last executing test programs: 5.118620706s ago: executing program 3 (id=219): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) 5.0246253s ago: executing program 3 (id=220): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@barrier}, {@nodioread_nolock}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@lazytime}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nobh}]}, 0x1, 0x440, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4) 4.843978125s ago: executing program 3 (id=221): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) 3.567728446s ago: executing program 3 (id=248): unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 3.515550548s ago: executing program 3 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 3.496829058s ago: executing program 3 (id=250): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000000380)) 1.24859764s ago: executing program 2 (id=332): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000004c00128008000100677470004000028008000700ac1414311400080020010000000000000000000000000001080004000000000005000500010000000800030003"], 0x74}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.144789603s ago: executing program 2 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.006978558s ago: executing program 2 (id=337): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd631701"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 947.85933ms ago: executing program 4 (id=339): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14}}, 0x60}}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) connect$unix(r2, &(0x7f0000000540)=@abs={0x27, 0x0, 0x8}, 0x6e) 906.734781ms ago: executing program 4 (id=340): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 800.250534ms ago: executing program 4 (id=342): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/219, 0xdb, 0xc) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r1, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 709.523137ms ago: executing program 4 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x10, 0x2004}, 0x20) 695.356678ms ago: executing program 0 (id=344): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private, 0x10000}, {@remote}, {@private}, {@private}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 687.573398ms ago: executing program 2 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 649.161449ms ago: executing program 2 (id=346): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0), 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) close_range(r0, 0xffffffffffffffff, 0x0) 644.5938ms ago: executing program 4 (id=347): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010103, 0x4e20, 0x3, 'lc\x00', 0x1, 0xa7e, 0x4000033}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 585.203631ms ago: executing program 4 (id=348): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0x1) 489.870634ms ago: executing program 2 (id=350): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f7207000000002e0000ea26de004d2208fc414d630815ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34d6"], 0x25, 0x357, &(0x7f0000000e00)="$eJzs3T9sG2UUAPDnXhqnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWKjEUKkRh84+2+fYocmQ0MLvN1RP7/vefe/Op94lSr682on1i8fj0s2bN2JurhQzy2eX41YpKnEskujbjqk+mJ2eBwDucrfSNP5I++48+6P5QeTZDwD3rt7z//WTo0T5AMVX7juMlgCAQ7bPr/+fnZq9fGhtAQCHaOL5/8jY8K5v888MfyYAALh3Pf/Sy8+srEZcqFbnIprvt2vtWjw1Gl+5FG9GI9biTCzETkT/RaH/tpD9+/T51XNnqplfKlHLKtq1iGanXeu/KawkvfpyLMZCVPL6dFifZPWLvfpqRGx3eutHs9SuHY/5fP0f52MtlmIhHpiojzi/em6pmh+g1hzUdyK6MTc4iaz/07EQ378Wl6MRFyOrHfW/tVitnk1Xx+rbV8u9eRF/Hv2HAgAAAAAAAAAAAAAAAAAAAADAf97p6lBluP9N2uy037uwe0JlbH+cWn843x+o298fKC0Pdue5kuzeH2h8f552bSaO/atnDgAAAAAAAAAAAAAAAAAAAHeP1uZs1BuNtY3W5rvrxaBTyLz97Rdfn4jB0Exe+lYyqoo8OXacwcTCkZMYLpEOy9NkbE4eJBGDydv1q9eGHRfnlIdnMVGeBeWJoVLeU73ROPnwz59Oq/orC7Z7mSQmLst4UMrXLww1788ScxGxs1fV3sHSHeZcT9N0r/KtTyarohQxEwduYx/BNzfeePDx1qknepmv8k0fHn1s4YXrH3/+23q9Ed3+lWk0ZjdaO+k+jpz1OjmUFO6fUn6dS1PuhOlBd5TpbrQ268kPv7/40Iff7ZqcTL9/0mLmnb3X+nJ3ZrYflCIqg4vwT60en3LzTw9euT28ew/+wZ36bLl+beunX/dbVfhPwkYdAAAAAAAAAAAAAAAAAABwJAq/K34ATz53eB0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNEb/f3/QtCdyOwnuN2JyaHy2kZrz8VPHOmpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/Z3AAAA//+TD3P9") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r0, 0x0, 0x1, 0x2000404) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 323.42461ms ago: executing program 1 (id=355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0xfff9, 0xbdff, 0x19, "ec28a144f13d7607"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xffefef7b, 0x0, 0x2, 0x10, "1b09000040000000000000e678000000101000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 299.5262ms ago: executing program 1 (id=356): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x1000) 229.139962ms ago: executing program 1 (id=357): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 187.984674ms ago: executing program 0 (id=358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 175.724034ms ago: executing program 1 (id=359): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000005c0)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0}) 144.875155ms ago: executing program 0 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4003}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 130.318026ms ago: executing program 1 (id=361): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c0007800800050001000000"], 0x198}}, 0x0) 80.485717ms ago: executing program 0 (id=362): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0xff, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x64}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f00000002c0)=0x8) 29.544679ms ago: executing program 0 (id=363): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, 0x0, 0xfdef) 3.066449ms ago: executing program 0 (id=364): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x1000008, 0x0) 0s ago: executing program 1 (id=365): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0x1, 0x1209, &(0x7f0000003680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x2) kernel console output (not intermixed with test programs): [ 23.877076][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 23.877094][ T28] audit: type=1400 audit(1780138729.633:124): avc: denied { write } for pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.911023][ T28] audit: type=1400 audit(1780138729.663:125): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 30.987092][ T28] audit: type=1400 audit(1780138736.743:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.010213][ T28] audit: type=1400 audit(1780138736.763:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.012514][ T3286] cgroup: Unknown subsys name 'net' [ 31.038154][ T28] audit: type=1400 audit(1780138736.793:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.136585][ T3286] cgroup: Unknown subsys name 'cpuset' [ 31.142874][ T3286] cgroup: Unknown subsys name 'rlimit' [ 31.253782][ T28] audit: type=1400 audit(1780138737.003:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.277641][ T28] audit: type=1400 audit(1780138737.013:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.308963][ T28] audit: type=1400 audit(1780138737.013:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.329738][ T28] audit: type=1400 audit(1780138737.013:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.350172][ T28] audit: type=1400 audit(1780138737.033:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.367831][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.375422][ T28] audit: type=1400 audit(1780138737.033:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.407039][ T28] audit: type=1400 audit(1780138737.053:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.439514][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.698023][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.712271][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.719478][ T3299] bridge_slave_0: entered allmulticast mode [ 32.726138][ T3299] bridge_slave_0: entered promiscuous mode [ 32.744097][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.751360][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.758519][ T3299] bridge_slave_1: entered allmulticast mode [ 32.764977][ T3299] bridge_slave_1: entered promiscuous mode [ 32.831231][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.855873][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.870260][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.877383][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.884720][ T3298] bridge_slave_0: entered allmulticast mode [ 32.891224][ T3298] bridge_slave_0: entered promiscuous mode [ 32.918849][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.926062][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.933340][ T3298] bridge_slave_1: entered allmulticast mode [ 32.939765][ T3298] bridge_slave_1: entered promiscuous mode [ 32.946246][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.953322][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.960493][ T3303] bridge_slave_0: entered allmulticast mode [ 32.966932][ T3303] bridge_slave_0: entered promiscuous mode [ 32.987441][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.994548][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.001810][ T3305] bridge_slave_0: entered allmulticast mode [ 33.008340][ T3305] bridge_slave_0: entered promiscuous mode [ 33.019335][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.026515][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.033614][ T3303] bridge_slave_1: entered allmulticast mode [ 33.040329][ T3303] bridge_slave_1: entered promiscuous mode [ 33.047288][ T3299] team0: Port device team_slave_0 added [ 33.053931][ T3299] team0: Port device team_slave_1 added [ 33.064375][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.071538][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.078783][ T3304] bridge_slave_0: entered allmulticast mode [ 33.085405][ T3304] bridge_slave_0: entered promiscuous mode [ 33.092171][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.099273][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.106528][ T3305] bridge_slave_1: entered allmulticast mode [ 33.113024][ T3305] bridge_slave_1: entered promiscuous mode [ 33.133341][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.140588][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.147799][ T3304] bridge_slave_1: entered allmulticast mode [ 33.154459][ T3304] bridge_slave_1: entered promiscuous mode [ 33.167096][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.177776][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.191062][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.198083][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.224088][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.250171][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.259587][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.266613][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.292637][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.308786][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.323547][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.341451][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.351916][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.361814][ T3298] team0: Port device team_slave_0 added [ 33.373323][ T3303] team0: Port device team_slave_0 added [ 33.379975][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.394567][ T3298] team0: Port device team_slave_1 added [ 33.406994][ T3303] team0: Port device team_slave_1 added [ 33.439939][ T3305] team0: Port device team_slave_0 added [ 33.446057][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.453028][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.479178][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.499893][ T3304] team0: Port device team_slave_0 added [ 33.506324][ T3305] team0: Port device team_slave_1 added [ 33.512255][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.519265][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.545225][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.558410][ T3299] hsr_slave_0: entered promiscuous mode [ 33.564385][ T3299] hsr_slave_1: entered promiscuous mode [ 33.570770][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.577832][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.603807][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.615390][ T3304] team0: Port device team_slave_1 added [ 33.637837][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.644796][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.670852][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.711552][ T3298] hsr_slave_0: entered promiscuous mode [ 33.717684][ T3298] hsr_slave_1: entered promiscuous mode [ 33.723675][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.729563][ T3298] Cannot create hsr debugfs directory [ 33.740330][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.747485][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.773588][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.795850][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.802929][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.828958][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.840735][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.847733][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.873837][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.884953][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.892014][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.918050][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.961240][ T3303] hsr_slave_0: entered promiscuous mode [ 33.967294][ T3303] hsr_slave_1: entered promiscuous mode [ 33.973042][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.978918][ T3303] Cannot create hsr debugfs directory [ 34.023630][ T3304] hsr_slave_0: entered promiscuous mode [ 34.029714][ T3304] hsr_slave_1: entered promiscuous mode [ 34.035555][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.041293][ T3304] Cannot create hsr debugfs directory [ 34.049074][ T3305] hsr_slave_0: entered promiscuous mode [ 34.055057][ T3305] hsr_slave_1: entered promiscuous mode [ 34.061051][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.066816][ T3305] Cannot create hsr debugfs directory [ 34.234002][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.242708][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.250548][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.259302][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.276214][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.284971][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.294675][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.303241][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.328527][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.337234][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.344986][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.353829][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.362735][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.371089][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.378850][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.387486][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.422005][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.431133][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.439132][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.448188][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.455855][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.464608][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.472528][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.481762][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.514860][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.524038][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.531963][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.540789][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.556709][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.565126][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.572988][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.581643][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.608868][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.617387][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.625068][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.634120][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.641974][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.650632][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.659563][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.668386][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.705919][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.717869][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.740353][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.754788][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.762643][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.779102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.786206][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.795136][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.802259][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.820422][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.830208][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.837323][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.846746][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.853823][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.862726][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.869955][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.889354][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.896496][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.925926][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.952573][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.970590][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.977847][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.997864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.004972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.020792][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.038612][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.069715][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.088087][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.095201][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.114305][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.121780][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.227046][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.341407][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.388304][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.437494][ T3299] veth0_vlan: entered promiscuous mode [ 35.453267][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.466461][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.479398][ T3299] veth1_vlan: entered promiscuous mode [ 35.516305][ T3299] veth0_macvtap: entered promiscuous mode [ 35.529059][ T3299] veth1_macvtap: entered promiscuous mode [ 35.561023][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.580546][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.598708][ T3304] veth0_vlan: entered promiscuous mode [ 35.605079][ T3298] veth0_vlan: entered promiscuous mode [ 35.624138][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.637640][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.654793][ T3298] veth1_vlan: entered promiscuous mode [ 35.662615][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.671478][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.682164][ T3304] veth1_vlan: entered promiscuous mode [ 35.710416][ T3303] veth0_vlan: entered promiscuous mode [ 35.731223][ T3303] veth1_vlan: entered promiscuous mode [ 35.735079][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.746409][ T3298] veth0_macvtap: entered promiscuous mode [ 35.769097][ T3304] veth0_macvtap: entered promiscuous mode [ 35.777835][ T3298] veth1_macvtap: entered promiscuous mode [ 35.789004][ T3304] veth1_macvtap: entered promiscuous mode [ 35.807830][ T3303] veth0_macvtap: entered promiscuous mode [ 35.829083][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.850782][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.859574][ T3303] veth1_macvtap: entered promiscuous mode [ 35.875236][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.895788][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.914699][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.923521][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.941344][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.950164][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.965448][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.974393][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.983997][ T3305] veth0_vlan: entered promiscuous mode [ 35.993833][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.002679][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.024197][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.033469][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.046193][ T3305] veth1_vlan: entered promiscuous mode [ 36.051905][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 36.051921][ T28] audit: type=1400 audit(1780138741.803:165): avc: denied { open } for pid=3510 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.087026][ T28] audit: type=1400 audit(1780138741.803:166): avc: denied { kernel } for pid=3510 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.107053][ T28] audit: type=1400 audit(1780138741.803:167): avc: denied { tracepoint } for pid=3510 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.132481][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.141806][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.154140][ T3305] veth0_macvtap: entered promiscuous mode [ 36.162656][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.171877][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.181767][ T3305] veth1_macvtap: entered promiscuous mode [ 36.211817][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.222600][ T28] audit: type=1400 audit(1780138741.973:168): avc: denied { create } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.258301][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.275744][ T28] audit: type=1400 audit(1780138741.973:169): avc: denied { shutdown } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.296427][ T28] audit: type=1400 audit(1780138741.973:170): avc: denied { setopt } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.320393][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.329243][ T28] audit: type=1400 audit(1780138741.973:171): avc: denied { getopt } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.377490][ T3522] loop0: detected capacity change from 0 to 512 [ 36.384022][ T28] audit: type=1400 audit(1780138741.973:172): avc: denied { connect } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.412291][ T28] audit: type=1400 audit(1780138741.973:173): avc: denied { name_connect } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 36.433048][ T3522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.446599][ T3522] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.459209][ T28] audit: type=1400 audit(1780138742.023:174): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.468255][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.500633][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.511644][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.579807][ T3533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 36.634568][ T3533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 36.678209][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.691430][ T3540] netlink: 652 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.707668][ T3533] syz.3.12 (3533) used greatest stack depth: 10808 bytes left [ 36.849049][ T3555] loop3: detected capacity change from 0 to 512 [ 36.860875][ T3554] loop4: detected capacity change from 0 to 512 [ 36.872344][ T3554] EXT4-fs: Ignoring removed nobh option [ 36.879597][ T3555] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.22: inode has both inline data and extents flags [ 36.893631][ T3555] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.893825][ T3555] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.22: couldn't read orphan inode 15 (err -117) [ 36.903136][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 36.903165][ C1] EXT4-fs (loop3): initial error at time 1780138742: ext4_orphan_get:1397: inode 15 [ 36.903211][ C1] EXT4-fs (loop3): last error at time 1780138742: ext4_orphan_get:1397: inode 15 [ 36.941680][ T3554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.954956][ T3555] loop3: lost filesystem error report for type 5 error -117 [ 36.955719][ T3555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.012519][ T3555] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.039947][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.052477][ T3554] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.21: corrupted inode contents [ 37.084587][ T3554] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.095541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.108965][ T3554] EXT4-fs (loop4): Remounting filesystem read-only [ 37.111251][ C1] EXT4-fs (loop4): initial error at time 1780138742: ext4_do_update_inode:5690: inode 3 [ 37.127711][ C1] EXT4-fs (loop4): last error at time 1780138742: ext4_do_update_inode:5690: inode 3 [ 37.159149][ T3554] EXT4-fs (loop4): 1 truncate cleaned up [ 37.174979][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.186278][ T3576] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 37.188816][ T3554] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.265042][ T3554] syz.4.21 (3554) used greatest stack depth: 9736 bytes left [ 37.299179][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.311968][ T3582] SELinux: failed to load policy [ 37.467097][ T3596] mmap: syz.1.38 (3596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.865025][ T3610] IPVS: starting estimator thread 0... [ 37.865113][ T3617] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 37.966041][ T3625] IPVS: using max 2304 ests per chain, 115200 per kthread [ 38.160988][ T3651] loop4: detected capacity change from 0 to 512 [ 38.474873][ T3680] loop2: detected capacity change from 0 to 256 [ 38.493463][ T3683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.514989][ T3680] msdos: Bad value for 'time_offset' [ 38.544729][ T3683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.707280][ T3698] process 'syz.2.80' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 38.774587][ T3704] netlink: 'syz.2.83': attribute type 29 has an invalid length. [ 38.791905][ T3704] netlink: 'syz.2.83': attribute type 29 has an invalid length. [ 38.807328][ T3704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.83'. [ 38.842081][ T3711] loop3: detected capacity change from 0 to 256 [ 38.861129][ T3711] msdos: Bad value for 'time_offset' [ 38.883758][ T3712] ======================================================= [ 38.883758][ T3712] WARNING: The mand mount option has been deprecated and [ 38.883758][ T3712] and is ignored by this kernel. Remove the mand [ 38.883758][ T3712] option from the mount to silence this warning. [ 38.883758][ T3712] ======================================================= [ 39.094063][ T3731] syzkaller1: entered promiscuous mode [ 39.103911][ T3731] syzkaller1: entered allmulticast mode [ 39.117068][ T3729] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 39.266377][ T3742] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 39.274907][ T23] IPVS: starting estimator thread 0... [ 39.307471][ T3747] loop0: detected capacity change from 0 to 256 [ 39.320004][ T3747] msdos: Bad value for 'time_offset' [ 39.336394][ T3749] xt_hashlimit: invalid rate [ 39.365714][ T3745] IPVS: using max 2304 ests per chain, 115200 per kthread [ 39.579912][ T3769] Invalid argument reading file caps for ./file0 [ 39.733590][ T3401] IPVS: starting estimator thread 0... [ 39.739458][ T3781] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 39.758349][ T3787] loop1: detected capacity change from 0 to 256 [ 39.794498][ T3787] msdos: Bad value for 'time_offset' [ 39.837055][ T3784] IPVS: using max 2304 ests per chain, 115200 per kthread [ 39.888566][ T3792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.944877][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 39.992026][ T3802] loop5: detected capacity change from 0 to 7 [ 40.017962][ C0] operation not supported error, dev loop5, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 40.113633][ T3812] loop1: detected capacity change from 0 to 512 [ 40.132680][ T3812] EXT4-fs: Ignoring removed nobh option [ 40.176992][ T3812] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.131: corrupted inode contents [ 40.188820][ T3812] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.191711][ T3812] EXT4-fs (loop1): Remounting filesystem read-only [ 40.200822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 40.200846][ C1] EXT4-fs (loop1): initial error at time 1780138745: ext4_do_update_inode:5690: inode 3 [ 40.200883][ C1] EXT4-fs (loop1): last error at time 1780138745: ext4_do_update_inode:5690: inode 3 [ 40.245684][ T3812] EXT4-fs (loop1): 1 truncate cleaned up [ 40.271208][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.286741][ T3738] syz.4.97 (3738) used greatest stack depth: 9592 bytes left [ 40.294443][ T3812] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.337875][ T3827] msdos: Bad value for 'time_offset' [ 40.340503][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.499666][ T23] IPVS: starting estimator thread 0... [ 40.505786][ T3834] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 40.586426][ T3840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.595674][ T3838] IPVS: using max 2304 ests per chain, 115200 per kthread [ 40.637109][ T3840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.652112][ T3840] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.679812][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.740577][ T3856] Zero length message leads to an empty skb [ 40.827575][ T3865] netlink: 7 bytes leftover after parsing attributes in process `syz.3.149'. [ 40.836611][ T3865] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 40.844767][ T3865] openvswitch: netlink: Message has 6 unknown bytes. [ 41.592383][ T3926] set_capacity_and_notify: 2 callbacks suppressed [ 41.592402][ T3926] loop1: detected capacity change from 0 to 512 [ 41.609269][ T3926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.636254][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 41.636271][ T28] audit: type=1400 audit(1780138747.393:332): avc: denied { write } for pid=3927 comm="syz.4.176" name="ipv6_route" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.647894][ T3926] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.175: bad orphan inode 131083 [ 41.676250][ T3926] loop1: lost filesystem error report for type 5 error -117 [ 41.677310][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.712102][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.763276][ T3936] loop1: detected capacity change from 0 to 256 [ 41.770492][ T3936] msdos: Bad value for 'time_offset' [ 41.810287][ T3940] loop1: detected capacity change from 0 to 512 [ 41.819183][ T3940] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 41.828136][ T3940] EXT4-fs (loop1): 1 truncate cleaned up [ 41.834430][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.859957][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.916170][ T28] audit: type=1400 audit(1780138747.673:333): avc: denied { setopt } for pid=3947 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.956535][ T3951] loop4: detected capacity change from 0 to 512 [ 41.969102][ T3951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.984484][ T3951] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.001021][ T28] audit: type=1400 audit(1780138747.753:334): avc: denied { mounton } for pid=3952 comm="syz.2.186" path="/49/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 42.024633][ T28] audit: type=1400 audit(1780138747.773:335): avc: denied { write } for pid=3950 comm="syz.4.185" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.029124][ T3951] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.185: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 42.046606][ T28] audit: type=1400 audit(1780138747.773:336): avc: denied { create } for pid=3950 comm="syz.4.185" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 42.094775][ T28] audit: type=1400 audit(1780138747.843:337): avc: denied { write } for pid=3950 comm="syz.4.185" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.096178][ T3951] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 42.127482][ T28] audit: type=1400 audit(1780138747.843:338): avc: denied { remove_name } for pid=3950 comm="syz.4.185" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.150087][ T28] audit: type=1400 audit(1780138747.843:339): avc: denied { unlink } for pid=3950 comm="syz.4.185" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.175111][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.216145][ T28] audit: type=1400 audit(1780138747.963:340): avc: denied { ioctl } for pid=3963 comm="syz.4.189" path="socket:[5737]" dev="sockfs" ino=5737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.306932][ T28] audit: type=1400 audit(1780138748.053:341): avc: denied { bind } for pid=3969 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.497755][ T3987] loop0: detected capacity change from 0 to 256 [ 42.507009][ T3987] msdos: Bad value for 'time_offset' [ 42.978001][ T3994] netlink: 148 bytes leftover after parsing attributes in process `syz.3.202'. [ 45.283845][ T3989] geneve2: entered promiscuous mode [ 45.301473][ T3992] netlink: 'syz.3.202': attribute type 29 has an invalid length. [ 45.706702][ T30] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 45422 - 0 [ 45.716137][ T30] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 45422 - 0 [ 45.752167][ T30] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 45422 - 0 [ 45.780418][ T30] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 45422 - 0 [ 45.781396][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 45.818761][ T4022] syzkaller1: entered promiscuous mode [ 45.828800][ T4022] syzkaller1: entered allmulticast mode [ 46.078608][ T4033] loop3: detected capacity change from 0 to 1024 [ 46.116160][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.131931][ T4033] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.156091][ T4033] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.220: bg 0: block 112: padding at end of block bitmap is not set [ 46.194501][ T4033] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.220: Freeing blocks not in datazone - block = 0, count = 16 [ 46.609379][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.648195][ T4038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 46.654889][ T4038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.677538][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 46.677559][ T28] audit: type=1400 audit(1780138752.433:359): avc: denied { write } for pid=4043 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.707876][ T4038] vhci_hcd vhci_hcd.0: Device attached [ 46.718196][ T4046] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 46.724814][ T4046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.748307][ T28] audit: type=1400 audit(1780138752.493:360): avc: denied { create } for pid=4045 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.769584][ T4046] vhci_hcd vhci_hcd.0: Device attached [ 46.780679][ T4038] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 46.787268][ T4038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.799409][ T28] audit: type=1400 audit(1780138752.493:361): avc: denied { sys_admin } for pid=4045 comm="syz.1.224" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.821787][ T4044] syz.0.223 (4044) used greatest stack depth: 9312 bytes left [ 46.836127][ T4038] vhci_hcd vhci_hcd.0: Device attached [ 46.843107][ T4046] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 46.849723][ T4046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.872616][ T28] audit: type=1400 audit(1780138752.623:362): avc: denied { view } for pid=4061 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.895929][ T4046] vhci_hcd vhci_hcd.0: Device attached [ 46.913960][ T4038] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 46.920621][ T4038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.936937][ T4038] vhci_hcd vhci_hcd.0: Device attached [ 46.955677][ T3372] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 46.976700][ T4054] vhci_hcd: connection closed [ 46.976810][ T4066] vhci_hcd: connection closed [ 46.977692][ T4039] vhci_hcd: connection reset by peer [ 46.981850][ T4047] vhci_hcd: connection closed [ 46.986282][ T30] vhci_hcd vhci_hcd.3: stop threads [ 47.005957][ T4058] vhci_hcd: connection closed [ 47.024937][ T30] vhci_hcd vhci_hcd.3: release socket [ 47.050655][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 47.057327][ T30] vhci_hcd vhci_hcd.3: stop threads [ 47.068464][ T4081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.235'. [ 47.069122][ T30] vhci_hcd vhci_hcd.3: release socket [ 47.091496][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 47.103573][ T30] vhci_hcd vhci_hcd.3: stop threads [ 47.115281][ T30] vhci_hcd vhci_hcd.3: release socket [ 47.124898][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 47.142750][ T30] vhci_hcd vhci_hcd.3: stop threads [ 47.153012][ T4088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 47.154165][ T30] vhci_hcd vhci_hcd.3: release socket [ 47.179716][ T4090] loop0: detected capacity change from 0 to 256 [ 47.183770][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 47.202474][ T30] vhci_hcd vhci_hcd.3: stop threads [ 47.203803][ T4090] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.215110][ T30] vhci_hcd vhci_hcd.3: release socket [ 47.233382][ T28] audit: type=1400 audit(1780138752.983:363): avc: denied { ioctl } for pid=4093 comm="syz.1.241" path="socket:[6676]" dev="sockfs" ino=6676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.233971][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 47.261386][ T4088] ipvlan2: entered allmulticast mode [ 47.270521][ T4090] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.283128][ T4088] syz_tun: entered allmulticast mode [ 47.294811][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 47.303968][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 47.341037][ T28] audit: type=1400 audit(1780138753.093:364): avc: denied { bind } for pid=4099 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.378351][ T28] audit: type=1400 audit(1780138753.093:365): avc: denied { name_bind } for pid=4099 comm="syz.1.244" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 47.400534][ T28] audit: type=1400 audit(1780138753.093:366): avc: denied { node_bind } for pid=4099 comm="syz.1.244" saddr=172.20.20.38 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 47.424026][ T28] audit: type=1400 audit(1780138753.123:367): avc: denied { perfmon } for pid=4101 comm="syz.4.243" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.446339][ T28] audit: type=1400 audit(1780138753.123:368): avc: denied { bpf } for pid=4101 comm="syz.4.243" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.663178][ T4122] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 47.680451][ T4126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 47.689786][ T4126] netlink: 'syz.4.255': attribute type 4 has an invalid length. [ 47.720835][ T4129] loop0: detected capacity change from 0 to 128 [ 47.743402][ T4129] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.769625][ T4129] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.805745][ T4139] syzkaller1: entered promiscuous mode [ 47.814273][ T4139] syzkaller1: entered allmulticast mode [ 47.835932][ T4141] team0: Port device syz_tun added [ 47.848407][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.859421][ T4141] team0: Port device syz_tun removed [ 47.903201][ T4141] bridge_slave_0: left allmulticast mode [ 47.921187][ T4141] bridge_slave_0: left promiscuous mode [ 47.931679][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.948957][ T4141] bridge_slave_1: left allmulticast mode [ 47.954748][ T4141] bridge_slave_1: left promiscuous mode [ 47.960805][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971666][ T4141] bond0: (slave bond_slave_0): Releasing backup interface [ 47.983187][ T4141] bond0: (slave bond_slave_1): Releasing backup interface [ 47.995825][ T4141] team0: Port device team_slave_0 removed [ 48.004888][ T4141] team0: Port device team_slave_1 removed [ 48.013330][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.021167][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.029883][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.037335][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.047745][ T4141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.271094][ T4179] loop2: detected capacity change from 0 to 1024 [ 48.288239][ T4179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.304376][ T4179] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.365025][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.458651][ T4201] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 48.470534][ T4201] team0: Port device dummy0 added [ 48.478637][ T4201] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 48.489285][ T4201] team0: Port device dummy0 removed [ 48.496919][ T4201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.968293][ T4228] program syz.2.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.036480][ T4235] xt_hashlimit: size too large, truncated to 1048576 [ 49.068486][ T4239] loop1: detected capacity change from 0 to 1024 [ 49.088446][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.253913][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.284519][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 49.325744][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 49.340547][ T4257] capability: warning: `syz.0.311' uses deprecated v2 capabilities in a way that may be insecure [ 49.352027][ T4257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4257 comm=syz.0.311 [ 49.609232][ T4284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 49.627694][ T4284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 49.694837][ T4290] lo: entered allmulticast mode [ 49.707315][ T4290] lo: left allmulticast mode [ 49.715349][ T4287] netlink: 'syz.2.325': attribute type 58 has an invalid length. [ 49.854891][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 49.877943][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 49.888908][ T4303] loop0: detected capacity change from 0 to 512 [ 49.962860][ T4305] pim6reg1: entered promiscuous mode [ 49.972592][ T4305] pim6reg1: entered allmulticast mode [ 50.292681][ T4320] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 50.443777][ T4330] loop2: detected capacity change from 0 to 512 [ 50.510632][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.543686][ T4330] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.567466][ T4338] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.800863][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.824469][ T4353] loop2: detected capacity change from 0 to 256 [ 50.868843][ T4353] FAT-fs (loop2): Directory bread(block 64) failed [ 50.875771][ T4353] FAT-fs (loop2): Directory bread(block 65) failed [ 50.882370][ T4353] FAT-fs (loop2): Directory bread(block 66) failed [ 50.914320][ T4353] FAT-fs (loop2): Directory bread(block 67) failed [ 50.921135][ T4353] FAT-fs (loop2): Directory bread(block 68) failed [ 50.927938][ T4353] FAT-fs (loop2): Directory bread(block 69) failed [ 50.942238][ T4353] FAT-fs (loop2): Directory bread(block 70) failed [ 50.951261][ T4353] FAT-fs (loop2): Directory bread(block 71) failed [ 50.961766][ T4353] FAT-fs (loop2): Directory bread(block 72) failed [ 50.968831][ T4353] FAT-fs (loop2): Directory bread(block 73) failed [ 50.985157][ T4364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 51.006960][ T4364] netlink: 212 bytes leftover after parsing attributes in process `syz.1.361'. [ 51.018011][ T4364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 51.104093][ T4368] ================================================================== [ 51.112235][ T4368] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 51.119379][ T4368] [ 51.121724][ T4368] write to 0xffff8881092ece40 of 2 bytes by task 4353 on cpu 1: [ 51.129383][ T4368] fat16_ent_put+0x28/0x60 [ 51.133835][ T4368] fat_ent_write+0x6c/0xe0 [ 51.138281][ T4368] fat_chain_add+0x172/0x490 [ 51.142894][ T4368] fat_get_block+0x475/0x5f0 [ 51.147513][ T4368] __block_write_begin_int+0x400/0xf90 [ 51.153012][ T4368] cont_write_begin+0x5fe/0x970 [ 51.157909][ T4368] fat_write_begin+0x52/0xe0 [ 51.162545][ T4368] cont_write_begin+0x1b0/0x970 [ 51.167446][ T4368] fat_write_begin+0x52/0xe0 [ 51.172076][ T4368] generic_cont_expand_simple+0xb0/0x150 [ 51.177739][ T4368] fat_cont_expand+0x3e/0x170 [ 51.182528][ T4368] fat_fallocate+0x177/0x1c0 [ 51.187146][ T4368] vfs_fallocate+0x3b6/0x400 [ 51.191776][ T4368] __x64_sys_fallocate+0x7a/0xd0 [ 51.196751][ T4368] x64_sys_call+0x298e/0x3020 [ 51.201453][ T4368] do_syscall_64+0x12c/0x3b0 [ 51.206072][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.211990][ T4368] [ 51.214328][ T4368] read to 0xffff8881092ec800 of 2048 bytes by task 4368 on cpu 0: [ 51.222148][ T4368] fat_mirror_bhs+0x1df/0x330 [ 51.226855][ T4368] fat_alloc_clusters+0xb48/0xc50 [ 51.231898][ T4368] fat_add_cluster+0x46/0xe0 [ 51.236508][ T4368] fat_fallocate+0x11e/0x1c0 [ 51.241121][ T4368] vfs_fallocate+0x3b6/0x400 [ 51.245745][ T4368] file_ioctl+0x4e3/0x5c0 [ 51.250110][ T4368] do_vfs_ioctl+0x7c9/0xe70 [ 51.254642][ T4368] __se_sys_ioctl+0x82/0x140 [ 51.259265][ T4368] __x64_sys_ioctl+0x43/0x50 [ 51.263892][ T4368] x64_sys_call+0x1563/0x3020 [ 51.268591][ T4368] do_syscall_64+0x12c/0x3b0 [ 51.273284][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.279205][ T4368] [ 51.281551][ T4368] Reported by Kernel Concurrency Sanitizer on: [ 51.287737][ T4368] CPU: 0 UID: 0 PID: 4368 Comm: syz.2.350 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.296966][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 51.307047][ T4368] ================================================================== [ 51.316996][ T4371] loop1: detected capacity change from 0 to 8192 [ 51.407566][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.407566][ T362] loop2: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 51.422216][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.422216][ T362] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 51.439040][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.439040][ T362] loop2: rw=1, sector=1960, nr_sectors = 2072 limit=256 [ 51.456120][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.456120][ T362] loop2: rw=1, sector=4032, nr_sectors = 2056 limit=256 [ 51.473062][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.473062][ T362] loop2: rw=1, sector=6088, nr_sectors = 2208 limit=256 [ 51.487813][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.487813][ T362] loop2: rw=1, sector=8360, nr_sectors = 32 limit=256 [ 51.501544][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.501544][ T362] loop2: rw=1, sector=8488, nr_sectors = 32 limit=256 [ 51.515131][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.515131][ T362] loop2: rw=1, sector=8616, nr_sectors = 32 limit=256 [ 51.528935][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.528935][ T362] loop2: rw=1, sector=10024, nr_sectors = 192 limit=256 [ 51.543155][ T362] kworker/u8:6: attempt to access beyond end of device [ 51.543155][ T362] loop2: rw=1, sector=12168, nr_sectors = 288 limit=256 [ 51.975748][ T3372] usb 7-1: enqueue for inactive port 0 [ 51.981321][ T3372] usb 7-1: enqueue for inactive port 0 [ 52.055792][ T3372] vhci_hcd vhci_hcd.3: vhci_device speed not set