last executing test programs: 1m2.633464602s ago: executing program 2 (id=3): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m2.564475775s ago: executing program 2 (id=10): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x6, 0x0, 0xa, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) 1m1.548895908s ago: executing program 2 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x1, 0xa, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x3, 0x25dfdbfd, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) 1m1.548736608s ago: executing program 32 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x1, 0xa, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x3, 0x25dfdbfd, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) 49.488939029s ago: executing program 3 (id=277): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) creat(0x0, 0x10) r0 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) 49.488314699s ago: executing program 3 (id=278): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 49.211367938s ago: executing program 3 (id=283): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) 49.167645329s ago: executing program 3 (id=285): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 49.092912582s ago: executing program 3 (id=288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x24000000, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 48.776996742s ago: executing program 3 (id=297): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 48.769449763s ago: executing program 33 (id=297): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.399015024s ago: executing program 0 (id=1235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "6729b24948f89c4f", "7578a8e5250b61f03a22d38bc1c3ecac86b74e7720dbac48c702353144bffdd7", "58d38747", "5ec9ffeb8416d2b4"}, 0x38) 4.377888546s ago: executing program 0 (id=1227): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3.181859055s ago: executing program 4 (id=1249): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mlockall(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='cpu=_0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) 1.82245953s ago: executing program 4 (id=1273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @loopback, @empty}}}}}}}, 0x0) 1.704377544s ago: executing program 4 (id=1265): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.51123392s ago: executing program 6 (id=1271): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x240, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1d, 0x3, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e1d, 0xffffffff, @mcast1}, 0x1c) 1.445377572s ago: executing program 6 (id=1274): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 1.368577755s ago: executing program 6 (id=1275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.21823739s ago: executing program 5 (id=1277): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0x1, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80002014}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 1.098640104s ago: executing program 5 (id=1279): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f00000001c0)) 1.098470854s ago: executing program 6 (id=1280): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) symlink(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.098085704s ago: executing program 1 (id=1290): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x8, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.073759975s ago: executing program 1 (id=1281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)='a', 0x1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x10}}], 0x2, 0x4040805) 1.026019937s ago: executing program 1 (id=1282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) listen(r0, 0x3) 969.602058ms ago: executing program 0 (id=1283): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) recvmsg$inet_nvme(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1}, 0x10040) 950.751409ms ago: executing program 0 (id=1285): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 950.604959ms ago: executing program 5 (id=1286): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 715.926167ms ago: executing program 5 (id=1287): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 715.397177ms ago: executing program 0 (id=1298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 654.524599ms ago: executing program 0 (id=1288): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r2, 0x4, 0x80000}) 225.895343ms ago: executing program 6 (id=1289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 225.386093ms ago: executing program 5 (id=1301): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d800000018", 0x5}], 0x1}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x200, 0x8}) 224.836413ms ago: executing program 4 (id=1302): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4040001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 170.118515ms ago: executing program 1 (id=1291): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000080), 0x4) 170.015155ms ago: executing program 4 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{r1}, &(0x7f0000001cc0), &(0x7f0000001d00)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) 168.296944ms ago: executing program 5 (id=1304): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 84.200327ms ago: executing program 1 (id=1293): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000000)) 70.463178ms ago: executing program 6 (id=1294): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x420, 0x3f3, 0x100, 0x70bd2d, 0x25dfdbff, {0x5, 0x2, 0xa, [0x7, 0x3ff, 0xf, 0x7, 0x7cac9bc0, 0x7709, 0x2, 0xb, 0xf, 0x1e, 0xfffffff2, 0xd, 0x6574, 0x2, 0x1, 0xa, 0xffffffc0, 0x7, 0x40, 0x1000, 0xfffffff9, 0x7ff, 0xefc, 0x7fffffff, 0x45, 0xffffff65, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0xffffc637, 0x7, 0xb, 0x80, 0x8, 0x1, 0x2, 0x9, 0x4, 0x10001, 0x400, 0x2, 0x1ff, 0x3, 0xffffff47, 0x9, 0x3, 0x5, 0x7, 0x0, 0x1, 0x4, 0x1, 0x2, 0x1, 0x1, 0x2, 0x9, 0xde, 0x3187, 0x4, 0x0, 0x3], [0x0, 0x80000001, 0x1000, 0xbbc, 0x9, 0x4, 0x8, 0x2, 0x100, 0x4, 0x800, 0x2, 0x4, 0x8, 0x10, 0x9, 0x6, 0x2717dc6d, 0x6, 0x1dcb6e87, 0x0, 0x0, 0xffffd7b0, 0x6, 0x8, 0x0, 0x3, 0x8, 0x9, 0xffffffff, 0xffffffcc, 0x9, 0x10001, 0x80000001, 0x163e5fd6, 0x4, 0x101, 0x5a, 0x7, 0x3, 0xa73d, 0x9e, 0xf, 0xffffffb3, 0x1, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x8, 0x3, 0x4, 0x3, 0xff, 0xd, 0x1, 0x8, 0x4, 0x200], [0x2, 0xecd, 0x0, 0x5d8, 0x3, 0x8, 0xf952, 0x7fff, 0x6, 0x1000, 0x9, 0xb, 0x6, 0x5, 0xa, 0x4, 0x9, 0x0, 0x7, 0x6, 0x303f71fc, 0x5, 0x0, 0x5, 0xffffffff, 0x8001, 0xe498, 0x1, 0x4, 0xf2, 0x3, 0x9, 0x81, 0x1, 0x32384828, 0x2, 0x8, 0xe, 0x4, 0x2, 0x400, 0xfffffffc, 0x0, 0xfffffffd, 0x8, 0xc927, 0x8, 0xfffffffb, 0x3, 0x6c61, 0x6, 0x7, 0xfffffffb, 0x80000000, 0x7f, 0x4, 0x1, 0x2, 0x2, 0x6, 0x6, 0x95, 0x6, 0xc53], [0x2ff4, 0x200, 0x200, 0x5, 0x3a7, 0x8000, 0x8001, 0x8, 0xc, 0x8, 0x6, 0x6, 0x3, 0x6, 0x5, 0x0, 0x7, 0x7000, 0x10000, 0xfffffffc, 0x2, 0x9, 0x809a, 0xffffffff, 0x29, 0x6, 0xff, 0x6, 0xc, 0x1, 0x4, 0x2, 0x80000000, 0x4, 0x3ff, 0x800, 0x8, 0x5, 0xb62, 0x0, 0x80000001, 0xfffffff9, 0x7, 0x4, 0xa3, 0x1, 0x8, 0x6, 0x3, 0xfff, 0x4, 0x7, 0x3, 0x40, 0x400, 0x1e4f, 0x9, 0x9, 0x0, 0x9, 0x2, 0x68e, 0x2, 0xb]}}, 0x420}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xe518e7befb3cdd24}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 70.056838ms ago: executing program 4 (id=1308): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 1 (id=1295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204004, &(0x7f0000000000)={[{@grpquota}, {@nodioread_nolock}]}, 0x1, 0xbc5, &(0x7f00000013c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ntext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.830415][ T3300] cgroup: Unknown subsys name 'cpuset' [ 25.836675][ T3300] cgroup: Unknown subsys name 'rlimit' [ 25.966862][ T28] audit: type=1400 audit(1775154886.594:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.990386][ T28] audit: type=1400 audit(1775154886.594:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.013035][ T28] audit: type=1400 audit(1775154886.594:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.019299][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.033729][ T28] audit: type=1400 audit(1775154886.594:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.062396][ T28] audit: type=1400 audit(1775154886.604:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.087232][ T28] audit: type=1400 audit(1775154886.604:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.110749][ T28] audit: type=1400 audit(1775154886.624:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.140685][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.288728][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.300199][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.325687][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.356224][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.378070][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.440602][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.447983][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.455270][ T3313] bridge_slave_0: entered allmulticast mode [ 27.461717][ T3313] bridge_slave_0: entered promiscuous mode [ 27.477150][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.484248][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.491495][ T3318] bridge_slave_0: entered allmulticast mode [ 27.497897][ T3318] bridge_slave_0: entered promiscuous mode [ 27.504710][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.511988][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.519182][ T3313] bridge_slave_1: entered allmulticast mode [ 27.525787][ T3313] bridge_slave_1: entered promiscuous mode [ 27.545612][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.552711][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.559946][ T3318] bridge_slave_1: entered allmulticast mode [ 27.566578][ T3318] bridge_slave_1: entered promiscuous mode [ 27.604164][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.611450][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.618794][ T3311] bridge_slave_0: entered allmulticast mode [ 27.625272][ T3311] bridge_slave_0: entered promiscuous mode [ 27.631748][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.638935][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.646143][ T3320] bridge_slave_0: entered allmulticast mode [ 27.652518][ T3320] bridge_slave_0: entered promiscuous mode [ 27.662800][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.669962][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.677048][ T3319] bridge_slave_0: entered allmulticast mode [ 27.683793][ T3319] bridge_slave_0: entered promiscuous mode [ 27.691278][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.700843][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.707904][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.715281][ T3311] bridge_slave_1: entered allmulticast mode [ 27.721727][ T3311] bridge_slave_1: entered promiscuous mode [ 27.728151][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.735394][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.742605][ T3320] bridge_slave_1: entered allmulticast mode [ 27.748986][ T3320] bridge_slave_1: entered promiscuous mode [ 27.756123][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.765396][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.772510][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.779624][ T3319] bridge_slave_1: entered allmulticast mode [ 27.786142][ T3319] bridge_slave_1: entered promiscuous mode [ 27.798147][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.825531][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.852559][ T3313] team0: Port device team_slave_0 added [ 27.859233][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.873337][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.883223][ T3318] team0: Port device team_slave_0 added [ 27.889885][ T3313] team0: Port device team_slave_1 added [ 27.896424][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.911668][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.922053][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.931897][ T3318] team0: Port device team_slave_1 added [ 27.955435][ T3319] team0: Port device team_slave_0 added [ 27.961937][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.979847][ T3311] team0: Port device team_slave_0 added [ 27.986133][ T3319] team0: Port device team_slave_1 added [ 28.000785][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.007738][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.033865][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.045588][ T3311] team0: Port device team_slave_1 added [ 28.063904][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.071120][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.097379][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.108648][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.115723][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.141720][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.161117][ T3320] team0: Port device team_slave_0 added [ 28.167015][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.174033][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.200197][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.211202][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.218129][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.244178][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.257756][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.264801][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.290796][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.302393][ T3320] team0: Port device team_slave_1 added [ 28.308302][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.315391][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.341363][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.371072][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.378030][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.403990][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.439212][ T3318] hsr_slave_0: entered promiscuous mode [ 28.445281][ T3318] hsr_slave_1: entered promiscuous mode [ 28.456304][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.463284][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.489297][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.504637][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.511592][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.537546][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.552827][ T3311] hsr_slave_0: entered promiscuous mode [ 28.558839][ T3311] hsr_slave_1: entered promiscuous mode [ 28.564819][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.570639][ T3311] Cannot create hsr debugfs directory [ 28.584160][ T3313] hsr_slave_0: entered promiscuous mode [ 28.590290][ T3313] hsr_slave_1: entered promiscuous mode [ 28.596153][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.601951][ T3313] Cannot create hsr debugfs directory [ 28.645705][ T3319] hsr_slave_0: entered promiscuous mode [ 28.652370][ T3319] hsr_slave_1: entered promiscuous mode [ 28.658369][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.664147][ T3319] Cannot create hsr debugfs directory [ 28.677746][ T3320] hsr_slave_0: entered promiscuous mode [ 28.683816][ T3320] hsr_slave_1: entered promiscuous mode [ 28.689806][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.695540][ T3320] Cannot create hsr debugfs directory [ 28.888562][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.897567][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.906421][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.917432][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.941559][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.950328][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.963786][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.972467][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.003901][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.020530][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.029364][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.038681][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.084294][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.091590][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.100780][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.113722][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.122861][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.154895][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.165339][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.174645][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.183760][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.194952][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.202024][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.215102][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.232425][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.239542][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.251851][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.265042][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.277710][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.292259][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.299298][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.316386][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.323481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.339075][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.359620][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.373608][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.380757][ T810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.400898][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.408237][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.438092][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.465851][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.488085][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.507799][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.527810][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.541784][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.548991][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.565884][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.573057][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.583190][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.597688][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.624223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.631312][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.641253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.648324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.666153][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.728335][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.760316][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.809866][ T3313] veth0_vlan: entered promiscuous mode [ 29.830604][ T3313] veth1_vlan: entered promiscuous mode [ 29.848539][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.880999][ T3313] veth0_macvtap: entered promiscuous mode [ 29.911908][ T3313] veth1_macvtap: entered promiscuous mode [ 29.920780][ T3311] veth0_vlan: entered promiscuous mode [ 29.940558][ T3311] veth1_vlan: entered promiscuous mode [ 29.961236][ T3319] veth0_vlan: entered promiscuous mode [ 29.986767][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.995055][ T3311] veth0_macvtap: entered promiscuous mode [ 30.003982][ T3319] veth1_vlan: entered promiscuous mode [ 30.022256][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.031561][ T3311] veth1_macvtap: entered promiscuous mode [ 30.043935][ T3319] veth0_macvtap: entered promiscuous mode [ 30.053851][ T3320] veth0_vlan: entered promiscuous mode [ 30.064508][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.082551][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.090767][ T3319] veth1_macvtap: entered promiscuous mode [ 30.098771][ T3320] veth1_vlan: entered promiscuous mode [ 30.109010][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.117860][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.130808][ T3318] veth0_vlan: entered promiscuous mode [ 30.136401][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.146548][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.165339][ T3318] veth1_vlan: entered promiscuous mode [ 30.181088][ T1741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.192210][ T1741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.201491][ T1741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.212509][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.229908][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.237329][ T1741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.273719][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.286476][ T3318] veth0_macvtap: entered promiscuous mode [ 30.320364][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329185][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.343070][ T3318] veth1_macvtap: entered promiscuous mode [ 30.358035][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.367856][ T3320] veth0_macvtap: entered promiscuous mode [ 30.388521][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.403651][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.416158][ T3320] veth1_macvtap: entered promiscuous mode [ 30.426776][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.445678][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.476252][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.488578][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.512738][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.530039][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.544643][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.560302][ T3496] loop3: detected capacity change from 0 to 8192 [ 30.567241][ T3496] ======================================================= [ 30.567241][ T3496] WARNING: The mand mount option has been deprecated and [ 30.567241][ T3496] and is ignored by this kernel. Remove the mand [ 30.567241][ T3496] option from the mount to silence this warning. [ 30.567241][ T3496] ======================================================= [ 30.604413][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.617854][ T3495] syz.3.9: attempt to access beyond end of device [ 30.617854][ T3495] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 30.632059][ T3495] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.638301][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.654513][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.664442][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.673228][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 30.673242][ T28] audit: type=1400 audit(1775154891.294:111): avc: denied { allowed } for pid=3495 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.673303][ T3496] syz.3.9: attempt to access beyond end of device [ 30.673303][ T3496] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 30.679677][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.721320][ T3496] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.729525][ T3496] syz.3.9: attempt to access beyond end of device [ 30.729525][ T3496] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 30.739978][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.744089][ T3496] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.768126][ T28] audit: type=1400 audit(1775154891.394:112): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.808373][ T28] audit: type=1400 audit(1775154891.434:113): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.842253][ T28] audit: type=1400 audit(1775154891.474:114): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.876384][ T28] audit: type=1400 audit(1775154891.474:115): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.950945][ T28] audit: type=1400 audit(1775154891.474:116): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.020436][ T28] audit: type=1400 audit(1775154891.534:117): avc: denied { create } for pid=3500 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.062688][ T3514] tls_set_device_offload: netdev not found [ 31.065215][ T28] audit: type=1400 audit(1775154891.554:118): avc: denied { create } for pid=3499 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.086820][ T3516] loop3: detected capacity change from 0 to 128 [ 31.119105][ T28] audit: type=1400 audit(1775154891.564:119): avc: denied { create } for pid=3503 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.166945][ T3525] syz.3.17: attempt to access beyond end of device [ 31.166945][ T3525] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 31.191311][ T28] audit: type=1400 audit(1775154891.574:120): avc: denied { setopt } for pid=3503 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.212130][ T3525] syz.3.17: attempt to access beyond end of device [ 31.212130][ T3525] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 31.264433][ T3525] syz.3.17: attempt to access beyond end of device [ 31.264433][ T3525] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 31.282926][ T3525] syz.3.17: attempt to access beyond end of device [ 31.282926][ T3525] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 31.296291][ T3525] syz.3.17: attempt to access beyond end of device [ 31.296291][ T3525] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 31.358277][ T3525] syz.3.17: attempt to access beyond end of device [ 31.358277][ T3525] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 31.372738][ T3525] syz.3.17: attempt to access beyond end of device [ 31.372738][ T3525] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 31.519328][ C1] hrtimer: interrupt took 38073 ns [ 31.690543][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 31.713405][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 31.716078][ T3562] loop0: detected capacity change from 0 to 256 [ 31.725520][ T3557] Zero length message leads to an empty skb [ 31.741436][ T3562] FAT-fs (loop0): bogus number of FAT sectors [ 31.755953][ T3562] FAT-fs (loop0): Can't find a valid FAT filesystem [ 31.822210][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.968550][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 32.053730][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.061113][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.068482][ T3545] bridge_slave_0: entered allmulticast mode [ 32.075383][ T3545] bridge_slave_0: entered promiscuous mode [ 32.082549][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.089899][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.097134][ T3545] bridge_slave_1: entered allmulticast mode [ 32.104739][ T3545] bridge_slave_1: entered promiscuous mode [ 32.132564][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.143219][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.171937][ T3545] team0: Port device team_slave_0 added [ 32.179169][ T3545] team0: Port device team_slave_1 added [ 32.207611][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.215060][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.241392][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.262889][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.274687][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.299220][ T3600] capability: warning: `syz.3.46' uses 32-bit capabilities (legacy support in use) [ 32.301282][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.341151][ T3545] hsr_slave_0: entered promiscuous mode [ 32.352655][ T3545] hsr_slave_1: entered promiscuous mode [ 32.359872][ T3545] debugfs: 'hsr0' already exists in 'hsr' [ 32.368089][ T3605] loop4: detected capacity change from 0 to 512 [ 32.369650][ T3545] Cannot create hsr debugfs directory [ 32.411036][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.424385][ T3605] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.477079][ T3545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 32.484496][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.486355][ T3545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 32.517398][ T3545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 32.542476][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.567573][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.572779][ T3545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 32.706193][ T3628] Process accounting resumed [ 32.795956][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.814048][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.848487][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.855729][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.919619][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.985883][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.049912][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.089406][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.096508][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.148985][ T3614] Set syz1 is full, maxelem 65536 reached [ 33.239907][ T47] bridge_slave_1: left allmulticast mode [ 33.241865][ T3648] Falling back ldisc for ttyS3. [ 33.251222][ T47] bridge_slave_1: left promiscuous mode [ 33.260446][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.273189][ T47] bridge_slave_0: left allmulticast mode [ 33.286337][ T47] bridge_slave_0: left promiscuous mode [ 33.295592][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.452700][ T3654] ref_ctr_offset mismatch. inode: 0x6d offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 33.464355][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.481003][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.491584][ T47] bond0 (unregistering): Released all slaves [ 33.590495][ T47] hsr_slave_0: left promiscuous mode [ 33.603480][ T47] hsr_slave_1: left promiscuous mode [ 33.618340][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.638816][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.651389][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.658976][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.678215][ T47] veth1_macvtap: left promiscuous mode [ 33.691331][ T47] veth0_macvtap: left promiscuous mode [ 33.698385][ T47] veth1_vlan: left promiscuous mode [ 33.704218][ T3690] loop0: detected capacity change from 0 to 256 [ 33.704497][ T47] veth0_vlan: left promiscuous mode [ 33.798565][ T47] team0 (unregistering): Port device team_slave_1 removed [ 33.814070][ T47] team0 (unregistering): Port device team_slave_0 removed [ 33.852084][ T3697] loop1: detected capacity change from 0 to 512 [ 33.869389][ T3697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.883161][ T3685] netlink: 'syz.3.72': attribute type 4 has an invalid length. [ 33.884969][ T3697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.900203][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 33.953959][ T3697] EXT4-fs (loop1): 1 truncate cleaned up [ 33.968493][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.976151][ T3697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.110845][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.153014][ T3719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 34.483786][ T3545] veth0_vlan: entered promiscuous mode [ 34.493073][ T3545] veth1_vlan: entered promiscuous mode [ 34.622319][ T3545] veth0_macvtap: entered promiscuous mode [ 34.650639][ T3545] veth1_macvtap: entered promiscuous mode [ 34.691312][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.733852][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.770311][ T117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.786023][ T117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.816578][ T117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.847349][ T117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.085322][ T3817] loop4: detected capacity change from 0 to 256 [ 35.207030][ T3827] loop5: detected capacity change from 0 to 1024 [ 35.279345][ T3827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.373089][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.549206][ T3844] loop3: detected capacity change from 0 to 512 [ 35.637113][ T3844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.679138][ T3844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.691728][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 35.691743][ T28] audit: type=1400 audit(1775154896.324:261): avc: denied { read } for pid=3849 comm="syz.0.112" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.727663][ T3853] loop1: detected capacity change from 0 to 1024 [ 35.765754][ T3844] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.799788][ T3860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 35.799886][ T28] audit: type=1400 audit(1775154896.424:262): avc: denied { read append open } for pid=3843 comm="syz.3.109" path="/31/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.832683][ T3860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 35.866252][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.883450][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.909936][ T28] audit: type=1400 audit(1775154896.534:263): avc: denied { write } for pid=3848 comm="syz.1.111" path="/19/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.954875][ T28] audit: type=1400 audit(1775154896.534:264): avc: denied { create } for pid=3848 comm="syz.1.111" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 35.997095][ T28] audit: type=1400 audit(1775154896.544:265): avc: denied { remove_name } for pid=3848 comm="syz.1.111" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.026789][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.124067][ T28] audit: type=1400 audit(1775154896.544:266): avc: denied { rename } for pid=3848 comm="syz.1.111" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.327556][ T28] audit: type=1400 audit(1775154896.554:267): avc: denied { bind } for pid=3863 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.359767][ T28] audit: type=1400 audit(1775154896.674:268): avc: denied { getopt } for pid=3863 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.545430][ T28] audit: type=1326 audit(1775154897.174:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1feec819 code=0x7ffc0000 [ 36.603688][ T28] audit: type=1326 audit(1775154897.174:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c1feec819 code=0x7ffc0000 [ 37.083890][ T3920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.444617][ T3932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'. [ 37.797335][ T3951] loop0: detected capacity change from 0 to 512 [ 37.820328][ T3951] EXT4-fs: Ignoring removed nobh option [ 37.849911][ T3951] EXT4-fs: Ignoring removed bh option [ 37.874033][ T3951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.916251][ T3951] EXT4-fs error (device loop0): __ext4_iget:5393: inode #15: block 1803188595: comm syz.0.146: invalid block [ 37.968204][ T3951] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.968408][ T3951] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.146: couldn't read orphan inode 15 (err -117) [ 37.977616][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 37.977642][ C0] EXT4-fs (loop0): initial error at time 1775154898: __ext4_iget:5393: inode 15: block 1803188595 [ 37.977702][ C0] EXT4-fs (loop0): last error at time 1775154898: __ext4_iget:5393: inode 15: block 1803188595 [ 38.047665][ T3951] loop0: lost filesystem error report for type 5 error -117 [ 38.048388][ T3951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.200549][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.830166][ T3993] netlink: 'syz.1.161': attribute type 12 has an invalid length. [ 38.863987][ T3995] syz.5.163 uses obsolete (PF_INET,SOCK_PACKET) [ 38.871070][ T3995] syzkaller1: entered promiscuous mode [ 38.876538][ T3995] syzkaller1: entered allmulticast mode [ 38.900473][ T3999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 39.041823][ T4011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.170'. [ 39.137969][ T4020] netlink: 'syz.5.175': attribute type 12 has an invalid length. [ 39.212399][ T4018] loop0: detected capacity change from 0 to 512 [ 39.321205][ T4018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.372111][ T4018] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.436626][ T4032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.178'. [ 39.617304][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.631182][ T4046] ip6gre1: entered allmulticast mode [ 39.881361][ T4072] netlink: zone id is out of range [ 39.902238][ T4071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.195'. [ 40.112315][ T4089] loop5: detected capacity change from 0 to 128 [ 40.190342][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 40.219785][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 40.220053][ T1034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.228862][ T4097] netlink: 'syz.4.206': attribute type 6 has an invalid length. [ 40.257139][ T1034] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.270193][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 40.299400][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 40.328871][ T4097] netlink: 'syz.4.206': attribute type 6 has an invalid length. [ 40.431161][ T47] bio_check_eod: 105 callbacks suppressed [ 40.431180][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.431180][ T47] loop5: rw=1, sector=145, nr_sectors = 40 limit=128 [ 40.453442][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.453442][ T47] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 40.467068][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.467068][ T47] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 40.481178][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.481178][ T47] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 40.514944][ T4107] loop4: detected capacity change from 0 to 512 [ 40.526112][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.526112][ T47] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 40.550644][ T4107] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 40.560608][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.560608][ T47] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 40.578093][ T4107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 40.586421][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.586421][ T47] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 40.609960][ T4107] System zones: 1-12 [ 40.613987][ T4107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.625142][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.625142][ T47] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 40.648892][ T4107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.211: bg 0: block 361: padding at end of block bitmap is not set [ 40.667470][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.667470][ T47] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 40.689836][ T4107] loop4: lost filesystem error report for type 5 error -117 [ 40.690061][ T4107] EXT4-fs (loop4): Remounting filesystem read-only [ 40.703966][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 40.703989][ C1] EXT4-fs (loop4): initial error at time 1775154901: ext4_validate_block_bitmap:441 [ 40.704016][ C1] EXT4-fs (loop4): last error at time 1775154901: ext4_validate_block_bitmap:441 [ 40.736481][ T47] kworker/u8:3: attempt to access beyond end of device [ 40.736481][ T47] loop5: rw=1, sector=321, nr_sectors = 8 limit=128 [ 40.757785][ T4107] EXT4-fs (loop4): 1 truncate cleaned up [ 40.764112][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 40.803350][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 40.821235][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 40.821254][ T28] audit: type=1400 audit(1775154901.454:314): avc: denied { bind } for pid=4112 comm="syz.5.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.888808][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 40.993472][ T28] audit: type=1400 audit(1775154901.624:315): avc: denied { kexec_image_load } for pid=4126 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 41.027815][ T28] audit: type=1400 audit(1775154901.654:316): avc: denied { name_connect } for pid=4132 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 41.216591][ T28] audit: type=1400 audit(1775154901.844:317): avc: denied { write } for pid=4140 comm="syz.5.224" path="socket:[7679]" dev="sockfs" ino=7679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.737895][ T4159] loop0: detected capacity change from 0 to 256 [ 41.974584][ T28] audit: type=1326 audit(1775154902.604:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceabc8c819 code=0x7ffc0000 [ 42.014564][ T28] audit: type=1326 audit(1775154902.604:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceabc8c819 code=0x7ffc0000 [ 42.052386][ T28] audit: type=1326 audit(1775154902.604:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceabc8c819 code=0x7ffc0000 [ 42.101224][ T28] audit: type=1326 audit(1775154902.604:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceabc8c819 code=0x7ffc0000 [ 42.131743][ T28] audit: type=1326 audit(1775154902.674:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceabc8c819 code=0x7ffc0000 [ 42.155347][ T28] audit: type=1326 audit(1775154902.674:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fceabc8c582 code=0x7ffc0000 [ 42.241934][ T4186] syzkaller1: entered promiscuous mode [ 42.252184][ T4186] syzkaller1: entered allmulticast mode [ 42.342379][ T4189] netlink: 'syz.3.244': attribute type 12 has an invalid length. [ 42.371093][ T4189] netlink: 'syz.3.244': attribute type 29 has an invalid length. [ 42.446845][ T4157] syz.5.231 (4157) used greatest stack depth: 10184 bytes left [ 42.927319][ T4219] 9p: Unknown uid 00000000004294967295 [ 43.093440][ T4230] process 'syz.0.262' launched './file1' with NULL argv: empty string added [ 43.468673][ T4257] __nla_validate_parse: 1 callbacks suppressed [ 43.468741][ T4257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.273'. [ 43.616997][ T4267] capability: warning: `syz.3.278' uses deprecated v2 capabilities in a way that may be insecure [ 43.702819][ T4272] netlink: 'syz.0.280': attribute type 7 has an invalid length. [ 43.789458][ T4276] loop1: detected capacity change from 0 to 512 [ 43.820011][ T4276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.900047][ T4276] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.933973][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 43.968491][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.009345][ T4284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.092124][ T4291] bond1: (slave batadv1): Opening slave failed [ 44.104240][ T4297] ipip0: entered promiscuous mode [ 44.109364][ T4297] ipip0: entered allmulticast mode [ 44.310252][ T4308] syzkaller1: entered promiscuous mode [ 44.325097][ T4308] syzkaller1: entered allmulticast mode [ 44.360331][ T4312] loop4: detected capacity change from 0 to 128 [ 44.466377][ T4324] xt_hashlimit: size too large, truncated to 1048576 [ 44.523614][ T4330] loop1: detected capacity change from 0 to 512 [ 44.569783][ T4330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.601953][ T4330] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.304: bad orphan inode 131083 [ 44.628807][ T4330] loop1: lost filesystem error report for type 5 error -117 [ 44.629408][ T4330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.682870][ T4330] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.304: path /56/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 44.817266][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.827738][ T4340] syzkaller1: entered promiscuous mode [ 44.852444][ T4340] syzkaller1: entered allmulticast mode [ 44.896685][ T4347] loop0: detected capacity change from 0 to 128 [ 44.942424][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 45.050924][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.071299][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.079905][ T4321] bridge_slave_0: entered allmulticast mode [ 45.090688][ T4321] bridge_slave_0: entered promiscuous mode [ 45.105134][ T4361] syzkaller1: entered promiscuous mode [ 45.110977][ T4361] syzkaller1: entered allmulticast mode [ 45.118457][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.127513][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.135048][ T4321] bridge_slave_1: entered allmulticast mode [ 45.143223][ T4321] bridge_slave_1: entered promiscuous mode [ 45.184109][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.194949][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.215560][ T4321] team0: Port device team_slave_0 added [ 45.222504][ T4321] team0: Port device team_slave_1 added [ 45.240017][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.246988][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.283153][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.298413][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.307128][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.350132][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.421935][ T4321] hsr_slave_0: entered promiscuous mode [ 45.428649][ T4321] hsr_slave_1: entered promiscuous mode [ 45.434611][ T4321] debugfs: 'hsr0' already exists in 'hsr' [ 45.440706][ T4321] Cannot create hsr debugfs directory [ 45.519896][ T4321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.528991][ T4321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.538266][ T4321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.556841][ T4321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.601105][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.612606][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.624734][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.631881][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.644679][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.651769][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.728196][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.833623][ T4321] veth0_vlan: entered promiscuous mode [ 45.842038][ T4321] veth1_vlan: entered promiscuous mode [ 45.857507][ T4321] veth0_macvtap: entered promiscuous mode [ 45.865858][ T4321] veth1_macvtap: entered promiscuous mode [ 45.877300][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.889126][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.900582][ T1741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.909393][ T1741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.920711][ T47] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.929418][ T47] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.988102][ T4428] loop5: detected capacity change from 0 to 512 [ 45.990212][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 45.990226][ T28] audit: type=1400 audit(1775154906.614:396): avc: denied { name_connect } for pid=4421 comm="syz.1.329" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 46.000044][ T4428] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.010503][ T28] audit: type=1400 audit(1775154906.634:397): avc: denied { listen } for pid=4422 comm="syz.4.331" lport=58761 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.077239][ T4427] syz.1.329 (4427) used greatest stack depth: 9656 bytes left [ 46.085549][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.107371][ T28] audit: type=1400 audit(1775154906.634:398): avc: denied { accept } for pid=4422 comm="syz.4.331" lport=58761 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.131457][ T28] audit: type=1400 audit(1775154906.634:399): avc: denied { write } for pid=4422 comm="syz.4.331" lport=58761 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 46.155201][ T28] audit: type=1400 audit(1775154906.634:400): avc: denied { getopt } for pid=4422 comm="syz.4.331" lport=58761 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 46.156493][ T4428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.178708][ T28] audit: type=1326 audit(1775154906.684:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1feec819 code=0x7fc00000 [ 46.216874][ T4428] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.224818][ T28] audit: type=1400 audit(1775154906.764:402): avc: denied { watch_reads } for pid=4437 comm="syz.1.321" path="/64/file1" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.293680][ T28] audit: type=1400 audit(1775154906.924:403): avc: denied { add_name } for pid=4424 comm="syz.5.330" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.399911][ T28] audit: type=1400 audit(1775154907.024:404): avc: denied { getopt } for pid=4458 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.446936][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.473664][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 46.482615][ T28] audit: type=1400 audit(1775154907.104:405): avc: denied { setopt } for pid=4472 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.708932][ T4496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.779188][ T4460] loop4: detected capacity change from 0 to 32768 [ 46.969454][ T3295] loop4: p1 p3 < > [ 46.977732][ T4460] loop4: p1 p3 < > [ 47.111759][ T4520] loop5: detected capacity change from 0 to 128 [ 47.154020][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.178210][ T4520] bio_check_eod: 207 callbacks suppressed [ 47.178227][ T4520] syz.5.348: attempt to access beyond end of device [ 47.178227][ T4520] loop5: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 47.199565][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.229040][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.246655][ T4520] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 47.256717][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.271209][ T4520] syz.5.348: attempt to access beyond end of device [ 47.271209][ T4520] loop5: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 47.297294][ T4520] Buffer I/O error on dev loop5, logical block 70, lost async page write [ 47.307827][ T4520] syz.5.348: attempt to access beyond end of device [ 47.307827][ T4520] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 47.321793][ T4520] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 47.328066][ T4537] loop4: detected capacity change from 0 to 1024 [ 47.332154][ T4520] syz.5.348: attempt to access beyond end of device [ 47.332154][ T4520] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 47.392600][ T4537] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.352: Failed to acquire dquot type 0 [ 47.408960][ T4520] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 47.417976][ T4537] loop4: lost filesystem error report for type 5 error -117 [ 47.418510][ T4537] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, [ 47.425923][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.425946][ C0] EXT4-fs (loop4): initial error at time 1775154908: ext4_acquire_dquot:7026 [ 47.425980][ C0] EXT4-fs (loop4): last error at time 1775154908: ext4_acquire_dquot:7026 [ 47.457308][ T4537] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 47.487485][ T4537] EXT4-fs (loop4): 1 truncate cleaned up [ 47.494048][ T4537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.614205][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.668001][ T4550] loop5: detected capacity change from 0 to 1024 [ 47.695874][ T4550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 47.756134][ T4550] System zones: 0-1, 3-36 [ 47.772114][ T4550] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.359: bad orphan inode 134217728 [ 47.802909][ T4550] loop5: lost filesystem error report for type 5 error -117 [ 47.803448][ T4550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.886409][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.907373][ T4564] netlink: 'syz.1.363': attribute type 14 has an invalid length. [ 47.932430][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 47.976383][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.976409][ T4564] netlink: 'syz.1.363': attribute type 14 has an invalid length. [ 47.976424][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 47.990035][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.023586][ T4566] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 48.029019][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.058853][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.179842][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.228174][ T4593] loop0: detected capacity change from 0 to 512 [ 48.247144][ T4593] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.256698][ T4593] EXT4-fs (loop0): 1 truncate cleaned up [ 48.271181][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.301457][ T4595] loop6: detected capacity change from 0 to 128 [ 48.330770][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.537517][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.537517][ T136] loop6: rw=1, sector=145, nr_sectors = 40 limit=128 [ 48.572807][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.572807][ T136] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 48.590010][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.386'. [ 48.616757][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.616757][ T136] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 48.646498][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.646498][ T136] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 48.682748][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.682748][ T136] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 48.740035][ T136] kworker/u8:6: attempt to access beyond end of device [ 48.740035][ T136] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 48.888210][ T4637] loop0: detected capacity change from 0 to 128 [ 48.964006][ T4643] loop6: detected capacity change from 0 to 128 [ 48.975761][ T4644] bridge0: port 3(syz_tun) entered blocking state [ 49.042327][ T4644] bridge0: port 3(syz_tun) entered disabled state [ 49.066784][ T4644] syz_tun: entered allmulticast mode [ 49.083281][ T4644] syz_tun: entered promiscuous mode [ 49.100057][ T4644] bridge0: port 3(syz_tun) entered blocking state [ 49.106848][ T4644] bridge0: port 3(syz_tun) entered forwarding state [ 49.203399][ T4653] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 49.286897][ T4668] loop0: detected capacity change from 0 to 164 [ 49.300562][ T4668] rock: directory entry would overflow storage [ 49.328446][ T4668] rock: sig=0x5252, size=5, remaining=3 [ 49.498294][ T4679] loop1: detected capacity change from 0 to 128 [ 49.552891][ T4681] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 49.572049][ T4681] System zones: 0-2, 18-18, 34-35 [ 49.590909][ T4681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.603891][ T4681] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.691900][ T4693] EXT4-fs: Ignoring removed i_version option [ 49.730206][ T4321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.730587][ T4693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.801265][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.936678][ T4719] netlink: 'syz.5.432': attribute type 9 has an invalid length. [ 49.955309][ T4715] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 49.960807][ T4711] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 49.971923][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.432'. [ 49.977394][ T4711] netlink: 84 bytes leftover after parsing attributes in process `syz.1.426'. [ 49.990232][ T4711] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 49.994397][ T4715] netlink: 'syz.0.430': attribute type 2 has an invalid length. [ 50.046316][ T4719] netlink: 'syz.5.432': attribute type 9 has an invalid length. [ 50.046405][ T4722] sit0: entered promiscuous mode [ 50.057976][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.432'. [ 50.073770][ T4722] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 50.084507][ T4722] netlink: 9 bytes leftover after parsing attributes in process `syz.4.433'. [ 50.093060][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 50.103534][ T136] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.129858][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.148997][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.170287][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.220033][ T4738] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 50.249155][ T4736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.265413][ T4736] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.278129][ T4738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.292671][ T4744] bond1: (slave geneve2): making interface the new active one [ 50.304550][ T4744] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 50.345449][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.581105][ T4765] netlink: 'syz.0.450': attribute type 12 has an invalid length. [ 50.588909][ T4765] netlink: 128 bytes leftover after parsing attributes in process `syz.0.450'. [ 50.602644][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.710219][ T3295] loop6: p1 p3 < > [ 50.723983][ T4752] loop6: p1 p3 < > [ 50.737942][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 50.783999][ T4784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.814257][ T4784] EXT4-fs (loop0): 1 truncate cleaned up [ 50.840143][ T4784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.865324][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 50.876437][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 50.919844][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.935538][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 50.936215][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 51.052355][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.068945][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.185179][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 51.185193][ T28] audit: type=1400 audit(1775154911.814:454): avc: denied { create } for pid=4811 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.211618][ T28] audit: type=1400 audit(1775154911.814:455): avc: denied { setopt } for pid=4811 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.231365][ T28] audit: type=1400 audit(1775154911.814:456): avc: denied { listen } for pid=4811 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.251460][ T28] audit: type=1400 audit(1775154911.814:457): avc: denied { write } for pid=4811 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.332030][ T28] audit: type=1400 audit(1775154911.964:458): avc: denied { remount } for pid=4822 comm="syz.6.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.360729][ T28] audit: type=1400 audit(1775154911.964:459): avc: denied { unmount } for pid=4321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.716950][ T28] audit: type=1400 audit(1775154912.344:460): avc: denied { read } for pid=4832 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.013275][ T28] audit: type=1400 audit(1775154912.644:461): avc: denied { create } for pid=4847 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.063034][ T4850] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 52.063174][ T28] audit: type=1400 audit(1775154912.644:462): avc: denied { bind } for pid=4847 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.091040][ T4850] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 52.095223][ T28] audit: type=1400 audit(1775154912.644:463): avc: denied { listen } for pid=4847 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.125526][ T4853] set_capacity_and_notify: 9 callbacks suppressed [ 52.125545][ T4853] loop1: detected capacity change from 0 to 128 [ 52.246820][ T4868] netlink: 7 bytes leftover after parsing attributes in process `syz.0.493'. [ 52.329531][ T47] bio_check_eod: 642 callbacks suppressed [ 52.329548][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.329548][ T47] loop1: rw=1, sector=145, nr_sectors = 40 limit=128 [ 52.348881][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.348881][ T47] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 52.362936][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.362936][ T47] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 52.376266][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.376266][ T47] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 52.389904][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.389904][ T47] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 52.403291][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.403291][ T47] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 52.416958][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.416958][ T47] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 52.430628][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.430628][ T47] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 52.443970][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.443970][ T47] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 52.457308][ T47] kworker/u8:3: attempt to access beyond end of device [ 52.457308][ T47] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 52.578185][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811745b600: rx timeout, send abort [ 52.581282][ T4886] bridge1: entered promiscuous mode [ 52.586495][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811745b600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.591735][ T4886] bridge1: entered allmulticast mode [ 52.805954][ T4901] loop4: detected capacity change from 0 to 128 [ 52.922896][ T4903] loop4: detected capacity change from 0 to 512 [ 53.587876][ T4921] loop1: detected capacity change from 0 to 164 [ 53.597031][ T4921] Unable to read rock-ridge attributes [ 53.607824][ T4921] Unable to read rock-ridge attributes [ 53.613942][ T4921] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.622387][ T4921] Unable to read rock-ridge attributes [ 53.815021][ T4929] loop4: detected capacity change from 0 to 128 [ 55.132961][ T4958] loop4: detected capacity change from 0 to 4096 [ 55.143455][ T4958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.177640][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.206752][ T4859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.249039][ T4966] loop6: detected capacity change from 0 to 512 [ 55.261390][ T4966] EXT4-fs: Ignoring removed oldalloc option [ 55.286880][ T4966] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.533: invalid indirect mapped block 4294967295 (level 1) [ 55.305807][ T4966] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.305940][ T4966] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.533: invalid indirect mapped block 4294967295 (level 1) [ 55.315164][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 55.315186][ C0] EXT4-fs (loop6): initial error at time 1775154915: ext4_free_branches:1023: inode 11 [ 55.315242][ C0] EXT4-fs (loop6): last error at time 1775154915: ext4_free_branches:1023: inode 11 [ 55.320797][ T4973] loop4: detected capacity change from 0 to 128 [ 55.330372][ T4966] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.368905][ T4966] EXT4-fs (loop6): 2 truncates cleaned up [ 55.384848][ T4966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.412285][ T4321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.731524][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 55.760919][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 55.788165][ T5021] loop1: detected capacity change from 0 to 128 [ 55.834765][ T5006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.027129][ T5030] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'. [ 56.277913][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.290010][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.348402][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 56.348420][ T28] audit: type=1400 audit(1775154916.974:482): avc: denied { setopt } for pid=5052 comm="syz.6.567" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.491984][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.571'. [ 56.524169][ T28] audit: type=1400 audit(1775154917.154:483): avc: denied { wake_alarm } for pid=5060 comm="syz.5.571" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.601296][ T5065] loop5: detected capacity change from 0 to 1024 [ 56.615581][ T5065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.635640][ T5065] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.667321][ T28] audit: type=1400 audit(1775154917.294:484): avc: denied { setattr } for pid=5064 comm="syz.5.573" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.712327][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.842875][ T5073] EXT4-fs: Ignoring removed nobh option [ 56.843781][ T5043] Set syz1 is full, maxelem 65536 reached [ 56.848502][ T5073] EXT4-fs: Ignoring removed bh option [ 56.865696][ T5073] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.893867][ T5073] EXT4-fs error (device loop5): __ext4_iget:5393: inode #15: block 1803188595: comm syz.5.577: invalid block [ 56.905975][ T5073] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.906126][ T5073] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.577: couldn't read orphan inode 15 (err -117) [ 56.915368][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 56.915383][ C0] EXT4-fs (loop5): initial error at time 1775154917: __ext4_iget:5393: inode 15: block 1803188595 [ 56.915417][ C0] EXT4-fs (loop5): last error at time 1775154917: __ext4_iget:5393: inode 15: block 1803188595 [ 56.954795][ T5073] loop5: lost filesystem error report for type 5 error -117 [ 56.960264][ T5073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.008659][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.049685][ T28] audit: type=1400 audit(1775154917.674:485): avc: denied { create } for pid=5078 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.074641][ T28] audit: type=1400 audit(1775154917.674:486): avc: denied { ioctl } for pid=5078 comm="syz.5.579" path="socket:[10639]" dev="sockfs" ino=10639 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.168215][ T5087] set_capacity_and_notify: 1 callbacks suppressed [ 57.168261][ T5087] loop5: detected capacity change from 0 to 1024 [ 57.188443][ T5087] EXT4-fs: Ignoring removed bh option [ 57.210954][ T5087] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 57.271059][ T28] audit: type=1326 audit(1775154917.904:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.5.585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x0 [ 57.519701][ T28] audit: type=1400 audit(1775154918.144:488): avc: denied { write } for pid=5107 comm="syz.4.592" path="socket:[11328]" dev="sockfs" ino=11328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.751555][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 57.792583][ T28] audit: type=1400 audit(1775154918.424:489): avc: denied { name_bind } for pid=5126 comm="syz.4.601" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 57.924555][ T5137] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 57.947177][ T5131] loop4: detected capacity change from 0 to 8192 [ 57.959543][ T5139] netlink: zone id is out of range [ 58.000267][ T3295] loop4: p2 p3 p4[EZD] [ 58.005145][ T3295] loop4: p3 start 331781 is beyond EOD, truncated [ 58.021914][ T3295] loop4: p4 size 197376 extends beyond EOD, truncated [ 58.046099][ T5131] loop4: p2 p3 p4[EZD] [ 58.065700][ T5131] loop4: p3 start 331781 is beyond EOD, truncated [ 58.081976][ T5131] loop4: p4 size 197376 extends beyond EOD, truncated [ 58.145332][ T28] audit: type=1326 audit(1775154918.774:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5154 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1feec819 code=0x7ffc0000 [ 58.205111][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.205305][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.229960][ T28] audit: type=1326 audit(1775154918.774:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5154 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1feec819 code=0x7ffc0000 [ 58.282604][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.286391][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.618701][ T5180] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 58.634189][ T5180] bond2: (slave lo): Enslaving as an active interface with an up link [ 58.645133][ T5180] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 58.985586][ T5191] loop4: detected capacity change from 0 to 512 [ 59.010734][ T5191] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.629: invalid indirect mapped block 256 (level 2) [ 59.034684][ T5191] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.035151][ T5191] EXT4-fs (loop4): 2 truncates cleaned up [ 59.044320][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.044356][ C0] EXT4-fs (loop4): initial error at time 1775154919: ext4_free_branches:1023: inode 11 [ 59.044392][ C0] EXT4-fs (loop4): last error at time 1775154919: ext4_free_branches:1023: inode 11 [ 59.085141][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.190698][ T5191] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.629: bg 0: block 5: invalid block bitmap [ 59.213613][ T5191] EXT4-fs error (device loop4) in ext4_setattr:6028: error 28 [ 59.358084][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.626925][ T5222] validate_nla: 1 callbacks suppressed [ 59.626945][ T5222] netlink: 'syz.5.642': attribute type 3 has an invalid length. [ 59.650709][ T5222] netlink: 132 bytes leftover after parsing attributes in process `syz.5.642'. [ 59.773983][ T5233] loop5: detected capacity change from 0 to 1024 [ 59.808684][ T5233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 59.817261][ T5233] System zones: 0-1, 3-36 [ 59.822202][ T5233] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.647: bad orphan inode 134217728 [ 59.832936][ T5233] loop5: lost filesystem error report for type 5 error -117 [ 59.833487][ T5233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.910627][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.041385][ T5248] loop0: detected capacity change from 0 to 256 [ 60.047778][ T5247] batadv_slave_1: entered promiscuous mode [ 60.048404][ T5248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.067198][ T5248] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.070465][ T5246] loop5: detected capacity change from 0 to 4096 [ 60.085469][ T5243] batadv_slave_1: left promiscuous mode [ 60.098096][ T5246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.203378][ T5254] loop1: detected capacity change from 0 to 764 [ 60.213016][ T5254] ISOFS: unable to read i-node block [ 60.302292][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.578093][ T5284] SELinux: Context system_u:object is not valid (left unmapped). [ 60.999111][ T5306] team0: Device vxcan3 is of different type [ 61.163180][ T5312] loop4: detected capacity change from 0 to 8192 [ 61.364900][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 61.364916][ T28] audit: type=1400 audit(1775154921.994:552): avc: denied { create } for pid=5338 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.423871][ T28] audit: type=1400 audit(1775154921.994:553): avc: denied { write } for pid=5338 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.459056][ T28] audit: type=1400 audit(1775154921.994:554): avc: denied { read } for pid=5338 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.486240][ T28] audit: type=1400 audit(1775154922.044:555): avc: denied { ioctl } for pid=5338 comm="syz.6.694" path="socket:[11611]" dev="sockfs" ino=11611 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.540564][ T5357] netlink: 88 bytes leftover after parsing attributes in process `syz.5.702'. [ 61.566251][ T28] audit: type=1400 audit(1775154922.194:556): avc: denied { ioctl } for pid=5358 comm="syz.0.703" path="socket:[11670]" dev="sockfs" ino=11670 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.594042][ T5360] loop1: detected capacity change from 0 to 512 [ 61.600917][ T5360] EXT4-fs: Ignoring removed nobh option [ 61.624022][ T5360] ------------[ cut here ]------------ [ 61.629565][ T5360] EA inode 11 i_nlink=1026 [ 61.629589][ T5360] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.699/5360 [ 61.644868][ T5360] Modules linked in: [ 61.648879][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(full) [ 61.658198][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.668420][ T5360] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 61.675234][ T5360] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf d4 dd 03 66 66 66 66 66 66 2e [ 61.694900][ T5360] RSP: 0018:ffffc90002b135a8 EFLAGS: 00010246 [ 61.701308][ T5360] RAX: ffff8881049b5e88 RBX: ffff88811c04f628 RCX: ffffffff81c02ad8 [ 61.709549][ T5360] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 61.717737][ T5360] RBP: 000000000000000b R08: 000188811c04f5db R09: 0000000000000000 [ 61.717933][ T28] audit: type=1400 audit(1775154922.344:557): avc: denied { read } for pid=5365 comm="syz.6.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.725856][ T5360] R10: ffffc90002b134d8 R11: 0001c90002b134d8 R12: ffff88811c04f5d8 [ 61.753063][ T5360] R13: ffffffff871dcd00 R14: ffff88811c04f590 R15: 0000000000000001 [ 61.761100][ T5360] FS: 00007f9827fd66c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 61.770127][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.776719][ T5360] CR2: 00007f02816a56b8 CR3: 0000000106464000 CR4: 00000000003506f0 [ 61.785828][ T5360] Call Trace: [ 61.789122][ T5360] [ 61.792638][ T5360] ext4_xattr_set_entry+0x77c/0x1010 [ 61.798130][ T5360] ext4_xattr_ibody_set+0x184/0x3c0 [ 61.803420][ T5360] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 61.809259][ T5360] __ext4_expand_extra_isize+0x246/0x280 [ 61.815272][ T5360] __ext4_mark_inode_dirty+0x29b/0x400 [ 61.820946][ T5360] ext4_evict_inode+0x865/0xe40 [ 61.825822][ T5360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 61.831510][ T5360] evict+0x2af/0x510 [ 61.835467][ T5360] ? __dquot_initialize+0x146/0x7c0 [ 61.840721][ T5360] iput+0x41a/0x580 [ 61.844548][ T5360] ext4_process_orphan+0x1a9/0x1c0 [ 61.849720][ T5360] ext4_orphan_cleanup+0x6a8/0xa00 [ 61.854924][ T5360] ext4_fill_super+0x3414/0x37c0 [ 61.860106][ T5360] ? set_blocksize+0x14c/0x270 [ 61.864969][ T5360] ? setup_bdev_super+0x30e/0x370 [ 61.870028][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.875369][ T5360] get_tree_bdev_flags+0x291/0x300 [ 61.880641][ T5360] ? __pfx_ext4_fill_super+0x10/0x10 [ 61.886028][ T5360] get_tree_bdev+0x1f/0x30 [ 61.890502][ T5360] ext4_get_tree+0x1c/0x30 [ 61.894968][ T5360] vfs_get_tree+0x57/0x1d0 [ 61.899430][ T5360] do_new_mount+0x288/0x8d0 [ 61.904190][ T5360] path_mount+0x4d0/0xbc0 [ 61.908728][ T5360] __se_sys_mount+0x28c/0x2e0 [ 61.913513][ T5360] __x64_sys_mount+0x67/0x80 [ 61.918125][ T5360] x64_sys_call+0x2d61/0x3020 [ 61.922982][ T5360] do_syscall_64+0x12c/0x370 [ 61.927606][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.933707][ T5360] RIP: 0033:0x7f982959da8a [ 61.938137][ T5360] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.957830][ T5360] RSP: 002b:00007f9827fd5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.966672][ T5360] RAX: ffffffffffffffda RBX: 00007f9827fd5ee0 RCX: 00007f982959da8a [ 61.974724][ T5360] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f9827fd5ea0 [ 61.982909][ T5360] RBP: 0000200000000180 R08: 00007f9827fd5ee0 R09: 0000000000800718 [ 61.991049][ T5360] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 61.999118][ T5360] R13: 00007f9827fd5ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 62.007293][ T5360] [ 62.010347][ T5360] ---[ end trace 0000000000000000 ]--- [ 62.016849][ T5360] EXT4-fs (loop1): 1 orphan inode deleted [ 62.023107][ T5360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.141401][ T5387] loop0: detected capacity change from 0 to 256 [ 62.151868][ T5387] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.171342][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.235546][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 62.266295][ T5395] FAT-fs (loop0): Filesystem has been set read-only [ 62.278249][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.304780][ T28] audit: type=1326 audit(1775154922.934:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 62.331837][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.354967][ T28] audit: type=1326 audit(1775154922.934:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 62.386065][ T28] audit: type=1326 audit(1775154922.934:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 62.428571][ T28] audit: type=1326 audit(1775154922.934:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 62.454891][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.475093][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.485732][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.494064][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.502624][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.549803][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.573200][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.629977][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.715783][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.740307][ T5419] loop1: detected capacity change from 0 to 8192 [ 62.751669][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.824177][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.859577][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.897370][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.919428][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.952134][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.008372][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.045747][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.090917][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.135924][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.182236][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.206469][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.214732][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.223243][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.231524][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.244750][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.259813][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.267889][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.276166][ T5395] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 63.518331][ T5449] xt_hashlimit: size too large, truncated to 1048576 [ 63.765692][ T5473] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.777587][ T5473] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 63.822376][ T5481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.753'. [ 64.101007][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 64.128382][ T5520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.172736][ T5520] bond1: (slave batadv1): Opening slave failed [ 64.602311][ T5540] loop5: detected capacity change from 0 to 512 [ 64.630417][ T5540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.654284][ T5540] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.735437][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.813134][ T5562] loop5: detected capacity change from 0 to 2048 [ 64.882437][ T5568] loop0: detected capacity change from 0 to 512 [ 64.898374][ T5562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.927259][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.940054][ T5568] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.946546][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.982670][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.004176][ T5577] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.788'. [ 65.022089][ T5577] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 65.086749][ T5583] syzkaller1: entered promiscuous mode [ 65.094855][ T5583] syzkaller1: entered allmulticast mode [ 65.279220][ T5590] loop4: detected capacity change from 0 to 512 [ 65.303385][ T5590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.316462][ T5590] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.355167][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.393151][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 65.555761][ T5610] loop5: detected capacity change from 0 to 128 [ 65.607106][ T5614] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 65.674030][ T5621] IPv6: addrconf: prefix option has invalid lifetime [ 66.126273][ T5637] netlink: 'syz.0.813': attribute type 19 has an invalid length. [ 66.154939][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 66.195309][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.210847][ T5637] netlink: 'syz.0.813': attribute type 19 has an invalid length. [ 66.234733][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.240433][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 66.243717][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.264910][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.498491][ T5639] loop5: detected capacity change from 0 to 32768 [ 66.592382][ T3295] loop5: p1 p3 < > [ 66.614333][ T5639] loop5: p1 p3 < > [ 66.625636][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 66.625716][ T28] audit: type=1400 audit(1775154927.254:614): avc: denied { execute_no_trans } for pid=5653 comm="syz.0.820" path="/180/file0" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.710518][ T28] audit: type=1400 audit(1775154927.304:615): avc: denied { connect } for pid=5655 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.816526][ T5668] loop5: detected capacity change from 0 to 512 [ 66.830525][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 66.843454][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 66.863944][ T5668] EXT4-fs (loop5): 1 truncate cleaned up [ 66.876415][ T5668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.900517][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 66.916908][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 66.974240][ T28] audit: type=1400 audit(1775154927.604:616): avc: denied { remove_name } for pid=5665 comm="syz.5.826" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.021503][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.025258][ T28] audit: type=1400 audit(1775154927.604:617): avc: denied { rename } for pid=5665 comm="syz.5.826" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.093921][ T28] audit: type=1400 audit(1775154927.604:618): avc: denied { unlink } for pid=5665 comm="syz.5.826" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.117584][ T5681] loop5: detected capacity change from 0 to 128 [ 67.240337][ T5681] bio_check_eod: 530 callbacks suppressed [ 67.240356][ T5681] syz.5.831: attempt to access beyond end of device [ 67.240356][ T5681] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 67.470795][ T5700] loop4: detected capacity change from 0 to 1024 [ 67.559727][ T5700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 67.611176][ T5700] System zones: 0-1, 3-36 [ 67.619381][ T5700] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.840: bad orphan inode 134217728 [ 67.630538][ T5700] loop4: lost filesystem error report for type 5 error -117 [ 67.631049][ T5700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.750570][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.752749][ T5710] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 67.847797][ T5719] loop5: detected capacity change from 0 to 512 [ 67.863911][ T5719] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.848: inode has both inline data and extents flags [ 67.877616][ T5719] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.878194][ T5719] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.848: couldn't read orphan inode 15 (err -117) [ 67.889654][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 67.905693][ C1] EXT4-fs (loop5): initial error at time 1775154928: ext4_orphan_get:1397: inode 15 [ 67.915086][ C1] EXT4-fs (loop5): last error at time 1775154928: ext4_orphan_get:1397: inode 15 [ 67.924697][ T28] audit: type=1400 audit(1775154928.494:619): avc: denied { write } for pid=5714 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.985869][ T5719] loop5: lost filesystem error report for type 5 error -117 [ 67.986426][ T5719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.082277][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.171818][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'. [ 68.190613][ T5732] loop1: detected capacity change from 0 to 128 [ 68.221377][ T5732] syz.1.854: attempt to access beyond end of device [ 68.221377][ T5732] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 68.397901][ T5742] loop0: detected capacity change from 0 to 1024 [ 68.438028][ T5742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 68.447807][ T5742] System zones: 0-1, 3-36 [ 68.468073][ T5742] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.857: bad orphan inode 134217728 [ 68.478845][ T5742] loop0: lost filesystem error report for type 5 error -117 [ 68.479568][ T5742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.550988][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.294535][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 69.352207][ T28] audit: type=1400 audit(1775154929.984:620): avc: denied { watch watch_reads } for pid=5769 comm="syz.5.869" path="/183/file1" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.472581][ T5774] loop4: detected capacity change from 0 to 128 [ 69.549789][ T5774] syz.4.870: attempt to access beyond end of device [ 69.549789][ T5774] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 69.750428][ T5782] loop1: detected capacity change from 0 to 1024 [ 69.766759][ T5782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 69.779390][ T5782] System zones: 0-1, 3-36 [ 69.787446][ T5782] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.873: bad orphan inode 134217728 [ 69.798136][ T5782] loop1: lost filesystem error report for type 5 error -117 [ 69.799796][ T5782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.032526][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.125029][ T5801] netlink: 'syz.4.890': attribute type 14 has an invalid length. [ 70.136720][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 70.146260][ T5801] netlink: 'syz.4.890': attribute type 14 has an invalid length. [ 70.154254][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 70.245674][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 70.304890][ T28] audit: type=1400 audit(1775154930.934:621): avc: denied { mounton } for pid=5812 comm="syz.4.896" path="/181/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.328417][ T3376] kernel read not supported for file /mISDNtimer (pid: 3376 comm: kworker/0:2) [ 70.412686][ T5822] syzkaller1: entered promiscuous mode [ 70.418284][ T5822] syzkaller1: entered allmulticast mode [ 70.472708][ T28] audit: type=1326 audit(1775154931.104:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.1.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 70.501130][ T28] audit: type=1326 audit(1775154931.104:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.1.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 70.550711][ T5830] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.892'. [ 71.404298][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 71.472403][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 71.528693][ T5980] loop0: detected capacity change from 0 to 128 [ 71.575619][ T5980] syz.0.921: attempt to access beyond end of device [ 71.575619][ T5980] loop0: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 71.592083][ T5980] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 71.611774][ T5980] syz.0.921: attempt to access beyond end of device [ 71.611774][ T5980] loop0: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 71.653800][ T5980] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 71.662851][ T5980] syz.0.921: attempt to access beyond end of device [ 71.662851][ T5980] loop0: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 71.678419][ T5980] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 71.687396][ T5980] syz.0.921: attempt to access beyond end of device [ 71.687396][ T5980] loop0: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 71.704555][ T5980] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 72.533445][ T6013] loop4: detected capacity change from 0 to 128 [ 72.540794][ T6015] netlink: 'syz.0.935': attribute type 21 has an invalid length. [ 72.548572][ T6015] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.561256][ T6015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.568498][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 72.575744][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 72.582962][ T6015] IPv6: NLM_F_CREATE should be set when creating new route [ 73.097802][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 73.283756][ T6063] bridge0: port 3(syz_tun) entered blocking state [ 73.290665][ T6063] bridge0: port 3(syz_tun) entered disabled state [ 73.328692][ T6063] syz_tun: entered allmulticast mode [ 73.342824][ T6063] syz_tun: entered promiscuous mode [ 73.355076][ T6063] bridge0: port 3(syz_tun) entered blocking state [ 73.361695][ T6063] bridge0: port 3(syz_tun) entered forwarding state [ 73.435889][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 73.435907][ T28] audit: type=1326 audit(1775154934.064:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.520903][ T28] audit: type=1326 audit(1775154934.104:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.551891][ T28] audit: type=1326 audit(1775154934.104:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.580006][ T28] audit: type=1326 audit(1775154934.104:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.603755][ T28] audit: type=1326 audit(1775154934.104:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.627707][ T28] audit: type=1326 audit(1775154934.104:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.661258][ T28] audit: type=1326 audit(1775154934.104:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.685185][ T28] audit: type=1326 audit(1775154934.104:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.716620][ T28] audit: type=1326 audit(1775154934.104:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 73.740587][ T28] audit: type=1326 audit(1775154934.104:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 74.472101][ T6114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.702219][ T6136] loop5: detected capacity change from 0 to 128 [ 74.952265][ T6131] loop4: detected capacity change from 0 to 32768 [ 75.001085][ T6131] loop4: p1 p3 < > [ 75.011503][ T3001] loop4: p1 p3 < > [ 75.179076][ T6166] netlink: 'syz.6.995': attribute type 9 has an invalid length. [ 75.195475][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 75.203586][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.211502][ T40] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.219189][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 75.226609][ T6166] netlink: 'syz.6.995': attribute type 9 has an invalid length. [ 75.240934][ T40] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.250117][ T40] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.258929][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 75.260345][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.267820][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.291077][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 75.419238][ T6195] netlink: 'syz.6.1006': attribute type 1 has an invalid length. [ 75.434437][ T6195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.463907][ T6176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.468153][ T6195] bond1: (slave geneve2): making interface the new active one [ 75.483413][ T6195] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 75.514683][ T6195] syz.6.1006 (6195) used greatest stack depth: 8192 bytes left [ 75.991573][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.000219][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.099232][ T6237] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 76.110697][ T6237] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 76.672266][ T6257] loop5: detected capacity change from 0 to 32768 [ 76.703014][ T6265] 9p: Unknown uid 00000000004294967295 [ 76.737113][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1040'. [ 76.746869][ T3295] loop5: p1 p3 < > [ 76.755358][ T6257] loop5: p1 p3 < > [ 76.883956][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.884315][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 76.914216][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 76.925577][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 77.877429][ T6350] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 77.885404][ T6350] netlink: 'syz.5.1074': attribute type 2 has an invalid length. [ 78.363716][ T6360] loop1: detected capacity change from 0 to 32768 [ 78.410110][ T3295] loop1: p1 p3 < > [ 78.429593][ T6360] loop1: p1 p3 < > [ 78.564762][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 78.577183][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 78.582632][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.596904][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.895291][ T6385] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 78.903996][ T6385] netlink: 'syz.4.1086': attribute type 2 has an invalid length. [ 79.165253][ T6405] loop0: detected capacity change from 0 to 4096 [ 79.178458][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.218563][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.253500][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 79.263745][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 80.922290][ T6433] loop0: detected capacity change from 0 to 32768 [ 80.980052][ T3295] loop0: p1 p3 < > [ 80.987097][ T6433] loop0: p1 p3 < > [ 81.188951][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 81.202468][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.231860][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 81.242424][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.695921][ T6488] loop1: detected capacity change from 0 to 1024 [ 81.756196][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 81.769409][ T6492] bridge0: port 3(syz_tun) entered disabled state [ 81.779988][ T6492] syz_tun (unregistering): left allmulticast mode [ 81.788711][ T6492] syz_tun (unregistering): left promiscuous mode [ 81.827111][ T6492] bridge0: port 3(syz_tun) entered disabled state [ 81.827156][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.847341][ T6488] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.981064][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.130528][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 83.130546][ T28] audit: type=1400 audit(1775154943.764:733): avc: denied { create } for pid=6528 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.215306][ T28] audit: type=1400 audit(1775154943.794:734): avc: denied { write } for pid=6528 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.394923][ T6519] Set syz1 is full, maxelem 65536 reached [ 83.531982][ T28] audit: type=1326 audit(1775154944.164:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.0.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1feec819 code=0x0 [ 83.782978][ T28] audit: type=1326 audit(1775154944.414:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.819885][ T28] audit: type=1326 audit(1775154944.414:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.848691][ T28] audit: type=1326 audit(1775154944.434:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.904486][ T6556] loop1: detected capacity change from 0 to 8192 [ 83.912978][ T28] audit: type=1326 audit(1775154944.434:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.939758][ T28] audit: type=1326 audit(1775154944.434:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.971606][ T28] audit: type=1326 audit(1775154944.434:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 83.995470][ T6556] loop1: p2 p3 p4[EZD] [ 83.995769][ T28] audit: type=1326 audit(1775154944.434:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982959c819 code=0x7ffc0000 [ 84.002186][ T6556] loop1: p3 start 331781 is beyond EOD, truncated [ 84.034359][ T6556] loop1: p4 size 197376 extends beyond EOD, truncated [ 84.120393][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 84.120686][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 84.602235][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 85.058273][ T6600] loop5: detected capacity change from 0 to 4096 [ 85.111402][ T6600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.197512][ T6616] loop1: detected capacity change from 0 to 512 [ 85.206504][ T6616] EXT4-fs: Ignoring removed oldalloc option [ 85.243325][ T3545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.262933][ T6616] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1179: invalid indirect mapped block 4294967295 (level 1) [ 85.300009][ T6616] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.314693][ T6616] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1179: invalid indirect mapped block 4294967295 (level 1) [ 85.324148][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.324171][ C1] EXT4-fs (loop1): initial error at time 1775154945: ext4_free_branches:1023: inode 11 [ 85.324204][ C1] EXT4-fs (loop1): last error at time 1775154945: ext4_free_branches:1023: inode 11 [ 85.373494][ T6616] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.373818][ T6616] EXT4-fs (loop1): 2 truncates cleaned up [ 85.414298][ T6616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.486694][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.964715][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 85.999222][ T6622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.710899][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1200'. [ 87.683117][ T6677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.789978][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 87.815690][ T6677] bridge0: port 3(syz_tun) entered disabled state [ 87.848792][ T6677] syz_tun (unregistering): left allmulticast mode [ 87.856549][ T6677] syz_tun (unregistering): left promiscuous mode [ 87.874037][ T6677] bridge0: port 3(syz_tun) entered disabled state [ 88.188780][ T6687] Set syz1 is full, maxelem 65536 reached [ 88.579362][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 89.576876][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 89.686464][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 89.686478][ T28] audit: type=1326 audit(1775154950.314:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 89.756821][ T28] audit: type=1326 audit(1775154950.344:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 89.781692][ T28] audit: type=1326 audit(1775154950.344:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 89.850328][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.870790][ T28] audit: type=1326 audit(1775154950.344:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 89.874252][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.940218][ T28] audit: type=1326 audit(1775154950.344:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.009840][ T28] audit: type=1326 audit(1775154950.344:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.069854][ T28] audit: type=1326 audit(1775154950.344:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.119696][ T28] audit: type=1326 audit(1775154950.344:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.171967][ T28] audit: type=1326 audit(1775154950.344:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.229078][ T28] audit: type=1326 audit(1775154950.344:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2967c819 code=0x7ffc0000 [ 90.343500][ T6798] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1257'. [ 90.844500][ T6766] Set syz1 is full, maxelem 65536 reached [ 91.291778][ T6815] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.316248][ T6815] bond2: (slave lo): Enslaving as an active interface with an up link [ 91.330554][ T6815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 91.645598][ T6842] batadv_slave_1: entered promiscuous mode [ 91.666143][ T6841] batadv_slave_1: left promiscuous mode [ 92.148533][ T6870] loop5: detected capacity change from 0 to 256 [ 92.212401][ T6870] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.338171][ T6870] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.934188][ T6892] loop5: detected capacity change from 0 to 256 [ 93.125541][ T6902] loop1: detected capacity change from 0 to 4096 [ 93.141757][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.181262][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.632038][ T6892] ================================================================== [ 93.640131][ T6892] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 93.647226][ T6892] [ 93.649531][ T6892] write to 0xffff888108723814 of 4 bytes by task 6893 on cpu 0: [ 93.657149][ T6892] xas_set_mark+0x12b/0x140 [ 93.661637][ T6892] __folio_start_writeback+0x17b/0x370 [ 93.667085][ T6892] __block_write_full_folio+0x53a/0x8f0 [ 93.672632][ T6892] block_write_full_folio+0x2c1/0x2e0 [ 93.677994][ T6892] __mpage_writepages+0x763/0x1390 [ 93.683089][ T6892] fat_writepages+0x26/0x30 [ 93.687579][ T6892] do_writepages+0x1c6/0x310 [ 93.692158][ T6892] file_write_and_wait_range+0x178/0x2f0 [ 93.697797][ T6892] __generic_file_fsync+0x46/0x160 [ 93.702889][ T6892] fat_file_fsync+0x49/0x100 [ 93.707469][ T6892] vfs_fsync_range+0xc5/0xe0 [ 93.712067][ T6892] generic_file_write_iter+0x1ba/0x310 [ 93.717597][ T6892] iter_file_splice_write+0x6c4/0xa80 [ 93.722946][ T6892] direct_splice_actor+0x156/0x2a0 [ 93.728041][ T6892] splice_direct_to_actor+0x311/0x670 [ 93.733394][ T6892] do_splice_direct+0x119/0x1a0 [ 93.738227][ T6892] do_sendfile+0x382/0x650 [ 93.742624][ T6892] __x64_sys_sendfile64+0x105/0x150 [ 93.747802][ T6892] x64_sys_call+0x2dc4/0x3020 [ 93.752483][ T6892] do_syscall_64+0x12c/0x370 [ 93.757054][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.762924][ T6892] [ 93.765239][ T6892] read to 0xffff888108723814 of 4 bytes by task 6892 on cpu 1: [ 93.772842][ T6892] xas_find_marked+0x5d7/0x620 [ 93.777679][ T6892] filemap_get_folios_tag+0xfa/0x510 [ 93.782953][ T6892] filemap_fdatawait_range+0x88/0x1e0 [ 93.788315][ T6892] __writeback_single_inode+0xdb/0x720 [ 93.793752][ T6892] writeback_single_inode+0x16d/0x3f0 [ 93.799110][ T6892] sync_inode_metadata+0x6e/0xa0 [ 93.804027][ T6892] __generic_file_fsync+0x109/0x160 [ 93.809204][ T6892] fat_file_fsync+0x49/0x100 [ 93.813783][ T6892] vfs_fsync_range+0xc5/0xe0 [ 93.818376][ T6892] generic_file_write_iter+0x1ba/0x310 [ 93.823823][ T6892] iter_file_splice_write+0x6c4/0xa80 [ 93.829174][ T6892] direct_splice_actor+0x156/0x2a0 [ 93.834266][ T6892] splice_direct_to_actor+0x311/0x670 [ 93.839625][ T6892] do_splice_direct+0x119/0x1a0 [ 93.844472][ T6892] do_sendfile+0x382/0x650 [ 93.848874][ T6892] __x64_sys_sendfile64+0x105/0x150 [ 93.854149][ T6892] x64_sys_call+0x2dc4/0x3020 [ 93.858815][ T6892] do_syscall_64+0x12c/0x370 [ 93.863394][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.869289][ T6892] [ 93.871601][ T6892] value changed: 0x0a000021 -> 0x04000021 [ 93.877319][ T6892] [ 93.879637][ T6892] Reported by Kernel Concurrency Sanitizer on: [ 93.885811][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.5.1304 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.896674][ T6892] Tainted: [W]=WARN [ 93.900639][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.910690][ T6892] ==================================================================