last executing test programs: 3m21.113347731s ago: executing program 32 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.115826016s ago: executing program 33 (id=689): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 2m36.907965477s ago: executing program 34 (id=1194): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) unshare(0x28000600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000240)={0x1, 0x9}) 2m34.778390367s ago: executing program 35 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r0}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 2m29.718867639s ago: executing program 2 (id=1354): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) 2m29.671707581s ago: executing program 2 (id=1355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) flistxattr(r0, &(0x7f0000000180)=""/190, 0xbe) 2m28.73662599s ago: executing program 2 (id=1374): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 2m28.594017337s ago: executing program 2 (id=1380): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0xb3) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2m28.224018796s ago: executing program 2 (id=1387): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x5, 0x3ff) 2m28.030795726s ago: executing program 2 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(0x3) 2m28.005137558s ago: executing program 36 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(0x3) 1m21.985207461s ago: executing program 7 (id=2810): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x2) 1m21.843837568s ago: executing program 7 (id=2814): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) inotify_rm_watch(r2, r1) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) 1m21.799046551s ago: executing program 7 (id=2816): perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000)=r3, 0x8) 1m21.752326813s ago: executing program 7 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m21.697213116s ago: executing program 7 (id=2823): syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m21.403017721s ago: executing program 7 (id=2833): r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, &(0x7f0000000580)={0x0, ""/194}, 0xca, 0x1, 0x1000) 1m21.353389884s ago: executing program 37 (id=2833): r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, &(0x7f0000000580)={0x0, ""/194}, 0xca, 0x1, 0x1000) 1m5.76272123s ago: executing program 6 (id=3134): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.703611893s ago: executing program 6 (id=3136): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 1m4.575061851s ago: executing program 6 (id=3158): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x82) 1m4.514752884s ago: executing program 6 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) 1m4.428126738s ago: executing program 6 (id=3161): unshare(0x22060600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.events\x00', 0x5000000, 0x0) pread64(r2, &(0x7f0000000680)=""/243, 0xf3, 0x88) 1m4.181496702s ago: executing program 6 (id=3164): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x810, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m4.117438705s ago: executing program 38 (id=3164): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x810, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 47.552481251s ago: executing program 3 (id=3474): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB="00000000d3ec66ecc053c543da2e2e"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 47.488213184s ago: executing program 3 (id=3477): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x90) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file1\x00', 0xaf7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x2, 0x0) 47.487559844s ago: executing program 3 (id=3478): perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* '], 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 47.354887891s ago: executing program 3 (id=3479): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 47.327425003s ago: executing program 3 (id=3480): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 47.295448204s ago: executing program 3 (id=3481): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x4}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RFSYNC(r1, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) 32.232085103s ago: executing program 39 (id=3481): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x4}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RFSYNC(r1, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) 19.546847969s ago: executing program 0 (id=3853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x21dfdbfc, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xfffffffffffffc8c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x805}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000003000000030000060400000007000000060000000600000005000000c44747220000000000612e2e61305f5f"], 0x0, 0x46, 0x0, 0x1, 0x68b}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.510381481s ago: executing program 0 (id=3855): open$dir(&(0x7f0000000100)='./file0\x00', 0x141000, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004040) 19.178002538s ago: executing program 0 (id=3864): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000fc0)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) 19.106652462s ago: executing program 40 (id=3864): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000fc0)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) 1.962908108s ago: executing program 9 (id=4158): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000002f40)=[{0x0}, {&(0x7f0000000480)=""/215, 0xd7}], 0x2) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x24042850}, 0x4) 1.7342603s ago: executing program 5 (id=4159): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000807, 0x0) 1.455745765s ago: executing program 4 (id=4161): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x6fecb1) 1.414562177s ago: executing program 4 (id=4163): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.326097362s ago: executing program 4 (id=4166): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 1.189273098s ago: executing program 4 (id=4167): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 1.129024602s ago: executing program 9 (id=4171): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.090416263s ago: executing program 4 (id=4172): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.047856355s ago: executing program 4 (id=4173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x803}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.004698938s ago: executing program 8 (id=4176): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 894.849544ms ago: executing program 8 (id=4177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 857.227086ms ago: executing program 5 (id=4178): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000004000000000000000076"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x3f, 0x0, 0x0, 0x0) 810.550168ms ago: executing program 1 (id=4179): sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004540)={&(0x7f0000004200)={0xc0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf33}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x903}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ed85f8c130bd42e7a3519e2275dab5aa8b6112e3"}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4044059}, 0x4000811) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 790.850999ms ago: executing program 8 (id=4180): syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x80800) io_submit(r0, 0xf000, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="66fe1ff6b94d79bc", 0x8, 0x7}]) unshare(0x400) 751.836421ms ago: executing program 5 (id=4181): socket(0xb, 0x3, 0x87) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 717.647903ms ago: executing program 1 (id=4182): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 665.021166ms ago: executing program 8 (id=4183): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 620.791258ms ago: executing program 1 (id=4184): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x40, 0xdd}, 0x106a02, 0x10004, 0x20da, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$can_raw(0x1d, 0x3, 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 602.989869ms ago: executing program 5 (id=4185): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e22000005000900290000000800140005000000080003000a0101006c031680100001800c000400f5ffffff0d0000"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 507.734074ms ago: executing program 9 (id=4186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x18}, 0x8000) 498.496864ms ago: executing program 5 (id=4187): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r1, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 496.249394ms ago: executing program 8 (id=4188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000240)={[{@bh}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0xfff}}]}, 0xff, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 469.099736ms ago: executing program 1 (id=4189): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 461.795006ms ago: executing program 9 (id=4190): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffb}, 0xfffffff3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 412.570359ms ago: executing program 1 (id=4191): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x0, 0x4, 0x3]}, 0x20) r1 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1}, 0x20) 394.148949ms ago: executing program 5 (id=4192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 388.95624ms ago: executing program 9 (id=4193): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf6e}}, {@dioread_nolock}, {@norecovery}]}, 0x2, 0x4c5, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 337.448092ms ago: executing program 1 (id=4194): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000080)="010000000300060000071a80000001cc", 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x7800, 0x2, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 53.069137ms ago: executing program 9 (id=4195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 8 (id=4196): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) kernel console output (not intermixed with test programs): vhci_hcd vhci_hcd.1: release socket [ 157.331205][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 157.506957][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 157.874865][T11166] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2658'. [ 157.884487][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2658'. [ 158.022727][T11181] loop9: detected capacity change from 0 to 1024 [ 158.047740][T11181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.062628][T11181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.166072][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.253750][T11190] loop9: detected capacity change from 0 to 512 [ 158.326667][ T28] audit: type=1400 audit(1776796947.674:768): avc: denied { kexec_image_load } for pid=11197 comm="syz.1.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 158.365867][T11190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.404722][T11190] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.524825][T11212] loop7: detected capacity change from 0 to 512 [ 158.539409][T11212] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2681: invalid indirect mapped block 4294967295 (level 1) [ 158.547360][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 158.565253][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.578028][T11212] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.583680][T11212] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2681: invalid indirect mapped block 4294967295 (level 1) [ 158.592889][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 158.592913][ C1] EXT4-fs (loop7): initial error at time 1776796947: ext4_free_branches:1023: inode 11 [ 158.592948][ C1] EXT4-fs (loop7): last error at time 1776796947: ext4_free_branches:1023: inode 11 [ 158.632598][T11212] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.638171][T11212] EXT4-fs (loop7): 2 truncates cleaned up [ 158.657263][T11212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.703904][T11220] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 158.718035][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 159.056562][ T6933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.114715][T11250] loop9: detected capacity change from 0 to 512 [ 159.122679][T11250] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 159.211113][T11254] loop7: detected capacity change from 0 to 1024 [ 159.254431][T11254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.297091][T11254] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.312864][T11260] xt_hashlimit: size too large, truncated to 1048576 [ 159.340714][T11254] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 3) [ 159.380232][T11254] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 159.414000][T11254] EXT4-fs (loop7): This should not happen!! Data will be lost [ 159.414000][T11254] [ 159.440171][T11272] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.474907][T11272] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.493287][T11276] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.507882][T11252] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.509536][T11276] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.542863][T11272] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.567639][T11272] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.586945][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 159.594500][T11252] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.627079][T11276] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.638481][T11276] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.649051][T11252] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.663508][T11272] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.695288][T11254] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.2708: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.760314][T11276] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.779484][T11276] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.837861][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2715'. [ 159.850948][T11276] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.869635][T11276] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.935238][ T5475] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.947429][ T5475] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.982564][ T5475] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.006598][ T5475] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.026182][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.059715][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.082046][ T5475] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.100982][ T5475] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.136579][ T28] audit: type=1400 audit(1776796949.484:769): avc: denied { listen } for pid=11316 comm="syz.6.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.199526][ T5475] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 160.223518][ T5475] EXT4-fs (loop7): This should not happen!! Data will be lost [ 160.223518][ T5475] [ 160.234051][ T5475] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 160.246814][ T5475] EXT4-fs (loop7): This should not happen!! Data will be lost [ 160.246814][ T5475] [ 160.257475][ T6933] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 160.269523][ T6933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.627074][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 161.162738][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'. [ 161.196423][T11362] netlink: 'syz.9.2742': attribute type 22 has an invalid length. [ 161.212634][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'. [ 161.327100][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'. [ 161.351325][T11362] netlink: 'syz.9.2742': attribute type 22 has an invalid length. [ 161.374481][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'. [ 161.444851][T11359] loop7: detected capacity change from 0 to 32768 [ 161.460888][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.468629][T11382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.477303][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.485415][T11382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.509251][T11359] loop7: p1 p3 < > [ 161.637077][T11382] batadv0 (unregistering): left promiscuous mode [ 161.667023][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 161.760697][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2759'. [ 161.882712][ T28] audit: type=1326 audit(1776796951.234:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 161.953727][ T28] audit: type=1326 audit(1776796951.234:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 161.999829][ T28] audit: type=1326 audit(1776796951.234:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.028013][ T28] audit: type=1326 audit(1776796951.234:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.052248][ T28] audit: type=1326 audit(1776796951.284:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f685ae2d04e code=0x7ffc0000 [ 162.075822][ T28] audit: type=1326 audit(1776796951.284:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f685ae2d04e code=0x7ffc0000 [ 162.099448][ T28] audit: type=1326 audit(1776796951.294:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f685ae2d04e code=0x7ffc0000 [ 162.123561][ T28] audit: type=1326 audit(1776796951.294:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.195475][ T28] audit: type=1326 audit(1776796951.294:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.227166][ T3625] usb 3-1: enqueue for inactive port 0 [ 162.238259][ T3625] usb 3-1: enqueue for inactive port 0 [ 162.263345][ T28] audit: type=1326 audit(1776796951.334:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.311843][ T28] audit: type=1326 audit(1776796951.334:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.6.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f685ae6c819 code=0x7ffc0000 [ 162.339241][ T3625] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 162.531517][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2788'. [ 162.623702][T11464] xt_hashlimit: size too large, truncated to 1048576 [ 162.706973][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 162.743078][T11471] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.021923][T11490] tls_set_device_offload: netdev not found [ 163.032328][T11492] netlink: 'syz.6.2801': attribute type 4 has an invalid length. [ 163.061521][T11492] netlink: 'syz.6.2801': attribute type 4 has an invalid length. [ 163.107747][ T28] audit: type=1400 audit(1776796952.454:781): avc: denied { create } for pid=11496 comm="syz.1.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.297387][T11510] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2811'. [ 163.317059][T11510] netlink: zone id is out of range [ 163.328786][T11510] netlink: zone id is out of range [ 163.375392][T11510] netlink: set zone limit has 8 unknown bytes [ 163.411256][T11516] loop8: detected capacity change from 1024 to 64 [ 163.747193][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 163.794591][ T5475] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.848819][ T5475] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.903761][ T5475] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.933657][ T5475] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.008555][T11537] loop9: detected capacity change from 0 to 32768 [ 164.142494][ T5475] batadv1: left allmulticast mode [ 164.142518][ T5475] batadv1: left promiscuous mode [ 164.142680][ T5475] bridge0: port 3(batadv1) entered disabled state [ 164.143331][ T5475] bridge_slave_1: left allmulticast mode [ 164.143361][ T5475] bridge_slave_1: left promiscuous mode [ 164.143484][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.144436][ T5475] bridge_slave_0: left allmulticast mode [ 164.144458][ T5475] bridge_slave_0: left promiscuous mode [ 164.144697][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.158649][T11537] loop9: p1 p3 < > [ 164.236481][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2838'. [ 164.258853][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 164.345046][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 164.346467][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 164.397767][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.407239][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.409549][ T5475] bond0 (unregistering): Released all slaves [ 164.464997][ T5475] tipc: Disabling bearer [ 164.465046][ T5475] tipc: Left network mode [ 164.494540][ T5475] hsr_slave_0: left promiscuous mode [ 164.495132][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.495150][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.501154][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.501174][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.507458][ T5475] veth1_vlan: left promiscuous mode [ 164.507503][ T5475] veth0_vlan: left promiscuous mode [ 164.786959][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 164.853554][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 164.862050][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 164.964531][ T3049] 8021q: adding VLAN 0 to HW filter on device eth13 [ 165.250180][ T5475] IPVS: stop unused estimator thread 0... [ 165.269352][T11561] chnl_net:caif_netlink_parms(): no params data found [ 165.350441][ T3049] 8021q: adding VLAN 0 to HW filter on device eth14 [ 165.360613][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.368046][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.375464][T11561] bridge_slave_0: entered allmulticast mode [ 165.382196][T11561] bridge_slave_0: entered promiscuous mode [ 165.393203][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.400379][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.407643][T11561] bridge_slave_1: entered allmulticast mode [ 165.414219][T11561] bridge_slave_1: entered promiscuous mode [ 165.432292][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.457116][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.486702][T11561] team0: Port device team_slave_0 added [ 165.495509][T11561] team0: Port device team_slave_1 added [ 165.512010][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.519209][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.545215][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.572300][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.584188][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.650846][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.711964][T11561] hsr_slave_0: entered promiscuous mode [ 165.733357][T11561] hsr_slave_1: entered promiscuous mode [ 165.796687][ T3049] 8021q: adding VLAN 0 to HW filter on device eth15 [ 165.826947][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 166.059092][ T3049] 8021q: adding VLAN 0 to HW filter on device eth16 [ 166.105204][T11561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.123574][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.138571][T11561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.157339][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.172512][T11561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.192571][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.213615][T11561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.233769][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.334078][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.379032][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.416517][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.423742][ T2059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.481475][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.488680][ T2059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.668236][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.796100][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2872'. [ 166.867197][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 166.954593][T11080] kmmpd-loop8: attempt to access beyond end of device [ 166.954593][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 166.984002][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 167.008488][T11080] EXT4-fs error (device loop8): kmmpd:182: comm kmmpd-loop8: Error writing to MMP block [ 167.124753][T11561] veth0_vlan: entered promiscuous mode [ 167.155726][T11561] veth1_vlan: entered promiscuous mode [ 167.213243][T11561] veth0_macvtap: entered promiscuous mode [ 167.241252][T11561] veth1_macvtap: entered promiscuous mode [ 167.278893][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.309739][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.341602][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 167.341617][ T28] audit: type=1400 audit(1776796956.694:787): avc: denied { ioctl } for pid=11798 comm="syz.8.2877" path="socket:[32780]" dev="sockfs" ino=32780 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.380420][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.406706][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.442123][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.468672][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.612518][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2879'. [ 167.633296][T11816] loop4: detected capacity change from 0 to 512 [ 167.647769][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2879'. [ 167.661374][T11816] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 167.691165][T11816] EXT4-fs (loop4): invalid journal inode [ 167.720132][T11816] EXT4-fs (loop4): can't get journal size [ 167.748676][T11816] EXT4-fs (loop4): 1 truncate cleaned up [ 167.758360][T11816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.780027][T11832] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 167.906990][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 167.921006][T11850] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 167.975577][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2890'. [ 168.444362][ T28] audit: type=1326 audit(1776796957.794:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e295bc819 code=0x7fc00000 [ 168.494666][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.691351][T11915] xt_hashlimit: size too large, truncated to 1048576 [ 168.946944][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 169.312163][T11978] loop4: detected capacity change from 0 to 1024 [ 169.342973][T11978] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.381856][T11978] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 169.396387][T11989] loop6: detected capacity change from 0 to 512 [ 169.411824][T11978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.428119][T11978] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2911: Invalid inode table block 0 in block_group 0 [ 169.454590][T11989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.480597][T11989] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.492164][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.494372][T11978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 169.501800][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 169.501839][ C1] EXT4-fs (loop4): initial error at time 1776796958: __ext4_get_inode_loc:4885 [ 169.501859][ C1] EXT4-fs (loop4): last error at time 1776796958: __ext4_get_inode_loc:4885 [ 169.574918][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.575069][T11978] EXT4-fs error (device loop4): ext4_quota_write:7423: inode #3: comm syz.4.2911: mark_inode_dirty error [ 169.626218][T11978] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.626371][T11978] Quota error (device loop4): write_blk: dquota write failed [ 169.663062][T11978] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 169.674612][T11978] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2911: Failed to acquire dquot type 0 [ 169.686158][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.686266][T11978] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2911: Invalid inode table block 0 in block_group 0 [ 169.717774][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.717871][T11978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 169.736066][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.736224][T11978] EXT4-fs error (device loop4): ext4_ext_truncate:4557: inode #15: comm syz.4.2911: mark_inode_dirty error [ 169.786555][T11978] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.786737][T11978] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2911: Invalid inode table block 0 in block_group 0 [ 169.819307][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.819420][T11978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 169.861643][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.861764][T11978] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 169.878538][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.879455][T11978] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.2911: Invalid inode table block 0 in block_group 0 [ 169.909577][ T5259] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.920355][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.941438][T11978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 169.960013][T11978] loop4: lost filesystem error report for type 5 error -117 [ 169.960115][T11978] EXT4-fs error (device loop4): ext4_truncate:4690: inode #15: comm syz.4.2911: mark_inode_dirty error [ 169.979556][T11978] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.981146][T11978] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 169.987087][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 170.015461][T11978] EXT4-fs (loop4): 1 truncate cleaned up [ 170.028973][T11978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.113675][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 170.127799][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 170.144107][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.234084][T12038] netlink: 'syz.9.2923': attribute type 7 has an invalid length. [ 170.254220][T12038] netlink: 'syz.9.2923': attribute type 7 has an invalid length. [ 170.498791][T12052] loop4: detected capacity change from 0 to 2048 [ 170.745916][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 170.761745][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 170.911496][T12079] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2943'. [ 170.950315][T12079] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.957617][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.983069][T12087] netlink: 'syz.6.2943': attribute type 1 has an invalid length. [ 171.001600][T12087] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2943'. [ 171.019106][T12089] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2946'. [ 171.028171][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 171.166734][T12100] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2951'. [ 171.389843][T12109] ip6gre1: entered promiscuous mode [ 171.395112][T12109] ip6gre1: entered allmulticast mode [ 171.439894][T12110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.464905][ T2059] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.493989][ T3492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.501604][ T2059] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.662928][T12118] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2959'. [ 171.790194][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 171.870520][T12145] syz.8.2971: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 171.895254][T12145] CPU: 0 UID: 0 PID: 12145 Comm: syz.8.2971 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.895289][T12145] Tainted: [W]=WARN [ 171.895295][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.895308][T12145] Call Trace: [ 171.895314][T12145] [ 171.895321][T12145] __dump_stack+0x1d/0x30 [ 171.895411][T12145] dump_stack_lvl+0x95/0xd0 [ 171.895445][T12145] dump_stack+0x15/0x1b [ 171.895541][T12145] warn_alloc+0x145/0x1c0 [ 171.895578][T12145] ? futex_unqueue+0xc5/0xf0 [ 171.895651][T12145] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 171.895717][T12145] ? __pfx_futex_wake_mark+0x10/0x10 [ 171.895754][T12145] ? __rcu_read_unlock+0x4e/0x70 [ 171.895788][T12145] ? avc_has_perm_noaudit+0xab/0x130 [ 171.895858][T12145] ? should_fail_ex+0x30/0x280 [ 171.895915][T12145] vmalloc_user_noprof+0x7d/0xb0 [ 171.895982][T12145] ? xskq_create+0x80/0xe0 [ 171.896015][T12145] xskq_create+0x80/0xe0 [ 171.896110][T12145] xsk_init_queue+0x70/0xb0 [ 171.896138][T12145] xsk_setsockopt+0x477/0x640 [ 171.896228][T12145] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.896255][T12145] __sys_setsockopt+0x184/0x200 [ 171.896292][T12145] __x64_sys_setsockopt+0x64/0x80 [ 171.896389][T12145] x64_sys_call+0x2327/0x3020 [ 171.896428][T12145] do_syscall_64+0x12c/0x3b0 [ 171.896556][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.896591][T12145] RIP: 0033:0x7f429282c819 [ 171.896613][T12145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.896642][T12145] RSP: 002b:00007f4291287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.896670][T12145] RAX: ffffffffffffffda RBX: 00007f4292aa5fa0 RCX: 00007f429282c819 [ 171.896688][T12145] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 171.896705][T12145] RBP: 00007f42928c2c91 R08: 0000000000000004 R09: 0000000000000000 [ 171.896721][T12145] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 171.896804][T12145] R13: 00007f4292aa6038 R14: 00007f4292aa5fa0 R15: 00007fff7b131fc8 [ 171.896830][T12145] [ 171.896865][T12145] Mem-Info: [ 171.987679][T11080] kmmpd-loop8: attempt to access beyond end of device [ 171.987679][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 172.055888][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 172.071171][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 172.139256][T12145] active_anon:9711 inactive_anon:7 isolated_anon:0 [ 172.139256][T12145] active_file:25411 inactive_file:2586 isolated_file:0 [ 172.139256][T12145] unevictable:0 dirty:280 writeback:0 [ 172.139256][T12145] slab_reclaimable:3748 slab_unreclaimable:24371 [ 172.139256][T12145] mapped:29207 shmem:462 pagetables:1788 [ 172.139256][T12145] sec_pagetables:0 bounce:0 [ 172.139256][T12145] kernel_misc_reclaimable:0 [ 172.139256][T12145] free:1857014 free_pcp:7277 free_cma:0 [ 172.202949][T12145] Node 0 active_anon:38844kB inactive_anon:28kB active_file:101644kB inactive_file:10344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116828kB dirty:1120kB writeback:0kB shmem:1848kB kernel_stack:4688kB pagetables:7152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.254960][T12145] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.285118][T12145] lowmem_reserve[]: 0 2878 7857 7857 [ 172.290831][T12145] Node 0 DMA32 free:2946980kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947344kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:104kB free_cma:0kB [ 172.307491][ T3417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.364503][T12145] lowmem_reserve[]: 0 0 4978 4978 [ 172.373485][T12145] Node 0 Normal free:4465716kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38728kB inactive_anon:28kB active_file:101644kB inactive_file:10344kB unevictable:0kB writepending:1120kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:29464kB local_pcp:12264kB free_cma:0kB [ 172.408238][T12145] lowmem_reserve[]: 0 0 0 0 [ 172.413055][T12145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.463238][T12145] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 5*64kB (M) 5*128kB (M) 3*256kB (M) 4*512kB (M) 4*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946980kB [ 172.492226][T12173] loop6: detected capacity change from 0 to 512 [ 172.498897][T12145] Node 0 Normal: 3687*4kB (UME) 1521*8kB (UM) 1174*16kB (UME) 780*32kB (UME) 399*64kB (UME) 350*128kB (UME) 187*256kB (UM) 111*512kB (UM) 81*1024kB (UM) 44*2048kB (UM) 988*4096kB (UM) = 4465604kB [ 172.543105][T12173] EXT4-fs (loop6): 1 truncate cleaned up [ 172.548021][ T3417] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.573580][T12145] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 172.581681][T12173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.595678][T12145] 28544 total pagecache pages [ 172.600667][ T28] audit: type=1400 audit(1776796961.944:789): avc: denied { map } for pid=12180 comm="syz.4.2983" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.624884][ T28] audit: type=1400 audit(1776796961.944:790): avc: denied { execute } for pid=12180 comm="syz.4.2983" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.628884][T12145] 33 pages in swap cache [ 172.675505][T12145] Free swap = 124864kB [ 172.680204][T12145] Total swap = 124996kB [ 172.684397][T12145] 2097051 pages RAM [ 172.688639][T12145] 0 pages HighMem/MovableOnly [ 172.689748][ T5259] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.693383][T12145] 81816 pages reserved [ 172.745463][ T28] audit: type=1400 audit(1776796962.094:791): avc: denied { getopt } for pid=12184 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.821733][T12197] loop9: detected capacity change from 0 to 764 [ 172.974456][T12212] loop9: detected capacity change from 0 to 256 [ 173.025218][T12212] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.112886][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 173.203173][T12215] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 173.209796][T12215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.218203][T12215] vhci_hcd vhci_hcd.0: Device attached [ 173.477003][ T7113] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 173.643917][T12216] vhci_hcd: connection reset by peer [ 173.661192][ T12] vhci_hcd vhci_hcd.8: stop threads [ 173.675397][ T12] vhci_hcd vhci_hcd.8: release socket [ 173.700029][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 173.727883][T12225] loop9: detected capacity change from 0 to 1024 [ 173.755632][T12230] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 173.767548][T12225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.769059][T12230] syzkaller1: Linktype set failed because interface is up [ 173.788511][ T7111] syzkaller1: tun_net_xmit 90 [ 173.800212][ T28] audit: type=1400 audit(1776796963.154:792): avc: denied { execute } for pid=12224 comm="syz.9.3002" path="/262/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.863933][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.146963][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 174.438206][ T28] audit: type=1400 audit(1776796963.794:793): avc: denied { shutdown } for pid=12275 comm="syz.8.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.864489][T12293] loop9: detected capacity change from 0 to 2048 [ 174.889979][T12293] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.931000][T12293] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.980908][T12293] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #16: comm syz.9.3031: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 175.032725][T12293] EXT4-fs (loop9): Remounting filesystem read-only [ 175.100314][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.177697][ T28] audit: type=1400 audit(1776796964.534:794): avc: denied { write } for pid=12311 comm="syz.1.3039" lport=34650 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 175.201499][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 175.581953][ T28] audit: type=1326 audit(1776796964.934:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.4.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e295bc819 code=0x7ffc0000 [ 175.642560][ T28] audit: type=1326 audit(1776796964.954:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.4.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e295bc819 code=0x7ffc0000 [ 175.666976][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.680990][ T28] audit: type=1326 audit(1776796964.954:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.4.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e295bc819 code=0x7ffc0000 [ 175.718020][ T28] audit: type=1326 audit(1776796964.964:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.4.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e295bc819 code=0x7ffc0000 [ 175.940250][T12369] __nla_validate_parse: 4 callbacks suppressed [ 175.940300][T12369] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3063'. [ 176.084730][T12377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3066'. [ 176.226982][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 177.028434][T11080] kmmpd-loop8: attempt to access beyond end of device [ 177.028434][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 177.042364][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 177.266987][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 177.752795][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 177.752810][ T28] audit: type=1400 audit(1776796967.104:827): avc: denied { mount } for pid=12482 comm="syz.1.3102" name="/" dev="autofs" ino=34411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 177.917701][T12491] loop9: detected capacity change from 0 to 2048 [ 177.974747][T12491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.044529][T12491] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3108: bg 0: block 234: padding at end of block bitmap is not set [ 178.306971][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 178.485600][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.558384][ T7113] usb 17-1: enqueue for inactive port 0 [ 178.572264][ T7113] usb 17-1: enqueue for inactive port 0 [ 178.647055][ T7113] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 179.171934][T12547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 179.202133][T12547] batman_adv: batadv0: Adding interface: ip6gretap2 [ 179.216997][T12547] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.264170][T12547] batman_adv: batadv0: Interface activated: ip6gretap2 [ 179.346923][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 179.622852][ T28] audit: type=1400 audit(1776796968.974:828): avc: denied { read write } for pid=12563 comm="syz.4.3138" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 179.687149][ T28] audit: type=1400 audit(1776796968.974:829): avc: denied { open } for pid=12563 comm="syz.4.3138" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 180.010933][T12593] loop4: detected capacity change from 0 to 128 [ 180.345757][T12624] loop9: detected capacity change from 0 to 256 [ 180.387909][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 180.471640][T12628] loop9: detected capacity change from 0 to 512 [ 180.487575][T12628] EXT4-fs: Invalid want_extra_isize 7 [ 180.582064][ T28] audit: type=1326 audit(1776796969.934:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12629 comm="syz.1.3155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516aefc819 code=0x0 [ 180.683658][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3159'. [ 180.699283][T12640] netlink: 'syz.9.3159': attribute type 22 has an invalid length. [ 180.714309][ T28] audit: type=1400 audit(1776796970.064:831): avc: denied { unmount } for pid=12641 comm="syz.6.3160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.738526][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3159'. [ 180.768317][ T5473] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.777396][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3159'. [ 180.792286][ T5473] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.805135][T12640] netlink: 'syz.9.3159': attribute type 22 has an invalid length. [ 180.814295][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3159'. [ 180.834364][ T5473] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.855057][ T5473] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.920322][T12646] loop9: detected capacity change from 0 to 2048 [ 180.956108][T12646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.983264][ T28] audit: type=1400 audit(1776796970.334:832): avc: denied { add_name } for pid=12645 comm="syz.9.3163" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 181.038573][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.123424][T12652] netlink: 'syz.9.3165': attribute type 1 has an invalid length. [ 181.146024][T12652] netlink: 'syz.9.3165': attribute type 2 has an invalid length. [ 181.426975][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 181.602503][T12654] chnl_net:caif_netlink_parms(): no params data found [ 181.714171][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.721460][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.730874][T12654] bridge_slave_0: entered allmulticast mode [ 181.738149][T12654] bridge_slave_0: entered promiscuous mode [ 181.745046][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.752637][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.760459][T12654] bridge_slave_1: entered allmulticast mode [ 181.767368][T12654] bridge_slave_1: entered promiscuous mode [ 181.787600][T12654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.798572][T12654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.819753][T12654] team0: Port device team_slave_0 added [ 181.826462][T12654] team0: Port device team_slave_1 added [ 181.843254][T12654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.850326][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.886747][T12654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.898394][T12654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.906817][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.948389][T12654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.034828][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 182.036295][T12654] hsr_slave_0: entered promiscuous mode [ 182.051305][T12654] hsr_slave_1: entered promiscuous mode [ 182.057584][T12654] debugfs: 'hsr0' already exists in 'hsr' [ 182.063376][T12654] Cannot create hsr debugfs directory [ 182.077278][T11080] kmmpd-loop8: attempt to access beyond end of device [ 182.077278][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 182.093053][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 182.167056][T12704] bond3: entered promiscuous mode [ 182.185748][T12704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.219663][T12706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.229440][T12706] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 182.241489][T12706] bond3: (slave ip6gre2): Error -95 calling set_mac_address [ 182.466959][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 182.528110][T12654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.537618][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.545416][T12654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.554986][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.563649][T12654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.572715][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.580623][T12654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.589897][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.632599][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.645904][T12654] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.656219][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.663352][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.676192][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.683303][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.763920][T12654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.850275][T12654] veth0_vlan: entered promiscuous mode [ 182.860862][T12654] veth1_vlan: entered promiscuous mode [ 182.882904][T12654] veth0_macvtap: entered promiscuous mode [ 182.892638][T12654] veth1_macvtap: entered promiscuous mode [ 182.916816][T12654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.929385][T12654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.941761][ T5493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.952173][ T5493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.971104][ T5493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.989480][ T28] audit: type=1400 audit(1776796972.344:833): avc: denied { mount } for pid=12654 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.995347][ T5493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.067030][T12813] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3192'. [ 183.093611][T12813] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3192'. [ 183.507117][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 184.074369][ T28] audit: type=1400 audit(1776796973.424:834): avc: denied { getopt } for pid=12933 comm="syz.9.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.147408][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.397735][T12958] loop9: detected capacity change from 0 to 4096 [ 184.419197][T12958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.445160][T12958] EXT4-fs (loop9): Invalid log block size: 16711682 [ 184.483131][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3211'. [ 184.531833][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3213'. [ 184.547004][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 184.591731][T12972] team1: entered promiscuous mode [ 184.605313][T12972] team1: entered allmulticast mode [ 184.612668][T12972] 8021q: adding VLAN 0 to HW filter on device team1 [ 184.825467][T13001] loop9: detected capacity change from 0 to 256 [ 184.882323][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.912741][ T1039] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.013477][ T28] audit: type=1400 audit(1776796974.364:835): avc: denied { bind } for pid=13017 comm="syz.1.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.312986][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 185.382462][T13029] bond2: entered promiscuous mode [ 185.447364][T13039] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 185.586968][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 185.793259][ T28] audit: type=1400 audit(1776796975.144:836): avc: denied { associate } for pid=13043 comm="syz.9.3237" name="-" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.853033][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ddb9200: rx timeout, send abort [ 186.362174][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ddb9200: abort rx timeout. Force session deactivation [ 186.626956][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 186.693028][ T28] audit: type=1400 audit(1776796976.044:837): avc: denied { getopt } for pid=13081 comm="syz.3.3254" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.713787][ C0] vcan0: j1939_tp_rxtimer: 0xffff888114233200: rx timeout, send abort [ 186.722185][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888114233200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.936337][ T28] audit: type=1400 audit(1776796976.284:838): avc: denied { append } for pid=13099 comm="syz.8.3262" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.106984][T11080] kmmpd-loop8: attempt to access beyond end of device [ 187.106984][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 187.137000][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 187.167143][T13123] netlink: 'syz.3.3269': attribute type 4 has an invalid length. [ 187.176190][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'. [ 187.645168][ T28] audit: type=1326 audit(1776796976.994:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 187.667130][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 187.702912][ T28] audit: type=1326 audit(1776796977.024:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 187.753124][ T28] audit: type=1326 audit(1776796977.024:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 187.800844][ T28] audit: type=1326 audit(1776796977.024:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 188.024037][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 188.024055][ T28] audit: type=1326 audit(1776796977.374:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 188.058572][T13145] loop4: detected capacity change from 0 to 2048 [ 188.114014][T13145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.117781][ T28] audit: type=1326 audit(1776796977.374:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 188.165851][T13154] tls_set_device_offload_rx: netdev not found [ 188.177049][ T28] audit: type=1326 audit(1776796977.374:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f95fb0fc617 code=0x7ffc0000 [ 188.200711][ T28] audit: type=1326 audit(1776796977.374:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f95fb0b9511 code=0x7ffc0000 [ 188.224152][ T28] audit: type=1326 audit(1776796977.374:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f95fb0fd609 code=0x7ffc0000 [ 188.247714][ T28] audit: type=1326 audit(1776796977.374:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f95fb0b957b code=0x7ffc0000 [ 188.271314][ T28] audit: type=1326 audit(1776796977.374:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 188.328686][ T28] audit: type=1326 audit(1776796977.374:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fb0fc819 code=0x7ffc0000 [ 188.374583][ T28] audit: type=1326 audit(1776796977.374:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f95fb0b8c6c code=0x7ffc0000 [ 188.440179][T13158] loop3: detected capacity change from 0 to 512 [ 188.448044][ T28] audit: type=1326 audit(1776796977.374:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13137 comm="syz.3.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f95fb0b8cce code=0x7ffc0000 [ 188.488532][T13158] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.498028][T13158] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 188.529580][T13158] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 188.559749][T13158] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 188.570604][T13158] System zones: 0-2, 18-18, 34-35 [ 188.576468][T13158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.706933][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 188.731817][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.745864][T12654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.926463][T13179] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 189.182826][T13207] netlink: zone id is out of range [ 189.274434][T13215] serio: Serial port ptm0 [ 189.746986][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 189.818267][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 189.837125][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'. [ 189.861295][T13240] loop3: detected capacity change from 0 to 2048 [ 189.898191][T13240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.917839][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 189.932288][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'. [ 190.020936][T13253] loop9: detected capacity change from 0 to 128 [ 190.115268][T13253] syz.9.3322: attempt to access beyond end of device [ 190.115268][T13253] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 190.157998][T12654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.786941][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 190.804211][T13311] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.045822][T13319] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.071305][T13319] SELinux: failed to load policy [ 191.743542][T13349] loop4: detected capacity change from 0 to 128 [ 191.773308][T13349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.796211][T13349] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.827360][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 191.909715][T11561] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.136480][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3372'. [ 192.147311][T11080] kmmpd-loop8: attempt to access beyond end of device [ 192.147311][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 192.188452][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 192.866944][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 193.024753][T13412] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3389'. [ 193.473881][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.906936][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 194.946913][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 195.507012][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.507097][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 195.948428][T13520] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3434'. [ 195.987223][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 196.099932][T13524] tipc: Started in network mode [ 196.109631][T13524] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 196.126451][T13524] tipc: Enabling of bearer rejected, failed to enable media [ 196.177507][T13526] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3437'. [ 196.194557][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 196.194571][ T28] audit: type=1400 audit(1776796985.544:882): avc: denied { name_bind } for pid=13529 comm="syz.4.3439" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 196.261427][ T28] audit: type=1400 audit(1776796985.614:883): avc: denied { create } for pid=13531 comm="syz.1.3440" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.553988][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.561334][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.907672][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.923096][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.943090][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.966311][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.983201][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.002808][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.015166][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.026932][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 197.037886][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.174913][T13596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3457'. [ 197.190891][T11080] kmmpd-loop8: attempt to access beyond end of device [ 197.190891][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 197.226271][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 197.312393][T13607] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3462'. [ 197.329872][ T28] audit: type=1401 audit(1776796986.624:884): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A6877646174615F743A733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E75780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000850000000F00000018010 [ 197.479980][ T28] audit: type=1400 audit(1776796986.834:885): avc: denied { remount } for pid=13620 comm="syz.3.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.613275][ T28] audit: type=1400 audit(1776796986.954:886): avc: denied { listen } for pid=13627 comm="syz.1.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 197.634032][ T28] audit: type=1400 audit(1776796986.954:887): avc: denied { getopt } for pid=13627 comm="syz.1.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.066941][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 199.106966][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 199.411452][T13655] loop9: detected capacity change from 0 to 512 [ 199.418942][T13655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.429151][T13655] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3483: iget: bad i_size value: 38620345925642 [ 199.441993][T13655] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.444208][T13655] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3483: couldn't read orphan inode 15 (err -117) [ 199.453454][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 199.453477][ C0] EXT4-fs (loop9): initial error at time 1776796988: ext4_orphan_get:1397: inode 15 [ 199.453533][ C0] EXT4-fs (loop9): last error at time 1776796988: ext4_orphan_get:1397: inode 15 [ 199.490530][T13655] fserror_report: 1 callbacks suppressed [ 199.490544][T13655] loop9: lost filesystem error report for type 5 error -117 [ 199.500653][T13655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.579994][T13658] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3483: bg 0: block 5: invalid block bitmap [ 199.593478][T13658] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1960 with error 28 [ 199.606589][T13658] EXT4-fs (loop9): This should not happen!! Data will be lost [ 199.606589][T13658] [ 199.616938][T13658] EXT4-fs (loop9): Total free blocks count 0 [ 199.623015][T13658] EXT4-fs (loop9): Free/Dirty block details [ 199.633478][T13658] EXT4-fs (loop9): free_blocks=0 [ 199.643560][T13658] EXT4-fs (loop9): dirty_blocks=2020 [ 199.653690][T13658] EXT4-fs (loop9): Block reservation details [ 199.679675][T13658] EXT4-fs (loop9): i_reserved_data_blocks=2020 [ 199.723107][ T5491] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 1960 with max blocks 60 with error 28 [ 199.738217][ T7561] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 199.973483][T13672] loop9: detected capacity change from 0 to 256 [ 199.981789][T13672] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.015874][T13578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.085311][T13674] netlink: 35 bytes leftover after parsing attributes in process `syz.8.3490'. [ 200.106987][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3490'. [ 200.146934][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 200.646414][T13706] loop4: detected capacity change from 0 to 8192 [ 200.717637][T13706] loop4: p2 p3 p4 < > [ 200.729731][T13706] loop4: partition table partially beyond EOD, truncated [ 200.759045][T13706] loop4: p2 size 590592 extends beyond EOD, truncated [ 200.777311][T13706] loop4: p3 start 4294967295 is beyond EOD, truncated [ 200.802774][T13706] loop4: p4 start 117440516 is beyond EOD, truncated [ 200.994624][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 201.016433][ T28] audit: type=1401 audit(1776796990.174:888): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A6877646174615F743A733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E75780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000850000000F00000018010 [ 201.069667][T13745] xt_hashlimit: size too large, truncated to 1048576 [ 201.186944][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 201.467705][T13769] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3526'. [ 201.653190][ T28] audit: type=1400 audit(1776796991.004:889): avc: denied { mount } for pid=13774 comm="syz.9.3529" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 201.722106][ T28] audit: type=1400 audit(1776796991.034:890): avc: denied { search } for pid=13774 comm="syz.9.3529" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 201.758409][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3531'. [ 201.785325][ T28] audit: type=1400 audit(1776796991.034:891): avc: denied { search } for pid=13774 comm="syz.9.3529" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 201.850598][ T28] audit: type=1400 audit(1776796991.034:892): avc: denied { read open } for pid=13774 comm="syz.9.3529" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 201.882032][T13764] loop4: detected capacity change from 0 to 32768 [ 201.960558][T13764] loop4: p1 p3 < > [ 202.226935][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 202.226936][T11080] kmmpd-loop8: attempt to access beyond end of device [ 202.226936][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 202.226972][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 202.299444][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 202.312566][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 202.351657][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.358990][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.604397][ T28] audit: type=1401 audit(1776796991.784:893): op=setxattr invalid_context=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 [ 203.256333][T13794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.347823][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 203.430042][T13794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.668579][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.689285][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.706924][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.726925][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.917862][T13834] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.948293][ T28] audit: type=1400 audit(1776796993.284:894): avc: denied { read } for pid=13829 comm="syz.4.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.009271][T13834] bond3: (slave lo): Enslaving as an active interface with an up link [ 204.038895][T13834] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 204.386999][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 205.426929][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 205.749465][ T28] audit: type=1400 audit(1776796995.104:895): avc: denied { shutdown } for pid=13889 comm="syz.1.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.241344][T13900] netlink: 'syz.9.3578': attribute type 9 has an invalid length. [ 206.256704][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3578'. [ 206.423060][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 206.435103][T13900] netlink: 'syz.9.3578': attribute type 9 has an invalid length. [ 206.460239][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3578'. [ 206.467129][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 206.632013][ T28] audit: type=1400 audit(1776796995.984:896): avc: denied { accept } for pid=13923 comm="syz.8.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.865326][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3592'. [ 207.266974][T11080] kmmpd-loop8: attempt to access beyond end of device [ 207.266974][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 207.292405][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 207.506946][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 208.546909][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 208.886457][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.893742][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.988095][T13977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.021732][T13977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.123901][T13988] netlink: 'syz.4.3612': attribute type 19 has an invalid length. [ 209.141556][ T30] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.156973][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 209.167458][ T30] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.185519][ T30] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.204671][ T30] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.214404][T13995] loop7: detected capacity change from 0 to 7 [ 209.234032][ T5491] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.234056][T13988] netlink: 'syz.4.3612': attribute type 19 has an invalid length. [ 209.234076][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 209.265794][ T5491] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.275013][ T5491] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.283822][ T5491] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.294048][ T5491] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.329139][ T5491] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.347116][ T5491] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.379283][ T5491] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.586935][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 209.917030][T14035] loop4: detected capacity change from 0 to 128 [ 209.965927][T14035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.996738][T14035] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.048912][ T28] audit: type=1400 audit(1776796999.404:897): avc: denied { write } for pid=14043 comm="syz.1.3636" path="socket:[39550]" dev="sockfs" ino=39550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.057291][T14035] support for the xor transformation has been removed. [ 210.097432][T11561] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.171771][T14050] loop4: detected capacity change from 0 to 2048 [ 210.199116][T14050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.251712][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.626937][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 211.667162][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 212.308830][T11080] kmmpd-loop8: attempt to access beyond end of device [ 212.308830][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 212.324500][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 212.706963][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 213.253835][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.314349][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.383212][T14103] bond1: entered promiscuous mode [ 213.388554][T14103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.409691][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.512283][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.561485][T14118] sit3: entered allmulticast mode [ 213.708754][T14078] chnl_net:caif_netlink_parms(): no params data found [ 213.746921][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 213.914896][ T28] audit: type=1400 audit(1776797003.264:898): avc: denied { shutdown } for pid=14163 comm="syz.8.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.941850][ T36] bridge_slave_1: left allmulticast mode [ 213.953649][ T36] bridge_slave_1: left promiscuous mode [ 213.973145][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.018809][ T36] bridge_slave_0: left allmulticast mode [ 214.025911][ T36] bridge_slave_0: left promiscuous mode [ 214.032240][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.239448][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.259069][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.277673][ T36] bond0 (unregistering): Released all slaves [ 214.321635][T14078] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.337020][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.351651][T14078] bridge_slave_0: entered allmulticast mode [ 214.359081][T14078] bridge_slave_0: entered promiscuous mode [ 214.366147][T14078] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.373998][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.390067][T14078] bridge_slave_1: entered allmulticast mode [ 214.417497][T14078] bridge_slave_1: entered promiscuous mode [ 214.449315][ T36] hsr_slave_0: left promiscuous mode [ 214.461331][ T36] hsr_slave_1: left promiscuous mode [ 214.471742][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.480058][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.497912][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.514293][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.532659][ T36] veth1_macvtap: left promiscuous mode [ 214.546962][ T36] veth0_macvtap: left promiscuous mode [ 214.553893][ T36] veth1_vlan: left promiscuous mode [ 214.559480][ T36] veth0_vlan: left promiscuous mode [ 214.692431][ T36] team0 (unregistering): Port device team_slave_1 removed [ 214.703187][ T36] team0 (unregistering): Port device team_slave_0 removed [ 214.715872][T14199] loop9: detected capacity change from 0 to 32768 [ 214.755969][T14078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.765779][ T3049] 8021q: adding VLAN 0 to HW filter on device eth1 [ 214.776381][T14078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.778915][T14199] loop9: p1 p3 < > [ 214.789550][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 214.831947][T14078] team0: Port device team_slave_0 added [ 214.839886][T14078] team0: Port device team_slave_1 added [ 214.866282][T14078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.887573][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.966993][T14078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.986416][T14078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.008849][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 215.018832][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 215.037185][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.102123][T14078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.167959][T14078] hsr_slave_0: entered promiscuous mode [ 215.174282][T14078] hsr_slave_1: entered promiscuous mode [ 215.189359][T14078] debugfs: 'hsr0' already exists in 'hsr' [ 215.207555][T14078] Cannot create hsr debugfs directory [ 215.286962][ T3049] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.376318][T14253] loop4: detected capacity change from 0 to 256 [ 215.759049][ T3049] 8021q: adding VLAN 0 to HW filter on device eth3 [ 215.823310][T14078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.827071][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 215.861109][T14078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.881033][T14078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.916144][T14078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.941287][T14078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.173714][T14078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.182275][ T3049] 8021q: adding VLAN 0 to HW filter on device eth4 [ 216.207276][T14078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.222139][T14078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.290964][T14078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.325325][T14078] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.342838][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.350106][ T2059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.393403][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.400658][ T2059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.426144][T14078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.563836][T14078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.701571][T14078] veth0_vlan: entered promiscuous mode [ 216.721301][T14078] veth1_vlan: entered promiscuous mode [ 216.763300][T14078] veth0_macvtap: entered promiscuous mode [ 216.779941][T14078] veth1_macvtap: entered promiscuous mode [ 216.806462][T14078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.836050][T14078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.858521][ T5493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.867038][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 216.869735][ T5493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.899803][ T5493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.912033][ T5493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.966603][T14386] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 216.988469][T14386] macvlan0: entered promiscuous mode [ 216.999348][T14386] team0: entered promiscuous mode [ 217.010100][T14386] team_slave_0: entered promiscuous mode [ 217.016213][T14386] team_slave_1: entered promiscuous mode [ 217.023361][T14386] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 217.347575][T11080] kmmpd-loop8: attempt to access beyond end of device [ 217.347575][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 217.402795][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 217.906925][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 217.919986][T14464] loop4: detected capacity change from 0 to 256 [ 217.949147][T14464] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.990979][T14464] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.243931][T14481] netlink: 'syz.8.3743': attribute type 83 has an invalid length. [ 218.489224][T14504] loop4: detected capacity change from 0 to 512 [ 218.519231][T14504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.591388][T14518] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.641422][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.662301][T14522] loop0: detected capacity change from 0 to 512 [ 218.693523][T14522] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 218.704525][T14522] System zones: 0-2, 18-18, 34-35 [ 218.732368][T14522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.748009][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3753'. [ 218.769400][T14522] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.854785][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.927847][ T28] audit: type=1400 audit(1776797008.274:899): avc: denied { create } for pid=14541 comm="syz.8.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 218.947505][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 218.951106][T14548] ip6gre1: entered promiscuous mode [ 218.967674][T14548] ip6gre1: entered allmulticast mode [ 218.973221][T14547] TCP: TCP_TX_DELAY enabled [ 219.000939][ T28] audit: type=1400 audit(1776797008.314:900): avc: denied { read } for pid=14541 comm="syz.8.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.373298][T14585] loop4: detected capacity change from 0 to 1024 [ 219.416310][T14585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.445891][T14570] loop0: detected capacity change from 0 to 512 [ 219.530132][T14597] loop9: detected capacity change from 0 to 4096 [ 219.556015][T14597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.590722][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.740744][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.824754][T14625] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3773'. [ 219.987540][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 220.870786][ T28] audit: type=1326 audit(1776797010.224:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 220.920169][ T28] audit: type=1326 audit(1776797010.244:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 220.950294][ T28] audit: type=1326 audit(1776797010.244:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 220.974123][ T28] audit: type=1326 audit(1776797010.244:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 221.005659][ T28] audit: type=1326 audit(1776797010.244:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 221.029204][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 221.060703][ T28] audit: type=1326 audit(1776797010.294:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 221.084558][ T28] audit: type=1326 audit(1776797010.294:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154ad1c819 code=0x7ffc0000 [ 221.134012][ T28] audit: type=1326 audit(1776797010.304:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.9.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f154acdd04e code=0x7ffc0000 [ 221.201992][T14686] loop9: detected capacity change from 0 to 512 [ 221.218533][T14686] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 221.254134][T14686] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 221.276889][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 221.283394][ C1] EXT4-fs (loop9): initial error at time 1776797010: mb_free_blocks:2049: inode 11: block 64 [ 221.293619][ C1] EXT4-fs (loop9): last error at time 1776797010: mb_free_blocks:2049: inode 11: block 64 [ 221.357014][T14686] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #11: comm syz.9.3810: corrupted inode contents [ 221.390128][T14699] can0: slcan on ttyS3. [ 221.409370][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.409535][T14686] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #11: comm syz.9.3810: mark_inode_dirty error [ 221.454074][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.454389][T14686] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3810: invalid indirect mapped block 1 (level 1) [ 221.478440][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.478694][T14686] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #11: comm syz.9.3810: corrupted inode contents [ 221.501203][T14699] can0 (unregistered): slcan off ttyS3. [ 221.514786][T14707] can0: slcan on ttyS3. [ 221.520508][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.520734][T14686] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 221.545298][T14686] loop9: lost filesystem error report for type 5 error -117 [ 221.545472][T14686] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #11: comm syz.9.3810: corrupted inode contents [ 221.567230][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.567946][T14686] EXT4-fs error (device loop9): ext4_truncate:4690: inode #11: comm syz.9.3810: mark_inode_dirty error [ 221.611651][T14686] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.611882][T14686] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 221.630298][T14698] can0 (unregistered): slcan off ttyS3. [ 221.660299][T14686] loop9: lost filesystem error report for type 5 error -117 [ 221.661441][T14686] EXT4-fs (loop9): 1 truncate cleaned up [ 221.697744][T14686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.894804][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.066912][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 222.254934][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.387086][T11080] kmmpd-loop8: attempt to access beyond end of device [ 222.387086][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 222.412326][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 223.106937][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 224.146919][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 224.159376][T14783] loop0: detected capacity change from 0 to 512 [ 224.176304][T14783] EXT4-fs: Ignoring removed bh option [ 224.186537][T14783] EXT4-fs: inline encryption not supported [ 224.223805][T14783] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.235740][T14783] EXT4-fs (loop0): orphan cleanup on readonly fs [ 224.243059][T14783] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 224.258534][T14783] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3829: bg 0: block 248: padding at end of block bitmap is not set [ 224.273077][T14783] loop0: lost filesystem error report for type 5 error -117 [ 224.273304][T14783] __quota_error: 4 callbacks suppressed [ 224.273316][T14783] Quota error (device loop0): write_blk: dquota write failed [ 224.280687][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 224.280705][ C0] EXT4-fs (loop0): last error at time 1776797013: ext4_validate_block_bitmap:441 [ 224.309680][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 224.310274][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 224.315732][T14783] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 224.341817][T14783] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3829: Failed to acquire dquot type 1 [ 224.361831][T14783] loop0: lost filesystem error report for type 5 error -28 [ 224.364644][T14783] EXT4-fs (loop0): 1 truncate cleaned up [ 224.389984][T14783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 224.447223][T14790] macsec0: entered promiscuous mode [ 224.460477][T14783] syz.0.3829 (14783) used greatest stack depth: 9152 bytes left [ 224.469631][T14789] macsec0: left promiscuous mode [ 224.484325][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 224.658038][ T28] audit: type=1400 audit(1776797014.004:913): avc: denied { create } for pid=14801 comm="syz.0.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.685748][ T28] audit: type=1400 audit(1776797014.014:914): avc: denied { connect } for pid=14801 comm="syz.0.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.706668][ T28] audit: type=1400 audit(1776797014.014:915): avc: denied { write } for pid=14801 comm="syz.0.3838" path="socket:[42452]" dev="sockfs" ino=42452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.933217][T14812] netlink: 572 bytes leftover after parsing attributes in process `syz.4.3842'. [ 224.933655][T14806] loop0: detected capacity change from 0 to 736 [ 224.974859][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 225.060422][T14818] netlink: 'syz.4.3844': attribute type 1 has an invalid length. [ 225.189081][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 226.062781][T14864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 226.094726][T14864] ip6gretap0: entered promiscuous mode [ 226.106988][T14864] macsec1: entered promiscuous mode [ 226.123982][T14864] macsec1: entered allmulticast mode [ 226.143746][T14864] ip6gretap0: entered allmulticast mode [ 226.174252][T14864] ip6gretap0: left allmulticast mode [ 226.197411][T14864] ip6gretap0: left promiscuous mode [ 226.226946][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 226.562142][T14866] chnl_net:caif_netlink_parms(): no params data found [ 226.672175][T14866] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.679603][T14866] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.687113][T14866] bridge_slave_0: entered allmulticast mode [ 226.696106][T14866] bridge_slave_0: entered promiscuous mode [ 226.713848][T14866] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.721638][T14866] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.729078][T14866] bridge_slave_1: entered allmulticast mode [ 226.735775][T14866] bridge_slave_1: entered promiscuous mode [ 226.754272][T14866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.764955][T14866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.785831][T14866] team0: Port device team_slave_0 added [ 226.792886][T14866] team0: Port device team_slave_1 added [ 226.832562][T14910] loop9: detected capacity change from 0 to 512 [ 226.840503][T14866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.847783][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.876820][T14866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.888334][T14866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.895362][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.921768][T14866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.943642][T14910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.968032][T14910] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.985723][T14866] hsr_slave_0: entered promiscuous mode [ 226.992165][T14866] hsr_slave_1: entered promiscuous mode [ 226.998338][T14866] debugfs: 'hsr0' already exists in 'hsr' [ 227.004117][T14866] Cannot create hsr debugfs directory [ 227.064346][ T28] audit: type=1400 audit(1776797016.414:916): avc: denied { unmount } for pid=7561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 227.089733][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.109132][ T28] audit: type=1400 audit(1776797016.454:917): avc: denied { read write } for pid=7561 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.141838][ T28] audit: type=1400 audit(1776797016.454:918): avc: denied { open } for pid=7561 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.180006][ T28] audit: type=1400 audit(1776797016.454:919): avc: denied { ioctl } for pid=7561 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.211020][T14925] loop9: detected capacity change from 0 to 512 [ 227.231399][T14925] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 227.238549][ T28] audit: type=1400 audit(1776797016.584:920): avc: denied { mounton } for pid=14924 comm="syz.9.3884" path="/447/file2" dev="tmpfs" ino=2336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 227.266967][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 227.280579][T14925] EXT4-fs (loop9): 1 truncate cleaned up [ 227.289129][T14925] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.348123][T14866] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.362602][ T12] tipc: Subscription rejected, illegal request [ 227.394786][T14935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14935 comm=syz.4.3888 [ 227.428059][T11080] kmmpd-loop8: attempt to access beyond end of device [ 227.428059][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 227.453173][T14866] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.465072][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 227.484095][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.532818][T14866] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.592989][T14866] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.690339][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.719740][T14866] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.729296][T14866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.743623][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.757654][T14866] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.773452][T14866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.792996][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.810246][T14866] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.830629][T14866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.841604][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.859625][T14866] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.868867][T14866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.948075][T14947] loop9: detected capacity change from 0 to 32768 [ 227.969797][ T12] bridge_slave_1: left allmulticast mode [ 227.977350][ T12] bridge_slave_1: left promiscuous mode [ 227.993742][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.014115][ T12] bridge_slave_0: left allmulticast mode [ 228.019997][T14947] loop9: p1 p3 < > [ 228.022434][T14946] loop4: detected capacity change from 0 to 512 [ 228.042437][ T12] bridge_slave_0: left promiscuous mode [ 228.061378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.228860][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 228.241628][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 228.307492][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 228.575949][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.596274][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.606373][ T12] bond0 (unregistering): Released all slaves [ 228.663436][T14866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.670352][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 228.714869][ T12] hsr_slave_0: left promiscuous mode [ 228.731141][ T12] hsr_slave_1: left promiscuous mode [ 228.745664][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.765667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.778574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.791787][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.802377][T15000] netlink: 'syz.1.3912': attribute type 10 has an invalid length. [ 228.816551][ T12] veth1_macvtap: left promiscuous mode [ 228.822249][ T12] veth0_macvtap: left promiscuous mode [ 228.828513][ T12] veth1_vlan: left promiscuous mode [ 228.833840][ T12] veth0_vlan: left promiscuous mode [ 228.920671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 228.930837][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.974128][T14866] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.994558][ T3049] 8021q: adding VLAN 0 to HW filter on device eth5 [ 229.009080][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.016192][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.049046][T15016] macsec1: entered promiscuous mode [ 229.055724][T15016] ip6gretap0: entered promiscuous mode [ 229.062752][T15016] macsec1: entered allmulticast mode [ 229.068542][T15016] ip6gretap0: entered allmulticast mode [ 229.075284][T15016] ip6gretap0: left allmulticast mode [ 229.080667][T15016] ip6gretap0: left promiscuous mode [ 229.107914][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.115375][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.346932][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 229.440471][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 229.440487][ T28] audit: type=1400 audit(1776797018.794:993): avc: denied { create } for pid=15046 comm="syz.9.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.472245][T14866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.508355][ T28] audit: type=1400 audit(1776797018.814:994): avc: denied { ioctl } for pid=15046 comm="syz.9.3923" path="socket:[43318]" dev="sockfs" ino=43318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.574988][ T28] audit: type=1400 audit(1776797018.884:995): avc: denied { connect } for pid=15046 comm="syz.9.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.648183][ T28] audit: type=1400 audit(1776797018.884:996): avc: denied { write } for pid=15046 comm="syz.9.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.700320][ T28] audit: type=1400 audit(1776797018.904:997): avc: denied { execmem } for pid=15057 comm="syz.1.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 229.731678][ T3049] 8021q: adding VLAN 0 to HW filter on device eth6 [ 229.745148][ T28] audit: type=1400 audit(1776797018.984:998): avc: denied { create } for pid=15064 comm="syz.9.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.765778][ T28] audit: type=1400 audit(1776797018.994:999): avc: denied { read } for pid=15064 comm="syz.9.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.876295][T14866] veth0_vlan: entered promiscuous mode [ 229.890938][T14866] veth1_vlan: entered promiscuous mode [ 229.919621][T14866] veth0_macvtap: entered promiscuous mode [ 229.930637][T14866] veth1_macvtap: entered promiscuous mode [ 229.958797][T14866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.980600][T14866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.999979][ T2059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.017983][ T2059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.034194][ T2059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.069925][ T2059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.104550][ T28] audit: type=1400 audit(1776797019.454:1000): avc: denied { mounton } for pid=14866 comm="syz-executor" path="/root/syzkaller.T5eRAD/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 230.136201][ T28] audit: type=1400 audit(1776797019.484:1001): avc: denied { mounton } for pid=14866 comm="syz-executor" path="/root/syzkaller.T5eRAD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.163713][ T28] audit: type=1400 audit(1776797019.484:1002): avc: denied { mounton } for pid=14866 comm="syz-executor" path="/root/syzkaller.T5eRAD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 230.277109][T15100] loop4: detected capacity change from 0 to 128 [ 230.377433][T15106] syz.4.3928: attempt to access beyond end of device [ 230.377433][T15106] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 230.391079][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 230.596412][T15127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15127 comm=syz.4.3935 [ 230.661674][T15127] sctp: [Deprecated]: syz.4.3935 (pid 15127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.661674][T15127] Use struct sctp_sack_info instead [ 230.722289][ T3049] 8021q: adding VLAN 0 to HW filter on device eth7 [ 230.852257][T15150] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3942'. [ 230.936509][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3946'. [ 231.114306][ T3049] 8021q: adding VLAN 0 to HW filter on device eth8 [ 231.426907][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 231.536633][T15206] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 232.172633][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'. [ 232.466911][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 232.486787][T11080] kmmpd-loop8: attempt to access beyond end of device [ 232.486787][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 232.543217][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 233.105871][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3974'. [ 233.150875][T15289] netlink: 'syz.4.3975': attribute type 2 has an invalid length. [ 233.398091][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 233.423444][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 233.506910][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 233.840971][T15335] loop9: detected capacity change from 0 to 512 [ 233.862097][T15335] FAT-fs (loop9): Directory bread(block 199916) failed [ 233.870427][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.885297][T15335] FAT-fs (loop9): Directory bread(block 199917) failed [ 233.894626][T15335] FAT-fs (loop9): Directory bread(block 199918) failed [ 233.902506][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.911656][T15335] FAT-fs (loop9): Directory bread(block 199919) failed [ 233.923825][T15335] FAT-fs (loop9): Directory bread(block 199920) failed [ 233.935824][T15335] FAT-fs (loop9): Directory bread(block 199921) failed [ 233.943003][T15335] FAT-fs (loop9): Directory bread(block 199922) failed [ 233.950389][T15335] FAT-fs (loop9): Directory bread(block 199923) failed [ 233.958655][T15335] FAT-fs (loop9): Directory bread(block 199916) failed [ 233.965645][T15335] FAT-fs (loop9): Directory bread(block 199917) failed [ 234.522186][T15354] netlink: 'syz.4.4001': attribute type 10 has an invalid length. [ 234.533829][T15354] veth0_vlan: entered allmulticast mode [ 234.542838][T15354] veth0_vlan: left promiscuous mode [ 234.549377][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 234.573552][T15354] veth0_vlan: entered promiscuous mode [ 234.597260][T15354] team0: Device veth0_vlan failed to register rx_handler [ 234.737973][T15354] syz.4.4001 (15354) used greatest stack depth: 8832 bytes left [ 234.799361][T15363] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 234.960314][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 234.960332][ T28] audit: type=1400 audit(1776797024.314:1051): avc: denied { read } for pid=15376 comm="syz.8.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.183962][T15386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 235.208753][ T28] audit: type=1400 audit(1776797024.564:1052): avc: denied { read } for pid=15384 comm="syz.4.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.251361][ T28] audit: type=1400 audit(1776797024.594:1053): avc: denied { create } for pid=15387 comm="syz.1.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.296136][ T28] audit: type=1400 audit(1776797024.594:1054): avc: denied { setopt } for pid=15387 comm="syz.1.4016" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.324559][ T28] audit: type=1400 audit(1776797024.604:1055): avc: denied { write } for pid=15387 comm="syz.1.4016" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.352812][ T28] audit: type=1400 audit(1776797024.674:1056): avc: denied { bind } for pid=15389 comm="syz.9.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.372902][ T28] audit: type=1400 audit(1776797024.674:1057): avc: denied { setopt } for pid=15389 comm="syz.9.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.394500][ T28] audit: type=1400 audit(1776797024.674:1058): avc: denied { read } for pid=15389 comm="syz.9.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.447214][ T28] audit: type=1400 audit(1776797024.704:1059): avc: denied { name_connect } for pid=15396 comm="syz.8.4019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 235.586915][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 236.132903][ T28] audit: type=1400 audit(1776797025.484:1060): avc: denied { sqpoll } for pid=15419 comm="syz.1.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 236.626925][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 237.507018][T11080] kmmpd-loop8: attempt to access beyond end of device [ 237.507018][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 237.560672][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 237.650395][T15503] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.657714][T15503] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.666973][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 237.717823][T15503] netlink: 'syz.9.4061': attribute type 1 has an invalid length. [ 237.880815][T15512] loop9: detected capacity change from 0 to 512 [ 237.900419][T15512] EXT4-fs: inline encryption not supported [ 237.914599][T15512] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 237.942318][T15512] EXT4-fs (loop9): 1 truncate cleaned up [ 237.960518][T15512] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.044159][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.085033][T15524] loop4: detected capacity change from 0 to 512 [ 238.130409][T15524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.163847][T15524] EXT4-fs (loop4): 1 truncate cleaned up [ 238.177355][T15524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.366095][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.706973][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 239.313836][T15577] dvmrp0: entered allmulticast mode [ 239.746974][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 239.996243][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 239.996260][ T28] audit: type=1400 audit(1776797029.344:1077): avc: denied { firmware_load } for pid=15649 comm="syz.4.4105" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 240.023780][T15653] netlink: 'syz.9.4094': attribute type 10 has an invalid length. [ 240.059318][T15653] veth0_vlan: entered allmulticast mode [ 240.446906][T13568] IPVS: starting estimator thread 0... [ 240.447838][T15653] veth0_vlan: left promiscuous mode [ 240.490383][T15653] veth0_vlan: entered promiscuous mode [ 240.503372][T15684] netlink: 'syz.5.4100': attribute type 1 has an invalid length. [ 240.530051][T15653] team0: Device veth0_vlan failed to register rx_handler [ 240.570806][T15682] IPVS: using max 2256 ests per chain, 112800 per kthread [ 240.628976][ T28] audit: type=1400 audit(1776797029.974:1078): avc: denied { mount } for pid=15690 comm="syz.1.4098" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 240.671897][ T28] audit: type=1400 audit(1776797030.024:1079): avc: denied { watch watch_reads } for pid=15693 comm="syz.1.4103" path="/973/file1" dev="tmpfs" ino=5050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 240.787002][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 240.843285][T15653] syz.9.4094 (15653) used greatest stack depth: 8640 bytes left [ 240.880391][ T28] audit: type=1400 audit(1776797030.224:1080): avc: denied { read write } for pid=15712 comm="syz.4.4113" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.908401][T13569] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 240.938703][T13569] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.975463][ T28] audit: type=1400 audit(1776797030.234:1081): avc: denied { open } for pid=15712 comm="syz.4.4113" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 241.048450][ T28] audit: type=1326 audit(1776797030.274:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516aefc819 code=0x7ffc0000 [ 241.121329][ T28] audit: type=1326 audit(1776797030.274:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516aefc819 code=0x7ffc0000 [ 241.196989][ T28] audit: type=1326 audit(1776797030.274:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516aefc819 code=0x7ffc0000 [ 241.248811][ T28] audit: type=1326 audit(1776797030.274:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f516aefc819 code=0x7ffc0000 [ 241.304455][ T28] audit: type=1326 audit(1776797030.274:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516aefc819 code=0x7ffc0000 [ 241.630994][T15761] loop4: detected capacity change from 0 to 512 [ 241.639357][T15753] SELinux: failed to load policy [ 241.644378][T15761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.678271][T15761] EXT4-fs (loop4): 1 truncate cleaned up [ 241.689161][T15761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.826933][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 241.968090][T11561] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.478174][T15785] loop5: detected capacity change from 0 to 512 [ 242.504125][T15785] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 242.532242][T15785] EXT4-fs (loop5): 1 truncate cleaned up [ 242.545914][T15785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.559925][T11080] kmmpd-loop8: attempt to access beyond end of device [ 242.559925][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 242.573781][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 242.781842][T14866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.866922][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 243.826345][T15866] netlink: 'syz.8.4162': attribute type 10 has an invalid length. [ 243.842235][T15866] veth0_vlan: entered allmulticast mode [ 243.852445][T15866] veth0_vlan: left promiscuous mode [ 243.890113][T15866] veth0_vlan: entered promiscuous mode [ 243.906922][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 243.931028][T15866] team0: Device veth0_vlan failed to register rx_handler [ 244.091738][T15897] sctp: [Deprecated]: syz.8.4170 (pid 15897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.091738][T15897] Use struct sctp_sack_info instead [ 244.850895][T15949] loop9: detected capacity change from 0 to 512 [ 244.888165][T15949] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.947548][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 244.987015][T15949] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.016196][T15950] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 245.051583][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 245.051599][ T28] audit: type=1400 audit(1776797034.404:1165): avc: denied { map } for pid=15948 comm="syz.9.4193" path="/518/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.113368][ T28] audit: type=1400 audit(1776797034.444:1166): avc: denied { execute } for pid=15948 comm="syz.9.4193" path="/518/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.160298][ T7561] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.211832][ T7561] ================================================================== [ 245.219982][ T7561] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 245.227575][ T7561] [ 245.229927][ T7561] read-write to 0xffff888237d266e8 of 1 bytes by task 15916 on cpu 1: [ 245.238107][ T7561] folio_add_lru+0xa4/0x1e0 [ 245.242646][ T7561] shmem_get_folio_gfp+0x7b0/0xd60 [ 245.247790][ T7561] shmem_write_begin+0xfc/0x1f0 [ 245.252668][ T7561] generic_perform_write+0x183/0x490 [ 245.257991][ T7561] shmem_file_write_iter+0xc5/0xf0 [ 245.263131][ T7561] __kernel_write_iter+0x319/0x590 [ 245.268274][ T7561] dump_user_range+0xa73/0xd00 [ 245.273064][ T7561] elf_core_dump+0x21a2/0x2330 [ 245.277867][ T7561] coredump_write+0xacc/0xdd0 [ 245.282572][ T7561] vfs_coredump+0x26dd/0x31e0 [ 245.287289][ T7561] get_signal+0xd5c/0xf20 [ 245.291635][ T7561] arch_do_signal_or_restart+0x96/0x450 [ 245.297230][ T7561] irqentry_exit+0x140/0x5b0 [ 245.301848][ T7561] asm_exc_page_fault+0x26/0x30 [ 245.306742][ T7561] [ 245.309081][ T7561] read to 0xffff888237d266e8 of 1 bytes by task 7561 on cpu 0: [ 245.316638][ T7561] __lru_add_drain_all+0x17e/0x450 [ 245.321780][ T7561] lru_add_drain_all+0x10/0x20 [ 245.326571][ T7561] invalidate_bdev+0x47/0x70 [ 245.331185][ T7561] ext4_put_super+0x610/0x7b0 [ 245.335889][ T7561] generic_shutdown_super+0xee/0x220 [ 245.341198][ T7561] kill_block_super+0x2a/0x70 [ 245.345911][ T7561] ext4_kill_sb+0x42/0x80 [ 245.350267][ T7561] deactivate_locked_super+0x75/0x1c0 [ 245.355669][ T7561] deactivate_super+0x97/0xa0 [ 245.360378][ T7561] cleanup_mnt+0x2bb/0x330 [ 245.364994][ T7561] __cleanup_mnt+0x19/0x20 [ 245.369434][ T7561] task_work_run+0x130/0x1a0 [ 245.374050][ T7561] exit_to_user_mode_loop+0x1f4/0x6f0 [ 245.379468][ T7561] do_syscall_64+0x232/0x3b0 [ 245.384087][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.390000][ T7561] [ 245.392338][ T7561] value changed: 0x0f -> 0x12 [ 245.397024][ T7561] [ 245.399397][ T7561] Reported by Kernel Concurrency Sanitizer on: [ 245.405596][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 245.416646][ T7561] Tainted: [W]=WARN [ 245.420469][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.430541][ T7561] ================================================================== [ 245.986925][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 247.026961][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 247.596978][T11080] kmmpd-loop8: attempt to access beyond end of device [ 247.596978][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 247.610670][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 248.066999][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 249.106956][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 250.146945][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 251.186956][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 252.226946][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 252.627572][T11080] kmmpd-loop8: attempt to access beyond end of device [ 252.627572][T11080] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 252.641289][T11080] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 253.266997][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 254.306942][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available