last executing test programs: 1m20.631840699s ago: executing program 0 (id=125): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000c4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x400, 0x4, 0x0, 0x57}]}) eventfd2(0x180, 0x0) 1m20.519691769s ago: executing program 0 (id=133): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.466398759s ago: executing program 0 (id=134): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000010}) close_range(r0, r1, 0x0) 1m20.356904629s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 1m20.191406979s ago: executing program 0 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0x2, 0x6, 0x2, 0x90, "9900010000000013001300"}) 1m19.458181694s ago: executing program 0 (id=151): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, [0x20000000200, 0xae, 0xdd, 0x9, 0x564, 0x1, 0x3, 0x6, 0x7, 0x7, 0x1, 0x5, 0x9, 0x9, 0x4]}, &(0x7f0000000000)=0x100) 1m19.458046634s ago: executing program 32 (id=151): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, [0x20000000200, 0xae, 0xdd, 0x9, 0x564, 0x1, 0x3, 0x6, 0x7, 0x7, 0x1, 0x5, 0x9, 0x9, 0x4]}, &(0x7f0000000000)=0x100) 47.811147407s ago: executing program 5 (id=647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) 47.76700391s ago: executing program 5 (id=648): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast1, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close_range(r0, 0xffffffffffffffff, 0x0) 47.627045554s ago: executing program 5 (id=652): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = gettid() setpriority(0x2, r1, 0x80000001) 47.577945234s ago: executing program 5 (id=653): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8NCDl549epEevEsxKJSeIzP7I9smm02bTQfSzwcm+9687L7vzDdvMm/YmQBeWmP5jyzicETcThEjzfVZRFSL0lDEcuP37s3cvZAvKdbWPv03RYqIlZm7F1qflZqvB5sfMBQRfyynmLm1sd/F6zcuztbr89ea9YmlS1cnFq/feHfh0uz5+fPzl6dOnDg+OT194vhk37b12PiRn1a+/vCfO/cmHv/8wbFfUpyK4WZb53b0y1iMtffJ0z7rd2clGYiISkfuc6lSYkAAAGwp6ziHOxwjMRDrJ28jUVsoNTgAAACgL76NiDUAAABgj0vm/wAAALDHtb4HsDJz90JrKfcbCbxIq6cjYrSR/9b93Y2WSiwXr0MxGBEHHqXovK03Nd62Y2MRcfX2rYV8iV26D5vulm9GxFubjf9U5H+0uIt/Y/6ziOjHnfljT9Xl/8XaSf5P9aF/+QcAAHgx7p9uTOQ3zv+y9vWf2GT+N7DJ3O159J7/ZQ/70A1drJ6OeL/j2Y73OvLfNDrQrL1SXA8YTOcW6vOTEfFqRIzH4L68PrVFHwsf//Zmt7bO63/5kvffuhbYjONhZd+T75mbXZrdyTazbvVmxNuVzfKf2uM/dbn++8k2+/j+yx9Wu7X1zj+7ae1OxNFNx//6Ez3T1s9nnSiOBxOto8JGnw//tdKtf/kvVz7+D2yd/+L4335e7+Kz93G2+t1r3dqe9/hfTWeKAKvNdd/MLi1dm4qopo82rp9+4u3Zs2/B3tHaH639led//Mjm//+3Ov7nfxNnt9nn418fnenWZvyXK8//XI/xn54Y/89e+O/P39/o1v/2xv97RTDjzTXO/3rbboLKjhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBfsogYjpTV2uUsq9UiDkbE63Egq19ZXDp27spXl+fytojRGMzOLdTnJyNipFFPeX2qKK/Xp5+qz0TEoYj4cWR/Ua99caU+V/bGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HYwIoYjZbWIyIpyltVqjba/R8qODgAAAOib0bIDAAAAAHad+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3TonfsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+To4fsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2Tx+o2Ls/X6/DUFBQWFdqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB72f8BAAD//4rO4cs=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 47.314543186s ago: executing program 5 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="3a2f080000030500010000000000450a0fc000680000050690"], 0xfce) 47.133448413s ago: executing program 5 (id=661): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001880)="85bb18633649e0e842550ff1312a8f41a8f61db14c98c532c5029316dc8fa271b5a74f757195beb492eef18837b663ac386f3f5e2b52779b8c993a8f24136737bee34fa6ff1a09011dabba48cc61a22a899c9494141dad70e281b96b610c907d0d58373dd0a106d7c0c5f22c4d6e84663b1e06063898ce82c374b31763179c66ef53ad74c7306badff4c4cba8c5d386db78d15b14e7bfc011627bcbb7ac91d158f3d46866e096e54005a66bc94c937d9b6a9a48dfd73d056855be7141ca713e43640572f1b702a9e62bbb55549d48369d2e863490d70bcb123dabc06", 0xdc}], 0x1}, 0x48040) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 47.133275543s ago: executing program 33 (id=661): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001880)="85bb18633649e0e842550ff1312a8f41a8f61db14c98c532c5029316dc8fa271b5a74f757195beb492eef18837b663ac386f3f5e2b52779b8c993a8f24136737bee34fa6ff1a09011dabba48cc61a22a899c9494141dad70e281b96b610c907d0d58373dd0a106d7c0c5f22c4d6e84663b1e06063898ce82c374b31763179c66ef53ad74c7306badff4c4cba8c5d386db78d15b14e7bfc011627bcbb7ac91d158f3d46866e096e54005a66bc94c937d9b6a9a48dfd73d056855be7141ca713e43640572f1b702a9e62bbb55549d48369d2e863490d70bcb123dabc06", 0xdc}], 0x1}, 0x48040) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 22.910057101s ago: executing program 4 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 21.875476031s ago: executing program 4 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 21.7650903s ago: executing program 4 (id=1020): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 21.674147933s ago: executing program 4 (id=1023): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff7, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x3]}) unlink(&(0x7f0000000080)='./file1\x00') 20.854996063s ago: executing program 4 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x2, {0x0, 0x1, 0x3}, {0x2, 0xf0}, 0x2, 0xff}, {0x3, 0x1, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x3}, 0xfe, 0x2}, {0x0, 0x0, {0x1, 0x1}, {0x2, 0xf0, 0x1}, 0x3, 0x2}, {0x1, 0x0, {0x1, 0xf0, 0x4}, {0x2, 0xf0}, 0xff, 0x1}, {0x3, 0x2, {0x1, 0x0, 0x3}, {0x2}, 0xff, 0xfe}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2, 0xff}, {0x0, 0x80000, {0x2, 0xff, 0x2}, {0x1, 0xf0, 0x3}, 0xfd, 0xff}], 0xe0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x9, 0x8}, {0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 19.840069486s ago: executing program 4 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006114700000000000a6000000000000009500000000000000937d33f3e0ca0f43a43b5d4d7a22970a949c69ef27a9fc44cc47422554e70e93b6d1498470b06f6bc02b46eb12b7c20182a6cfb550e33f74fd06dcb725f4af4fa30f202d53f59beaee03eb30feac63cc0348ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 19.779927535s ago: executing program 34 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006114700000000000a6000000000000009500000000000000937d33f3e0ca0f43a43b5d4d7a22970a949c69ef27a9fc44cc47422554e70e93b6d1498470b06f6bc02b46eb12b7c20182a6cfb550e33f74fd06dcb725f4af4fa30f202d53f59beaee03eb30feac63cc0348ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 5.095924377s ago: executing program 2 (id=1249): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 5.010985781s ago: executing program 2 (id=1251): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) memfd_create(0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000004c0), 0x0}, 0x20) timer_gettime(r0, 0x0) 4.937223798s ago: executing program 2 (id=1253): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000940)='./file1\x00', 0xc000, &(0x7f0000000440)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'dioread_nolock'}}, {@smackfsroot={'smackfsroot', 0x3d, '1GB.usage_in\xff\x00\x00C9\x1b\xeb\x00\x00\x00\x00\x00\x00\x00'}}]}, 0x2, 0x24d, &(0x7f0000006040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) creat(&(0x7f0000000000)='./file0\x00', 0x6b) 4.790184401s ago: executing program 2 (id=1254): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4.714927587s ago: executing program 2 (id=1255): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x0, r3}, 0x10) 4.161974265s ago: executing program 2 (id=1266): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) 4.13790737s ago: executing program 35 (id=1266): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) 2.904407294s ago: executing program 3 (id=1278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880), 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 2.038329475s ago: executing program 6 (id=1291): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_rm_watch(r2, r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) 1.95948268s ago: executing program 6 (id=1292): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10000, 0x101, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 1.532166682s ago: executing program 6 (id=1294): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 1.327910804s ago: executing program 1 (id=1296): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.280651626s ago: executing program 6 (id=1297): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1.160338483s ago: executing program 1 (id=1298): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 1.076904228s ago: executing program 3 (id=1300): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x100, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xffc, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) 994.705753ms ago: executing program 3 (id=1301): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) 963.058087ms ago: executing program 1 (id=1302): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x402b, &(0x7f0000000400)={0x0, 0xaef5, 0x400, 0xffffffff, 0x175}, &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 885.774733ms ago: executing program 3 (id=1304): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x1}, 0x10) 860.111489ms ago: executing program 7 (id=1305): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 843.179165ms ago: executing program 6 (id=1306): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x8}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x1, 0x31, 0x64, 0x0, 0x31, 0x2, 0x0, @empty, @local}, {0x14, 0x3, 0x0, @remote, "d77541e0a3ff99e2a2c0ec57f8c56440358fc57751"}}}, 0x3f) 796.567356ms ago: executing program 1 (id=1307): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x41}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x97}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 745.733157ms ago: executing program 7 (id=1308): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000271) getdents64(r2, 0x0, 0x4f) 693.601938ms ago: executing program 3 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddef", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 639.766108ms ago: executing program 1 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8) 635.413517ms ago: executing program 6 (id=1311): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}, 0x1, 0x8}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 569.076995ms ago: executing program 7 (id=1312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x10002) shutdown(r0, 0x1) 497.074092ms ago: executing program 7 (id=1313): r0 = socket$rxrpc(0x21, 0x2, 0xa) set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 102.798819ms ago: executing program 7 (id=1314): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="0029f4", 0x3}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 76.280444ms ago: executing program 3 (id=1315): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xffffffffffffff68, 0x1f, 0x2, 0xad1}, 0xf) 55.25586ms ago: executing program 7 (id=1316): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 49.02571ms ago: executing program 8 (id=1267): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 0s ago: executing program 1 (id=1317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) kernel console output (not intermixed with test programs): line data and extents flags [ 44.415593][ T4002] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.415798][ T4002] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.187: couldn't read orphan inode 15 (err -117) [ 44.425139][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 44.425172][ C1] EXT4-fs (loop4): initial error at time 1772892764: ext4_orphan_get:1391: inode 15 [ 44.425206][ C1] EXT4-fs (loop4): last error at time 1772892764: ext4_orphan_get:1391: inode 15 [ 44.462417][ T4002] loop4: lost filesystem error report for type 5 error -117 [ 44.473216][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.556419][ T3869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.568679][ T28] audit: type=1400 audit(1772892764.304:276): avc: denied { create } for pid=4014 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.594042][ T3869] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.641184][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.648326][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.687379][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.694520][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.765459][ T28] audit: type=1400 audit(1772892764.474:277): avc: denied { create } for pid=4024 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.789504][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.807614][ T28] audit: type=1400 audit(1772892764.484:278): avc: denied { setopt } for pid=4024 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.833392][ T4033] loop2: detected capacity change from 0 to 256 [ 44.860254][ T3869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.936951][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 45.001462][ T4051] bridge_slave_1: left allmulticast mode [ 45.027959][ T4051] bridge_slave_1: left promiscuous mode [ 45.033817][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.059398][ T4051] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 45.126168][ T3869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.440499][ T3869] veth0_vlan: entered promiscuous mode [ 45.459307][ T3869] veth1_vlan: entered promiscuous mode [ 45.488525][ T3869] veth0_macvtap: entered promiscuous mode [ 45.501773][ T3869] veth1_macvtap: entered promiscuous mode [ 45.514641][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.526981][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.538986][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.563531][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.575980][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.590581][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.095130][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 46.267970][ T4134] loop1: detected capacity change from 0 to 1024 [ 46.268824][ T4137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.295016][ T4137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.317141][ T4134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.336332][ T4134] batman_adv: batadv0: Adding interface: dummy0 [ 46.353026][ T4134] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.405523][ T4134] batman_adv: batadv0: Interface activated: dummy0 [ 46.431529][ T4143] batadv0: mtu less than device minimum [ 46.451012][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.462181][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.473179][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.484283][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.495168][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.506153][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.517224][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 46.528352][ T4143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.059940][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.436053][ T4184] syzkaller0: entered promiscuous mode [ 47.458821][ T4184] syzkaller0: entered allmulticast mode [ 47.549699][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 48.288207][ T4245] batadv_slave_1: entered promiscuous mode [ 48.294621][ T4245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.329052][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 48.338834][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.357919][ T4245] batadv_slave_1 (unregistering): left promiscuous mode [ 48.376760][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.459844][ T4257] loop3: detected capacity change from 0 to 1024 [ 48.496400][ T4257] EXT4-fs: Ignoring removed orlov option [ 48.520754][ T4257] EXT4-fs: Ignoring removed nobh option [ 48.547719][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.262'. [ 48.550013][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'. [ 48.578913][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.798608][ T4266] Invalid ELF header magic: != ELF [ 48.821295][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.025509][ T4286] loop5: detected capacity change from 0 to 256 [ 49.639951][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.750344][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 49.750365][ T28] audit: type=1400 audit(1772892769.494:338): avc: denied { name_bind } for pid=4304 comm="syz.4.278" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.832491][ T28] audit: type=1400 audit(1772892769.574:339): avc: denied { write } for pid=4306 comm="syz.4.279" name="/" dev="configfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.002687][ T28] audit: type=1400 audit(1772892769.744:340): avc: denied { setopt } for pid=4310 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.047541][ T28] audit: type=1400 audit(1772892769.744:341): avc: denied { bind } for pid=4310 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.098139][ T28] audit: type=1400 audit(1772892769.744:342): avc: denied { name_bind } for pid=4310 comm="syz.4.281" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.144397][ T28] audit: type=1400 audit(1772892769.744:343): avc: denied { node_bind } for pid=4310 comm="syz.4.281" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.308549][ T4321] netlink: 'syz.4.284': attribute type 4 has an invalid length. [ 50.322824][ T4321] netlink: 'syz.4.284': attribute type 4 has an invalid length. [ 50.378061][ T4319] loop3: detected capacity change from 0 to 256 [ 50.416638][ T28] audit: type=1400 audit(1772892770.154:344): avc: denied { create } for pid=4324 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.447052][ T28] audit: type=1400 audit(1772892770.184:345): avc: denied { setopt } for pid=4324 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.508027][ T28] audit: type=1400 audit(1772892770.184:346): avc: denied { bind } for pid=4324 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.598392][ T28] audit: type=1400 audit(1772892770.184:347): avc: denied { write } for pid=4324 comm="syz.2.286" path="socket:[14310]" dev="sockfs" ino=14310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.694522][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 50.718723][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 50.941854][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 50.987189][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 51.183230][ T4356] uprobe: syz.2.299:4356 failed to unregister, leaking uprobe [ 51.382525][ T4360] loop4: detected capacity change from 0 to 1024 [ 51.437616][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.450589][ T4360] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.470210][ T4360] EXT4-fs (loop4): shut down requested (0) [ 51.586452][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.796003][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 52.033032][ T4394] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.312'. [ 52.060476][ T4394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 52.271142][ T4386] loop4: detected capacity change from 0 to 2048 [ 52.393322][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.409722][ T4386] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.678256][ T50] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 52.693310][ T50] EXT4-fs (loop4): Remounting filesystem read-only [ 52.706601][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.775679][ T4419] loop5: detected capacity change from 0 to 512 [ 52.795873][ T4419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.826731][ T4419] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.842204][ T4419] EXT4-fs (loop5): 1 truncate cleaned up [ 52.853762][ T4419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.873054][ T4419] netlink: 277 bytes leftover after parsing attributes in process `syz.5.321'. [ 52.974893][ T3869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.060277][ T4441] netlink: 'syz.1.330': attribute type 4 has an invalid length. [ 53.145877][ T4448] netlink: 'syz.1.330': attribute type 4 has an invalid length. [ 53.742650][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.750291][ T4481] net_ratelimit: 11 callbacks suppressed [ 53.750374][ T4481] batadv0: mtu less than device minimum [ 53.762317][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.773214][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.784284][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.795173][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.806228][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.817267][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.828353][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.839278][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.850367][ T4481] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.891970][ T4480] loop3: detected capacity change from 0 to 8192 [ 53.904416][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.914016][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.935019][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.943378][ T4481] batman_adv: batadv0: Interface deactivated: dummy0 [ 53.950496][ T4481] batman_adv: batadv0: Removing interface: dummy0 [ 54.410111][ T4487] netlink: 400 bytes leftover after parsing attributes in process `syz.4.348'. [ 55.170665][ T4529] loop2: detected capacity change from 0 to 1024 [ 55.231620][ T4529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.266421][ T4529] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.337715][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 55.369959][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.401086][ T4537] loop1: detected capacity change from 0 to 512 [ 55.417587][ T69] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.426679][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.441044][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.458681][ T4537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.470738][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.521790][ T4544] sch_fq: defrate 7 ignored. [ 55.825081][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 55.825099][ T28] audit: type=1400 audit(1772892775.564:404): avc: denied { getopt } for pid=4555 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.929203][ T28] audit: type=1400 audit(1772892775.674:405): avc: denied { getattr } for pid=4560 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.971307][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.022822][ T28] audit: type=1400 audit(1772892775.744:406): avc: denied { read } for pid=4562 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.091383][ T28] audit: type=1400 audit(1772892775.744:407): avc: denied { open } for pid=4562 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.263662][ T4578] loop4: detected capacity change from 0 to 512 [ 56.279760][ T28] audit: type=1400 audit(1772892775.864:408): avc: denied { create } for pid=4559 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.304750][ T28] audit: type=1400 audit(1772892775.864:409): avc: denied { write } for pid=4559 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2402 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.333106][ T4578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.346339][ T4578] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.357431][ T28] audit: type=1400 audit(1772892775.864:410): avc: denied { append } for pid=4559 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2402 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.454027][ T28] audit: type=1400 audit(1772892775.904:411): avc: denied { unlink } for pid=4574 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=2402 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.535560][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.677998][ T4599] __nla_validate_parse: 3 callbacks suppressed [ 56.678020][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 56.695049][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.702314][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.805481][ T4607] loop1: detected capacity change from 0 to 512 [ 56.812916][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.833070][ T4607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.852186][ T4607] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.914993][ T4614] netlink: 20 bytes leftover after parsing attributes in process `syz.5.385'. [ 56.924423][ T69] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.953743][ T69] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.015578][ T69] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.046245][ T69] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.094845][ T69] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.128603][ T28] audit: type=1400 audit(1772892776.854:412): avc: denied { sqpoll } for pid=4624 comm="syz.5.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.158853][ T69] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.188173][ T69] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.223197][ T69] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.475352][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.603776][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 57.654970][ T28] audit: type=1400 audit(1772892777.394:413): avc: denied { create } for pid=4677 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.679321][ T4678] bridge0: entered allmulticast mode [ 57.689647][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 57.710520][ T4678] bridge_slave_1: left allmulticast mode [ 57.722452][ T4678] bridge_slave_1: left promiscuous mode [ 57.752582][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.768584][ T4685] loop1: detected capacity change from 0 to 512 [ 57.788603][ T4678] bridge_slave_0: left allmulticast mode [ 57.802010][ T4678] bridge_slave_0: left promiscuous mode [ 57.819012][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.819076][ T4685] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.819373][ T4685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.858663][ T4678] bridge0 (unregistering): left allmulticast mode [ 57.888897][ T4685] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.402: corrupted inode contents [ 57.962804][ T4685] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 57.963034][ T4685] EXT4-fs (loop1): Remounting filesystem read-only [ 57.972247][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.972274][ C0] EXT4-fs (loop1): initial error at time 1772892777: ext4_do_update_inode:5569: inode 16 [ 57.972331][ C0] EXT4-fs (loop1): last error at time 1772892777: ext4_do_update_inode:5569: inode 16 [ 58.017390][ T4685] EXT4-fs (loop1): 1 truncate cleaned up [ 58.027734][ T36] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.047980][ T36] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.076205][ T36] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.103936][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.253905][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.396185][ T4712] syzkaller0: entered promiscuous mode [ 58.419854][ T4712] syzkaller0: entered allmulticast mode [ 58.594759][ T4732] loop4: detected capacity change from 0 to 512 [ 58.731679][ T4732] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.812969][ T4732] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 58.900449][ T4732] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.412: Corrupt directory, running e2fsck is recommended [ 58.919915][ T4747] process 'syz.1.418' launched './file1' with NULL argv: empty string added [ 58.982804][ T4732] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.043731][ T4732] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.412: corrupted in-inode xattr: invalid ea_ino [ 59.131920][ T4732] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.135746][ T4732] EXT4-fs (loop4): Remounting filesystem read-only [ 59.145143][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.145160][ C1] EXT4-fs (loop4): initial error at time 1772892778: ext4_iget_extra_inode:5025: inode 15 [ 59.145190][ C1] EXT4-fs (loop4): last error at time 1772892778: ext4_iget_extra_inode:5025: inode 15 [ 59.189463][ T4760] loop2: detected capacity change from 0 to 512 [ 59.196421][ T4760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.237135][ T4760] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.424: corrupted inode contents [ 59.257594][ T4760] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.257838][ T4760] EXT4-fs (loop2): Remounting filesystem read-only [ 59.274435][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 59.274460][ C1] EXT4-fs (loop2): initial error at time 1772892779: ext4_do_update_inode:5569: inode 15 [ 59.274493][ C1] EXT4-fs (loop2): last error at time 1772892779: ext4_do_update_inode:5569: inode 15 [ 59.398312][ T4732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.427626][ T4760] EXT4-fs (loop2): 1 orphan inode deleted [ 59.433917][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.485017][ T4732] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.533450][ T4732] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.566614][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.614653][ T4732] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.412: Corrupt directory, running e2fsck is recommended [ 59.694747][ T4765] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.775067][ T4765] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.836895][ T4765] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.412: Corrupt directory, running e2fsck is recommended [ 59.889636][ T4771] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.983654][ T4771] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 60.000314][ T4771] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.412: Corrupt directory, running e2fsck is recommended [ 60.041474][ T4732] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.062787][ T4788] syzkaller0: entered promiscuous mode [ 60.076742][ T4788] syzkaller0: entered allmulticast mode [ 60.128868][ T4795] netlink: 'syz.5.437': attribute type 3 has an invalid length. [ 60.137230][ T4795] netlink: 'syz.5.437': attribute type 1 has an invalid length. [ 60.141937][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.167547][ T4795] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.437'. [ 60.298080][ T4808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.442'. [ 60.322453][ T4810] net_ratelimit: 30 callbacks suppressed [ 60.322502][ T4810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.328265][ T4808] unsupported nlmsg_type 40 [ 60.640340][ T4828] syzkaller0: entered promiscuous mode [ 60.645919][ T4828] syzkaller0: entered allmulticast mode [ 60.738876][ T4834] loop4: detected capacity change from 0 to 512 [ 60.747991][ T4834] EXT4-fs error (device loop4): ext4_quota_enable:7192: inode #3: comm syz.4.454: iget: checksum invalid [ 60.759764][ T4834] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74 [ 60.760018][ T4834] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.454: Bad quota inode: 3, type: 0 [ 60.769131][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 60.769156][ C0] EXT4-fs (loop4): initial error at time 1772892780: ext4_quota_enable:7192: inode 3 [ 60.769192][ C0] EXT4-fs (loop4): last error at time 1772892780: ext4_quota_enable:7192: inode 3 [ 60.805488][ T4834] loop4: lost filesystem error report for type 5 error -117 [ 60.805696][ T4834] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 60.828360][ T4834] EXT4-fs (loop4): mount failed [ 60.886918][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 60.886936][ T28] audit: type=1400 audit(1772892780.624:422): avc: denied { ioctl } for pid=4839 comm="syz.2.456" path="socket:[17027]" dev="sockfs" ino=17027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.887731][ T4840] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 61.023477][ T4849] loop2: detected capacity change from 0 to 512 [ 61.046258][ T4849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.071968][ T4849] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.459: bad orphan inode 131083 [ 61.082586][ T4849] loop2: lost filesystem error report for type 5 error -117 [ 61.083210][ T4849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.142390][ T4852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.461'. [ 61.173430][ T4852] geneve2: entered promiscuous mode [ 61.241374][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.407161][ T28] audit: type=1400 audit(1772892781.144:423): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 61.448497][ T4876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 61.466202][ T4876] netlink: 196 bytes leftover after parsing attributes in process `syz.3.472'. [ 61.486717][ T4876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 62.073822][ T4920] __nla_validate_parse: 1 callbacks suppressed [ 62.073885][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 62.094063][ T69] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.104409][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 62.115656][ T69] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.134648][ T69] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.147609][ T69] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.271640][ T4929] loop1: detected capacity change from 0 to 128 [ 62.278445][ T4929] EXT4-fs: Ignoring removed nobh option [ 62.302589][ T4929] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.347555][ T4929] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.390389][ T28] audit: type=1400 audit(1772892782.134:424): avc: denied { read } for pid=4934 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.528351][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.570897][ T28] audit: type=1400 audit(1772892782.314:425): avc: denied { create } for pid=4943 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.628900][ T4948] Unsupported ieee802154 address type: 0 [ 62.632396][ T28] audit: type=1400 audit(1772892782.374:426): avc: denied { bind } for pid=4943 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.723049][ T28] audit: type=1400 audit(1772892782.404:427): avc: denied { write } for pid=4943 comm="syz.1.497" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.769145][ T4952] loop1: detected capacity change from 0 to 128 [ 62.822191][ T4952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.834081][ T28] audit: type=1400 audit(1772892782.554:428): avc: denied { create } for pid=4954 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.856496][ T4952] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.877235][ T28] audit: type=1400 audit(1772892782.614:429): avc: denied { read } for pid=4954 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.904033][ T4961] netlink: 'syz.5.501': attribute type 1 has an invalid length. [ 62.921546][ T28] audit: type=1400 audit(1772892782.644:430): avc: denied { remove_name } for pid=4951 comm="syz.1.499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.934775][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.968401][ T28] audit: type=1400 audit(1772892782.644:431): avc: denied { rename } for pid=4951 comm="syz.1.499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.063254][ T4961] bond1: entered promiscuous mode [ 63.073923][ T4961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.105760][ T4968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.113118][ T4968] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 63.125582][ T4968] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 63.143419][ T4968] bond1: (slave vcan0): making interface the new active one [ 63.152847][ T4968] vcan0: entered promiscuous mode [ 63.160342][ T4968] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 63.395280][ T4985] ipip0: entered promiscuous mode [ 63.850175][ T4994] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 64.143949][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.151386][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.222052][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.238332][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.327809][ T69] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.336746][ T69] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.366612][ T69] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.401108][ T69] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.402834][ T5035] loop1: detected capacity change from 0 to 512 [ 64.475060][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.492568][ T5035] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.505582][ T5035] capability: warning: `syz.1.529' uses deprecated v2 capabilities in a way that may be insecure [ 64.537367][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.577277][ T5041] sock: sock_set_timeout: `syz.4.532' (pid 5041) tries to set negative timeout [ 64.729553][ T5053] loop4: detected capacity change from 0 to 128 [ 64.768513][ T5053] syz.4.538: attempt to access beyond end of device [ 64.768513][ T5053] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 64.828769][ T5053] syz.4.538: attempt to access beyond end of device [ 64.828769][ T5053] loop4: rw=8912896, sector=138, nr_sectors = 2 limit=128 [ 64.859648][ T5059] netlink: 152 bytes leftover after parsing attributes in process `syz.2.539'. [ 64.872464][ T5053] syz.4.538: attempt to access beyond end of device [ 64.872464][ T5053] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 64.897427][ T5053] syz.4.538: attempt to access beyond end of device [ 64.897427][ T5053] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 65.786186][ T5107] batman_adv: batadv0: Adding interface: dummy0 [ 65.792740][ T5107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.818398][ T5107] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 65.985818][ T5113] loop5: detected capacity change from 0 to 8192 [ 66.084188][ T5118] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 66.093081][ T5118] FAT-fs (loop5): Filesystem has been set read-only [ 66.100218][ T5118] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 66.108485][ T5118] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 66.874324][ T5134] loop2: detected capacity change from 0 to 256 [ 66.983225][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 66.983240][ T28] audit: type=1400 audit(1772892786.724:446): avc: denied { mount } for pid=5154 comm="syz.3.580" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 67.039142][ T5157] loop1: detected capacity change from 0 to 512 [ 67.076307][ T5157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.113699][ T5157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.147019][ T5157] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.416092][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.450403][ T5169] bond0: (slave bond_slave_0): Releasing backup interface [ 67.467733][ T28] audit: type=1326 audit(1772892787.204:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.5.578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e6cc799 code=0x0 [ 67.492457][ T5169] bond0: (slave bond_slave_1): Releasing backup interface [ 67.516363][ T5169] team0: Port device team_slave_0 removed [ 67.516628][ T5100] loop4: detected capacity change from 0 to 2041 [ 67.541095][ T5169] team0: Port device team_slave_1 removed [ 67.559316][ T5169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.572461][ T3930] Alternate GPT is invalid, using primary GPT. [ 67.579060][ T3930] loop4: p2 p3 p7 [ 67.636007][ T5169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.678477][ T5100] Alternate GPT is invalid, using primary GPT. [ 67.689675][ T5100] loop4: p2 p3 p7 [ 67.864669][ T28] audit: type=1400 audit(1772892787.604:448): avc: denied { bind } for pid=5176 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.886290][ T28] audit: type=1400 audit(1772892787.604:449): avc: denied { append } for pid=5176 comm="syz.5.587" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.974927][ T28] audit: type=1400 audit(1772892787.634:450): avc: denied { ioctl } for pid=5176 comm="syz.5.587" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.000111][ T28] audit: type=1400 audit(1772892787.634:451): avc: denied { ioctl } for pid=5176 comm="syz.5.587" path="socket:[21837]" dev="sockfs" ino=21837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.374735][ T28] audit: type=1400 audit(1772892788.114:452): avc: denied { read } for pid=5189 comm="syz.5.594" path="socket:[22752]" dev="sockfs" ino=22752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.572803][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 68.679584][ T5203] Illegal XDP return value 514 on prog (id 129) dev syzkaller1, expect packet loss! [ 69.165478][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 69.415902][ T5218] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 69.430107][ T5218] bond1: entered promiscuous mode [ 69.435611][ T5218] bond1: entered allmulticast mode [ 69.440997][ T5218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.458575][ T5218] erspan1: entered allmulticast mode [ 69.470428][ T5218] bond1: (slave erspan1): making interface the new active one [ 69.502402][ T5218] erspan1: entered promiscuous mode [ 69.517395][ T5218] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 69.611009][ T5218] syz.3.605 (5218) used greatest stack depth: 9840 bytes left [ 69.656938][ T3302] Process accounting resumed [ 69.663004][ T28] audit: type=1400 audit(1772892789.404:453): avc: denied { execute_no_trans } for pid=5213 comm="syz.2.604" path="/121/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.485363][ T5264] loop5: detected capacity change from 0 to 512 [ 71.538187][ T5264] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.573103][ T5264] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 2: comm syz.5.622: invalid block [ 71.598804][ T28] audit: type=1400 audit(1772892791.334:454): avc: denied { create } for pid=5267 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.620066][ T5268] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.629869][ T5264] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.632300][ T5264] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.622: couldn't read orphan inode 11 (err -117) [ 71.641660][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 71.641682][ C1] EXT4-fs (loop5): initial error at time 1772892791: __ext4_iget:5378: inode 11: block 2 [ 71.641744][ C1] EXT4-fs (loop5): last error at time 1772892791: __ext4_iget:5378: inode 11: block 2 [ 71.685197][ T28] audit: type=1400 audit(1772892791.344:455): avc: denied { write } for pid=5267 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.709738][ T5268] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.712482][ T5269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.623'. [ 71.752797][ T5269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.796114][ T5264] loop5: lost filesystem error report for type 5 error -117 [ 71.796571][ T5269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.818133][ T5269] bond0 (unregistering): Released all slaves [ 71.837849][ T3302] syz1: Port: 1 Link DOWN [ 71.866543][ T5264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.112936][ T3869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.127102][ T5291] loop4: detected capacity change from 0 to 512 [ 72.164767][ T5291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.197681][ T5291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 72.206203][ T5291] System zones: 1-12 [ 72.222734][ T5291] EXT4-fs (loop4): 1 truncate cleaned up [ 72.238104][ T5291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.270158][ T5298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5298 comm=syz.5.633 [ 72.319411][ T5298] netlink: 'syz.5.633': attribute type 5 has an invalid length. [ 72.363146][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.407151][ T5305] loop4: detected capacity change from 0 to 512 [ 72.450482][ T5307] loop5: detected capacity change from 0 to 1024 [ 72.479444][ T5305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.502846][ T5305] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.538691][ T5307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.587131][ T28] audit: type=1400 audit(1772892792.324:456): avc: denied { remount } for pid=5306 comm="syz.5.637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.622449][ T5307] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.652108][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.669288][ T3869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.718383][ T5328] syz_tun: entered allmulticast mode [ 72.795470][ T5333] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 72.836788][ T5333] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 72.881922][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'. [ 73.109882][ T5354] loop5: detected capacity change from 0 to 4096 [ 73.148053][ T5354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 73.166310][ T5354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.199368][ T5327] syz_tun: left allmulticast mode [ 73.254055][ T28] audit: type=1400 audit(1772892792.994:457): avc: denied { mounton } for pid=5352 comm="syz.5.653" path="/90/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.305417][ T28] audit: type=1400 audit(1772892793.044:458): avc: denied { rmdir } for pid=3869 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.331344][ T28] audit: type=1400 audit(1772892793.074:459): avc: denied { unlink } for pid=3869 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.354273][ T28] audit: type=1400 audit(1772892793.074:460): avc: denied { unlink } for pid=3869 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.431628][ T3869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.512370][ T5374] netlink: 'syz.3.664': attribute type 83 has an invalid length. [ 73.624057][ T1677] bridge_slave_1: left allmulticast mode [ 73.636374][ T1677] bridge_slave_1: left promiscuous mode [ 73.651113][ T1677] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.660169][ T1677] bridge_slave_0: left allmulticast mode [ 73.666001][ T1677] bridge_slave_0: left promiscuous mode [ 73.671978][ T1677] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.752291][ T1677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.777803][ T1677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.793425][ T1677] bond0 (unregistering): Released all slaves [ 73.811993][ T1677] bond1 (unregistering): (slave vcan0): Releasing backup interface [ 73.826073][ T1677] vcan0: left promiscuous mode [ 73.831542][ T1677] bond1 (unregistering): Released all slaves [ 73.879944][ T1677] hsr_slave_0: left promiscuous mode [ 73.887700][ T1677] hsr_slave_1: left promiscuous mode [ 73.895627][ T1677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.903579][ T1677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.911595][ T1677] batman_adv: batadv0: Removing interface: dummy0 [ 73.956493][ T1677] team0 (unregistering): Port device team_slave_1 removed [ 73.971449][ T1677] team0 (unregistering): Port device team_slave_0 removed [ 74.075102][ T5411] loop1: detected capacity change from 0 to 8192 [ 74.110242][ T5411] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.139958][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 74.176925][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.234757][ T5411] FAT-fs (loop1): Filesystem has been set read-only [ 74.235096][ T5427] syzkaller1: entered promiscuous mode [ 74.241841][ T28] audit: type=1326 audit(1772892793.974:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 74.267708][ T5427] syzkaller1: entered allmulticast mode [ 74.278377][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.287258][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.307626][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.316457][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.334251][ T28] audit: type=1326 audit(1772892793.974:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 74.346264][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.363569][ T28] audit: type=1326 audit(1772892793.994:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9b0589cfce code=0x7ffc0000 [ 74.397618][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.416099][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.425395][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.438153][ T5411] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.499512][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.523144][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.534255][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.577661][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.585464][ T28] audit: type=1326 audit(1772892793.974:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 74.627775][ T5375] bridge_slave_0: entered allmulticast mode [ 74.648225][ T5375] bridge_slave_0: entered promiscuous mode [ 74.669006][ T28] audit: type=1326 audit(1772892793.994:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 74.889425][ T5455] mmap: syz.2.679 (5455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.493895][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.501199][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.508634][ T5375] bridge_slave_1: entered allmulticast mode [ 75.515303][ T5375] bridge_slave_1: entered promiscuous mode [ 75.545560][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.567199][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.592987][ T5375] team0: Port device team_slave_0 added [ 75.603216][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 75.613630][ T5375] team0: Port device team_slave_1 added [ 75.648234][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.657970][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 75.670467][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.718179][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.754991][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.762535][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.822756][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.890307][ T5375] hsr_slave_0: entered promiscuous mode [ 75.896692][ T5375] hsr_slave_1: entered promiscuous mode [ 75.904302][ T5375] debugfs: 'hsr0' already exists in 'hsr' [ 75.916770][ T5375] Cannot create hsr debugfs directory [ 76.089393][ T5510] netlink: 'syz.4.692': attribute type 4 has an invalid length. [ 76.119464][ T5375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.150982][ T5375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.192834][ T5375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.240651][ T5375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.302389][ T5527] xt_hashlimit: size too large, truncated to 1048576 [ 76.589220][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.619083][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.658802][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.666060][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.684359][ T5556] loop2: detected capacity change from 0 to 7 [ 76.693603][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.700754][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.863219][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.284374][ T5375] veth0_vlan: entered promiscuous mode [ 77.300219][ T5375] veth1_vlan: entered promiscuous mode [ 77.368006][ T5375] veth0_macvtap: entered promiscuous mode [ 77.701991][ T5375] veth1_macvtap: entered promiscuous mode [ 77.715519][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.727066][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.800885][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.829009][ T953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.847047][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.872273][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.980443][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 77.980458][ T28] audit: type=1400 audit(1772892797.724:488): avc: denied { mounton } for pid=5375 comm="syz-executor" path="/root/syzkaller.Lrbxfl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.269053][ T28] audit: type=1400 audit(1772892797.984:489): avc: denied { mount } for pid=5375 comm="syz-executor" name="/" dev="gadgetfs" ino=4576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.428354][ T28] audit: type=1400 audit(1772892798.174:490): avc: denied { setopt } for pid=5598 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.499594][ T5608] loop4: detected capacity change from 0 to 256 [ 78.558603][ T5608] FAT-fs (loop4): Directory bread(block 64) failed [ 78.571928][ T5610] syzkaller1: entered promiscuous mode [ 78.579113][ T5610] syzkaller1: entered allmulticast mode [ 78.597667][ T5608] FAT-fs (loop4): Directory bread(block 65) failed [ 78.615950][ T5608] FAT-fs (loop4): Directory bread(block 66) failed [ 78.632737][ T5608] FAT-fs (loop4): Directory bread(block 67) failed [ 78.640347][ T5608] FAT-fs (loop4): Directory bread(block 68) failed [ 78.647311][ T5608] FAT-fs (loop4): Directory bread(block 69) failed [ 78.709325][ T5608] FAT-fs (loop4): Directory bread(block 70) failed [ 78.728009][ T5608] FAT-fs (loop4): Directory bread(block 71) failed [ 78.757581][ T5608] FAT-fs (loop4): Directory bread(block 72) failed [ 78.757718][ T5608] FAT-fs (loop4): Directory bread(block 73) failed [ 78.918859][ T28] audit: type=1400 audit(1772892798.664:491): avc: denied { ioctl } for pid=5622 comm="syz.1.717" path="socket:[27706]" dev="sockfs" ino=27706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.953114][ T5631] loop4: detected capacity change from 0 to 256 [ 78.964090][ T5631] msdos: Bad value for 'dmask' [ 79.015351][ T28] audit: type=1400 audit(1772892798.694:492): avc: denied { ioctl } for pid=5627 comm="syz.3.720" path="socket:[27595]" dev="sockfs" ino=27595 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.121679][ T5644] loop4: detected capacity change from 0 to 128 [ 79.413234][ T5656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 79.973149][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 80.105375][ T5667] loop4: detected capacity change from 0 to 1024 [ 80.225843][ T5667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 80.258140][ T5667] System zones: 0-1, 3-36 [ 80.287024][ T5667] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.734: bad orphan inode 134217728 [ 80.300910][ T5667] loop4: lost filesystem error report for type 5 error -117 [ 80.305172][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.547573][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.563736][ T5704] loop1: detected capacity change from 0 to 2048 [ 80.590778][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.794654][ T30] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 80.836530][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 428 with error 28 [ 80.859498][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.859498][ T30] [ 80.878154][ T30] EXT4-fs (loop1): Total free blocks count 0 [ 80.904864][ T30] EXT4-fs (loop1): Free/Dirty block details [ 80.925396][ T30] EXT4-fs (loop1): free_blocks=2415919504 [ 80.940351][ T5724] loop4: detected capacity change from 0 to 512 [ 80.951098][ T30] EXT4-fs (loop1): dirty_blocks=432 [ 80.958289][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 80.975685][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 80.984732][ T5724] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.750: invalid indirect mapped block 256 (level 2) [ 80.984768][ T5724] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.984903][ T30] EXT4-fs (loop1): Block reservation details [ 80.984920][ T30] EXT4-fs (loop1): i_reserved_data_blocks=27 [ 80.998130][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 80.998148][ C0] EXT4-fs (loop4): initial error at time 1772892800: ext4_free_branches:1023: inode 11 [ 80.998179][ C0] EXT4-fs (loop4): last error at time 1772892800: ext4_free_branches:1023: inode 11 [ 81.056278][ T5724] EXT4-fs (loop4): Remounting filesystem read-only [ 81.068922][ T5724] EXT4-fs (loop4): 2 truncates cleaned up [ 81.098242][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.127141][ T28] audit: type=1400 audit(1772892800.864:493): avc: denied { read write } for pid=5723 comm="syz.4.750" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.175881][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.195366][ T28] audit: type=1400 audit(1772892800.864:494): avc: denied { open } for pid=5723 comm="syz.4.750" path="/165/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.279857][ T28] audit: type=1326 audit(1772892800.864:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 81.510924][ T28] audit: type=1326 audit(1772892800.864:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b058dc799 code=0x7ffc0000 [ 81.590143][ T5759] loop2: detected capacity change from 0 to 512 [ 81.596834][ T5759] EXT4-fs: Ignoring removed orlov option [ 81.602934][ T28] audit: type=1326 audit(1772892800.904:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.4.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b0589cfce code=0x7ffc0000 [ 81.639368][ T5759] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.676302][ T5759] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.763: corrupted in-inode xattr: e_value size too large [ 81.697621][ T5759] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.699606][ T5759] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.763: couldn't read orphan inode 15 (err -117) [ 81.709037][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.709063][ C0] EXT4-fs (loop2): initial error at time 1772892801: ext4_iget_extra_inode:5025: inode 15 [ 81.709095][ C0] EXT4-fs (loop2): last error at time 1772892801: ext4_iget_extra_inode:5025: inode 15 [ 81.761048][ T5759] loop2: lost filesystem error report for type 5 error -117 [ 81.761930][ T5759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.864509][ T5724] syz.4.750 (5724) used greatest stack depth: 9336 bytes left [ 82.003057][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.012979][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.075062][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 83.075080][ T28] audit: type=1400 audit(1772892802.814:511): avc: denied { setopt } for pid=5824 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.142167][ T5830] loop4: detected capacity change from 0 to 1024 [ 83.204091][ T5830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.296557][ T5830] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.388511][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.502185][ T28] audit: type=1400 audit(1772892803.244:512): avc: denied { ioctl } for pid=5847 comm="syz.4.794" path="socket:[28874]" dev="sockfs" ino=28874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.529882][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 83.578999][ T28] audit: type=1400 audit(1772892803.284:513): avc: denied { getopt } for pid=5852 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.630830][ T28] audit: type=1400 audit(1772892803.374:514): avc: denied { bind } for pid=5856 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.647944][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 83.992153][ T5878] loop6: detected capacity change from 0 to 1024 [ 84.043511][ T5878] EXT4-fs: Ignoring removed orlov option [ 84.079966][ T5878] EXT4-fs: Ignoring removed nobh option [ 84.112680][ T5878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.156876][ T5375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.764813][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 84.874229][ T5894] loop2: detected capacity change from 0 to 512 [ 84.902972][ T5894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.941122][ T5894] EXT4-fs (loop2): 1 truncate cleaned up [ 84.958250][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.990906][ T5894] EXT4-fs (loop2): shut down requested (0) [ 85.010893][ T5894] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 85.060859][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.795227][ T5930] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.828'. [ 86.360845][ T28] audit: type=1400 audit(1772892806.104:515): avc: denied { mount } for pid=5947 comm="syz.1.835" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 86.417066][ T5962] loop1: detected capacity change from 0 to 128 [ 86.469854][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.837'. [ 86.668031][ T5962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.687775][ T5962] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.704582][ T28] audit: type=1400 audit(1772892806.434:516): avc: denied { mount } for pid=5973 comm="syz.3.841" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.733682][ T28] audit: type=1400 audit(1772892806.434:517): avc: denied { watch watch_reads } for pid=5973 comm="syz.3.841" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 86.818403][ T28] audit: type=1400 audit(1772892806.564:518): avc: denied { execute } for pid=5980 comm="syz.3.843" dev="hugetlbfs" ino=28221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.857617][ T28] audit: type=1400 audit(1772892806.564:519): avc: denied { execute_no_trans } for pid=5980 comm="syz.3.843" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=28221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.983564][ T5989] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 87.020640][ T5989] netlink: 55 bytes leftover after parsing attributes in process `syz.3.847'. [ 87.118038][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.208998][ T28] audit: type=1400 audit(1772892806.944:520): avc: denied { setopt } for pid=6011 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.218880][ T6014] loop1: detected capacity change from 0 to 512 [ 87.271848][ T6014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.322784][ T6024] netlink: 60 bytes leftover after parsing attributes in process `syz.6.857'. [ 87.336461][ T6014] EXT4-fs (loop1): 1 orphan inode deleted [ 87.377695][ T6014] EXT4-fs (loop1): 1 truncate cleaned up [ 87.402085][ T6014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.461495][ T6014] EXT4-fs (loop1): shut down requested (1) [ 87.486453][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.521548][ T6045] loop4: detected capacity change from 0 to 1024 [ 87.542609][ T6045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 87.587581][ T6045] System zones: 0-1, 3-36 [ 87.597784][ T6045] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.863: bad orphan inode 134217728 [ 87.617855][ T6045] loop4: lost filesystem error report for type 5 error -117 [ 87.618363][ T6045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.919075][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.442365][ T6087] team0: Port device gtp1 added [ 89.210346][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 89.210429][ T28] audit: type=1400 audit(1772892808.954:524): avc: denied { read } for pid=6131 comm="syz.4.884" path="socket:[29288]" dev="sockfs" ino=29288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.418253][ T6148] loop1: detected capacity change from 0 to 1024 [ 89.454911][ T6148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.537848][ T6163] syz_tun: entered allmulticast mode [ 89.554231][ T6162] syz_tun: left allmulticast mode [ 89.849906][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.897625][ T6177] sctp: [Deprecated]: syz.4.901 (pid 6177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.897625][ T6177] Use struct sctp_sack_info instead [ 90.465931][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 90.542640][ T6199] loop1: detected capacity change from 0 to 8192 [ 90.639984][ T6191] loop2: detected capacity change from 0 to 1024 [ 90.675639][ T28] audit: type=1400 audit(1772892810.414:525): avc: denied { shutdown } for pid=6206 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.699522][ T6191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.733110][ T6191] System zones: 0-1, 3-36 [ 90.778108][ T6191] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.906: bad orphan inode 134217728 [ 90.797763][ T6191] loop2: lost filesystem error report for type 5 error -117 [ 90.817384][ T35] IPVS: starting estimator thread 0... [ 90.867965][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.947549][ T6219] IPVS: using max 2304 ests per chain, 115200 per kthread [ 90.978779][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.147672][ T28] audit: type=1400 audit(1772892810.884:526): avc: denied { unmount } for pid=6241 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.378113][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 91.619619][ T6269] loop2: detected capacity change from 0 to 512 [ 91.652514][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.727181][ T6269] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.849238][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.127700][ T28] audit: type=1400 audit(1772892811.864:527): avc: denied { listen } for pid=6286 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.059863][ T28] audit: type=1400 audit(1772892812.804:528): avc: denied { mount } for pid=6313 comm="syz.6.956" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.054403][ T6332] netlink: 'syz.6.971': attribute type 4 has an invalid length. [ 94.097444][ T6332] netlink: 'syz.6.971': attribute type 4 has an invalid length. [ 94.994272][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.001679][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.043483][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 95.073330][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.082999][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.091580][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.099845][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.107799][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.108295][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.122091][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.124057][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.139748][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.148279][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.156418][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.164239][ T3400] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 95.175752][ T3400] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 95.207797][ T6353] fido_id[6353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.251127][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 95.264635][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 95.335724][ T1677] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.346680][ T1677] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.367835][ T1677] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.379392][ T1677] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.489332][ T6366] loop1: detected capacity change from 0 to 512 [ 95.496111][ T6366] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.586263][ T6366] EXT4-fs: Mount option(s) incompatible with ext3 [ 96.223941][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 96.384990][ T6406] loop4: detected capacity change from 0 to 1024 [ 96.415393][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.484560][ T6382] loop6: detected capacity change from 0 to 2048 [ 96.552301][ T6382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.583577][ T6382] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.692629][ T28] audit: type=1400 audit(1772892816.434:529): avc: denied { read } for pid=6411 comm="syz.1.989" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.750595][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.769981][ T28] audit: type=1400 audit(1772892816.434:530): avc: denied { open } for pid=6411 comm="syz.1.989" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.819632][ T6421] loop1: detected capacity change from 0 to 128 [ 96.832974][ T6422] loop4: detected capacity change from 0 to 512 [ 96.844208][ T6421] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.862114][ T6421] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.877323][ T6422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.887296][ T28] audit: type=1400 audit(1772892816.614:531): avc: denied { create } for pid=6420 comm="syz.1.992" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.910453][ T28] audit: type=1400 audit(1772892816.654:532): avc: denied { add_name } for pid=6420 comm="syz.1.992" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.957639][ T6422] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.990: bad orphan inode 131083 [ 96.987453][ T953] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 96.990970][ T6422] loop4: lost filesystem error report for type 5 error -117 [ 97.003191][ T953] EXT4-fs (loop6): Remounting filesystem read-only [ 97.007595][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.013040][ T6422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.017097][ C1] EXT4-fs (loop4): initial error at time 1772892816: ext4_orphan_get:1417 [ 97.026302][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.035583][ C1] [ 97.035591][ C1] EXT4-fs (loop4): last error at time 1772892816: ext4_orphan_get:1417 [ 97.062665][ T5375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.108083][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.723967][ T6449] loop6: detected capacity change from 0 to 1024 [ 97.760858][ T6449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.111072][ T5375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.211632][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.268810][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'. [ 98.574064][ T6477] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 98.624822][ T6480] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 98.636777][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.649168][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.720241][ T6457] geneve2: entered promiscuous mode [ 98.808886][ T953] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.838808][ T953] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.857951][ T6487] netlink: 'syz.3.1016': attribute type 3 has an invalid length. [ 98.866027][ T6487] netlink: 'syz.3.1016': attribute type 3 has an invalid length. [ 98.882773][ T28] audit: type=1326 audit(1772892818.624:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.1.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x0 [ 98.922834][ T953] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.943660][ T953] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.963570][ T953] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51883 - 0 [ 98.979615][ T28] audit: type=1400 audit(1772892818.724:534): avc: denied { map } for pid=6502 comm="syz.2.1024" path="socket:[30811]" dev="sockfs" ino=30811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.001735][ T6505] loop4: detected capacity change from 0 to 2048 [ 99.013079][ T953] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51883 - 0 [ 99.047676][ T953] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51883 - 0 [ 99.056564][ T953] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 51883 - 0 [ 99.074077][ T6505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.100690][ T28] audit: type=1400 audit(1772892818.724:535): avc: denied { read } for pid=6502 comm="syz.2.1024" path="socket:[30811]" dev="sockfs" ino=30811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.138822][ T28] audit: type=1400 audit(1772892818.874:536): avc: denied { mounton } for pid=6503 comm="syz.4.1023" path="/210/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.182445][ T6518] loop2: detected capacity change from 0 to 764 [ 99.259000][ T28] audit: type=1400 audit(1772892819.004:537): avc: denied { unlink } for pid=6503 comm="syz.4.1023" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.282857][ T6518] iso9660: Unknown parameter 'iocharsturkish' [ 99.506146][ T6518] netlink: 'syz.2.1028': attribute type 58 has an invalid length. [ 99.597627][ T6505] loop4: detected capacity change from 2048 to 0 [ 99.607821][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'. [ 99.621512][ C1] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 99.631595][ T6519] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.1023: reading directory lblock 0 [ 99.669932][ T6519] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 99.697749][ T6519] EXT4-fs (loop4): I/O error while writing superblock [ 99.757887][ T3321] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #2: block 4: comm syz-executor: unable to read itable block [ 99.776705][ T3321] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 99.785467][ T3321] EXT4-fs (loop4): I/O error while writing superblock [ 99.792660][ T3321] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: IO failure [ 99.801801][ T3321] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 99.811057][ T3321] EXT4-fs (loop4): I/O error while writing superblock [ 99.817956][ T3321] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 99.829695][ T3321] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 99.838243][ T3321] EXT4-fs (loop4): I/O error while writing superblock [ 99.957646][ T6514] EXT4-fs error (device loop4): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 99.988897][ T6514] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 100.018313][ T6514] EXT4-fs (loop4): I/O error while writing superblock [ 100.168219][ T6531] ref_ctr increment failed for inode: 0x3e7 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a726540 [ 100.200750][ T6530] uprobe: syz.1.1033:6530 failed to unregister, leaking uprobe [ 100.343578][ T36] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4905: inode #2: block 4: comm kworker/u8:2: unable to read itable block [ 100.359274][ T36] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 100.369012][ T36] EXT4-fs (loop4): I/O error while writing superblock [ 100.369130][ T6535] netlink: 'syz.1.1035': attribute type 4 has an invalid length. [ 100.377087][ T4220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.393946][ T4220] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 100.402324][ T4220] EXT4-fs (loop4): I/O error while writing superblock [ 100.409444][ T6512] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 100.421502][ T6536] netlink: 'syz.1.1035': attribute type 4 has an invalid length. [ 100.478627][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.486002][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.568381][ T953] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.577372][ T953] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 51883 - 0 [ 100.615984][ T953] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.625320][ T953] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 51883 - 0 [ 100.659376][ T953] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.679479][ T953] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 51883 - 0 [ 100.752366][ T953] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.786187][ T953] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 51883 - 0 [ 100.863309][ T28] audit: type=1400 audit(1772892820.604:538): avc: denied { setopt } for pid=6545 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.053323][ T36] bridge_slave_1: left allmulticast mode [ 101.065890][ T6553] loop2: detected capacity change from 0 to 512 [ 101.082475][ T36] bridge_slave_1: left promiscuous mode [ 101.098220][ T6553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.109480][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.120757][ T6553] EXT4-fs (loop2): 1 truncate cleaned up [ 101.127054][ T6553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.170370][ T36] bridge_slave_0: left allmulticast mode [ 101.176168][ T36] bridge_slave_0: left promiscuous mode [ 101.182667][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.370843][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.373558][ T6562] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 101.423746][ T6566] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 101.520466][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.529881][ T6569] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 101.549194][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.579810][ T36] bond0 (unregistering): Released all slaves [ 101.628220][ T6567] geneve2: left promiscuous mode [ 101.663130][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.735969][ T6571] bond1: (slave veth5): Enslaving as an active interface with a down link [ 101.827967][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.835330][ T6575] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 101.917893][ T36] hsr_slave_0: left promiscuous mode [ 101.927027][ T36] hsr_slave_1: left promiscuous mode [ 101.973334][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.096543][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.340001][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 102.340019][ T28] audit: type=1326 audit(1772892822.074:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.390097][ T28] audit: type=1326 audit(1772892822.074:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.423959][ T28] audit: type=1326 audit(1772892822.084:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.457799][ T28] audit: type=1326 audit(1772892822.084:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.499154][ T28] audit: type=1326 audit(1772892822.084:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.586245][ T28] audit: type=1326 audit(1772892822.124:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.611411][ T36] team0 (unregistering): Port device team_slave_1 removed [ 102.621638][ T36] team0 (unregistering): Port device team_slave_0 removed [ 102.652273][ T28] audit: type=1326 audit(1772892822.124:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.690337][ T28] audit: type=1326 audit(1772892822.124:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.724495][ T28] audit: type=1326 audit(1772892822.124:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.810740][ T28] audit: type=1326 audit(1772892822.124:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.6.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff33b91c799 code=0x7ffc0000 [ 102.848607][ T6611] loop1: detected capacity change from 0 to 512 [ 102.857805][ T6611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.887865][ T6613] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 102.907602][ T6611] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.940270][ T6611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 102.956295][ T6613] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.985366][ T6611] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.000700][ T6611] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.025699][ T6613] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 103.037578][ T6611] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 103.044494][ T6613] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 103.054413][ T6611] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 103.069084][ T6611] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1054: corrupted inode contents [ 103.081013][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 103.081038][ C0] EXT4-fs (loop1): initial error at time 1772892822: mb_free_blocks:2047: inode 12: block 14 [ 103.081080][ C0] EXT4-fs (loop1): last error at time 1772892822: mb_free_blocks:2047: inode 12: block 14 [ 103.108128][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.108336][ T6611] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #12: comm syz.1.1054: mark_inode_dirty error [ 103.136001][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.136213][ T6611] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1054: corrupted inode contents [ 103.176005][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 103.177862][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.183030][ T6611] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.1054: mark_inode_dirty error [ 103.207517][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.207736][ T6611] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1054: corrupted inode contents [ 103.244395][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.244628][ T6611] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 103.277510][ T6611] loop1: lost filesystem error report for type 5 error -117 [ 103.277685][ T6611] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1054: corrupted inode contents [ 103.303439][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.303730][ T6611] EXT4-fs error (device loop1): ext4_truncate:4587: inode #12: comm syz.1.1054: mark_inode_dirty error [ 103.331878][ T6611] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 103.332918][ T6611] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 103.405109][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.417516][ T6611] loop1: lost filesystem error report for type 5 error -117 [ 103.423130][ T6611] EXT4-fs (loop1): 1 truncate cleaned up [ 103.443109][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.450637][ T6611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.472985][ T6548] bridge_slave_0: entered allmulticast mode [ 103.497554][ T6548] bridge_slave_0: entered promiscuous mode [ 103.518685][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.536129][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.546384][ T6548] bridge_slave_1: entered allmulticast mode [ 103.556942][ T6548] bridge_slave_1: entered promiscuous mode [ 103.581492][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.592065][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.613652][ T6548] team0: Port device team_slave_0 added [ 103.620600][ T6548] team0: Port device team_slave_1 added [ 103.638209][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.645298][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.672916][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.684473][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.691664][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.718075][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.747085][ T6548] hsr_slave_0: entered promiscuous mode [ 103.753438][ T6548] hsr_slave_1: entered promiscuous mode [ 103.760139][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 103.766071][ T6548] Cannot create hsr debugfs directory [ 103.795929][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.968258][ T6653] wireguard0: entered promiscuous mode [ 103.987073][ T6653] wireguard0: entered allmulticast mode [ 104.288632][ T6548] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.308295][ T6548] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.328822][ T6666] chnl_net:caif_netlink_parms(): no params data found [ 104.339098][ T6548] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.352373][ T6548] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.487668][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.495499][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.503311][ T6666] bridge_slave_0: entered allmulticast mode [ 104.510334][ T6666] bridge_slave_0: entered promiscuous mode [ 104.528994][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.536463][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.544275][ T6666] bridge_slave_1: entered allmulticast mode [ 104.551738][ T6666] bridge_slave_1: entered promiscuous mode [ 104.566654][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.589539][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.603577][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.629220][ T6666] team0: Port device team_slave_0 added [ 104.638947][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.647987][ T6666] team0: Port device team_slave_1 added [ 104.673731][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.680830][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.711478][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.728544][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.757956][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.778449][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.798709][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.825617][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.846709][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.853940][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.868583][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1066'. [ 104.885080][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.895741][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.949257][ T6666] hsr_slave_0: entered promiscuous mode [ 104.956848][ T6666] hsr_slave_1: entered promiscuous mode [ 104.963298][ T6666] debugfs: 'hsr0' already exists in 'hsr' [ 104.969361][ T6666] Cannot create hsr debugfs directory [ 104.975330][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 105.061302][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.250269][ T6662] Set syz1 is full, maxelem 65536 reached [ 105.398885][ T6666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.691419][ T6666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.724532][ T6548] veth0_vlan: entered promiscuous mode [ 105.741137][ T6666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.750655][ T6666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 105.812754][ T6548] veth1_vlan: entered promiscuous mode [ 105.857399][ T6548] veth0_macvtap: entered promiscuous mode [ 105.885369][ T6548] veth1_macvtap: entered promiscuous mode [ 105.931472][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.964236][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.976610][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.003596][ T115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.022548][ T115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.050161][ T115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.084402][ T115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.106497][ T6786] loop2: detected capacity change from 0 to 512 [ 106.128480][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.138263][ T6789] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=6789 comm=syz.1.1086 [ 106.143538][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.157845][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.166967][ T6786] EXT4-fs: Ignoring removed bh option [ 106.192550][ T6666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.205141][ T6786] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 106.230507][ T6666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.237113][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1040'. [ 106.252057][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.259366][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.317143][ T6786] EXT4-fs (loop2): 1 truncate cleaned up [ 106.328502][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.343876][ T6804] io-wq is not configured for unbound workers [ 106.400884][ T6810] loop7: detected capacity change from 0 to 512 [ 106.431823][ T6810] EXT4-fs: Ignoring removed i_version option [ 106.432252][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.475378][ T6810] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 106.494540][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.503079][ T6810] EXT4-fs (loop7): 1 truncate cleaned up [ 106.510121][ T6810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.542671][ T6548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.683638][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1098'. [ 106.772311][ T6666] veth0_vlan: entered promiscuous mode [ 107.239759][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.359204][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'. [ 107.618539][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.628116][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.668910][ T6666] veth1_vlan: entered promiscuous mode [ 107.687212][ T953] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.711083][ T953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.721732][ T953] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.731415][ T953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.741978][ T953] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.750960][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1108'. [ 107.760708][ T953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.771840][ T6869] netlink: 'syz.2.1109': attribute type 29 has an invalid length. [ 107.780283][ T953] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.789480][ T953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.799439][ T6869] netlink: 'syz.2.1109': attribute type 29 has an invalid length. [ 107.823302][ T6869] netlink: 'syz.2.1109': attribute type 29 has an invalid length. [ 107.858392][ T6666] veth0_macvtap: entered promiscuous mode [ 107.875785][ T6666] veth1_macvtap: entered promiscuous mode [ 107.901614][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.928763][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.941949][ T1677] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.959898][ T6883] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 107.970111][ T1677] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.979721][ T1677] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.989319][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 108.000761][ T6883] bond0: entered promiscuous mode [ 108.006017][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.019864][ T1677] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.035266][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 108.044739][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 108.071597][ T6883] bond0: (slave bridge2): making interface the new active one [ 108.079301][ T6883] bridge2: entered promiscuous mode [ 108.086194][ T6883] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 108.190114][ T6895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.203945][ T6893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 108.210593][ T6893] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.219461][ T6893] vhci_hcd vhci_hcd.0: Device attached [ 108.227875][ T6897] vhci_hcd: connection closed [ 108.236590][ T69] vhci_hcd vhci_hcd.2: stop threads [ 108.248003][ T69] vhci_hcd vhci_hcd.2: release socket [ 108.253559][ T69] vhci_hcd vhci_hcd.2: disconnect device [ 108.255740][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 108.255782][ T28] audit: type=1400 audit(1772892827.994:581): avc: denied { mounton } for pid=6901 comm="syz.3.1120" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.401445][ T6915] xt_l2tp: unknown flags: 10 [ 108.653613][ T28] audit: type=1326 audit(1772892828.394:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.677515][ T28] audit: type=1326 audit(1772892828.394:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.701876][ T28] audit: type=1326 audit(1772892828.394:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.727488][ T28] audit: type=1326 audit(1772892828.394:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.769345][ T28] audit: type=1326 audit(1772892828.394:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.793180][ T28] audit: type=1326 audit(1772892828.474:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac619c799 code=0x7ffc0000 [ 108.828331][ T28] audit: type=1326 audit(1772892828.474:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcac619c502 code=0x7ffc0000 [ 108.854667][ T6895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.866650][ T28] audit: type=1326 audit(1772892828.474:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcac619c597 code=0x7ffc0000 [ 108.893041][ T28] audit: type=1326 audit(1772892828.474:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcac6159491 code=0x7ffc0000 [ 109.449652][ T6895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.504095][ T6957] loop7: detected capacity change from 0 to 1024 [ 109.545909][ T6957] EXT4-fs: Ignoring removed orlov option [ 109.572785][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'. [ 109.588745][ T6957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.673835][ T6548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.780964][ T6895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.882145][ T6999] loop7: detected capacity change from 0 to 1024 [ 109.898055][ T6999] EXT4-fs: Ignoring removed bh option [ 109.903491][ T6999] EXT4-fs: Ignoring removed oldalloc option [ 109.955958][ T6999] EXT4-fs: Ignoring removed nobh option [ 109.982127][ T6999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.039247][ T7006] __nla_validate_parse: 1 callbacks suppressed [ 110.039310][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 110.045040][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.081033][ T1677] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.093623][ T69] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.118945][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.354012][ T7007] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1156: Allocating blocks 497-513 which overlap fs metadata [ 110.379046][ T7007] EXT4-fs (loop7): pa ffff888107a608c0: logic 256, phys. 385, len 8 [ 110.387116][ T7007] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 110.421668][ T7035] loop6: detected capacity change from 0 to 736 [ 110.439173][ T7037] loop2: detected capacity change from 0 to 512 [ 110.458072][ T7037] EXT4-fs: Ignoring removed bh option [ 110.470258][ T7037] EXT4-fs: Ignoring removed oldalloc option [ 110.522445][ T7037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.542122][ T7035] netlink: zone id is out of range [ 110.557008][ T7037] EXT4-fs (loop2): 1 truncate cleaned up [ 110.563273][ T7037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.607736][ T7035] netlink: zone id is out of range [ 110.612956][ T7035] netlink: zone id is out of range [ 110.658893][ T7035] netlink: zone id is out of range [ 110.671549][ T6548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.683820][ T7035] netlink: zone id is out of range [ 110.708694][ T7035] netlink: zone id is out of range [ 110.738844][ T7035] netlink: zone id is out of range [ 110.750558][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.753193][ T7035] netlink: zone id is out of range [ 110.832794][ T7035] netlink: zone id is out of range [ 110.841537][ T7035] netlink: zone id is out of range [ 110.906649][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1183'. [ 110.924906][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1183'. [ 111.297034][ T7092] loop7: detected capacity change from 0 to 128 [ 111.656570][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 111.892421][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.900644][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.991755][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.003531][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.045335][ T36] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.055142][ T36] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.095625][ T7120] loop2: detected capacity change from 0 to 512 [ 112.095863][ T36] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.115289][ T7123] netlink: 'syz.6.1204': attribute type 4 has an invalid length. [ 112.137642][ T69] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.167819][ T7120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.206955][ T7129] loop1: detected capacity change from 0 to 1024 [ 112.217681][ T7127] netlink: 'syz.6.1204': attribute type 4 has an invalid length. [ 112.260190][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.289567][ T7133] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1206'. [ 112.307571][ T7120] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.373722][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.480439][ T7140] loop7: detected capacity change from 0 to 1024 [ 112.504351][ T7140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.534589][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.596261][ T6548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.619319][ T7146] loop2: detected capacity change from 0 to 512 [ 112.646818][ T7146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.720549][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.752080][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1214'. [ 112.767621][ T7146] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.783328][ T7155] netlink: 'syz.3.1214': attribute type 7 has an invalid length. [ 112.799448][ T7155] netlink: 'syz.3.1214': attribute type 8 has an invalid length. [ 112.819094][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 113.206379][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.494379][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 113.507022][ T7172] macvtap1: entered promiscuous mode [ 113.512466][ T7172] gretap0: entered promiscuous mode [ 113.518165][ T7172] macvtap1: entered allmulticast mode [ 113.523679][ T7172] gretap0: entered allmulticast mode [ 113.539336][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 113.554113][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 113.554131][ T28] audit: type=1400 audit(1772892833.294:670): avc: denied { mounton } for pid=7173 comm="syz.6.1222" path="/proc/35/task" dev="proc" ino=34645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.587017][ T7172] gretap0: left allmulticast mode [ 113.592537][ T7172] gretap0: left promiscuous mode [ 113.669642][ T7180] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 113.700098][ T7180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.745925][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1226'. [ 113.749538][ T7180] bond2: (slave veth7): Enslaving as an active interface with a down link [ 113.783819][ T28] audit: type=1400 audit(1772892833.514:671): avc: denied { create } for pid=7186 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.805617][ T28] audit: type=1400 audit(1772892833.514:672): avc: denied { write } for pid=7186 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.848022][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.875897][ T7180] bond2: (slave batadv1): making interface the new active one [ 113.889361][ T7180] batadv1: entered promiscuous mode [ 113.906217][ T7180] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 113.915554][ T953] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.975774][ T7210] tipc: Failed to remove unknown binding: 66,1,1/0:3899346480/3899346482 [ 114.512231][ T28] audit: type=1400 audit(1772892834.254:673): avc: denied { read write } for pid=7258 comm="syz.2.1239" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.572175][ T28] audit: type=1400 audit(1772892834.254:674): avc: denied { open } for pid=7258 comm="syz.2.1239" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.879110][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.888632][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.067425][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.089774][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.179120][ T953] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.199555][ T1677] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.227254][ T1677] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.250234][ T1677] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.353911][ T28] audit: type=1400 audit(1772892835.094:675): avc: denied { accept } for pid=7327 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.441019][ T28] audit: type=1400 audit(1772892835.184:676): avc: denied { tracepoint } for pid=7341 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 115.607270][ T7371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1251'. [ 115.620892][ T7371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1251'. [ 115.687322][ T7384] loop2: detected capacity change from 0 to 512 [ 115.730767][ T7384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.743658][ T7384] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.759822][ T28] audit: type=1400 audit(1772892835.494:677): avc: denied { append } for pid=7383 comm="syz.2.1253" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.808337][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.937573][ T3564] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.137096][ T7438] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 116.197587][ T7438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.262027][ T7449] bond1: (slave veth5): Enslaving as an active interface with a down link [ 116.322990][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.336302][ T7438] bond1: (slave batadv0): making interface the new active one [ 116.345464][ T7438] batadv0: entered promiscuous mode [ 116.351057][ T7438] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 116.777569][ T69] team0: Port device gtp1 removed [ 116.899466][ T69] bond0 (unregistering): Released all slaves [ 117.058039][ T69] bond1 (unregistering): (slave veth5): Releasing active interface [ 117.068601][ T69] bond1 (unregistering): Released all slaves [ 117.083338][ T69] bond2 (unregistering): Released all slaves [ 117.247570][ T28] audit: type=1326 audit(1772892836.984:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12dc2c799 code=0x7fc00000 [ 117.384124][ T69] hsr_slave_0: left promiscuous mode [ 117.390601][ T69] hsr_slave_1: left promiscuous mode [ 117.665051][ T7473] chnl_net:caif_netlink_parms(): no params data found [ 117.759584][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1279'. [ 117.808905][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.816111][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.840268][ T7473] bridge_slave_0: entered allmulticast mode [ 117.847003][ T7473] bridge_slave_0: entered promiscuous mode [ 117.860798][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.868790][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.876401][ T7473] bridge_slave_1: entered allmulticast mode [ 117.883374][ T7473] bridge_slave_1: entered promiscuous mode [ 117.909188][ T7473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.930634][ T7473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.001395][ T7473] team0: Port device team_slave_0 added [ 118.025446][ T7473] team0: Port device team_slave_1 added [ 118.070446][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.087543][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.199919][ T7473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.228994][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.254462][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.318751][ T7473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.510711][ T7473] hsr_slave_0: entered promiscuous mode [ 118.529045][ T7473] hsr_slave_1: entered promiscuous mode [ 118.746397][ T7582] loop6: detected capacity change from 0 to 128 [ 118.817284][ T7473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 118.866257][ T7473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 118.901344][ T7473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 118.933591][ T7473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 119.120721][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.151621][ T7473] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.186830][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.194005][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.239180][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.246411][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.520375][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.664701][ T28] audit: type=1400 audit(1772892839.404:679): avc: denied { map } for pid=7641 comm="syz.1.1302" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.738972][ T7650] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 119.771136][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1305'. [ 119.780502][ T7650] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 119.805408][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1305'. [ 119.837414][ T7655] syzkaller1: entered promiscuous mode [ 119.843723][ T7655] syzkaller1: entered allmulticast mode [ 119.882167][ T28] audit: type=1400 audit(1772892839.624:680): avc: denied { mount } for pid=7660 comm="syz.7.1308" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.905906][ T7658] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1307'. [ 119.921461][ T28] audit: type=1400 audit(1772892839.654:681): avc: denied { watch watch_reads } for pid=7660 comm="syz.7.1308" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 119.988607][ T7473] veth0_vlan: entered promiscuous mode [ 119.996530][ T7473] veth1_vlan: entered promiscuous mode [ 120.024562][ T7473] veth0_macvtap: entered promiscuous mode [ 120.035619][ T7473] veth1_macvtap: entered promiscuous mode [ 120.061472][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.070747][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.084757][ T115] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.093576][ T115] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.471810][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.493462][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.670239][ T7686] ================================================================== [ 120.678553][ T7686] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 120.685531][ T7686] [ 120.687878][ T7686] read-write to 0xffff88811b14966c of 4 bytes by task 7689 on cpu 1: [ 120.695969][ T7686] fifo_open+0x86/0x5d0 [ 120.700166][ T7686] do_dentry_open+0x4ca/0xa90 [ 120.705057][ T7686] vfs_open+0x37/0x1e0 [ 120.709258][ T7686] path_openat+0x1b70/0x2050 [ 120.713906][ T7686] do_file_open+0x16c/0x290 [ 120.718816][ T7686] do_sys_openat2+0x94/0x130 [ 120.723660][ T7686] __x64_sys_openat+0xf2/0x120 [ 120.728665][ T7686] x64_sys_call+0x1e39/0x3020 [ 120.733395][ T7686] do_syscall_64+0x12c/0x370 [ 120.738027][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.743971][ T7686] [ 120.746323][ T7686] read to 0xffff88811b14966c of 4 bytes by task 7686 on cpu 0: [ 120.754074][ T7686] wait_for_partner+0x117/0x1e0 [ 120.759006][ T7686] fifo_open+0x462/0x5d0 [ 120.763278][ T7686] do_dentry_open+0x4ca/0xa90 [ 120.768118][ T7686] vfs_open+0x37/0x1e0 [ 120.772228][ T7686] path_openat+0x1b70/0x2050 [ 120.776957][ T7686] do_file_open+0x16c/0x290 [ 120.781515][ T7686] do_sys_openat2+0x94/0x130 [ 120.786575][ T7686] __x64_sys_open+0xe6/0x110 [ 120.791638][ T7686] x64_sys_call+0x14b9/0x3020 [ 120.796610][ T7686] do_syscall_64+0x12c/0x370 [ 120.801308][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.807363][ T7686] [ 120.809821][ T7686] value changed: 0x00000001 -> 0x00000002 [ 120.815563][ T7686] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.817989][ T7686] Reported by Kernel Concurrency Sanitizer on: [ 120.824259][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.7.1316 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.835228][ T7686] Tainted: [W]=WARN [ 120.839235][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.849309][ T7686] ================================================================== [ 121.430142][ T50] bridge_slave_1: left allmulticast mode [ 121.436411][ T50] bridge_slave_1: left promiscuous mode [ 121.442313][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.450804][ T50] bridge_slave_0: left allmulticast mode [ 121.456485][ T50] bridge_slave_0: left promiscuous mode [ 121.462552][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.559421][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.569196][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.578348][ T50] bond0 (unregistering): Released all slaves [ 121.632150][ T50] hsr_slave_0: left promiscuous mode [ 121.639869][ T50] hsr_slave_1: left promiscuous mode [ 121.645724][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.653464][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.699114][ T50] team0 (unregistering): Port device team_slave_1 removed [ 121.710567][ T50] team0 (unregistering): Port device team_slave_0 removed [ 122.467228][ T50] bridge_slave_1: left allmulticast mode [ 122.472957][ T50] bridge_slave_1: left promiscuous mode [ 122.478937][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.486857][ T50] bridge_slave_0: left allmulticast mode [ 122.492601][ T50] bridge_slave_0: left promiscuous mode [ 122.498417][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.508265][ T50] bridge_slave_1: left allmulticast mode [ 122.513952][ T50] bridge_slave_1: left promiscuous mode [ 122.519834][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.527875][ T50] bridge_slave_0: left allmulticast mode [ 122.533714][ T50] bridge_slave_0: left promiscuous mode [ 122.539766][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.649386][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.659775][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.669308][ T50] bond0 (unregistering): Released all slaves [ 122.809506][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.818941][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.828099][ T50] bond0 (unregistering): Released all slaves [ 122.836217][ T50] bond1 (unregistering): (slave veth5): Releasing active interface [ 122.845214][ T50] bond1 (unregistering): (slave batadv0): Releasing active interface [ 122.854497][ T50] bond1 (unregistering): Released all slaves [ 122.899968][ T50] hsr_slave_0: left promiscuous mode [ 122.905705][ T50] hsr_slave_1: left promiscuous mode [ 122.911513][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.919246][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.928985][ T50] hsr_slave_0: left promiscuous mode [ 122.934751][ T50] hsr_slave_1: left promiscuous mode [ 122.970985][ T50] team0 (unregistering): Port device team_slave_1 removed [ 122.983566][ T50] team0 (unregistering): Port device team_slave_0 removed [ 123.051857][ T50] team0 (unregistering): Port device team_slave_1 removed [ 123.062145][ T50] team0 (unregistering): Port device team_slave_0 removed [ 123.516467][ T50] IPVS: stop unused estimator thread 0... [ 123.569661][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.621317][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.679548][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.730900][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.816433][ T50] bridge_slave_1: left allmulticast mode [ 123.822306][ T50] bridge_slave_1: left promiscuous mode [ 123.828565][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.836585][ T50] bridge_slave_0: left allmulticast mode [ 123.842424][ T50] bridge_slave_0: left promiscuous mode [ 123.848328][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.902146][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.912196][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.921912][ T50] bond0 (unregistering): Released all slaves [ 123.962955][ T50] hsr_slave_0: left promiscuous mode [ 123.968862][ T50] hsr_slave_1: left promiscuous mode [ 123.974862][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.982564][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.990230][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.998133][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.010917][ T50] veth1_macvtap: left promiscuous mode [ 124.016576][ T50] veth0_macvtap: left promiscuous mode [ 124.022678][ T50] veth1_vlan: left promiscuous mode [ 124.028150][ T50] veth0_vlan: left promiscuous mode [ 124.104486][ T50] team0 (unregistering): Port device team_slave_1 removed [ 124.115468][ T50] team0 (unregistering): Port device team_slave_0 removed