T3576] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.25'. [ 40.409368][ T3576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 40.934072][ T3598] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 41.189820][ T3605] loop2: detected capacity change from 0 to 2048 [ 41.313307][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.317845][ T3611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 41.382789][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 41.547700][ T1821] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.616590][ T1821] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1000 with error 28 [ 41.629217][ T1821] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.629217][ T1821] [ 41.638953][ T1821] EXT4-fs (loop2): Total free blocks count 0 [ 41.644963][ T1821] EXT4-fs (loop2): Free/Dirty block details [ 41.650912][ T1821] EXT4-fs (loop2): free_blocks=2415919104 [ 41.656654][ T1821] EXT4-fs (loop2): dirty_blocks=1008 [ 41.662039][ T1821] EXT4-fs (loop2): Block reservation details [ 41.668045][ T1821] EXT4-fs (loop2): i_reserved_data_blocks=63 [ 41.725556][ T1821] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1000 with max blocks 2 with error 28 [ 41.781990][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 41.859462][ T3629] team1: entered promiscuous mode [ 41.864613][ T3629] team1: entered allmulticast mode [ 41.890751][ T3629] 8021q: adding VLAN 0 to HW filter on device team1 [ 41.915846][ T3629] Zero length message leads to an empty skb [ 42.099016][ T3644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 42.101840][ C1] hrtimer: interrupt took 41661 ns [ 42.229802][ T3652] -1: renamed from syzkaller0 [ 42.400566][ T3666] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 42.484935][ T3672] netlink: 'syz.0.63': attribute type 13 has an invalid length. [ 42.551110][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 42.559898][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 42.631391][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.638761][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.764124][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.798586][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.908539][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.937691][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.957687][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.966637][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.059006][ T3692] syz_tun: entered allmulticast mode [ 43.069050][ T3691] syz_tun: left allmulticast mode [ 43.205672][ T3621] syz.2.38 (3621) used greatest stack depth: 10088 bytes left [ 43.247514][ T3620] syz.2.38 (3620) used greatest stack depth: 7224 bytes left [ 43.286523][ T3701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 43.316081][ T3703] loop2: detected capacity change from 0 to 7 [ 44.132610][ T3738] loop0: detected capacity change from 0 to 512 [ 44.167255][ T3738] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 44.242342][ T3738] EXT4-fs (loop0): invalid journal inode [ 44.248302][ T3738] EXT4-fs (loop0): can't get journal size [ 44.256210][ T3738] EXT4-fs (loop0): 1 truncate cleaned up [ 44.268344][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.373315][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.410230][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 44.410242][ T29] audit: type=1400 audit(1768705372.241:253): avc: denied { write } for pid=3742 comm="syz.1.94" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.439276][ T29] audit: type=1400 audit(1768705372.241:254): avc: denied { open } for pid=3742 comm="syz.1.94" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.487494][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 44.498525][ T29] audit: type=1400 audit(1768705372.241:255): avc: denied { ioctl } for pid=3742 comm="syz.1.94" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.541627][ T3747] loop3: detected capacity change from 0 to 128 [ 44.556302][ T29] audit: type=1400 audit(1768705372.381:256): avc: denied { mount } for pid=3746 comm="syz.3.97" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.580002][ T3749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3749 comm=syz.0.93 [ 44.608430][ T3751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.630244][ T29] audit: type=1400 audit(1768705372.441:257): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.695830][ T29] audit: type=1400 audit(1768705372.481:258): avc: denied { name_bind } for pid=3750 comm="syz.2.96" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.717274][ T3758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 44.723881][ T3758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.731612][ T3758] vhci_hcd vhci_hcd.0: Device attached [ 44.758264][ T3763] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 44.764833][ T3763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.772469][ T3763] vhci_hcd vhci_hcd.0: Device attached [ 44.793519][ T3763] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 44.800078][ T3763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.807919][ T3763] vhci_hcd vhci_hcd.0: Device attached [ 44.840630][ T3758] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 44.847332][ T3758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.854937][ T3758] vhci_hcd vhci_hcd.0: Device attached [ 44.907717][ T3439] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 44.934606][ T3763] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 44.941330][ T3763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.948950][ T3763] vhci_hcd vhci_hcd.0: Device attached [ 44.966365][ T29] audit: type=1400 audit(1768705372.791:259): avc: denied { bpf } for pid=3780 comm="syz.0.106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.983458][ T3758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.986972][ T29] audit: type=1400 audit(1768705372.791:260): avc: denied { perfmon } for pid=3780 comm="syz.0.106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.007008][ T3758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.027760][ T3439] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 45.087984][ T3763] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 45.094642][ T3763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.102188][ T3763] vhci_hcd vhci_hcd.0: Device attached [ 45.129785][ T3783] vhci_hcd: connection closed [ 45.130297][ T3770] vhci_hcd: connection closed [ 45.135201][ T3768] vhci_hcd: connection closed [ 45.140353][ T3766] vhci_hcd: connection closed [ 45.140882][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.145297][ T3778] vhci_hcd: connection closed [ 45.149787][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.165086][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.169415][ T3759] vhci_hcd: connection reset by peer [ 45.173205][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.181338][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.186790][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.193088][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.198473][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.203872][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.217068][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.222358][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.227782][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.237536][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.242835][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.248357][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.267482][ T1798] vhci_hcd vhci_hcd.3: stop threads [ 45.272793][ T1798] vhci_hcd vhci_hcd.3: release socket [ 45.278280][ T1798] vhci_hcd vhci_hcd.3: disconnect device [ 45.491087][ T29] audit: type=1400 audit(1768705373.321:261): avc: denied { ioctl } for pid=3790 comm="syz.1.110" path="socket:[5375]" dev="sockfs" ino=5375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.571789][ T29] audit: type=1400 audit(1768705373.351:262): avc: denied { connect } for pid=3790 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.642103][ T3798] netlink: 'syz.1.113': attribute type 13 has an invalid length. [ 45.677804][ T3798] gretap0: refused to change device tx_queue_len [ 45.685190][ T3798] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.986392][ T3781] Set syz1 is full, maxelem 65536 reached [ 46.483223][ T3823] tipc: Started in network mode [ 46.488192][ T3823] tipc: Node identity 84e, cluster identity 4711 [ 46.494555][ T3823] tipc: Node number set to 2126 [ 46.860169][ T3849] loop2: detected capacity change from 0 to 128 [ 46.898273][ T3853] __nla_validate_parse: 1 callbacks suppressed [ 46.898337][ T3853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 47.010266][ T3864] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 47.019379][ T3864] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 47.304703][ T3884] veth0_vlan: entered allmulticast mode [ 47.321245][ T3884] veth0_vlan: left promiscuous mode [ 47.327404][ T3884] veth0_vlan: entered promiscuous mode [ 47.738400][ T3897] qrtr: Invalid version 0 [ 48.511261][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 48.520151][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 48.820891][ T3942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'. [ 48.913140][ T3942] gtp0: entered promiscuous mode [ 49.113808][ T3967] loop3: detected capacity change from 0 to 764 [ 49.181419][ T3968] loop2: detected capacity change from 0 to 1024 [ 49.237921][ T3968] ======================================================= [ 49.237921][ T3968] WARNING: The mand mount option has been deprecated and [ 49.237921][ T3968] and is ignored by this kernel. Remove the mand [ 49.237921][ T3968] option from the mount to silence this warning. [ 49.237921][ T3968] ======================================================= [ 49.365587][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.483206][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 49.483225][ T29] audit: type=1326 audit(1768705377.311:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.564361][ T3968] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.583357][ T3983] veth1_to_bond: entered promiscuous mode [ 49.598812][ T3984] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 49.613978][ T3987] loop1: detected capacity change from 0 to 512 [ 49.620745][ T29] audit: type=1326 audit(1768705377.341:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.644057][ T29] audit: type=1326 audit(1768705377.341:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.655319][ T3968] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.178: lblock 3 mapped to illegal pblock 3 (length 3) [ 49.667301][ T29] audit: type=1326 audit(1768705377.341:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.704458][ T29] audit: type=1326 audit(1768705377.341:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.721160][ T3968] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 49.727695][ T29] audit: type=1326 audit(1768705377.341:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.740067][ T3968] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.740067][ T3968] [ 49.763247][ T29] audit: type=1326 audit(1768705377.351:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.763274][ T29] audit: type=1326 audit(1768705377.351:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.819443][ T29] audit: type=1326 audit(1768705377.351:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.842723][ T29] audit: type=1326 audit(1768705377.351:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f604733b58e code=0x7ffc0000 [ 49.895072][ T3987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.913705][ T3987] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.010239][ T3982] veth1_to_bond: left promiscuous mode [ 50.088157][ T3439] usb 7-1: enqueue for inactive port 0 [ 50.093708][ T3439] usb 7-1: enqueue for inactive port 0 [ 50.166154][ T1821] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 50.180830][ T3439] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 50.195863][ T1821] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 50.208207][ T1821] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.208207][ T1821] [ 50.238370][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.322636][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.902431][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 51.013379][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'. [ 51.035854][ T4049] loop2: detected capacity change from 0 to 8192 [ 51.312092][ T4074] loop0: detected capacity change from 0 to 256 [ 51.326306][ T4071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.897471][ T4114] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.233'. [ 52.076033][ T4120] loop0: detected capacity change from 0 to 1024 [ 52.103081][ T4120] EXT4-fs: Ignoring removed nobh option [ 52.108859][ T4120] EXT4-fs: inline encryption not supported [ 52.167099][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.201180][ T4120] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.236: Allocating blocks 385-513 which overlap fs metadata [ 52.272375][ T4120] EXT4-fs (loop0): pa ffff888107a370e0: logic 16, phys. 129, len 24 [ 52.280489][ T4120] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 52.312752][ T4135] loop4: detected capacity change from 0 to 1024 [ 52.321407][ T4135] EXT4-fs: Ignoring removed bh option [ 52.336711][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.371786][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.410431][ T4135] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 52.425974][ T4135] EXT4-fs (loop4): Remounting filesystem read-only [ 52.432926][ T4135] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 52.653528][ T4156] loop2: detected capacity change from 0 to 1024 [ 52.664812][ T4156] EXT4-fs: Ignoring removed nobh option [ 52.670691][ T4156] EXT4-fs: inline encryption not supported [ 52.692338][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.725027][ T3439] Process accounting resumed [ 52.731150][ T4156] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.249: Allocating blocks 385-513 which overlap fs metadata [ 52.757099][ T4156] EXT4-fs (loop2): pa ffff888107a37150: logic 16, phys. 129, len 24 [ 52.765272][ T4156] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 52.789606][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.157447][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.416829][ T4213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.471523][ T4213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.522014][ T4213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.590811][ T4213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.633789][ T4225] loop2: detected capacity change from 0 to 2048 [ 53.640774][ T4225] ext4: Unknown parameter 'hash' [ 53.660572][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.672571][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.684267][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.696695][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.812235][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 53.821240][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 53.922013][ T4242] loop3: detected capacity change from 0 to 2048 [ 54.058863][ T4242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.371256][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.482794][ T4277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.495470][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 54.504591][ T4277] bridge_slave_1: left allmulticast mode [ 54.510385][ T4277] bridge_slave_1: left promiscuous mode [ 54.516131][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.539100][ T4277] bridge_slave_0: left allmulticast mode [ 54.544799][ T4277] bridge_slave_0: left promiscuous mode [ 54.550564][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.695969][ T388] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 54.786774][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 54.786792][ T29] audit: type=1400 audit(1768705382.605:687): avc: denied { listen } for pid=4299 comm="syz.2.305" lport=51843 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.894722][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 54.903616][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 54.984253][ T4312] veth2: entered promiscuous mode [ 54.989559][ T4312] veth2: entered allmulticast mode [ 55.007339][ T29] audit: type=1400 audit(1768705382.825:688): avc: denied { mounton } for pid=4313 comm="syz.2.312" path="/file0" dev="ramfs" ino=8579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 55.034407][ T4316] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 55.050143][ T4316] bond1: entered promiscuous mode [ 55.055598][ T4316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.099238][ T4316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.107754][ T4316] bond1: (slave bond2): making interface the new active one [ 55.115111][ T4316] bond2: entered promiscuous mode [ 55.121340][ T4316] bond1: (slave bond2): Enslaving as an active interface with an up link [ 55.208768][ T4329] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.317'. [ 55.468820][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.502040][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.537927][ T29] audit: type=1400 audit(1768705383.365:689): avc: denied { listen } for pid=4356 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.570969][ T29] audit: type=1400 audit(1768705383.385:690): avc: denied { accept } for pid=4356 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.609658][ T4355] loop1: detected capacity change from 0 to 8192 [ 55.619076][ T29] audit: type=1400 audit(1768705383.445:691): avc: denied { mounton } for pid=4354 comm="syz.1.327" path="/74/file2/bus" dev="loop1" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 55.686055][ T3329] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 55.694116][ T3329] FAT-fs (loop1): Filesystem has been set read-only [ 55.701804][ T29] audit: type=1400 audit(1768705383.525:692): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.761982][ T4365] netlink: 'syz.1.331': attribute type 32 has an invalid length. [ 55.880032][ T29] audit: type=1326 audit(1768705383.705:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4374 comm="syz.1.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604737acb9 code=0x0 [ 56.124970][ T4379] loop4: detected capacity change from 0 to 512 [ 56.498900][ T4395] netlink: 'syz.0.341': attribute type 27 has an invalid length. [ 56.557986][ T4395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.566185][ T4395] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.576673][ T4395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.592922][ T126] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 56.703506][ T29] audit: type=1400 audit(1768705384.525:694): avc: denied { execute } for pid=4410 comm="syz.0.346" path="/file1" dev="ramfs" ino=8159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 56.765929][ T29] audit: type=1400 audit(1768705384.585:695): avc: denied { bind } for pid=4415 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.805021][ T4419] loop4: detected capacity change from 0 to 1024 [ 56.812079][ T4421] loop0: detected capacity change from 0 to 512 [ 56.816934][ T4419] EXT4-fs: Ignoring removed oldalloc option [ 56.820714][ T4421] EXT4-fs: Ignoring removed bh option [ 56.824433][ T4419] EXT4-fs: Ignoring removed bh option [ 56.843178][ T4421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.856391][ T4421] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.865585][ T4421] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 56.874706][ T4421] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 56.884282][ T4421] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 56.885233][ T4419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.893927][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.918890][ T29] audit: type=1400 audit(1768705384.745:696): avc: denied { setattr } for pid=4420 comm="syz.0.350" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.940822][ T4421] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.350: bg 0: block 353: padding at end of block bitmap is not set [ 56.971183][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.171664][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.621722][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 57.637287][ T4455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.668182][ T4455] macvlan2: entered promiscuous mode [ 57.673561][ T4455] macvlan2: entered allmulticast mode [ 58.095549][ T4470] loop0: detected capacity change from 0 to 1024 [ 58.102623][ T4470] EXT4-fs: Ignoring removed nobh option [ 58.108248][ T4470] EXT4-fs: inline encryption not supported [ 58.119325][ T4470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.419065][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.457074][ T4485] loop0: detected capacity change from 0 to 1024 [ 58.469504][ T4485] EXT4-fs: Ignoring removed bh option [ 58.482775][ T4485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.557219][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.593956][ T4492] loop0: detected capacity change from 0 to 1024 [ 58.601006][ T4492] EXT4-fs: inline encryption not supported [ 58.622357][ T4492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.676287][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.768498][ T4502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.882201][ T4502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.903903][ T4508] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 58.925633][ T4508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.941291][ T4502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.966544][ T4508] bond1: (slave dummy0): making interface the new active one [ 58.975613][ T4508] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 58.990211][ T4508] bond1: entered promiscuous mode [ 58.995393][ T4508] dummy0: entered promiscuous mode [ 59.004143][ T4502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.016281][ T4507] bond1: left promiscuous mode [ 59.021265][ T4507] dummy0: left promiscuous mode [ 59.071101][ T388] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.088858][ T388] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.117351][ T388] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.139433][ T388] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.253937][ T4526] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 59.540061][ T4548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.579763][ T4548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.639459][ T4548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.699451][ T4548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.747190][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759031][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.770694][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.783097][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.867543][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 59.867560][ T29] audit: type=1400 audit(1768705387.685:711): avc: denied { associate } for pid=4554 comm="syz.3.397" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.903282][ T4557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 59.929770][ T29] audit: type=1326 audit(1768705387.755:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 59.955626][ T29] audit: type=1326 audit(1768705387.755:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 59.979011][ T29] audit: type=1326 audit(1768705387.755:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.002417][ T29] audit: type=1326 audit(1768705387.755:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.025713][ T29] audit: type=1326 audit(1768705387.755:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.048946][ T29] audit: type=1326 audit(1768705387.755:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.072194][ T29] audit: type=1326 audit(1768705387.755:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.095611][ T29] audit: type=1326 audit(1768705387.755:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.118953][ T29] audit: type=1326 audit(1768705387.755:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1063acb9 code=0x7ffc0000 [ 60.312620][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 60.358283][ T4580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.408'. [ 60.412775][ T4586] loop4: detected capacity change from 0 to 512 [ 60.473716][ T4586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.486431][ T4586] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.686494][ T4586] process 'syz.4.410' launched './file0' with NULL argv: empty string added [ 60.695527][ T4586] Invalid argument reading file caps for ./file0 [ 60.826515][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 60.842953][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 60.862626][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.989551][ T4633] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 61.013513][ T4636] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4636 comm=syz.4.433 [ 61.025095][ T4633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 61.043004][ T4636] netlink: 232 bytes leftover after parsing attributes in process `syz.4.433'. [ 61.056216][ T4633] bond4: (slave veth3): Enslaving as an active interface with a down link [ 61.066256][ T4638] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.088245][ T4633] bond4: (slave dummy0): making interface the new active one [ 61.097388][ T4633] dummy0: entered promiscuous mode [ 61.113447][ T4633] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 61.135882][ T4638] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.154223][ T4644] bond4 (unregistering): (slave veth3): Releasing active interface [ 61.164014][ T4644] bond4 (unregistering): (slave dummy0): Releasing active interface [ 61.179518][ T4644] bond4 (unregistering): Released all slaves [ 61.201882][ T4638] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.249372][ T4638] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.272010][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 62.095295][ T3495] IPVS: starting estimator thread 0... [ 62.171343][ T4674] loop0: detected capacity change from 0 to 128 [ 62.187693][ T4672] IPVS: using max 1872 ests per chain, 93600 per kthread [ 62.198987][ T4674] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.220731][ T4674] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.358154][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.778485][ T4691] ªªªªªª: renamed from wg2 (while UP) [ 62.859123][ T4697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.903132][ T4697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.944075][ T4697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.997847][ T4697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.069657][ T1821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.083813][ T4720] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4720 comm=syz.1.464 [ 63.111624][ T126] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.135650][ T4722] netlink: 232 bytes leftover after parsing attributes in process `syz.1.464'. [ 63.137844][ T126] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.157704][ T126] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.025624][ T4748] delete_channel: no stack [ 64.164675][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178881][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.206314][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.231943][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.289350][ T4758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 64.328478][ T4757] loop3: detected capacity change from 0 to 1024 [ 64.336243][ T4757] EXT4-fs: Ignoring removed nobh option [ 64.341981][ T4757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.381506][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.473896][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.788160][ T4785] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.484'. [ 65.253704][ T4794] __nla_validate_parse: 1 callbacks suppressed [ 65.253720][ T4794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.491'. [ 65.432532][ T4794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.491'. [ 65.487851][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 65.487869][ T29] audit: type=1400 audit(1768705393.315:882): avc: denied { setopt } for pid=4800 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.640620][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 65.837170][ T4829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 65.866634][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.873901][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.910681][ T4829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.920459][ T4829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.950391][ T53] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.960058][ T53] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.968843][ T53] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.977261][ T53] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.157823][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 66.166687][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 66.393071][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 66.504002][ T3498] kernel read not supported for file /rfkill (pid: 3498 comm: kworker/0:6) [ 66.673010][ T4863] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.515'. [ 66.685020][ T4858] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.515'. [ 66.862997][ T29] audit: type=1400 audit(1768705394.685:883): avc: denied { connect } for pid=4882 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.058884][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 67.206585][ T29] audit: type=1400 audit(1768705395.025:884): avc: denied { ioctl } for pid=4906 comm="syz.3.535" path="socket:[10941]" dev="sockfs" ino=10941 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.256207][ T29] audit: type=1400 audit(1768705395.075:885): avc: denied { execute } for pid=4906 comm="syz.3.535" path="/proc/285/task/286/net/vlan/vlan1" dev="proc" ino=4026533303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 67.366691][ T4916] sctp: [Deprecated]: syz.0.539 (pid 4916) Use of int in max_burst socket option deprecated. [ 67.366691][ T4916] Use struct sctp_assoc_value instead [ 67.723172][ T4930] loop0: detected capacity change from 0 to 512 [ 67.741362][ T4930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.754024][ T4930] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.769941][ T29] audit: type=1400 audit(1768705395.595:886): avc: denied { write } for pid=4934 comm="syz.4.547" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.793491][ T29] audit: type=1400 audit(1768705395.595:887): avc: denied { open } for pid=4934 comm="syz.4.547" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.794537][ T4935] program syz.4.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.828206][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.850298][ T29] audit: type=1326 audit(1768705395.675:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604737acb9 code=0x7fc00000 [ 67.875458][ T4937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.883824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.892107][ T4937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.901789][ T4937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.910105][ T3404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.918660][ T3404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.927657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.939562][ T4937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.984583][ T4937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.992842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.021372][ T29] audit: type=1400 audit(1768705395.845:889): avc: denied { watch_reads } for pid=4949 comm="syz.4.554" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.057220][ T29] audit: type=1400 audit(1768705395.875:890): avc: denied { watch } for pid=4954 comm="syz.2.556" path="/" dev="ramfs" ino=11410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 68.789043][ T5015] loop2: detected capacity change from 0 to 128 [ 68.814424][ T29] audit: type=1400 audit(1768705396.635:891): avc: denied { watch watch_reads } for pid=5010 comm="syz.2.563" path="/113/file1" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 69.850303][ T5074] cgroup: fork rejected by pids controller in /syz0 [ 70.225203][ T5153] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 70.349196][ T5153] batman_adv: batadv0: Adding interface: gretap1 [ 70.355681][ T5153] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.498397][ T5153] batman_adv: batadv0: Interface activated: gretap1 [ 70.624650][ T5168] __nla_validate_parse: 6 callbacks suppressed [ 70.624671][ T5168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 70.649153][ T5161] syz_tun: entered allmulticast mode [ 70.663632][ T5163] dvmrp8: entered allmulticast mode [ 70.703146][ T5158] syz_tun: left allmulticast mode [ 70.963595][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.970842][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.031897][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 71.031914][ T29] audit: type=1326 audit(1768705398.855:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.077967][ T29] audit: type=1326 audit(1768705398.855:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.101321][ T29] audit: type=1326 audit(1768705398.855:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.124690][ T29] audit: type=1326 audit(1768705398.875:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.133730][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.147983][ T29] audit: type=1326 audit(1768705398.875:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.178604][ T29] audit: type=1326 audit(1768705398.875:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.195167][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.201864][ T29] audit: type=1326 audit(1768705398.875:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.232476][ T29] audit: type=1326 audit(1768705398.875:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.255703][ T29] audit: type=1326 audit(1768705398.875:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.279013][ T29] audit: type=1326 audit(1768705398.875:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 71.360075][ T2819] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.377867][ T2819] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.386288][ T2819] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.399844][ T2819] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.490125][ T5195] Illegal XDP return value 4291436544 on prog (id 109) dev syz_tun, expect packet loss! [ 71.505210][ T5196] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.599'. [ 71.526715][ T5189] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.599'. [ 71.575584][ T5204] loop1: detected capacity change from 0 to 512 [ 71.583115][ T5204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.592258][ T5204] EXT4-fs (loop1): 1 truncate cleaned up [ 71.600139][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.669118][ T5211] loop0: detected capacity change from 0 to 1024 [ 71.690209][ T5211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.737062][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.942925][ T5232] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 72.139089][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.155271][ T5247] loop0: detected capacity change from 0 to 512 [ 72.186520][ T5247] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.218156][ T5247] EXT4-fs (loop0): mount failed [ 72.814876][ T5274] netlink: 87 bytes leftover after parsing attributes in process `syz.4.635'. [ 73.055444][ T5286] Failed to initialize the IGMP autojoin socket (err -2) [ 73.159010][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 73.440945][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.461549][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.486407][ T5304] atomic_op ffff88811a489128 conn xmit_atomic 0000000000000000 [ 73.561186][ T5294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.675327][ T5294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.728126][ T5310] loop3: detected capacity change from 0 to 512 [ 73.866235][ T5310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.879099][ T5310] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.891366][ T5294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.948894][ T5309] net_ratelimit: 16 callbacks suppressed [ 73.948926][ T5309] Set syz1 is full, maxelem 65536 reached [ 74.068724][ T5294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.088437][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.146581][ T5324] loop3: detected capacity change from 0 to 512 [ 74.299351][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.312004][ T5324] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.324981][ T5324] 9p: Bad value for 'wfdno' [ 74.343169][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.360041][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 74.424359][ T5339] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 74.432199][ T5339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 74.474405][ T5048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.565622][ T5342] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 74.574767][ T5339] dummy0: entered promiscuous mode [ 74.579977][ T5339] dummy0: entered allmulticast mode [ 74.596873][ T5339] bridge0: port 3(dummy0) entered blocking state [ 74.603350][ T5339] bridge0: port 3(dummy0) entered disabled state [ 74.611965][ T5048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.626121][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 74.634981][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 74.694455][ T5041] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.709214][ T5342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.740403][ T5343] macsec1: entered promiscuous mode [ 74.745865][ T5343] bond2: entered promiscuous mode [ 74.751071][ T5343] macsec1: entered allmulticast mode [ 74.756383][ T5343] bond2: entered allmulticast mode [ 74.820979][ T5048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.851832][ T5359] loop0: detected capacity change from 0 to 512 [ 74.878514][ T5359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.894909][ T5359] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.909419][ T5359] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.666 [ 74.929249][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.013153][ T5369] syzkaller0: entered promiscuous mode [ 75.018727][ T5369] syzkaller0: entered allmulticast mode [ 75.162455][ T5374] Failed to initialize the IGMP autojoin socket (err -2) [ 75.184682][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 75.218527][ T5378] bridge_slave_1: left allmulticast mode [ 75.224210][ T5378] bridge_slave_1: left promiscuous mode [ 75.230086][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.238012][ T5378] bridge_slave_0: left allmulticast mode [ 75.243772][ T5378] bridge_slave_0: left promiscuous mode [ 75.249513][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.468342][ T5389] loop1: detected capacity change from 0 to 1024 [ 75.482791][ T5389] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 75.494329][ T5389] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.677: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.508530][ T5389] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.677: Failed to acquire dquot type 0 [ 75.520241][ T5389] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.677: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.534617][ T5389] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.677: Invalid inode bitmap blk 0 in block_group 0 [ 75.547582][ T5389] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 75.548399][ T2819] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.570720][ T5389] EXT4-fs (loop1): 1 orphan inode deleted [ 75.580208][ T5389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.594106][ T2819] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 75.610404][ T5389] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 75.645079][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.670776][ T5400] netlink: 'syz.2.683': attribute type 3 has an invalid length. [ 75.684005][ T5400] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.692272][ T5400] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 75.724138][ T5403] __nla_validate_parse: 2 callbacks suppressed [ 75.724155][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 75.774982][ T5407] Failed to initialize the IGMP autojoin socket (err -2) [ 75.980585][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 75.989522][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 76.090941][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 76.113071][ T5432] macvlan2: entered promiscuous mode [ 76.118691][ T5432] macvlan2: entered allmulticast mode [ 76.125003][ T5432] bond1: (slave macvlan2): Opening slave failed [ 76.206728][ T5435] IPv6: sit2: Disabled Multicast RS [ 76.240224][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 76.240241][ T29] audit: type=1400 audit(1768705404.065:1506): avc: denied { setopt } for pid=5437 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.356344][ T29] audit: type=1400 audit(1768705404.175:1507): avc: denied { getopt } for pid=5447 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.424912][ T29] audit: type=1400 audit(1768705404.245:1508): avc: denied { append } for pid=5452 comm="syz.3.704" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.468939][ T29] audit: type=1400 audit(1768705404.295:1509): avc: denied { allowed } for pid=5455 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.535972][ T29] audit: type=1400 audit(1768705404.355:1510): avc: denied { read } for pid=5457 comm="syz.3.706" path="socket:[12011]" dev="sockfs" ino=12011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.719097][ T29] audit: type=1400 audit(1768705404.545:1511): avc: denied { getopt } for pid=5473 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.751990][ T5478] netlink: 240 bytes leftover after parsing attributes in process `syz.3.706'. [ 76.881507][ T5488] loop0: detected capacity change from 0 to 512 [ 76.898323][ T5488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.919484][ T5488] EXT4-fs (loop0): 1 truncate cleaned up [ 76.925546][ T5488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.945660][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 76.949064][ T5488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.954911][ T5492] bridge_slave_0: default FDB implementation only supports local addresses [ 77.146492][ T5498] io-wq is not configured for unbound workers [ 77.356409][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 77.371473][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 77.418664][ T29] audit: type=1400 audit(1768705405.245:1512): avc: denied { mounton } for pid=5516 comm="syz.3.730" path="/143/file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.418689][ T5517] 9p: Bad value for 'rfdno' [ 77.591984][ T5525] veth0_to_team: entered promiscuous mode [ 77.719290][ T5533] loop1: detected capacity change from 0 to 1024 [ 77.740299][ T5533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.779346][ T5533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.791269][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.891418][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.918745][ T5545] loop4: detected capacity change from 0 to 2048 [ 77.959525][ T5545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 78.099918][ T29] audit: type=1400 audit(1768705405.925:1513): avc: denied { associate } for pid=5555 comm="syz.0.745" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 78.173414][ T29] audit: type=1400 audit(1768705405.975:1514): avc: denied { execute } for pid=5556 comm="syz.1.746" path="/147/cpu.stat" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.224210][ T5565] loop1: detected capacity change from 0 to 512 [ 78.251450][ T5565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.300457][ T5048] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.317942][ T5565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 78.337065][ T5565] System zones: 1-2, 4-12, 8-8 [ 78.341482][ T29] audit: type=1400 audit(1768705406.165:1515): avc: denied { create } for pid=5570 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.343605][ T5565] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.750: iget: bad i_size value: 38620345925642 [ 78.373547][ T5048] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 78.386367][ T5048] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.386367][ T5048] [ 78.396042][ T5048] EXT4-fs (loop4): Total free blocks count 0 [ 78.402174][ T5048] EXT4-fs (loop4): Free/Dirty block details [ 78.408146][ T5048] EXT4-fs (loop4): free_blocks=2415919104 [ 78.413870][ T5048] EXT4-fs (loop4): dirty_blocks=4000 [ 78.419282][ T5048] EXT4-fs (loop4): Block reservation details [ 78.425277][ T5048] EXT4-fs (loop4): i_reserved_data_blocks=250 [ 78.432635][ T5565] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.750: couldn't read orphan inode 15 (err -117) [ 78.476702][ T5048] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1940 with error 28 [ 78.494773][ T5565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.552649][ T5565] EXT4-fs (loop1): shut down requested (1) [ 78.590256][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.704158][ T5592] netlink: 104 bytes leftover after parsing attributes in process `syz.3.760'. [ 79.834138][ T5607] loop4: detected capacity change from 0 to 512 [ 80.160271][ T5607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.210653][ T5607] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.361102][ T3490] kernel write not supported for file bpf-prog (pid: 3490 comm: kworker/1:7) [ 80.373575][ T5623] team0 (unregistering): Port device team_slave_0 removed [ 80.448386][ T5623] team0 (unregistering): Port device team_slave_1 removed [ 80.461463][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.552140][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 80.592041][ T5645] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 81.056671][ T5677] __nla_validate_parse: 1 callbacks suppressed [ 81.056687][ T5677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'. [ 81.134778][ T5680] loop4: detected capacity change from 0 to 256 [ 81.151788][ T5680] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.184921][ T5680] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.332754][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 81.341622][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 81.378790][ T5685] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 81.420617][ T5687] netlink: 'syz.4.801': attribute type 29 has an invalid length. [ 81.444841][ T5687] netlink: 'syz.4.801': attribute type 29 has an invalid length. [ 81.482340][ T5687] netlink: 500 bytes leftover after parsing attributes in process `syz.4.801'. [ 81.491469][ T5687] unsupported nla_type 66 [ 81.505173][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 81.505187][ T29] audit: type=1400 audit(1768705409.325:1529): avc: denied { write } for pid=5690 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.662310][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 81.672535][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 82.427085][ T29] audit: type=1400 audit(1768705410.245:1530): avc: denied { ioctl } for pid=5735 comm="syz.2.819" path="socket:[19866]" dev="sockfs" ino=19866 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.460116][ T5740] loop2: detected capacity change from 0 to 512 [ 82.468697][ T5740] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 82.483163][ T29] audit: type=1400 audit(1768705410.245:1531): avc: denied { write } for pid=5735 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.502975][ T5740] EXT4-fs (loop2): 1 truncate cleaned up [ 82.509426][ T5740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.525205][ T29] audit: type=1400 audit(1768705410.345:1532): avc: denied { rename } for pid=5739 comm="syz.2.821" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.549119][ T5740] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.821: invalid indirect mapped block 4294901760 (level 0) [ 82.563339][ T29] audit: type=1400 audit(1768705410.375:1533): avc: denied { ioctl } for pid=5739 comm="syz.2.821" path="/173/file0/file1" dev="loop2" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.626114][ T5740] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.821: invalid indirect mapped block 4294967295 (level 1) [ 82.653515][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.707092][ T29] audit: type=1400 audit(1768705410.525:1534): avc: denied { read } for pid=5753 comm="syz.3.826" path="socket:[20693]" dev="sockfs" ino=20693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.517821][ T29] audit: type=1400 audit(1768705411.325:1535): avc: denied { setopt } for pid=5780 comm="syz.1.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.383620][ T5795] loop3: detected capacity change from 0 to 512 [ 84.411211][ T5795] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.841: invalid indirect mapped block 4294967295 (level 1) [ 84.438183][ T5795] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.841: invalid indirect mapped block 4294967295 (level 1) [ 84.464893][ T5795] EXT4-fs (loop3): 2 truncates cleaned up [ 84.471266][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.596228][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.628146][ T5810] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 84.689529][ T5810] bond3: (slave veth3): Enslaving as an active interface with a down link [ 84.728535][ T5810] bond3: entered promiscuous mode [ 84.733704][ T5810] bond3: entered allmulticast mode [ 84.793306][ T5810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.799608][ T5809] loop2: detected capacity change from 0 to 512 [ 84.925557][ T5824] loop3: detected capacity change from 0 to 1764 [ 84.962984][ T5809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.018341][ T5824] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 85.018470][ T5826] loop4: detected capacity change from 0 to 1024 [ 85.035631][ T5826] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.852: bad orphan inode 134217728 [ 85.046837][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.063132][ T5809] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.108549][ T29] audit: type=1326 audit(1768705412.935:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.1.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604737acb9 code=0x0 [ 85.146439][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.275058][ T29] audit: type=1400 audit(1768705413.095:1537): avc: denied { write } for pid=5844 comm="syz.3.859" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 85.495626][ T5847] mmap: syz.2.858 (5847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.706681][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.731447][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 85.787994][ T5854] loop4: detected capacity change from 0 to 128 [ 85.795519][ T5854] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.811901][ T5854] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.964637][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 86.573897][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 86.839653][ T2819] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.425430][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 87.466478][ T5938] loop2: detected capacity change from 0 to 128 [ 87.476415][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 87.565198][ T5940] Trying to write to read-only block-device loop2 [ 87.581080][ T5940] syz.2.897: attempt to access beyond end of device [ 87.581080][ T5940] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 87.621370][ T5940] syz.2.897: attempt to access beyond end of device [ 87.621370][ T5940] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.676521][ T5940] syz.2.897: attempt to access beyond end of device [ 87.676521][ T5940] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.715366][ T5940] syz.2.897: attempt to access beyond end of device [ 87.715366][ T5940] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 87.751916][ T5944] loop4: detected capacity change from 0 to 1024 [ 87.765370][ T5940] syz.2.897: attempt to access beyond end of device [ 87.765370][ T5940] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 87.783821][ T5944] EXT4-fs: Ignoring removed bh option [ 87.807802][ T5940] syz.2.897: attempt to access beyond end of device [ 87.807802][ T5940] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 87.842419][ T5944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.868276][ T5944] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.945498][ T5940] syz.2.897: attempt to access beyond end of device [ 87.945498][ T5940] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.958945][ T5940] syz.2.897: attempt to access beyond end of device [ 87.958945][ T5940] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.972499][ T5940] syz.2.897: attempt to access beyond end of device [ 87.972499][ T5940] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.985920][ T5940] syz.2.897: attempt to access beyond end of device [ 87.985920][ T5940] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 88.020915][ T5944] EXT4-fs (loop4): can't disable delalloc during remount [ 88.046777][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.096168][ T5964] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.636867][ T5990] tipc: Failed to remove unknown binding: 66,1,1/2126:3018158175/3018158177 [ 88.654970][ T5990] tipc: Failed to remove unknown binding: 66,1,1/2126:3018158175/3018158177 [ 88.663893][ T5990] tipc: Failed to remove unknown binding: 66,1,1/2126:3018158175/3018158177 [ 88.840659][ T29] audit: type=1326 audit(1768705416.665:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 88.864064][ T29] audit: type=1326 audit(1768705416.665:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.009006][ T29] audit: type=1326 audit(1768705416.715:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.032484][ T29] audit: type=1326 audit(1768705416.715:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.055942][ T29] audit: type=1326 audit(1768705416.715:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.079289][ T29] audit: type=1326 audit(1768705416.715:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.102702][ T29] audit: type=1326 audit(1768705416.715:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.126187][ T29] audit: type=1326 audit(1768705416.715:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.149556][ T29] audit: type=1326 audit(1768705416.715:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.172887][ T29] audit: type=1326 audit(1768705416.715:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5999 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8a7cacb9 code=0x7ffc0000 [ 89.201886][ T6008] loop2: detected capacity change from 0 to 512 [ 89.218123][ T6008] EXT4-fs: inline encryption not supported [ 89.695726][ T6021] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 89.703547][ T6021] netlink: 5 bytes leftover after parsing attributes in process `syz.0.929'. [ 89.731339][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.760462][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.823072][ T6039] netlink: 76 bytes leftover after parsing attributes in process `syz.1.935'. [ 90.031423][ T6054] loop2: detected capacity change from 0 to 256 [ 90.114142][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 90.303075][ T6075] ================================================================== [ 90.311203][ T6075] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 90.318183][ T6075] [ 90.320530][ T6075] read-write to 0xffff88813d5a05ac of 4 bytes by task 6070 on cpu 1: [ 90.328627][ T6075] fifo_open+0x17f/0x5d0 [ 90.332897][ T6075] do_dentry_open+0x54b/0xa60 [ 90.337609][ T6075] vfs_open+0x37/0x1e0 [ 90.341719][ T6075] path_openat+0x1de9/0x23c0 [ 90.346340][ T6075] do_filp_open+0x15d/0x280 [ 90.350922][ T6075] do_sys_openat2+0xa6/0x150 [ 90.355555][ T6075] __x64_sys_openat+0xf2/0x120 [ 90.360352][ T6075] x64_sys_call+0x2b07/0x3000 [ 90.365057][ T6075] do_syscall_64+0xc0/0x2a0 [ 90.369586][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.375517][ T6075] [ 90.377857][ T6075] read to 0xffff88813d5a05ac of 4 bytes by task 6075 on cpu 0: [ 90.385413][ T6075] wait_for_partner+0x117/0x1e0 [ 90.390284][ T6075] fifo_open+0x4b1/0x5d0 [ 90.394554][ T6075] do_dentry_open+0x54b/0xa60 [ 90.399271][ T6075] vfs_open+0x37/0x1e0 [ 90.403369][ T6075] path_openat+0x1de9/0x23c0 [ 90.407995][ T6075] do_filp_open+0x15d/0x280 [ 90.412547][ T6075] do_sys_openat2+0xa6/0x150 [ 90.417257][ T6075] __se_sys_openat2+0x193/0x1f0 [ 90.422193][ T6075] __x64_sys_openat2+0x55/0x70 [ 90.427000][ T6075] x64_sys_call+0x2c04/0x3000 [ 90.431711][ T6075] do_syscall_64+0xc0/0x2a0 [ 90.436245][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.442189][ T6075] [ 90.444526][ T6075] value changed: 0x00000002 -> 0x00000001 [ 90.450255][ T6075] [ 90.452601][ T6075] Reported by Kernel Concurrency Sanitizer on: [ 90.458776][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.3.949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.468425][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.478516][ T6075] ================================================================== [ 90.905146][ T6070] ================================================================== [ 90.913277][ T6070] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 90.920246][ T6070] [ 90.922588][ T6070] read-write to 0xffff88811afb036c of 4 bytes by task 6075 on cpu 0: [ 90.930664][ T6070] fifo_open+0x86/0x5d0 [ 90.934844][ T6070] do_dentry_open+0x54b/0xa60 [ 90.939549][ T6070] vfs_open+0x37/0x1e0 [ 90.943658][ T6070] path_openat+0x1de9/0x23c0 [ 90.948281][ T6070] do_filp_open+0x15d/0x280 [ 90.952822][ T6070] do_sys_openat2+0xa6/0x150 [ 90.957452][ T6070] __se_sys_openat2+0x193/0x1f0 [ 90.962337][ T6070] __x64_sys_openat2+0x55/0x70 [ 90.967135][ T6070] x64_sys_call+0x2c04/0x3000 [ 90.971856][ T6070] do_syscall_64+0xc0/0x2a0 [ 90.976393][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.982320][ T6070] [ 90.984676][ T6070] read to 0xffff88811afb036c of 4 bytes by task 6070 on cpu 1: [ 90.992260][ T6070] wait_for_partner+0xd5/0x1e0 [ 90.997061][ T6070] fifo_open+0x4b1/0x5d0 [ 91.001340][ T6070] do_dentry_open+0x54b/0xa60 [ 91.006067][ T6070] vfs_open+0x37/0x1e0 [ 91.010178][ T6070] path_openat+0x1de9/0x23c0 [ 91.014821][ T6070] do_filp_open+0x15d/0x280 [ 91.019362][ T6070] do_sys_openat2+0xa6/0x150 [ 91.023988][ T6070] __x64_sys_openat+0xf2/0x120 [ 91.028777][ T6070] x64_sys_call+0x2b07/0x3000 [ 91.033555][ T6070] do_syscall_64+0xc0/0x2a0 [ 91.038079][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.044005][ T6070] [ 91.046346][ T6070] value changed: 0x00000001 -> 0x00000002 [ 91.052071][ T6070] [ 91.054419][ T6070] Reported by Kernel Concurrency Sanitizer on: [ 91.060595][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.3.949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.070261][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.080341][ T6070] ==================================================================