last executing test programs: 55.857065376s ago: executing program 3 (id=848): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.806356217s ago: executing program 3 (id=850): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0x10005f1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x16) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus/file0'}, 0xf) copy_file_range(r2, &(0x7f00000008c0)=0x4, r1, 0x0, 0x8, 0x0) 55.805808307s ago: executing program 3 (id=852): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 55.698703901s ago: executing program 3 (id=855): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 55.524628997s ago: executing program 3 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "80fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 54.742699464s ago: executing program 3 (id=874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 54.742470854s ago: executing program 32 (id=874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 20.202587464s ago: executing program 2 (id=1573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x68, 0x0, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x0, 0xd, 0x7, 0xbd, 0xa, 0x29, 0x4, @loopback, @initdev={0xac, 0x1e, 0x10, 0x0}}, "0970018b7e800000"}}}}}}, 0x4a) 19.854773746s ago: executing program 2 (id=1592): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 18.959889467s ago: executing program 2 (id=1604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 18.080664837s ago: executing program 2 (id=1608): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 17.807081876s ago: executing program 2 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) unshare(0x6020400) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 17.548136085s ago: executing program 2 (id=1625): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 17.530612506s ago: executing program 33 (id=1625): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 2.32676383s ago: executing program 6 (id=1919): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.04335759s ago: executing program 6 (id=1924): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x145) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f8, 0xfffffff8, 0x100802, 0x2, 0x8}) 1.982544702s ago: executing program 1 (id=1926): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)=""/15, 0xf}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.936838674s ago: executing program 1 (id=1928): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) symlink(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.677475283s ago: executing program 6 (id=1934): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) 1.026662545s ago: executing program 5 (id=1954): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x400007e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x100, 0x0) getdents(r1, 0x0, 0x0) 981.363916ms ago: executing program 1 (id=1955): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 877.81866ms ago: executing program 5 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 794.663533ms ago: executing program 1 (id=1959): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff98b6, 0x4, 0x330, 0x80000001, 0xdb}, 0x9c) 794.519763ms ago: executing program 5 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002b00", 0x2a}], 0x1}, 0x4804) 794.420673ms ago: executing program 1 (id=1961): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 794.330803ms ago: executing program 5 (id=1962): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@commit={'commit', 0x3d, 0xfe1}}]}, 0xfc, 0x57d, &(0x7f0000000380)="$eJzs3V9rW+UfAPDvSdPu7++3DsZQL2SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdeB24W68kSGIOBBfgPdeDt+Ar2KggyGj6IUIkZOcdLFNmrbLbNZ8PnCW5zl/9pxvnvM9e07OGSeAoXUi/SMX8WJEfJVEHGlblo9s4YnmequPb86kUxL1+se/J5Fk81rrJ9nnoX3NygsR8fMXEadzG9utLq/MF8vl0mJWn6gtXJuoLq+cubJQnCvNla5OTU+fe2N66u233uxbrK9e/PPbj+6/f+7Lk6vf/Pjw6N0kzsfhbFl7HE/hVnvlRPHvrDQa59etONmHxgZJspONRvq/H2zPSJbno5GeA47ESJb1wN73eUTUgSGVyH8YUq1xQOvavk/Xwc+NR+81L4AasY+1x59v/jYS+xvXRgdXk39dGaXXu+N9aD9t46ff7t1Np9j8d4gDPeoA23LrdkSczec3nv+T7Py3c2cbPx5vbn0bw/bvD+ym++n457VO47/c2vgnOox/DnXI3Z3onf+5h31opqt0/PdOx/Hv2qlrfCSr/a8x5htNLl8pl85GxP8j4lTUe976OLf6oN5tWfv4L53S9ltjwWw/Hub3pZ+H1+bMFmvFiBh7irDXPLod8VK+U/zJWv8nHfo//T4ubrGN46V7L7fvf7ve8T9b9R8iXunY/0+6Ndn8/uRE43iYaB0VG/1x5/gv3drf7fjT/j+4efzjSfv92ur22/h+/1+lbsu2fvw/kR7/Y8knjXIrCW4Ua7XFyYix5MON86eebNuqt9ZP4z91cvPzX6fjP734+nSL8d85dqfrqoPQ/7Pb6v/tFx588Nl33drfWv+/3iidyuZk57/OsmNlqzv4tN8fAAAAAAAADJJc48mCJFdYK+dyhULz+Y5jcTBXrlRrpy9Xlq7ONu/gj8dornWn+0jb8xCT2fOwrfrUuvp0RByNiK9HDjTqhZlKeXa3gwcAAAAAAAAAAAAAAAAAAIABcajL//9P/er9zLD3NV5ssG+39wLYDT1f+d+PNz0BA6ln/gN7lvyH4SX/YXjJfxhe8h+Gl/yH4SX/YXjJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOirixcupFN99fHNmbQ+e315ab5y/cxsqTpfWFiaKcxUFq8V5iqVuXKpMFNZ6PX3lSuVa5NTsXRjolaq1iaqyyuXFipLV2uXriwU50qXSqP/SVQAAAAAAAAAAAAAAAAAAADwfKkur8wXy+XSokLXwrsxELvxLANs2tHm+UGJQqFL4XZEPuvhbWy1iyclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjnnwAAAP//+tcwgw==") r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x81, 0x3, 0x9, 0x80000000, 0x6, 0x7, 0x6, 0x100000001, 0x6, 0x9, 0x3, 0x8000, 0x80000001, 0x7, 0x7, 0x7, 0x7, 0x0, 0x3, 0x101, 0xbfd, 0x2, 0x0, 0x5, 0x2, 0x8001}) 703.686306ms ago: executing program 5 (id=1963): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x145) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f8, 0xfffffff8, 0x100802, 0x2, 0x8}) 702.200826ms ago: executing program 1 (id=1973): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 701.944036ms ago: executing program 6 (id=1964): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 669.146247ms ago: executing program 6 (id=1965): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 638.855918ms ago: executing program 6 (id=1966): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0, 0xffff}, 0x90) 532.543742ms ago: executing program 5 (id=1968): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 440.237475ms ago: executing program 0 (id=1971): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 368.646458ms ago: executing program 4 (id=1974): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x7) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0x81, 0xb) 368.219468ms ago: executing program 4 (id=1975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001880)={@empty, @random="cebd04f416f0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x3a, 0x1c, 0x66, 0x0, 0x1, 0x2, 0x0, @empty, @rand_addr=0x64010102}, {0x15, 0x5, 0x0, @loopback}}}}}, 0x0) 310.68498ms ago: executing program 0 (id=1976): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x3f8) 292.88631ms ago: executing program 0 (id=1977): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fsopen(0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0xffffc000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 231.321582ms ago: executing program 4 (id=1978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001bc0)=""/4106, 0x100a}], 0x1}, 0x4}], 0x2, 0x40000350, 0x0) 213.853363ms ago: executing program 4 (id=1979): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) preadv2(r1, 0x0, 0x0, 0x5, 0x1, 0x18) 160.647485ms ago: executing program 4 (id=1980): socket$igmp6(0xa, 0x3, 0x2) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@dioread_nolock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) 160.216064ms ago: executing program 0 (id=1981): unshare(0x6020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/218, 0xda) 86.617387ms ago: executing program 0 (id=1982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 71.837267ms ago: executing program 4 (id=1983): socket(0xa, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r0, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002700)="ab", 0x1}, {0x0, 0x500}], 0x2}}], 0x1, 0x4040000) 0s ago: executing program 0 (id=1984): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) kernel console output (not intermixed with test programs): lass=rawip_socket permissive=1 [ 40.146620][ T28] audit: type=1400 audit(1775126131.755:294): avc: denied { read } for pid=4127 comm="syz.4.223" dev="nsfs" ino=4026532741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.172209][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.227927][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.228368][ T28] audit: type=1400 audit(1775126131.755:295): avc: denied { open } for pid=4127 comm="syz.4.223" path="net:[4026532741]" dev="nsfs" ino=4026532741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.318846][ T28] audit: type=1400 audit(1775126131.785:296): avc: denied { allowed } for pid=4129 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.383260][ T28] audit: type=1400 audit(1775126131.785:297): avc: denied { read write } for pid=4125 comm="syz.3.222" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.754802][ T28] audit: type=1400 audit(1775126131.785:298): avc: denied { open } for pid=4125 comm="syz.3.222" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.798379][ T28] audit: type=1400 audit(1775126131.785:299): avc: denied { ioctl } for pid=4125 comm="syz.3.222" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.852229][ T28] audit: type=1400 audit(1775126131.785:300): avc: denied { create } for pid=4129 comm="syz.2.224" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.909337][ T4147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.925795][ T4147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.934023][ T28] audit: type=1400 audit(1775126132.115:301): avc: denied { tracepoint } for pid=4134 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.978537][ T28] audit: type=1400 audit(1775126132.125:302): avc: denied { write } for pid=4134 comm="syz.2.226" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.141297][ T4126] Set syz1 is full, maxelem 65536 reached [ 41.597970][ T4179] loop4: detected capacity change from 0 to 512 [ 41.623790][ T4179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.634999][ T4166] netlink: 84 bytes leftover after parsing attributes in process `syz.1.238'. [ 41.668083][ T4179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.700948][ T4179] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.919828][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.225428][ T4203] netlink: 'syz.4.252': attribute type 64 has an invalid length. [ 42.250952][ T4203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4203 comm=syz.4.252 [ 42.264244][ T4203] netlink: 'syz.4.252': attribute type 64 has an invalid length. [ 42.311381][ T4205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.253'. [ 42.321638][ T4205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.253'. [ 43.141650][ T3369] IPVS: starting estimator thread 0... [ 43.171893][ T4255] capability: warning: `syz.1.275' uses deprecated v2 capabilities in a way that may be insecure [ 43.195056][ T4257] loop0: detected capacity change from 0 to 128 [ 43.238431][ T4251] IPVS: using max 2544 ests per chain, 127200 per kthread [ 43.652715][ T4295] futex_wake_op: syz.4.292 tries to shift op by -1; fix this program [ 43.696861][ T4294] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 44.519876][ T4325] netlink: 172 bytes leftover after parsing attributes in process `syz.1.306'. [ 44.550756][ T4323] loop4: detected capacity change from 0 to 1764 [ 44.569373][ T4323] ISOFS: Unable to identify CD-ROM format. [ 45.210520][ T28] kauditd_printk_skb: 914 callbacks suppressed [ 45.210585][ T28] audit: type=1400 audit(1775126136.825:1217): avc: denied { mount } for pid=4341 comm="syz.1.314" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.421264][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 45.430399][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 45.462113][ T4352] netlink: 44 bytes leftover after parsing attributes in process `syz.3.319'. [ 45.877867][ T4368] loop3: detected capacity change from 0 to 256 [ 45.887452][ T4366] batadv_slave_1: entered promiscuous mode [ 45.895572][ T4365] batadv_slave_1: left promiscuous mode [ 45.904481][ T4368] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.939098][ T4368] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.968440][ T28] audit: type=1400 audit(1775126137.575:1218): avc: denied { mount } for pid=4367 comm="syz.3.327" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.010372][ T4372] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 46.034598][ T4372] bond1: entered promiscuous mode [ 46.040230][ T28] audit: type=1400 audit(1775126137.625:1219): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.068579][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.089376][ T4370] loop0: detected capacity change from 0 to 256 [ 46.121072][ T28] audit: type=1400 audit(1775126137.725:1220): avc: denied { kexec_image_load } for pid=4375 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 46.159808][ T4370] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.240886][ T28] audit: type=1400 audit(1775126137.775:1221): avc: denied { setopt } for pid=4377 comm="syz.4.330" lport=60415 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 46.266793][ T4374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.282941][ T4374] bond1: (slave bond2): making interface the new active one [ 46.319680][ T4374] bond2: entered promiscuous mode [ 46.325768][ T4374] bond1: (slave bond2): Enslaving as an active interface with an up link [ 46.346989][ T28] audit: type=1400 audit(1775126137.775:1222): avc: denied { getopt } for pid=4377 comm="syz.4.330" lport=60415 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 46.400494][ T28] audit: type=1400 audit(1775126137.805:1223): avc: denied { ioctl } for pid=4379 comm="syz.4.331" path="socket:[6799]" dev="sockfs" ino=6799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.473822][ T4391] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 46.497482][ T4386] syzkaller1: entered promiscuous mode [ 46.503508][ T28] audit: type=1400 audit(1775126137.805:1224): avc: denied { bind } for pid=4379 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.505312][ T4386] syzkaller1: entered allmulticast mode [ 46.543862][ T28] audit: type=1400 audit(1775126137.805:1225): avc: denied { connect } for pid=4379 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.610089][ T28] audit: type=1400 audit(1775126137.805:1226): avc: denied { write } for pid=4379 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.142747][ T4407] mmap: syz.4.340 (4407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.663558][ T4417] loop4: detected capacity change from 0 to 128 [ 47.728413][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bd15600: rx timeout, send abort [ 47.745942][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bd15600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 48.305194][ T4437] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.353'. [ 48.981862][ T4482] netlink: 'syz.0.374': attribute type 2 has an invalid length. [ 48.991850][ T4480] loop2: detected capacity change from 0 to 2048 [ 49.041876][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.137297][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 49.153720][ T4376] kexec: Could not allocate control_code_buffer [ 49.176813][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.237446][ T4495] tipc: Started in network mode [ 49.263349][ T4495] tipc: Node identity 84e, cluster identity 4711 [ 49.283156][ T4495] tipc: Node number set to 2126 [ 49.322119][ T4508] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 49.528934][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 49.642518][ T4549] loop4: detected capacity change from 0 to 256 [ 49.681446][ T4549] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.723537][ T4549] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 49.733673][ T4549] FAT-fs (loop4): Filesystem has been set read-only [ 49.751936][ T4549] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 50.007882][ T4572] raw_sendmsg: syz.3.412 forgot to set AF_INET. Fix it! [ 50.358165][ T4602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.413847][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 50.413865][ T28] audit: type=1400 audit(1775126142.025:1281): avc: denied { mount } for pid=4606 comm="syz.2.429" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.560134][ T28] audit: type=1400 audit(1775126142.175:1282): avc: denied { create } for pid=4621 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.588443][ T28] audit: type=1400 audit(1775126142.175:1283): avc: denied { ioctl } for pid=4621 comm="syz.2.435" path="socket:[7841]" dev="sockfs" ino=7841 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.646198][ T28] audit: type=1400 audit(1775126142.255:1284): avc: denied { map } for pid=4612 comm="syz.4.432" path="socket:[7825]" dev="sockfs" ino=7825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.647573][ T4625] loop3: detected capacity change from 0 to 2048 [ 50.672992][ T28] audit: type=1400 audit(1775126142.255:1285): avc: denied { read } for pid=4612 comm="syz.4.432" path="socket:[7825]" dev="sockfs" ino=7825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.766051][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.817850][ T28] audit: type=1400 audit(1775126142.425:1286): avc: denied { create } for pid=4624 comm="syz.3.436" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.841231][ T28] audit: type=1400 audit(1775126142.425:1287): avc: denied { add_name } for pid=4624 comm="syz.3.436" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.862747][ T28] audit: type=1400 audit(1775126142.425:1288): avc: denied { remove_name } for pid=4624 comm="syz.3.436" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.885407][ T28] audit: type=1400 audit(1775126142.425:1289): avc: denied { rename } for pid=4624 comm="syz.3.436" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.910807][ T28] audit: type=1400 audit(1775126142.425:1290): avc: denied { reparent } for pid=4624 comm="syz.3.436" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.981042][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.061398][ T4649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.144154][ T4649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.222347][ T4649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.262587][ T4649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.311064][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 51.318921][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.332543][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.344735][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.357549][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.516312][ T4678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4678 comm=syz.3.458 [ 51.551195][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'. [ 51.696364][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.705617][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.840559][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 51.879782][ T4698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.465'. [ 52.257967][ T4722] netlink: 'syz.2.475': attribute type 2 has an invalid length. [ 52.290834][ T4722] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 52.319858][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 52.482258][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.489571][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.582671][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.619763][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.713293][ T70] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.742229][ T70] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.758039][ T70] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.788681][ T70] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.835675][ T4737] loop2: detected capacity change from 0 to 1024 [ 52.866749][ T4737] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 52.866749][ T4737] [ 53.130679][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.153357][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.337402][ T4764] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 53.439692][ T4774] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 53.466528][ T4774] bond1: entered promiscuous mode [ 53.482017][ T4774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.511936][ T4778] bond1: (slave bridge1): making interface the new active one [ 53.520358][ T4778] bridge1: entered promiscuous mode [ 53.526985][ T4778] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 53.595988][ T4783] loop3: detected capacity change from 0 to 512 [ 53.659332][ T4783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.715395][ T4783] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.740696][ T4788] netlink: 164 bytes leftover after parsing attributes in process `syz.4.503'. [ 53.765528][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.848729][ T4799] syzkaller1: entered promiscuous mode [ 53.854258][ T4799] syzkaller1: entered allmulticast mode [ 54.083577][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 54.099260][ T4832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.113787][ T4832] bond1: (slave batadv1): Opening slave failed [ 54.307794][ T4855] netlink: 'syz.2.533': attribute type 7 has an invalid length. [ 54.426594][ T4861] loop0: detected capacity change from 0 to 4096 [ 54.429063][ T4857] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 54.441039][ T4857] netlink: 84 bytes leftover after parsing attributes in process `syz.4.534'. [ 54.450238][ T4857] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 54.473885][ T4861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.490611][ T4861] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 54.498038][ T4861] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 54.523682][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.586337][ T4878] netlink: 168 bytes leftover after parsing attributes in process `syz.0.540'. [ 54.971163][ T4921] netlink: 'syz.1.561': attribute type 9 has an invalid length. [ 54.979373][ T4921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.561'. [ 55.211227][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b956200: rx timeout, send abort [ 55.219611][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b956200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.235394][ T4952] syz_tun: entered allmulticast mode [ 55.244232][ T4951] syz_tun: left allmulticast mode [ 55.283437][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 55.338049][ T4964] xt_hashlimit: size too large, truncated to 1048576 [ 55.425351][ T4974] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 55.440921][ T4974] bond2: (slave lo): Enslaving as an active interface with an up link [ 55.449835][ T4974] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 55.645659][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 55.645678][ T28] audit: type=1400 audit(1775126147.255:1360): avc: denied { setopt } for pid=4989 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.690728][ T28] audit: type=1400 audit(1775126147.295:1361): avc: denied { write } for pid=4989 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.766969][ T28] audit: type=1400 audit(1775126147.375:1362): avc: denied { ioctl } for pid=5002 comm="syz.0.595" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.893921][ T28] audit: type=1400 audit(1775126147.505:1363): avc: denied { mount } for pid=5012 comm="syz.0.599" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.918467][ T28] audit: type=1400 audit(1775126147.505:1364): avc: denied { mounton } for pid=5012 comm="syz.0.599" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 55.940502][ T28] audit: type=1400 audit(1775126147.535:1365): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.097170][ T28] audit: type=1400 audit(1775126147.705:1366): avc: denied { mount } for pid=5032 comm="syz.2.608" name="/" dev="mqueue" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.154069][ T28] audit: type=1400 audit(1775126147.765:1367): avc: denied { create } for pid=5037 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.187779][ T28] audit: type=1400 audit(1775126147.765:1368): avc: denied { read } for pid=5037 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.208171][ T28] audit: type=1400 audit(1775126147.775:1369): avc: denied { name_bind } for pid=5039 comm="syz.2.612" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 56.231882][ T5050] loop2: detected capacity change from 0 to 128 [ 56.327448][ T5055] syz.2.616: attempt to access beyond end of device [ 56.327448][ T5055] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 56.375626][ T5055] syz.2.616: attempt to access beyond end of device [ 56.375626][ T5055] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 56.425746][ T5055] syz.2.616: attempt to access beyond end of device [ 56.425746][ T5055] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 56.477596][ T5055] syz.2.616: attempt to access beyond end of device [ 56.477596][ T5055] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 56.533109][ T5055] syz.2.616: attempt to access beyond end of device [ 56.533109][ T5055] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 56.577377][ T5055] syz.2.616: attempt to access beyond end of device [ 56.577377][ T5055] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 56.624503][ T5055] syz.2.616: attempt to access beyond end of device [ 56.624503][ T5055] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 56.637984][ T5055] syz.2.616: attempt to access beyond end of device [ 56.637984][ T5055] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 56.651343][ T5055] syz.2.616: attempt to access beyond end of device [ 56.651343][ T5055] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 56.664798][ T5055] syz.2.616: attempt to access beyond end of device [ 56.664798][ T5055] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 56.768005][ T5064] loop2: detected capacity change from 0 to 128 [ 56.879697][ T5070] Illegal XDP return value 463746612 on prog (id 119) dev N/A, expect packet loss! [ 57.148717][ T5089] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 57.398094][ T5114] loop2: detected capacity change from 0 to 4096 [ 57.439324][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.516473][ T50] tipc: Subscription rejected, illegal request [ 57.542339][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.726522][ T5170] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 57.739193][ T5170] team0: Port device dummy0 added [ 57.745401][ T5170] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 57.755618][ T5170] team0: Port device dummy0 removed [ 57.762716][ T5170] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.788497][ T5148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.801594][ T5175] tipc: Started in network mode [ 57.806736][ T5175] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 57.820687][ T5175] tipc: Enabling of bearer rejected, failed to enable media [ 57.837734][ T5180] syz_tun: entered allmulticast mode [ 57.844456][ T5179] syz_tun: left allmulticast mode [ 58.838162][ T5241] loop3: detected capacity change from 0 to 512 [ 58.851461][ T5241] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.694: invalid indirect mapped block 256 (level 2) [ 58.872489][ T5241] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.872748][ T5241] EXT4-fs (loop3): 2 truncates cleaned up [ 58.882019][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.882038][ C0] EXT4-fs (loop3): initial error at time 1775126150: ext4_free_branches:1023: inode 11 [ 58.882077][ C0] EXT4-fs (loop3): last error at time 1775126150: ext4_free_branches:1023: inode 11 [ 58.914877][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.929020][ T5241] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.694: bg 0: block 5: invalid block bitmap [ 58.942387][ T5241] EXT4-fs error (device loop3) in ext4_setattr:6028: error 28 [ 58.987107][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.033118][ T5250] loop3: detected capacity change from 0 to 256 [ 59.243921][ T5282] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 59.252186][ T5282] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.041860][ T5323] dvmrp0: entered allmulticast mode [ 60.455697][ T5342] netlink: 165 bytes leftover after parsing attributes in process `syz.1.736'. [ 60.938754][ T5372] loop0: detected capacity change from 0 to 512 [ 60.948652][ T5372] EXT4-fs: Ignoring removed nobh option [ 60.954952][ T5372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.968613][ T5372] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.979896][ T5372] EXT4-fs (loop0): 1 truncate cleaned up [ 60.986157][ T5372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.001211][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 61.001306][ T28] audit: type=1400 audit(1775126152.615:1390): avc: denied { create } for pid=5371 comm="syz.0.749" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 61.049965][ T28] audit: type=1400 audit(1775126152.615:1391): avc: denied { append } for pid=5371 comm="syz.0.749" path="/144/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.103069][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.149162][ T5379] loop0: detected capacity change from 0 to 512 [ 61.165184][ T5379] EXT4-fs: Ignoring removed nobh option [ 61.183985][ T5379] ------------[ cut here ]------------ [ 61.189633][ T5379] EA inode 11 i_nlink=1026 [ 61.189648][ T5379] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.752/5379 [ 61.205488][ T5379] Modules linked in: [ 61.209703][ T5379] CPU: 0 UID: 0 PID: 5379 Comm: syz.0.752 Not tainted syzkaller #0 PREEMPT(full) [ 61.219231][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.229648][ T5379] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 61.236277][ T5379] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf c4 dd 03 66 66 66 66 66 66 2e [ 61.256465][ T5379] RSP: 0018:ffffc9011189f5a8 EFLAGS: 00010246 [ 61.262669][ T5379] RAX: ffff8881020ade88 RBX: ffff888107e38ec8 RCX: ffffffff81c02ad8 [ 61.270789][ T5379] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 61.278966][ T5379] RBP: 000000000000000b R08: 0001888107e38e7b R09: 0000000000000000 [ 61.286982][ T5379] R10: ffffc9011189f4d8 R11: 0001c9011189f4d8 R12: ffff888107e38e78 [ 61.295248][ T5379] R13: ffffffff871dcd00 R14: ffff888107e38e30 R15: 0000000000000001 [ 61.303911][ T5379] FS: 00007f12a12176c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 61.313521][ T5379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.320301][ T5379] CR2: 0000200000001380 CR3: 000000011d29a000 CR4: 00000000003506f0 [ 61.328493][ T5379] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.336730][ T5379] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 61.344851][ T5379] Call Trace: [ 61.348149][ T5379] [ 61.351134][ T5379] ext4_xattr_set_entry+0x77c/0x1010 [ 61.356557][ T5379] ext4_xattr_ibody_set+0x184/0x3c0 [ 61.361823][ T5379] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 61.367657][ T5379] __ext4_expand_extra_isize+0x246/0x280 [ 61.373362][ T5379] __ext4_mark_inode_dirty+0x29b/0x400 [ 61.378895][ T5379] ext4_evict_inode+0x865/0xe40 [ 61.383764][ T5379] ? __pfx_ext4_evict_inode+0x10/0x10 [ 61.389239][ T5379] evict+0x2af/0x510 [ 61.393217][ T5379] ? __dquot_initialize+0x146/0x7c0 [ 61.398542][ T5379] iput+0x41a/0x580 [ 61.402368][ T5379] ext4_process_orphan+0x1a9/0x1c0 [ 61.407599][ T5379] ext4_orphan_cleanup+0x6a8/0xa00 [ 61.412836][ T5379] ext4_fill_super+0x3414/0x37c0 [ 61.417947][ T5379] ? set_blocksize+0x14c/0x270 [ 61.422949][ T5379] ? setup_bdev_super+0x30e/0x370 [ 61.428077][ T5379] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.433557][ T5379] get_tree_bdev_flags+0x291/0x300 [ 61.438720][ T5379] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.444176][ T5379] get_tree_bdev+0x1f/0x30 [ 61.448639][ T5379] ext4_get_tree+0x1c/0x30 [ 61.453170][ T5379] vfs_get_tree+0x57/0x1d0 [ 61.457805][ T5379] do_new_mount+0x288/0x8d0 [ 61.462517][ T5379] path_mount+0x4d0/0xbc0 [ 61.466906][ T5379] __se_sys_mount+0x28c/0x2e0 [ 61.471852][ T5379] __x64_sys_mount+0x67/0x80 [ 61.476479][ T5379] x64_sys_call+0x2d61/0x3020 [ 61.481215][ T5379] do_syscall_64+0x12c/0x370 [ 61.485884][ T5379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.491897][ T5379] RIP: 0033:0x7f12a27bda8a [ 61.496368][ T5379] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.516084][ T5379] RSP: 002b:00007f12a1216e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.524627][ T5379] RAX: ffffffffffffffda RBX: 00007f12a1216ee0 RCX: 00007f12a27bda8a [ 61.532801][ T5379] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f12a1216ea0 [ 61.540826][ T5379] RBP: 0000200000000180 R08: 00007f12a1216ee0 R09: 0000000000800718 [ 61.548881][ T5379] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 61.556878][ T5379] R13: 00007f12a1216ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 61.564922][ T5379] [ 61.568007][ T5379] ---[ end trace 0000000000000000 ]--- [ 61.574208][ T5379] EXT4-fs (loop0): 1 orphan inode deleted [ 61.580538][ T5379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.650002][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.712678][ T5215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.847774][ T28] audit: type=1400 audit(1775126153.455:1392): avc: denied { create } for pid=5414 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.871651][ T5415] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.894866][ T28] audit: type=1400 audit(1775126153.485:1393): avc: denied { write } for pid=5414 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.233791][ T5439] netlink: 228 bytes leftover after parsing attributes in process `syz.1.777'. [ 62.353006][ T5447] Invalid argument reading file caps for ./file0 [ 62.681841][ T5488] loop3: detected capacity change from 0 to 512 [ 62.691548][ T5484] loop0: detected capacity change from 0 to 2048 [ 62.704978][ T5488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.746776][ T5488] EXT4-fs (loop3): 1 orphan inode deleted [ 62.749911][ T5484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.765218][ T5488] EXT4-fs (loop3): 1 truncate cleaned up [ 62.771331][ T5484] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.782412][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.811583][ T28] audit: type=1326 audit(1775126154.425:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 62.839368][ T5488] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.799: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 62.861723][ T28] audit: type=1326 audit(1775126154.425:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 62.887357][ T28] audit: type=1326 audit(1775126154.425:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 62.907879][ T5488] EXT4-fs (loop3): Remounting filesystem read-only [ 62.927012][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.935670][ T28] audit: type=1326 audit(1775126154.425:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 62.968448][ T28] audit: type=1326 audit(1775126154.425:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 62.992562][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.026269][ T5509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.809'. [ 63.053696][ T28] audit: type=1326 audit(1775126154.425:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d881c819 code=0x7ffc0000 [ 63.663208][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.356752][ T5599] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.843'. [ 64.399170][ T5606] netlink: 88 bytes leftover after parsing attributes in process `syz.4.847'. [ 64.505931][ T3395] IPVS: starting estimator thread 0... [ 64.565480][ T5626] loop3: detected capacity change from 0 to 128 [ 64.574850][ T5626] EXT4-fs: Ignoring removed bh option [ 64.586718][ T5626] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.602495][ T5626] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.612895][ T5621] IPVS: using max 2544 ests per chain, 127200 per kthread [ 64.668458][ T5626] loop3: detected capacity change from 128 to 0 [ 64.680621][ T5635] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.855: reading directory lblock 0 [ 64.719270][ T5635] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 64.727782][ T5635] EXT4-fs (loop3): I/O error while writing superblock [ 64.757077][ T3314] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 64.858921][ T5622] EXT4-fs error (device loop3): ext4_get_inode_loc:4935: inode #2: block 35: comm syz.3.852: unable to read itable block [ 64.876874][ T5622] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 64.896232][ T5622] EXT4-fs (loop3): I/O error while writing superblock [ 64.907096][ T5622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: IO failure [ 64.917814][ T5622] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 64.926756][ T5622] EXT4-fs (loop3): I/O error while writing superblock [ 64.933732][ T5622] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.852: mark_inode_dirty error [ 64.956321][ T5622] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 64.964785][ T5622] EXT4-fs (loop3): I/O error while writing superblock [ 64.974890][ T3831] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4920: inode #12: block 36: comm kworker/u8:10: unable to read itable block [ 64.994753][ T3831] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 65.004243][ T3831] EXT4-fs (loop3): I/O error while writing superblock [ 65.011410][ T3831] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4920: inode #2: block 35: comm kworker/u8:10: unable to read itable block [ 65.025533][ T3831] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 65.034073][ T3831] EXT4-fs (loop3): I/O error while writing superblock [ 65.041531][ T5622] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.051646][ T5622] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 65.060357][ T5622] EXT4-fs (loop3): I/O error while writing superblock [ 65.698507][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.699473][ T5560] Bluetooth: hci0: command 0x1003 tx timeout [ 65.706978][ T5671] chnl_net:caif_netlink_parms(): no params data found [ 65.810349][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.827648][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.845829][ T5671] bridge_slave_0: entered allmulticast mode [ 65.856128][ T5671] bridge_slave_0: entered promiscuous mode [ 65.864147][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.871836][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.879124][ T5671] bridge_slave_1: entered allmulticast mode [ 65.885787][ T5671] bridge_slave_1: entered promiscuous mode [ 65.907010][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.919061][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.940884][ T5671] team0: Port device team_slave_0 added [ 65.947569][ T5671] team0: Port device team_slave_1 added [ 65.965254][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.972687][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.998988][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.010372][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.017506][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.043871][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.058796][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 66.058901][ T28] audit: type=1326 audit(1775126157.675:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44fb706597 code=0x7fc00000 [ 66.114003][ T5671] hsr_slave_0: entered promiscuous mode [ 66.120230][ T5671] hsr_slave_1: entered promiscuous mode [ 66.126439][ T5671] debugfs: 'hsr0' already exists in 'hsr' [ 66.134749][ T5671] Cannot create hsr debugfs directory [ 66.558951][ T5671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.573673][ T5671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.588741][ T5671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.605757][ T5671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.699873][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.730492][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.805227][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.812430][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.886211][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.896863][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.941895][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.949050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.968433][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.989494][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.008013][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.023557][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.039763][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.046868][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.115874][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 67.234855][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.276624][ T5758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.290956][ T5758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.342853][ T5758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.353833][ T5758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.373686][ T5773] loop2: detected capacity change from 0 to 512 [ 67.395822][ T5758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.406753][ T5758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.434950][ T5773] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 67.451036][ T5773] EXT4-fs (loop2): 1 truncate cleaned up [ 67.460600][ T5773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.490528][ T5758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.500957][ T5758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.563110][ T5671] veth0_vlan: entered promiscuous mode [ 67.572448][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.597285][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.610069][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632902][ T5671] veth1_vlan: entered promiscuous mode [ 67.648954][ T3831] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.665856][ T3831] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.693531][ T5788] loop2: detected capacity change from 0 to 256 [ 67.696396][ T3831] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.722753][ T3831] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.740525][ T5788] FAT-fs (loop2): bogus number of FAT sectors [ 67.741384][ T3831] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.770575][ T5788] FAT-fs (loop2): Can't find a valid FAT filesystem [ 67.772640][ T3831] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.830701][ T5671] veth0_macvtap: entered promiscuous mode [ 67.847712][ T5671] veth1_macvtap: entered promiscuous mode [ 67.874895][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.896355][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.917891][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.934483][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958053][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.981484][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.997856][ T28] audit: type=1400 audit(1775126159.605:1432): avc: denied { mounton } for pid=5671 comm="syz-executor" path="/root/syzkaller.1AoJ8P/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.065584][ T28] audit: type=1400 audit(1775126159.635:1433): avc: denied { mounton } for pid=5671 comm="syz-executor" path="/root/syzkaller.1AoJ8P/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.215089][ T28] audit: type=1400 audit(1775126159.635:1434): avc: denied { mounton } for pid=5671 comm="syz-executor" path="/root/syzkaller.1AoJ8P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.298430][ T28] audit: type=1400 audit(1775126159.645:1435): avc: denied { mounton } for pid=5671 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.341073][ T28] audit: type=1400 audit(1775126159.645:1436): avc: denied { mount } for pid=5671 comm="syz-executor" name="/" dev="gadgetfs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.405531][ T28] audit: type=1400 audit(1775126160.015:1437): avc: denied { write } for pid=5811 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.455766][ T5814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 68.463572][ T28] audit: type=1400 audit(1775126160.065:1438): avc: denied { name_connect } for pid=5819 comm="syz.4.922" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 68.504160][ T5814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.927014][ T5889] loop5: detected capacity change from 0 to 1024 [ 69.944360][ T5889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.957260][ T5889] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.556849][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.697258][ T5914] tipc: Started in network mode [ 70.707539][ T5916] loop5: detected capacity change from 0 to 2048 [ 70.712816][ T5914] tipc: Node identity 84e, cluster identity 4711 [ 70.720933][ T5914] tipc: Node number set to 2126 [ 70.728473][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 70.753351][ T5916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.785200][ T5916] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 16: comm syz.5.961: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 70.788370][ T28] audit: type=1400 audit(1775126162.395:1439): avc: denied { accept } for pid=5923 comm="syz.2.963" path="socket:[12918]" dev="sockfs" ino=12918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.911440][ T28] audit: type=1400 audit(1775126162.395:1440): avc: denied { rename } for pid=5915 comm="syz.5.961" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.010496][ T5933] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #12: block 2: comm syz.5.961: lblock 0 mapped to illegal pblock 2 (length 1) [ 71.071308][ T5938] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.978'. [ 71.217857][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.245008][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 71.256220][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 71.296616][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 71.314696][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 71.326045][ T5940] loop2: detected capacity change from 0 to 256 [ 71.383453][ T5940] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.760021][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 71.760052][ T28] audit: type=1400 audit(1775126163.375:1442): avc: denied { ioctl } for pid=5961 comm="syz.1.977" path="socket:[11960]" dev="sockfs" ino=11960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.412211][ T5959] kexec: Could not allocate control_code_buffer [ 73.043924][ T5987] loop5: detected capacity change from 0 to 256 [ 73.135386][ T5987] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.344466][ T6003] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.414114][ T6003] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.472589][ T6003] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.512799][ T6003] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.579802][ T3831] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.626610][ T3831] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.645076][ T3831] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661297][ T3831] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.702898][ T6001] chnl_net:caif_netlink_parms(): no params data found [ 73.752947][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.760292][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.767519][ T6001] bridge_slave_0: entered allmulticast mode [ 73.774389][ T6001] bridge_slave_0: entered promiscuous mode [ 73.781603][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.788734][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.795869][ T6001] bridge_slave_1: entered allmulticast mode [ 73.802702][ T6001] bridge_slave_1: entered promiscuous mode [ 73.821360][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.832320][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.853241][ T6001] team0: Port device team_slave_0 added [ 73.860213][ T6001] team0: Port device team_slave_1 added [ 73.877467][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.884481][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.910419][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.921767][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.928759][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.955396][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.983542][ T6001] hsr_slave_0: entered promiscuous mode [ 73.989854][ T6001] hsr_slave_1: entered promiscuous mode [ 73.995660][ T6001] debugfs: 'hsr0' already exists in 'hsr' [ 74.001530][ T6001] Cannot create hsr debugfs directory [ 74.063116][ T6001] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.073094][ T6001] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.109996][ T6001] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.119895][ T6001] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.171001][ T6001] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.181530][ T6001] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.240025][ T6001] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.249904][ T6001] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.352921][ T6001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.372744][ T6001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.387064][ T6001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.407627][ T6001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.475491][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.492761][ T6001] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.528547][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.535680][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.551209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.558336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.689094][ T28] audit: type=1326 audit(1775126166.305:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.695208][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.774471][ T28] audit: type=1326 audit(1775126166.305:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.799211][ T28] audit: type=1326 audit(1775126166.335:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.848496][ T28] audit: type=1326 audit(1775126166.335:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.908402][ T28] audit: type=1326 audit(1775126166.335:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.941917][ T28] audit: type=1326 audit(1775126166.335:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.955549][ T6001] veth0_vlan: entered promiscuous mode [ 74.971479][ T28] audit: type=1326 audit(1775126166.335:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 74.996084][ T28] audit: type=1326 audit(1775126166.335:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 75.015992][ T6001] veth1_vlan: entered promiscuous mode [ 75.051920][ T28] audit: type=1326 audit(1775126166.335:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 75.056618][ T6001] veth0_macvtap: entered promiscuous mode [ 75.107953][ T6022] kexec: Could not allocate control_code_buffer [ 75.119619][ T6001] veth1_macvtap: entered promiscuous mode [ 75.149116][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.161223][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.173541][ T3824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.200759][ T3824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.216692][ T3824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.226691][ T3824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.290919][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1018'. [ 75.341149][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 75.454997][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'. [ 75.856739][ T6134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.926160][ T6134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.962173][ T6134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.007154][ T6138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6138 comm=syz.1.1043 [ 76.023893][ T6134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.078060][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091156][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.103904][ T3824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.116424][ T3824] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275851][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 76.818687][ T6175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6175 comm=syz.5.1060 [ 76.882064][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 76.882081][ T28] audit: type=1326 audit(1775126168.495:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 76.946166][ T28] audit: type=1326 audit(1775126168.535:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.013791][ T28] audit: type=1326 audit(1775126168.535:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.071076][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 77.089348][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.110545][ T28] audit: type=1326 audit(1775126168.535:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.187442][ T28] audit: type=1326 audit(1775126168.535:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.254031][ T28] audit: type=1326 audit(1775126168.535:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.338465][ T28] audit: type=1326 audit(1775126168.535:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.424856][ T28] audit: type=1326 audit(1775126168.535:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.488821][ T28] audit: type=1326 audit(1775126168.535:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.538905][ T28] audit: type=1326 audit(1775126168.535:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x7ffc0000 [ 77.902620][ T6194] loop2: detected capacity change from 0 to 256 [ 77.934820][ T6173] kexec: Could not allocate control_code_buffer [ 77.949261][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.956614][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.970009][ T6194] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.054858][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.074688][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.112966][ T6212] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1076'. [ 78.182985][ T3824] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.191513][ T3824] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.209776][ T6214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.222040][ T3824] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.230961][ T3824] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.448343][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1080'. [ 78.507882][ T6228] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 78.541859][ T6228] bond1: entered promiscuous mode [ 78.547203][ T6228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.614035][ T6228] bond1: (slave bridge1): making interface the new active one [ 78.668777][ T6228] bridge1: entered promiscuous mode [ 78.675234][ T6228] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 78.791843][ T6214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.887633][ T6214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.195390][ T6214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.281108][ T70] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.296231][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.368488][ T70] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381188][ T70] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.891122][ T6226] kexec: Could not allocate control_code_buffer [ 79.950966][ T6269] netlink: 'syz.4.1101': attribute type 7 has an invalid length. [ 80.070341][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.100059][ T3395] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.833120][ T6340] loop5: detected capacity change from 0 to 512 [ 80.863610][ T6340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.868099][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 80.879456][ T6340] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.956896][ T6354] loop2: detected capacity change from 0 to 2048 [ 80.957557][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.965813][ T6354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.002160][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.166483][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.456712][ T6388] xt_hashlimit: size too large, truncated to 1048576 [ 81.459693][ T6391] loop5: detected capacity change from 0 to 2048 [ 81.464008][ T6392] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 81.470807][ T6391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.509084][ T6391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.523325][ T6392] bond3: entered promiscuous mode [ 81.528881][ T6392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.543988][ T6397] bond3: (slave bridge1): making interface the new active one [ 81.551846][ T6397] bridge1: entered promiscuous mode [ 81.558406][ T6397] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 81.711571][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.894442][ T6406] loop2: detected capacity change from 0 to 4096 [ 81.906652][ T6406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.924656][ T6406] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 81.932274][ T6406] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 81.963532][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.065062][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.072621][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.140624][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.151840][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.205092][ T3824] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.216503][ T3824] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.251060][ T3824] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.272732][ T3824] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.527603][ T6455] netlink: 'syz.4.1177': attribute type 9 has an invalid length. [ 82.529283][ T6445] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 82.542655][ T6455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1177'. [ 82.550742][ T6445] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1173'. [ 82.570777][ T6445] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 82.789472][ T6488] loop0: detected capacity change from 0 to 128 [ 82.867776][ T6495] bio_check_eod: 102 callbacks suppressed [ 82.867803][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.867803][ T6495] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 82.887405][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.887405][ T6495] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 82.889098][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 82.901134][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.901134][ T6495] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 82.948533][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.948533][ T6495] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 82.969839][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.969839][ T6495] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 82.998400][ T6495] syz.0.1187: attempt to access beyond end of device [ 82.998400][ T6495] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 83.014928][ T6495] syz.0.1187: attempt to access beyond end of device [ 83.014928][ T6495] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 83.028728][ T6495] syz.0.1187: attempt to access beyond end of device [ 83.028728][ T6495] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 83.042546][ T6495] syz.0.1187: attempt to access beyond end of device [ 83.042546][ T6495] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 83.056657][ T6495] syz.0.1187: attempt to access beyond end of device [ 83.056657][ T6495] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 83.126974][ T6504] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.140901][ T6504] bond1: (slave lo): Enslaving as an active interface with an up link [ 83.149657][ T6504] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 83.345005][ T6515] loop0: detected capacity change from 0 to 512 [ 83.352898][ T6515] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.359977][ T6515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.382587][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.395729][ T6515] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.412265][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 83.412282][ T28] audit: type=1400 audit(1775126175.025:1511): avc: denied { append } for pid=6514 comm="syz.0.1201" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.510631][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.574995][ T6532] xt_hashlimit: size too large, truncated to 1048576 [ 84.489877][ T28] audit: type=1326 audit(1775126176.095:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.571613][ T28] audit: type=1326 audit(1775126176.095:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.604415][ T28] audit: type=1326 audit(1775126176.095:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.633298][ T28] audit: type=1326 audit(1775126176.095:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.660441][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.667788][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.700133][ T28] audit: type=1326 audit(1775126176.095:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.724037][ T28] audit: type=1326 audit(1775126176.095:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.786995][ T28] audit: type=1326 audit(1775126176.095:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.811125][ T28] audit: type=1326 audit(1775126176.095:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d53ac819 code=0x7ffc0000 [ 84.862176][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.872526][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.923866][ T50] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.932738][ T50] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.955381][ T50] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.964572][ T50] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.036973][ T6676] syzkaller1: entered promiscuous mode [ 86.042839][ T6676] syzkaller1: entered allmulticast mode [ 86.685090][ T6718] loop2: detected capacity change from 0 to 512 [ 86.717298][ T6718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1287: invalid indirect mapped block 256 (level 2) [ 86.751665][ T6722] netlink: 'syz.4.1288': attribute type 4 has an invalid length. [ 86.788605][ T6718] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.789659][ T6718] EXT4-fs (loop2): 2 truncates cleaned up [ 86.798927][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 86.798947][ C0] EXT4-fs (loop2): initial error at time 1775126178: ext4_free_branches:1023: inode 11 [ 86.798977][ C0] EXT4-fs (loop2): last error at time 1775126178: ext4_free_branches:1023: inode 11 [ 86.878827][ T6718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.917071][ T6718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1287: bg 0: block 5: invalid block bitmap [ 86.947604][ T6718] EXT4-fs error (device loop2) in ext4_setattr:6028: error 28 [ 86.969403][ T6730] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.977402][ T6730] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.001049][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.064127][ T6734] dvmrp0: entered allmulticast mode [ 87.273908][ T28] audit: type=1326 audit(1775126178.885:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.1.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7fc00000 [ 87.471842][ T6761] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1303'. [ 87.493728][ T6763] loop5: detected capacity change from 0 to 128 [ 87.991962][ T3390] IPVS: starting estimator thread 0... [ 88.088448][ T6794] IPVS: using max 2496 ests per chain, 124800 per kthread [ 88.675480][ T6820] loop0: detected capacity change from 0 to 4096 [ 88.709851][ T6827] tipc: Started in network mode [ 88.735429][ T6827] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 88.738121][ T6820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.755964][ T6827] tipc: Enabling of bearer rejected, failed to enable media [ 88.934666][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.895099][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 89.895169][ T28] audit: type=1326 audit(1775126181.505:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.4.1354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f01b2c819 code=0x0 [ 90.816995][ T6932] loop2: detected capacity change from 0 to 512 [ 90.826780][ T6932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.841442][ T6932] EXT4-fs (loop2): 1 truncate cleaned up [ 90.847843][ T6932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.956911][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.121511][ T6943] netlink: 'syz.5.1380': attribute type 10 has an invalid length. [ 91.150398][ T6943] team0: Port device dummy0 added [ 91.171632][ T6947] netlink: 'syz.5.1380': attribute type 10 has an invalid length. [ 91.204820][ T6947] team0: Port device dummy0 removed [ 91.366606][ T6961] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.389075][ T6961] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.345510][ T6984] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 92.354950][ T6984] team0: Port device dummy0 added [ 92.362261][ T6984] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 92.408932][ T6984] team0: Port device dummy0 removed [ 92.420386][ T6984] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.530362][ T6996] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 92.551103][ T6996] team0: Port device dummy0 added [ 92.558970][ T6996] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 92.569552][ T6996] team0: Port device dummy0 removed [ 92.576205][ T6996] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.693666][ T7002] dvmrp0: entered allmulticast mode [ 92.766906][ T7019] loop2: detected capacity change from 0 to 512 [ 92.788708][ T7019] EXT4-fs: Ignoring removed nobh option [ 92.810832][ T7019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.830627][ T7019] EXT4-fs (loop2): 1 truncate cleaned up [ 92.838714][ T7019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.919408][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.967734][ T7018] loop0: detected capacity change from 0 to 32768 [ 93.018684][ T3300] loop0: p1 p3 < > [ 93.025909][ T7018] loop0: p1 p3 < > [ 93.105996][ T7031] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.189240][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.200316][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 93.244523][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.260424][ T7037] loop0: detected capacity change from 0 to 512 [ 93.269762][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 93.302278][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.376279][ T7037] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.552947][ T7041] Invalid argument reading file caps for ./file0 [ 93.593468][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.290356][ T7080] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1435'. [ 94.558167][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 95.107275][ T28] audit: type=1326 audit(1775126186.715:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9b98bc819 code=0x0 [ 95.284850][ T7143] loop2: detected capacity change from 0 to 512 [ 95.294347][ T7143] EXT4-fs: Ignoring removed nobh option [ 95.310456][ T7143] EXT4-fs (loop2): 1 orphan inode deleted [ 95.322138][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.477074][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.970225][ T7181] loop5: detected capacity change from 0 to 512 [ 95.979202][ T7181] EXT4-fs: Ignoring removed nobh option [ 95.997048][ T7181] EXT4-fs (loop5): 1 orphan inode deleted [ 96.003509][ T7181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.109221][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.415912][ T28] audit: type=1326 audit(1775126188.025:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd4183c819 code=0x0 [ 96.552653][ T7224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 96.573232][ T7224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 96.719798][ T7236] loop5: detected capacity change from 0 to 512 [ 96.746685][ T7236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.759679][ T7236] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.885378][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.049224][ T7267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1513'. [ 99.040639][ T7377] syzkaller1: entered promiscuous mode [ 99.046244][ T7377] syzkaller1: entered allmulticast mode [ 99.049138][ T7379] loop2: detected capacity change from 0 to 2048 [ 99.080314][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.095833][ T7379] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.1560: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 99.234959][ T7379] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #12: block 2: comm syz.2.1560: lblock 0 mapped to illegal pblock 2 (length 1) [ 99.286758][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.449681][ T7388] loop2: detected capacity change from 0 to 32768 [ 99.488619][ T3300] loop2: p1 p3 < > [ 99.495228][ T7392] loop0: detected capacity change from 0 to 2048 [ 99.508724][ T7388] loop2: p1 p3 < > [ 99.526113][ T7392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.558486][ T7392] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.1574: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 99.660050][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.662068][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 99.718203][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 99.718580][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.899087][ T7392] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #12: block 2: comm syz.0.1574: lblock 0 mapped to illegal pblock 2 (length 1) [ 99.964482][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.116481][ T7421] syzkaller1: entered promiscuous mode [ 100.135672][ T7421] syzkaller1: entered allmulticast mode [ 100.384275][ T7431] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1577'. [ 100.685052][ T7450] loop5: detected capacity change from 0 to 32768 [ 100.740686][ T3300] loop5: p1 p3 < > [ 100.753535][ T7450] loop5: p1 p3 < > [ 100.810662][ T7461] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1587'. [ 100.889382][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 100.890107][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.918976][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.931201][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 100.962078][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.973413][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 101.243759][ T7488] loop0: detected capacity change from 0 to 32768 [ 101.288759][ T3300] loop0: p1 p3 < > [ 101.296044][ T7488] loop0: p1 p3 < > [ 101.496884][ T28] audit: type=1326 audit(1775126193.105:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4183c819 code=0x7fc00000 [ 101.520945][ T28] audit: type=1326 audit(1775126193.135:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4183c819 code=0x7fc00000 [ 102.162845][ T28] audit: type=1326 audit(1775126193.775:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd41836597 code=0x7fc00000 [ 102.206804][ T7505] loop2: detected capacity change from 0 to 128 [ 102.238193][ T7505] EXT4-fs: Ignoring removed bh option [ 102.263148][ T7505] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.278650][ T7505] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.345561][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 102.368516][ T7505] loop2: detected capacity change from 128 to 0 [ 102.379968][ T7519] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.1608: reading directory lblock 0 [ 102.424407][ T7519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.443879][ T7519] EXT4-fs (loop2): I/O error while writing superblock [ 102.462207][ T3311] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 102.488625][ T3311] EXT4-fs error (device loop2): ext4_get_inode_loc:4935: inode #2: block 35: comm syz-executor: unable to read itable block [ 102.503160][ T3311] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.512253][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 102.519368][ T3311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: IO failure [ 102.528242][ T3311] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.537163][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 102.544403][ T3311] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #2: comm syz-executor: mark_inode_dirty error [ 102.556299][ T3311] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.564793][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 102.571868][ T70] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4920: inode #12: block 36: comm kworker/u8:4: unable to read itable block [ 102.586065][ T70] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.595199][ T70] EXT4-fs (loop2): I/O error while writing superblock [ 102.602432][ T70] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4920: inode #2: block 35: comm kworker/u8:4: unable to read itable block [ 102.616645][ T70] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.625211][ T70] EXT4-fs (loop2): I/O error while writing superblock [ 102.632570][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.642650][ T3311] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 102.651194][ T3311] EXT4-fs (loop2): I/O error while writing superblock [ 102.874936][ T28] audit: type=1400 audit(1775126194.485:1536): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.900091][ T28] audit: type=1400 audit(1775126194.515:1537): avc: denied { search } for pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.921488][ T28] audit: type=1400 audit(1775126194.515:1538): avc: denied { search } for pid=3039 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.948861][ T356] bridge_slave_1: left allmulticast mode [ 102.952310][ T28] audit: type=1400 audit(1775126194.515:1539): avc: denied { search } for pid=3039 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.959010][ T356] bridge_slave_1: left promiscuous mode [ 102.976471][ T28] audit: type=1400 audit(1775126194.515:1540): avc: denied { read } for pid=3039 comm="dhcpcd" name="n25" dev="tmpfs" ino=5651 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.982290][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.011026][ T28] audit: type=1400 audit(1775126194.515:1541): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5651 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.034472][ T28] audit: type=1400 audit(1775126194.515:1542): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5651 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.057854][ T356] bridge_slave_0: left allmulticast mode [ 103.064441][ T356] bridge_slave_0: left promiscuous mode [ 103.071017][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.150339][ T356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.159730][ T356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.168842][ T356] bond0 (unregistering): Released all slaves [ 103.176270][ T356] bond1 (unregistering): Released all slaves [ 103.185225][ T356] bond2 (unregistering): (slave lo): Releasing backup interface [ 103.193314][ T356] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 103.205414][ T356] bond2 (unregistering): Released all slaves [ 103.216645][ T7554] chnl_net:caif_netlink_parms(): no params data found [ 103.279620][ T356] tipc: Left network mode [ 103.290631][ T356] hsr_slave_0: left promiscuous mode [ 103.301528][ T356] hsr_slave_1: left promiscuous mode [ 103.308592][ T356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.317215][ T356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.410599][ T356] team0 (unregistering): Port device team_slave_1 removed [ 103.420901][ T356] team0 (unregistering): Port device team_slave_0 removed [ 103.461533][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.468899][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.476271][ T7554] bridge_slave_0: entered allmulticast mode [ 103.484796][ T7554] bridge_slave_0: entered promiscuous mode [ 103.494920][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.502111][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.509524][ T7554] bridge_slave_1: entered allmulticast mode [ 103.516104][ T7554] bridge_slave_1: entered promiscuous mode [ 103.535321][ T7554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.546053][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.594592][ T7554] team0: Port device team_slave_0 added [ 103.617020][ T7554] team0: Port device team_slave_1 added [ 103.646617][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.654354][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.681904][ T7554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.696594][ T356] IPVS: stop unused estimator thread 0... [ 103.704645][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.712434][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.739890][ T7554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.783817][ T7554] hsr_slave_0: entered promiscuous mode [ 103.792003][ T7554] hsr_slave_1: entered promiscuous mode [ 103.798047][ T7554] debugfs: 'hsr0' already exists in 'hsr' [ 103.804183][ T7554] Cannot create hsr debugfs directory [ 103.913715][ T7554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.929949][ T7554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.947640][ T7554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.972714][ T7554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.050558][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.084019][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 104.091358][ T7554] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.110683][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.117782][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.118548][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 104.140193][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.147354][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.148460][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 104.168441][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1644'. [ 104.186262][ T7554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.203212][ T7554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.297390][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.441067][ T7554] veth0_vlan: entered promiscuous mode [ 104.449412][ T7554] veth1_vlan: entered promiscuous mode [ 104.467393][ T7554] veth0_macvtap: entered promiscuous mode [ 104.475602][ T7554] veth1_macvtap: entered promiscuous mode [ 104.488167][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.500550][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.511459][ T356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.539355][ T3824] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.558625][ T3824] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.567953][ T3824] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.590855][ T7693] netlink: 'syz.1.1655': attribute type 5 has an invalid length. [ 104.663028][ T7706] loop6: detected capacity change from 0 to 512 [ 104.677497][ T7706] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.697507][ T7706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.777934][ T7706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.798399][ T7706] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.893712][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.030877][ T7735] loop0: detected capacity change from 0 to 128 [ 105.045966][ T7737] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1670'. [ 105.065629][ T7737] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1670'. [ 105.108948][ T7742] netlink: 'syz.5.1659': attribute type 5 has an invalid length. [ 105.276175][ T7747] loop0: detected capacity change from 0 to 512 [ 105.314256][ T7747] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.368340][ T7747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.403036][ T7747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.438424][ T7747] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.461039][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 105.591948][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.653847][ T7768] loop5: detected capacity change from 0 to 512 [ 105.693963][ T7768] EXT4-fs: Ignoring removed bh option [ 105.731634][ T7768] EXT4-fs: inline encryption not supported [ 105.756487][ T7778] netlink: 'syz.6.1678': attribute type 5 has an invalid length. [ 105.768416][ T7768] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.898435][ T7768] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 105.959238][ T7768] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1671: bg 0: block 248: padding at end of block bitmap is not set [ 106.008459][ T7768] loop5: lost filesystem error report for type 5 error -117 [ 106.008819][ T7768] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1671: Failed to acquire dquot type 1 [ 106.027447][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 106.027469][ C0] EXT4-fs (loop5): last error at time 1775126197: ext4_validate_block_bitmap:441 [ 106.138573][ T7768] loop5: lost filesystem error report for type 5 error -28 [ 106.139095][ T7768] EXT4-fs (loop5): 1 truncate cleaned up [ 106.193077][ T7768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.257662][ T7801] loop6: detected capacity change from 0 to 512 [ 106.276840][ T7801] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.300661][ T7801] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.333635][ T7801] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1685: bg 0: block 248: padding at end of block bitmap is not set [ 106.379814][ T7801] loop6: lost filesystem error report for type 5 error -117 [ 106.380099][ T7801] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1685: Failed to acquire dquot type 1 [ 106.398882][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 106.398905][ C1] EXT4-fs (loop6): last error at time 1775126197: ext4_validate_block_bitmap:441 [ 106.424439][ T7801] loop6: lost filesystem error report for type 5 error -28 [ 106.425411][ T7801] EXT4-fs (loop6): 1 truncate cleaned up [ 106.438981][ T7801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.462851][ T7768] syz.5.1671 (7768) used greatest stack depth: 9160 bytes left [ 106.503942][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 106.549418][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 106.662267][ T7823] loop6: detected capacity change from 0 to 512 [ 106.675892][ T7823] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.694829][ T7823] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.718429][ T7823] EXT4-fs (loop6): 1 truncate cleaned up [ 106.724574][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.773567][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.815947][ T7832] loop6: detected capacity change from 0 to 256 [ 106.847148][ T7832] FAT-fs (loop6): Directory bread(block 64) failed [ 106.858451][ T7832] FAT-fs (loop6): Directory bread(block 65) failed [ 106.865467][ T7832] FAT-fs (loop6): Directory bread(block 66) failed [ 106.872192][ T7832] FAT-fs (loop6): Directory bread(block 67) failed [ 106.878868][ T7832] FAT-fs (loop6): Directory bread(block 68) failed [ 106.885502][ T7832] FAT-fs (loop6): Directory bread(block 69) failed [ 106.892431][ T7832] FAT-fs (loop6): Directory bread(block 70) failed [ 106.899263][ T7832] FAT-fs (loop6): Directory bread(block 71) failed [ 106.905840][ T7832] FAT-fs (loop6): Directory bread(block 72) failed [ 106.912502][ T7832] FAT-fs (loop6): Directory bread(block 73) failed [ 106.924683][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 106.924699][ T28] audit: type=1400 audit(1775126198.535:1552): avc: denied { watch } for pid=7831 comm="syz.6.1696" path="/11/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 106.969061][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 106.985479][ T7834] bond2: entered promiscuous mode [ 106.991108][ T7834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.518015][ T7868] syzkaller1: entered promiscuous mode [ 107.573574][ T7868] syzkaller1: entered allmulticast mode [ 107.704602][ T7864] netlink: 'syz.1.1709': attribute type 4 has an invalid length. [ 107.714986][ T7864] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1709'. [ 107.736149][ T7873] loop0: detected capacity change from 0 to 764 [ 107.764875][ T28] audit: type=1400 audit(1775126199.375:1553): avc: denied { wake_alarm } for pid=7872 comm="syz.0.1712" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.893415][ T7879] loop6: detected capacity change from 0 to 4096 [ 107.916214][ T7879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.976128][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.986179][ T28] audit: type=1400 audit(1775126199.595:1554): avc: denied { connect } for pid=7887 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.006089][ T28] audit: type=1400 audit(1775126199.595:1555): avc: denied { read } for pid=7887 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.479352][ T28] audit: type=1400 audit(1775126200.095:1556): avc: denied { create } for pid=7913 comm="syz.5.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.565357][ T28] audit: type=1400 audit(1775126200.175:1557): avc: denied { mounton } for pid=7920 comm="syz.5.1732" path="/160/file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 108.686980][ T28] audit: type=1400 audit(1775126200.295:1558): avc: denied { ioctl } for pid=7926 comm="syz.6.1735" path="socket:[20683]" dev="sockfs" ino=20683 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 108.774073][ T7935] loop5: detected capacity change from 0 to 128 [ 108.800489][ T7935] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.825858][ T28] audit: type=1326 audit(1775126200.435:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 108.849869][ T7935] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.870447][ T7935] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.1737: No space for directory leaf checksum. Please run e2fsck -D. [ 108.906328][ T7935] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.1737: Directory block failed checksum [ 108.932823][ T28] audit: type=1326 audit(1775126200.465:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 108.939202][ T5671] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.964671][ T28] audit: type=1326 audit(1775126200.465:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 108.994842][ T7947] loop6: detected capacity change from 0 to 512 [ 109.024505][ T7947] tipc: Started in network mode [ 109.036273][ T7947] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.059042][ T7947] tipc: Enabling of bearer rejected, failed to enable media [ 109.075815][ T7952] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1746'. [ 109.217126][ T7975] ref_ctr_offset mismatch. inode: 0x36a offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 109.321843][ T7985] loop5: detected capacity change from 0 to 1024 [ 109.341855][ T7985] EXT4-fs: Ignoring removed bh option [ 109.401154][ T7985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.444896][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.665339][ T8018] PID 8018 killed due to inadequate hugepage pool [ 110.471628][ T8040] netlink: 'syz.6.1781': attribute type 1 has an invalid length. [ 110.487592][ T8043] loop0: detected capacity change from 0 to 512 [ 110.494823][ T8043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.528929][ T8043] EXT4-fs (loop0): 1 truncate cleaned up [ 110.535261][ T8043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.572828][ T8050] netlink: 'syz.1.1784': attribute type 12 has an invalid length. [ 110.591649][ T8050] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 110.606935][ T8050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1784'. [ 110.621462][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.647463][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 110.917172][ T8080] loop6: detected capacity change from 0 to 164 [ 110.950504][ T8080] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 110.965429][ T8081] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 110.998071][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1801'. [ 110.999042][ T8081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.016009][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1801'. [ 111.060538][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1801'. [ 111.070304][ T3831] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.087039][ T3831] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.088553][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1801'. [ 111.109828][ T8092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.114809][ T8081] bond4: (slave geneve2): making interface the new active one [ 111.132464][ T8092] EXT4-fs (loop0): 1 truncate cleaned up [ 111.138997][ T8092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.144347][ T8081] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 111.185436][ T3831] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.198669][ T3831] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.239988][ T3831] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.257938][ T3831] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.266690][ T3831] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.275324][ T3831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.455506][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.580579][ T8136] tipc: Started in network mode [ 111.585805][ T8136] tipc: Node identity ac1414aa, cluster identity 4711 [ 111.622039][ T8136] tipc: Enabled bearer , priority 10 [ 111.638353][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 111.663593][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1820'. [ 111.688585][ T8140] set_capacity_and_notify: 1 callbacks suppressed [ 111.688601][ T8140] loop5: detected capacity change from 0 to 1024 [ 111.715894][ T70] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.736042][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.737599][ T70] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.781255][ T70] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.790525][ T3831] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.978973][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.060857][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 112.060901][ T28] audit: type=1400 audit(1775126203.675:1633): avc: denied { write } for pid=8167 comm="syz.6.1832" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 112.738787][ T3369] tipc: Node number set to 2886997162 [ 112.877381][ T28] audit: type=1400 audit(1775126204.485:1634): avc: denied { firmware_load } for pid=8183 comm="syz.5.1838" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 113.023428][ T8193] loop5: detected capacity change from 0 to 764 [ 113.071006][ T28] audit: type=1400 audit(1775126204.685:1635): avc: denied { watch watch_reads } for pid=8192 comm="syz.5.1841" path="/179/file1/file0" dev="loop5" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 113.513532][ T28] audit: type=1326 audit(1775126205.125:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.579119][ T28] audit: type=1326 audit(1775126205.125:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.637355][ T28] audit: type=1326 audit(1775126205.125:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.678324][ T28] audit: type=1326 audit(1775126205.125:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.728297][ T28] audit: type=1326 audit(1775126205.155:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.759203][ T28] audit: type=1326 audit(1775126205.155:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 113.813697][ T28] audit: type=1326 audit(1775126205.155:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb70c819 code=0x7ffc0000 [ 115.015002][ T8222] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1848'. [ 115.134545][ T8239] loop6: detected capacity change from 0 to 1024 [ 115.164428][ T8239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 115.177308][ T8239] System zones: 0-1, 3-36 [ 115.184328][ T8239] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1856: bad orphan inode 134217728 [ 115.202172][ T8239] loop6: lost filesystem error report for type 5 error -117 [ 115.202789][ T8239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.217037][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 115.247835][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.464640][ T8275] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 115.478220][ T8276] loop6: detected capacity change from 0 to 1024 [ 115.489035][ T8275] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 115.489030][ T3831] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.489075][ T3831] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.499936][ T8276] EXT4-fs: Ignoring removed bh option [ 115.517132][ T3831] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.529903][ T356] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.554159][ T8276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.618919][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.109308][ T8327] __nla_validate_parse: 7 callbacks suppressed [ 116.109406][ T8327] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1885'. [ 116.733008][ T8374] loop0: detected capacity change from 0 to 512 [ 116.772413][ T8374] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.810301][ T8374] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 116.830953][ T8374] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 116.842544][ T8374] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.858373][ T8374] System zones: 0-2, 18-18, 34-34 [ 116.868571][ T8374] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1902: bad orphan inode 15 [ 116.881343][ T8374] loop0: lost filesystem error report for type 5 error -117 [ 116.882310][ T8374] ext4_test_bit(bit=14, block=18) = 1 [ 116.889690][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 116.889714][ C0] EXT4-fs (loop0): initial error at time 1775126208: ext4_orphan_get:1423 [ 116.889754][ C0] EXT4-fs (loop0): last error at time 1775126208: ext4_orphan_get:1423 [ 116.918627][ T8374] is_bad_inode(inode)=0 [ 116.928217][ T8374] NEXT_ORPHAN(inode)=2264924160 [ 116.933211][ T8374] max_ino=32 [ 116.936568][ T8374] i_nlink=0 [ 116.947774][ T8374] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1902: corrupted inode contents [ 116.959788][ T8374] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.960129][ T8374] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.1902: mark_inode_dirty error [ 116.981636][ T8374] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.981819][ T8374] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1902: corrupted inode contents [ 117.004122][ T8374] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.004343][ T8374] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1902: mark_inode_dirty error [ 117.035604][ T8374] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.035871][ T8374] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.1902: mark inode dirty (error -117) [ 117.069639][ T8374] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.069871][ T8374] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 117.094857][ T8374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.109410][ T8374] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1902: bg 0: block 80: padding at end of block bitmap is not set [ 117.223889][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.329608][ T8402] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1907'. [ 117.343615][ T8402] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 117.387513][ T8407] netlink: 'syz.4.1909': attribute type 83 has an invalid length. [ 117.685353][ T8419] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 117.856473][ T8423] Invalid argument reading file caps for ./file0 [ 117.970725][ T8433] loop6: detected capacity change from 0 to 512 [ 118.008543][ T8433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.048740][ T8433] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.181654][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 118.181671][ T28] audit: type=1400 audit(1775126209.795:1696): avc: denied { create } for pid=8442 comm="syz.1.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.238923][ T8430] netlink: 'syz.4.1918': attribute type 4 has an invalid length. [ 118.247857][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.265588][ T8430] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1918'. [ 118.310782][ T8453] loop0: detected capacity change from 0 to 512 [ 118.376302][ T8457] loop6: detected capacity change from 0 to 512 [ 118.390052][ T8453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.443633][ T8457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.453479][ T8453] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.476608][ T8457] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.525850][ T6001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.604576][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 118.614594][ T7554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.630898][ T28] audit: type=1400 audit(1775126210.245:1697): avc: denied { unlink } for pid=6001 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.656080][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.678159][ T28] audit: type=1400 audit(1775126210.245:1698): avc: denied { unlink } for pid=6001 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 118.703941][ T8470] hsr_slave_0: left promiscuous mode [ 118.734550][ T8470] hsr_slave_1: left promiscuous mode [ 118.891048][ T8488] syzkaller0: entered promiscuous mode [ 118.897104][ T8488] syzkaller0: entered allmulticast mode [ 118.955826][ T8490] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1940'. [ 119.125641][ T28] audit: type=1400 audit(1775126210.735:1699): avc: denied { unmount } for pid=6001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 119.231062][ T8521] loop5: detected capacity change from 0 to 512 [ 119.251484][ T8521] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1954: inode has both inline data and extents flags [ 119.265551][ T8521] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.268777][ T8521] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1954: couldn't read orphan inode 15 (err -117) [ 119.289776][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 119.289800][ C0] EXT4-fs (loop5): initial error at time 1775126210: ext4_orphan_get:1397: inode 15 [ 119.289848][ C0] EXT4-fs (loop5): last error at time 1775126210: ext4_orphan_get:1397: inode 15 [ 119.322549][ T8521] loop5: lost filesystem error report for type 5 error -117 [ 119.331994][ T8521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.355745][ T28] audit: type=1400 audit(1775126210.965:1700): avc: denied { watch watch_reads } for pid=8520 comm="syz.5.1954" path="/195/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.390298][ T8525] Process accounting resumed [ 119.404974][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.499462][ T8537] loop5: detected capacity change from 0 to 1024 [ 119.512996][ T8537] EXT4-fs: Ignoring removed bh option [ 119.550930][ T8537] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 119.665449][ T8553] loop5: detected capacity change from 0 to 512 [ 119.690789][ T8553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.703889][ T8553] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.761952][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.823140][ T8563] loop5: detected capacity change from 0 to 256 [ 119.945025][ T28] audit: type=1400 audit(1775126211.555:1701): avc: denied { write } for pid=8575 comm="syz.0.1976" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.988532][ T28] audit: type=1400 audit(1775126211.555:1702): avc: denied { open } for pid=8575 comm="syz.0.1976" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.013208][ T28] audit: type=1400 audit(1775126211.585:1703): avc: denied { ioctl } for pid=8575 comm="syz.0.1976" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.159205][ T8588] loop0: detected capacity change from 0 to 2048 [ 120.181362][ T8588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.283288][ T6001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.320329][ T8563] ================================================================== [ 120.328488][ T8563] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 120.336671][ T8563] [ 120.339027][ T8563] write to 0xffff88811b08bb14 of 4 bytes by task 8574 on cpu 1: [ 120.347006][ T8563] xas_set_mark+0x12b/0x140 [ 120.351543][ T8563] tag_pages_for_writeback+0xe3/0x2e0 [ 120.356964][ T8563] writeback_iter+0x340/0x830 [ 120.361689][ T8563] __mpage_writepages+0x8a/0x1390 [ 120.366856][ T8563] fat_writepages+0x26/0x30 [ 120.371493][ T8563] do_writepages+0x1c6/0x310 [ 120.376340][ T8563] file_write_and_wait_range+0x178/0x2f0 [ 120.382796][ T8563] __generic_file_fsync+0x46/0x160 [ 120.388107][ T8563] fat_file_fsync+0x49/0x100 [ 120.392915][ T8563] vfs_fsync_range+0xc5/0xe0 [ 120.397548][ T8563] generic_file_write_iter+0x1ba/0x310 [ 120.403084][ T8563] iter_file_splice_write+0x6c4/0xa80 [ 120.408488][ T8563] direct_splice_actor+0x156/0x2a0 [ 120.413627][ T8563] splice_direct_to_actor+0x311/0x670 [ 120.419033][ T8563] do_splice_direct+0x119/0x1a0 [ 120.424011][ T8563] do_sendfile+0x382/0x650 [ 120.428637][ T8563] __x64_sys_sendfile64+0x105/0x150 [ 120.433962][ T8563] x64_sys_call+0x2dc4/0x3020 [ 120.438677][ T8563] do_syscall_64+0x12c/0x370 [ 120.443295][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.449405][ T8563] [ 120.451753][ T8563] read to 0xffff88811b08bb14 of 4 bytes by task 8563 on cpu 0: [ 120.459405][ T8563] file_write_and_wait_range+0x130/0x2f0 [ 120.465064][ T8563] __generic_file_fsync+0x46/0x160 [ 120.470196][ T8563] fat_file_fsync+0x49/0x100 [ 120.474813][ T8563] vfs_fsync_range+0xc5/0xe0 [ 120.479528][ T8563] generic_file_write_iter+0x1ba/0x310 [ 120.485110][ T8563] iter_file_splice_write+0x6c4/0xa80 [ 120.490507][ T8563] direct_splice_actor+0x156/0x2a0 [ 120.495644][ T8563] splice_direct_to_actor+0x311/0x670 [ 120.501023][ T8563] do_splice_direct+0x119/0x1a0 [ 120.505883][ T8563] do_sendfile+0x382/0x650 [ 120.510319][ T8563] __x64_sys_sendfile64+0x105/0x150 [ 120.515628][ T8563] x64_sys_call+0x2dc4/0x3020 [ 120.520332][ T8563] do_syscall_64+0x12c/0x370 [ 120.525035][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.530953][ T8563] [ 120.533305][ T8563] value changed: 0x02000021 -> 0x04000021 [ 120.539032][ T8563] [ 120.541377][ T8563] Reported by Kernel Concurrency Sanitizer on: [ 120.547560][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.5.1968 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.558607][ T8563] Tainted: [W]=WARN [ 120.562419][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.572479][ T8563] ==================================================================