last executing test programs: 1m29.358608166s ago: executing program 2 (id=618): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 1m28.90033277s ago: executing program 2 (id=628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m28.748236507s ago: executing program 2 (id=633): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x2) 1m28.672337762s ago: executing program 2 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 1m28.599389075s ago: executing program 2 (id=637): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m28.11119737s ago: executing program 2 (id=643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m28.053532673s ago: executing program 32 (id=643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m25.088347587s ago: executing program 5 (id=644): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) 1m25.062140428s ago: executing program 5 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) 1m24.869782678s ago: executing program 5 (id=683): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m24.835951249s ago: executing program 5 (id=684): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setuid(0xee00) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m9.650993974s ago: executing program 33 (id=684): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setuid(0xee00) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.234995772s ago: executing program 4 (id=1812): syz_clone(0x40944000, &(0x7f0000000000)="10c96a969d9ccb109413d1d8f3936052ecea9ee0fce6100944101032298a0e8cc26d8f0642e0d895fe734594b80283f24c53a4e0d35277ce448d982b4f97cf27dc46d4cceae96e66dbd4e61571fa5dcf062703ff9aa7f2db39c51092e48d41a509c486dd3aa177737a391f1c56559c3dfdae34ce67e517eeade0873b77036da47da35af0b90a0ad28d", 0x89, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe8, 0x0, 0x8aa, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000, 0x5, 0x6}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='\v\x00\x00'], 0x1eb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.128285549s ago: executing program 4 (id=1827): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) 3.127603559s ago: executing program 4 (id=1830): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") link(0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./file1\x00', 0x0) 2.866725442s ago: executing program 4 (id=1832): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(0x4) 2.742297939s ago: executing program 4 (id=1836): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 2.383384337s ago: executing program 0 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x54}}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) fremovexattr(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.316248211s ago: executing program 0 (id=1845): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.183869428s ago: executing program 1 (id=1847): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.94820549s ago: executing program 0 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 1.218452408s ago: executing program 1 (id=1852): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xfffffedb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.161802361s ago: executing program 1 (id=1853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0xf}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000000) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 929.773033ms ago: executing program 3 (id=1858): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000680)=""/145, 0x91}], 0x1, 0x80000000, 0x8) 928.995833ms ago: executing program 3 (id=1860): getsockopt(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f0000001ffc)) socket(0x10, 0x3, 0x0) setregid(0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 842.336497ms ago: executing program 3 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 775.28401ms ago: executing program 6 (id=1863): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x22002f7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x16, 0x8, 0x9, 0xa, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x4, {0x6, 0x2b, 0xb, 0x8, 0x0, 0xa, 0x0, @in=@multicast1, @in=@multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x1136, 0x4) io_uring_enter(r0, 0x731d, 0x7721, 0x16, 0x0, 0x0) 710.577694ms ago: executing program 6 (id=1864): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r0], 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 709.688234ms ago: executing program 3 (id=1865): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 654.110837ms ago: executing program 6 (id=1866): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 441.469938ms ago: executing program 6 (id=1867): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 33.150229ms ago: executing program 6 (id=1877): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) 0s ago: executing program 0 (id=1878): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x9) recvfrom$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): s until 2038-01-19 (0x7fffffff) [ 53.099881][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.100226][ T28] audit: type=1400 audit(1777337038.762:341): avc: denied { add_name } for pid=4386 comm="syz.3.346" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.114300][ T4387] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.147793][ T4387] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.147793][ T4387] [ 53.184211][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.198730][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.220907][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.248443][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.284004][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.315391][ T4400] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 53.323535][ T4400] netlink: 256 bytes leftover after parsing attributes in process `syz.0.351'. [ 53.339177][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.362559][ T28] audit: type=1400 audit(1777337039.022:342): avc: denied { watch_reads } for pid=4403 comm="syz.0.352" path="/55" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.398560][ T4386] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.426067][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.458246][ T4387] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.346: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.463475][ T28] audit: type=1400 audit(1777337039.122:343): avc: denied { name_bind } for pid=4411 comm="syz.4.355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.931306][ T68] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 53.943934][ T68] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.943934][ T68] [ 53.954912][ T3293] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.966952][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.009196][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 54.044168][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.054034][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.202591][ T4430] SELinux: failed to load policy [ 54.858072][ T4451] loop2: detected capacity change from 0 to 512 [ 54.881695][ T4451] FAT-fs (loop2): Directory bread(block 199916) failed [ 54.898840][ T4451] FAT-fs (loop2): Directory bread(block 199917) failed [ 54.906972][ T4455] Illegal XDP return value 4294967294 on prog (id 81) dev syz_tun, expect packet loss! [ 54.917322][ T4451] FAT-fs (loop2): Directory bread(block 199918) failed [ 54.925012][ T4451] FAT-fs (loop2): Directory bread(block 199919) failed [ 54.959223][ T4451] FAT-fs (loop2): Directory bread(block 199920) failed [ 54.981813][ T4451] FAT-fs (loop2): Directory bread(block 199921) failed [ 55.009152][ T4451] FAT-fs (loop2): Directory bread(block 199922) failed [ 55.037920][ T4451] FAT-fs (loop2): Directory bread(block 199923) failed [ 55.373606][ T4479] loop1: detected capacity change from 0 to 1024 [ 55.401206][ T4479] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 55.962251][ T28] audit: type=1400 audit(1777337041.632:344): avc: denied { read } for pid=3021 comm="dhcpcd" name="n26" dev="tmpfs" ino=2294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.030252][ T28] audit: type=1400 audit(1777337041.652:345): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.094619][ T4488] loop4: detected capacity change from 0 to 32768 [ 56.102121][ T28] audit: type=1400 audit(1777337041.652:346): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.163190][ T28] audit: type=1400 audit(1777337041.832:347): avc: denied { create } for pid=4495 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.211878][ T28] audit: type=1400 audit(1777337041.832:348): avc: denied { write } for pid=4495 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2306 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.403401][ T4518] loop2: detected capacity change from 0 to 8192 [ 56.427725][ T4518] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.630760][ T4541] loop2: detected capacity change from 0 to 512 [ 56.654698][ T4541] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.686726][ T4541] EXT4-fs (loop2): 1 truncate cleaned up [ 56.698422][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.726273][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 56.852692][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.870763][ T4550] loop1: detected capacity change from 0 to 1024 [ 56.904984][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.971718][ T4550] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.983587][ T4548] loop0: detected capacity change from 0 to 256 [ 57.026455][ T4550] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 3) [ 57.064423][ T4550] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 57.099206][ T4550] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.099206][ T4550] [ 57.131150][ T4561] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.159324][ T4561] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.205876][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.258288][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.290240][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.304575][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.319362][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.333578][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.347905][ T4549] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.401: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.464865][ T4567] loop0: detected capacity change from 0 to 128 [ 57.498454][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 57.498472][ T28] audit: type=1400 audit(1777337043.162:353): avc: denied { create } for pid=4568 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 57.545391][ T4567] syz.0.407: attempt to access beyond end of device [ 57.545391][ T4567] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 57.558778][ T28] audit: type=1400 audit(1777337043.202:354): avc: denied { sys_admin } for pid=4568 comm="syz.4.409" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.625363][ T28] audit: type=1400 audit(1777337043.292:355): avc: denied { mount } for pid=4571 comm="syz.4.410" name="/" dev="hugetlbfs" ino=7794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 57.685362][ T28] audit: type=1400 audit(1777337043.352:356): avc: denied { connect } for pid=4573 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.734047][ T28] audit: type=1400 audit(1777337043.352:357): avc: denied { bind } for pid=4573 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.881666][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 57.916191][ T68] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.916191][ T68] [ 57.940367][ T3292] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 57.972361][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.153194][ T4601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.183691][ T4598] loop1: detected capacity change from 0 to 4096 [ 58.205937][ T4598] EXT4-fs: inline encryption not supported [ 58.211297][ T4601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.231568][ T4598] EXT4-fs: test_dummy_encryption option not supported [ 58.352493][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 58.377526][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 58.457036][ T4618] loop0: detected capacity change from 0 to 512 [ 58.480751][ T4618] EXT4-fs: Invalid want_extra_isize 2 [ 59.234805][ T4653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.513088][ T4665] No such timeout policy "syz1" [ 59.638896][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 59.668316][ T4670] team1: entered promiscuous mode [ 59.679187][ T4670] team1: entered allmulticast mode [ 59.684496][ T4670] 8021q: adding VLAN 0 to HW filter on device team1 [ 59.928096][ T4690] set_capacity_and_notify: 2 callbacks suppressed [ 59.928113][ T4690] loop0: detected capacity change from 0 to 512 [ 59.947897][ T4690] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.458: inode has both inline data and extents flags [ 59.974597][ T4690] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.974749][ T4690] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.458: couldn't read orphan inode 15 (err -117) [ 59.983998][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 59.984023][ C0] EXT4-fs (loop0): initial error at time 1777337045: ext4_orphan_get:1397: inode 15 [ 59.984052][ C0] EXT4-fs (loop0): last error at time 1777337045: ext4_orphan_get:1397: inode 15 [ 60.064934][ T4690] loop0: lost filesystem error report for type 5 error -117 [ 60.065680][ T4690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.090078][ T23] kernel read not supported for file /newroot/79 (pid: 23 comm: kworker/1:0) [ 60.130990][ T2486] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 60.145884][ T2486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 60.161682][ T2486] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.161682][ T2486] [ 60.172498][ T2486] EXT4-fs (loop1): Total free blocks count 0 [ 60.185805][ T2486] EXT4-fs (loop1): Free/Dirty block details [ 60.192740][ T2486] EXT4-fs (loop1): free_blocks=4096 [ 60.199148][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.208675][ T2486] EXT4-fs (loop1): dirty_blocks=512 [ 60.214895][ T2486] EXT4-fs (loop1): Block reservation details [ 60.234488][ T2486] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 60.242138][ T4706] syzkaller1: entered promiscuous mode [ 60.247846][ T4706] syzkaller1: entered allmulticast mode [ 60.255794][ T2486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 60.269206][ T28] audit: type=1400 audit(1777337045.942:358): avc: denied { name_bind } for pid=4707 comm="syz.3.469" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 60.292469][ T3292] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 60.495025][ T4729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 60.949199][ T28] audit: type=1400 audit(1777337046.612:359): avc: denied { read } for pid=4742 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.007201][ T4745] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 61.072987][ T4747] loop0: detected capacity change from 0 to 512 [ 61.105567][ T4747] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.484: inode has both inline data and extents flags [ 61.124405][ T4747] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.124727][ T4747] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.484: couldn't read orphan inode 15 (err -117) [ 61.133940][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 61.133964][ C1] EXT4-fs (loop0): initial error at time 1777337046: ext4_orphan_get:1397: inode 15 [ 61.133995][ C1] EXT4-fs (loop0): last error at time 1777337046: ext4_orphan_get:1397: inode 15 [ 61.179164][ T4747] loop0: lost filesystem error report for type 5 error -117 [ 61.179738][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.245462][ T28] audit: type=1400 audit(1777337046.912:360): avc: denied { execute } for pid=4746 comm="syz.0.484" path="/84/file0/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.311643][ T28] audit: type=1400 audit(1777337046.982:361): avc: denied { ioctl } for pid=4746 comm="syz.0.484" path="/84/file0/file1" dev="loop0" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.372059][ T28] audit: type=1400 audit(1777337047.042:362): avc: denied { cmd } for pid=4751 comm="syz.1.485" path="socket:[8820]" dev="sockfs" ino=8820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.610268][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.142860][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 62.492656][ T4794] all: renamed from bridge_slave_1 [ 62.559159][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 62.875260][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 62.875277][ T28] audit: type=1400 audit(1777337048.542:364): avc: denied { map } for pid=4800 comm="syz.1.506" path="socket:[8149]" dev="sockfs" ino=8149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.958959][ T28] audit: type=1326 audit(1777337048.572:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4815 comm="syz.4.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e63fdcdd9 code=0x0 [ 63.265232][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 63.295101][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 63.419959][ T28] audit: type=1400 audit(1777337049.092:366): avc: denied { name_bind } for pid=4838 comm="syz.1.520" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 63.808740][ T28] audit: type=1400 audit(1777337049.472:367): avc: denied { mount } for pid=4851 comm="syz.1.526" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.961034][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.009892][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.041424][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.081678][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.102282][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.135085][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.145478][ T4871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 64.256185][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.263913][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.439236][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.463374][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.610517][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.646178][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.676657][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.697617][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.828244][ T4949] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 65.851548][ T4949] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 65.906431][ T4951] capability: warning: `syz.3.554' uses 32-bit capabilities (legacy support in use) [ 65.932256][ T28] audit: type=1400 audit(1777337051.602:368): avc: denied { read } for pid=4950 comm="syz.3.554" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.978526][ T28] audit: type=1400 audit(1777337051.622:369): avc: denied { open } for pid=4950 comm="syz.3.554" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.146664][ T28] audit: type=1400 audit(1777337051.812:370): avc: denied { sqpoll } for pid=4962 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.389630][ T28] audit: type=1400 audit(1777337052.042:371): avc: denied { read } for pid=4973 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.633010][ T4961] lo: entered allmulticast mode [ 66.643971][ T4961] lo: left allmulticast mode [ 66.757472][ T4977] loop4: detected capacity change from 0 to 512 [ 66.782666][ T4977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.829202][ T4977] EXT4-fs (loop4): 1 truncate cleaned up [ 66.845475][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.919791][ T4985] loop1: detected capacity change from 0 to 4096 [ 66.926777][ T4985] EXT4-fs: inline encryption not supported [ 66.932966][ T4985] EXT4-fs: test_dummy_encryption option not supported [ 67.225915][ T4994] __nla_validate_parse: 268 callbacks suppressed [ 67.225945][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.289193][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.328473][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.340497][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.374848][ T28] audit: type=1326 audit(1777337053.042:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.0.575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x0 [ 67.375797][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.407407][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.632050][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.632951][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.641866][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.669610][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 67.676797][ T4994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 67.724028][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.731719][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.808229][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.824371][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.857404][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.881021][ T5017] loop1: detected capacity change from 0 to 512 [ 67.881548][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.909015][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.935258][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.039602][ T28] audit: type=1400 audit(1777337053.702:373): avc: denied { setopt } for pid=5023 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.076775][ T28] audit: type=1400 audit(1777337053.702:374): avc: denied { connect } for pid=5023 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.161405][ T5039] loop3: detected capacity change from 0 to 512 [ 68.170242][ T5039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 68.178858][ T5039] System zones: 1-12 [ 68.183786][ T5039] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.588: missing EA_INODE flag [ 68.195890][ T5039] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.196055][ T5039] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.588: error while reading EA inode 12 err=-117 [ 68.205236][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.205255][ C0] EXT4-fs (loop3): initial error at time 1777337053: ext4_xattr_inode_iget:441: inode 12 [ 68.205292][ C0] EXT4-fs (loop3): last error at time 1777337053: ext4_xattr_inode_iget:441: inode 12 [ 68.232187][ T5043] netlink: 'syz.2.589': attribute type 13 has an invalid length. [ 68.237648][ T5039] loop3: lost filesystem error report for type 5 error -117 [ 68.252004][ T5039] EXT4-fs (loop3): 1 orphan inode deleted [ 68.268740][ T5039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.269322][ T5036] loop1: detected capacity change from 0 to 256 [ 68.295062][ T5043] netlink: 'syz.2.589': attribute type 17 has an invalid length. [ 68.375892][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.392146][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.400804][ T5043] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.435857][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.505763][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.525540][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.558671][ T5043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.580176][ T5043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.605015][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.618098][ T5043] veth1_vlan: left promiscuous mode [ 68.623853][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.632808][ T5043] veth0_vlan: left promiscuous mode [ 68.643432][ T5043] veth0_vlan: entered promiscuous mode [ 68.662310][ T5043] veth1_vlan: entered promiscuous mode [ 68.680477][ T5043] veth1_macvtap: left promiscuous mode [ 68.690493][ T5043] veth0_macvtap: left promiscuous mode [ 68.697291][ T5043] veth0_macvtap: entered promiscuous mode [ 68.723611][ T5043] veth1_macvtap: entered promiscuous mode [ 68.733805][ T5043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.747499][ T5043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.765622][ T5043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.776979][ T5043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.822276][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.829407][ T1350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.855825][ T1350] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.863061][ T1350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.898711][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.922949][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.937060][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.963768][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.059631][ T5075] loop4: detected capacity change from 0 to 2048 [ 69.095715][ T5075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.260508][ T5074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.295233][ T5074] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.308050][ T5074] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.308050][ T5074] [ 69.327761][ T5074] EXT4-fs (loop4): Total free blocks count 0 [ 69.334460][ T5074] EXT4-fs (loop4): Free/Dirty block details [ 69.340777][ T5074] EXT4-fs (loop4): free_blocks=4096 [ 69.347037][ T5074] EXT4-fs (loop4): dirty_blocks=736 [ 69.354679][ T5074] EXT4-fs (loop4): Block reservation details [ 69.361127][ T5074] EXT4-fs (loop4): i_reserved_data_blocks=46 [ 70.411262][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 704 with error 28 [ 70.439766][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.539429][ T5115] pim6reg: entered allmulticast mode [ 70.639452][ T28] audit: type=1400 audit(1777337056.302:375): avc: denied { mount } for pid=5125 comm="syz.3.620" name="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.677896][ T28] audit: type=1400 audit(1777337056.312:376): avc: denied { search } for pid=5125 comm="syz.3.620" name="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.701953][ T28] audit: type=1400 audit(1777337056.312:377): avc: denied { search } for pid=5125 comm="syz.3.620" name="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.731364][ T28] audit: type=1400 audit(1777337056.312:378): avc: denied { read open } for pid=5125 comm="syz.3.620" path="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.780323][ T5132] loop0: detected capacity change from 0 to 1024 [ 70.839027][ T5132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.853101][ T5140] loop4: detected capacity change from 0 to 128 [ 70.915404][ T5140] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.953784][ T5140] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.957387][ T28] audit: type=1400 audit(1777337056.622:379): avc: denied { execute } for pid=5142 comm="syz.3.625" path="/114/file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.000913][ T28] audit: type=1400 audit(1777337056.672:380): avc: denied { link } for pid=5138 comm="syz.4.624" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.026464][ T28] audit: type=1400 audit(1777337056.692:381): avc: denied { cpu } for pid=5142 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.081378][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.109398][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.178460][ T28] audit: type=1400 audit(1777337056.842:382): avc: denied { allowed } for pid=5153 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.278424][ T5165] loop0: detected capacity change from 0 to 764 [ 71.314020][ T5165] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 71.348809][ T5165] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 71.530000][ T5192] loop0: detected capacity change from 0 to 128 [ 71.564702][ T5192] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.581062][ T5192] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.658061][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.487547][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.510839][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.518482][ T5225] bridge_slave_0: entered allmulticast mode [ 72.525691][ T5225] bridge_slave_0: entered promiscuous mode [ 72.537955][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.555581][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.564592][ T5225] bridge_slave_1: entered allmulticast mode [ 72.580110][ T5225] bridge_slave_1: entered promiscuous mode [ 72.602389][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.613156][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.634199][ T5225] team0: Port device team_slave_0 added [ 72.647015][ T5225] team0: Port device team_slave_1 added [ 72.678753][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.692232][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.735130][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.762225][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.782655][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.839218][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.892371][ T5225] hsr_slave_0: entered promiscuous mode [ 72.898687][ T5225] hsr_slave_1: entered promiscuous mode [ 72.904956][ T5225] debugfs: 'hsr0' already exists in 'hsr' [ 72.911085][ T5225] Cannot create hsr debugfs directory [ 73.089623][ T5225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.108074][ T5225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.118042][ T5225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.129151][ T5225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.138581][ T5225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.153420][ T5225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.161638][ T5225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.190801][ T5225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.276385][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.301871][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.325037][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.332214][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.364959][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.372168][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.424110][ T5362] loop3: detected capacity change from 0 to 1024 [ 73.462320][ T5362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.510967][ T5369] loop0: detected capacity change from 0 to 1024 [ 73.532978][ T5369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.582327][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 73.582345][ T28] audit: type=1400 audit(1777337059.252:390): avc: denied { connect } for pid=5371 comm="syz.1.664" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.712701][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.731938][ T28] audit: type=1400 audit(1777337059.402:391): avc: denied { setopt } for pid=5390 comm="syz.4.666" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.811818][ T28] audit: type=1326 audit(1777337059.482:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc78d28cdd9 code=0x0 [ 73.874779][ T28] audit: type=1400 audit(1777337059.542:393): avc: denied { kexec_image_load } for pid=5400 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 73.912955][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.377859][ T5225] veth0_vlan: entered promiscuous mode [ 74.400973][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.409458][ T5225] veth1_vlan: entered promiscuous mode [ 74.463610][ T5225] veth0_macvtap: entered promiscuous mode [ 74.512163][ T5225] veth1_macvtap: entered promiscuous mode [ 74.563313][ T28] audit: type=1400 audit(1777337060.232:394): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.585339][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.665845][ T28] audit: type=1400 audit(1777337060.332:395): avc: denied { create } for pid=5485 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.685488][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.695652][ T28] audit: type=1400 audit(1777337060.332:396): avc: denied { bind } for pid=5485 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.762405][ T5278] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.771278][ T5278] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.794750][ T5278] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.804857][ T5278] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130364][ T28] audit: type=1400 audit(1777337060.802:397): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.616727][ T5535] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 75.656362][ T5535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.682067][ T5541] bond1: entered promiscuous mode [ 75.701287][ T28] audit: type=1400 audit(1777337061.372:398): avc: denied { shutdown } for pid=5538 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.721014][ T5541] bond1: entered allmulticast mode [ 75.795570][ T28] audit: type=1400 audit(1777337061.462:399): avc: denied { connect } for pid=5546 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.916740][ T5549] netlink: 'syz.3.699': attribute type 13 has an invalid length. [ 75.962063][ T5549] netlink: 'syz.3.699': attribute type 17 has an invalid length. [ 76.043204][ T5549] lo: left allmulticast mode [ 76.090967][ T5549] tunl0: left allmulticast mode [ 76.104233][ T5549] gre0: left allmulticast mode [ 76.133641][ T5549] gretap0: left allmulticast mode [ 76.165605][ T5549] erspan0: left allmulticast mode [ 76.195016][ T5549] ip_vti0: left allmulticast mode [ 76.209836][ T5567] __nla_validate_parse: 109 callbacks suppressed [ 76.209858][ T5567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.703'. [ 76.236735][ T5549] ip6_vti0: left allmulticast mode [ 76.253208][ T5549] sit0: left allmulticast mode [ 76.278118][ T5549] ip6tnl0: left allmulticast mode [ 76.294990][ T5549] ip6gre0: left allmulticast mode [ 76.301060][ T5569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.703'. [ 76.326050][ T5549] ip6gretap0: left allmulticast mode [ 76.359128][ T5549] bridge0: left allmulticast mode [ 76.375911][ T5549] vcan0: left allmulticast mode [ 76.392384][ T5549] bond0: left allmulticast mode [ 76.414542][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.440705][ T5549] team0: left allmulticast mode [ 76.456751][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.482048][ T5549] dummy0: left allmulticast mode [ 76.499718][ T5549] nlmon0: left allmulticast mode [ 76.513986][ T5549] batadv0: left allmulticast mode [ 76.529579][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.551067][ T5549] vxcan0: left allmulticast mode [ 76.567351][ T5549] vxcan1: left allmulticast mode [ 76.582186][ T5549] veth0: left allmulticast mode [ 76.597384][ T5549] veth1: left allmulticast mode [ 76.613644][ T5549] wg0: left allmulticast mode [ 76.660568][ T5549] wg1: left allmulticast mode [ 76.687320][ T5549] wg2: left allmulticast mode [ 76.739833][ T5549] veth0_to_bridge: left allmulticast mode [ 76.802192][ T5549] veth1_to_bridge: left allmulticast mode [ 76.859247][ T5549] veth0_to_bond: left allmulticast mode [ 76.891095][ T5549] bond_slave_0: left allmulticast mode [ 76.923344][ T5549] veth1_to_bond: left allmulticast mode [ 76.960034][ T5549] bond_slave_1: left allmulticast mode [ 76.986345][ T5549] veth0_to_team: left allmulticast mode [ 77.016390][ T5549] team_slave_0: left allmulticast mode [ 77.050490][ T5549] veth1_to_team: left allmulticast mode [ 77.082103][ T5549] team_slave_1: left allmulticast mode [ 77.112954][ T5549] veth0_to_batadv: left allmulticast mode [ 77.131350][ T5549] batadv_slave_0: left allmulticast mode [ 77.149531][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.169826][ T5549] veth1_to_batadv: left allmulticast mode [ 77.179567][ T5549] batadv_slave_1: left allmulticast mode [ 77.210947][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.240829][ T5549] xfrm0: left allmulticast mode [ 77.260172][ T5549] veth0_to_hsr: left allmulticast mode [ 77.291685][ T5549] veth1_to_hsr: left allmulticast mode [ 77.318286][ T5549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.349153][ T5549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.379283][ T5549] hsr0: left allmulticast mode [ 77.384216][ T5549] hsr_slave_0: left allmulticast mode [ 77.399138][ T5549] hsr_slave_1: left allmulticast mode [ 77.409806][ T5549] veth1_virt_wifi: left allmulticast mode [ 77.416628][ T5549] veth0_virt_wifi: left allmulticast mode [ 77.423539][ T5549] veth1_macvtap: left promiscuous mode [ 77.429361][ T5549] veth1_macvtap: left allmulticast mode [ 77.436081][ T5549] veth0_macvtap: left promiscuous mode [ 77.442047][ T5549] veth0_macvtap: left allmulticast mode [ 77.448645][ T5549] veth0_macvtap: entered promiscuous mode [ 77.454749][ T5549] veth0_macvtap: entered allmulticast mode [ 77.460667][ T5549] macvtap0: left allmulticast mode [ 77.465802][ T5549] veth0_macvtap: left allmulticast mode [ 77.476143][ T5549] veth1_macvtap: entered promiscuous mode [ 77.482185][ T5549] veth1_macvtap: entered allmulticast mode [ 77.488164][ T5549] macsec0: left allmulticast mode [ 77.493413][ T5549] veth1_macvtap: left allmulticast mode [ 77.500022][ T5549] geneve0: left allmulticast mode [ 77.506467][ T5549] geneve1: left allmulticast mode [ 77.513079][ T5549] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 77.520647][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.531295][ T5549] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 77.538692][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.549157][ T5549] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 77.556499][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.566995][ T5549] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 77.574788][ T5549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.585709][ T5549] ip6gre1: left allmulticast mode [ 77.593043][ T5549] ip6gre2: left promiscuous mode [ 77.598338][ T5549] ip6gre2: left allmulticast mode [ 77.621775][ T5549] bond1: left promiscuous mode [ 77.626591][ T5549] erspan1: left promiscuous mode [ 77.631684][ T5549] bond1: left allmulticast mode [ 77.637333][ T5549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.646248][ T5549] erspan1: left allmulticast mode [ 77.655366][ T5549] team1: left promiscuous mode [ 77.660247][ T5549] team1: left allmulticast mode [ 77.665312][ T5549] 8021q: adding VLAN 0 to HW filter on device team1 [ 77.675925][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.683303][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.703265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.710481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.755388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.762537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.824870][ T116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.839129][ T116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.839409][ T5579] loop1: detected capacity change from 0 to 1024 [ 77.878907][ T116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.883704][ T5579] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.909678][ T116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.940718][ T5583] team0 (unregistering): Port device team_slave_0 removed [ 77.942562][ T5579] EXT4-fs: quotafile must be on filesystem root [ 77.955191][ T5583] team0 (unregistering): Port device team_slave_1 removed [ 78.040004][ T1350] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 78.733447][ T5605] netlink: 52 bytes leftover after parsing attributes in process `syz.3.718'. [ 78.753611][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.760851][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.785652][ T5606] netlink: 52 bytes leftover after parsing attributes in process `syz.3.718'. [ 78.806502][ T5609] serio: Serial port ptm1 [ 78.870224][ T5614] loop3: detected capacity change from 0 to 1024 [ 78.886004][ T5614] EXT4-fs: Ignoring removed orlov option [ 78.913254][ T5614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.005653][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.258392][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 79.258411][ T28] audit: type=1400 audit(79.077:401): avc: denied { getopt } for pid=5621 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.455411][ T5644] gretap1: entered promiscuous mode [ 79.555723][ T28] audit: type=1400 audit(79.517:402): avc: denied { append } for pid=5659 comm="syz.4.734" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.697001][ T5669] syzkaller0: entered promiscuous mode [ 79.705780][ T28] audit: type=1400 audit(79.667:403): avc: denied { read write } for pid=5673 comm="syz.0.737" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.730769][ T5669] syzkaller0: entered allmulticast mode [ 79.737102][ T28] audit: type=1400 audit(79.667:404): avc: denied { open } for pid=5673 comm="syz.0.737" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.802117][ T5688] netlink: 192 bytes leftover after parsing attributes in process `syz.0.749'. [ 79.809106][ T28] audit: type=1400 audit(79.727:405): avc: denied { write } for pid=5681 comm="syz.0.739" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.814632][ T5688] netlink: 192 bytes leftover after parsing attributes in process `syz.0.749'. [ 80.208976][ T5736] netlink: 52 bytes leftover after parsing attributes in process `syz.1.741'. [ 80.368549][ T5747] loop3: detected capacity change from 0 to 1024 [ 80.405166][ T5747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.442002][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.239157][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 90.413429][ T5776] loop1: detected capacity change from 0 to 128 [ 90.461115][ T28] audit: type=1400 audit(90.417:406): avc: denied { sqpoll } for pid=5784 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.634583][ T5265] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.729555][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 90.746643][ T5265] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.802478][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.878260][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.926299][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.933949][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.976343][ T5265] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.090293][ T5265] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.227765][ T28] audit: type=1400 audit(91.187:407): avc: denied { create } for pid=5823 comm="syz.4.773" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.295910][ T5265] bridge_slave_1: left allmulticast mode [ 91.316881][ T5265] bridge_slave_1: left promiscuous mode [ 91.323280][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.334192][ T5265] bridge_slave_0: left allmulticast mode [ 91.344971][ T5265] bridge_slave_0: left promiscuous mode [ 91.351055][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.684056][ T5265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.703606][ T5265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.716237][ T5265] bond0 (unregistering): Released all slaves [ 91.726648][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 91.811375][ T5265] hsr_slave_0: left promiscuous mode [ 91.822552][ T5265] hsr_slave_1: left promiscuous mode [ 91.830067][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.841891][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.849831][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.867823][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.015579][ T28] audit: type=1400 audit(91.977:408): avc: denied { unlink } for pid=3297 comm="syz-executor" name=01 dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.121122][ T5881] loop1: detected capacity change from 0 to 512 [ 92.146615][ T5881] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.220785][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.273488][ T5265] veth1_macvtap: left promiscuous mode [ 92.280866][ T5265] veth0_macvtap: left promiscuous mode [ 92.287748][ T5265] veth1_vlan: left promiscuous mode [ 92.293143][ T28] audit: type=1400 audit(92.247:409): avc: denied { setattr } for pid=5880 comm="syz.1.782" path="/176/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.346490][ T5265] veth0_vlan: left promiscuous mode [ 92.501244][ T5265] team0 (unregistering): Port device team_slave_1 removed [ 92.522701][ T5265] team0 (unregistering): Port device team_slave_0 removed [ 92.541570][ T5890] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #19: comm syz.1.782: corrupted inode contents [ 92.567250][ T5890] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 92.567472][ T5890] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #19: comm syz.1.782: mark_inode_dirty error [ 92.588341][ T5890] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 92.588540][ T5890] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #19: comm syz.1.782: corrupted inode contents [ 92.610520][ T5890] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 92.611161][ T5890] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #19: comm syz.1.782: mark_inode_dirty error [ 92.613469][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.620858][ T5890] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 92.637378][ T5888] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 92.640615][ T5890] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #19: comm syz.1.782: mark inode dirty (error -117) [ 92.670959][ T5890] loop1: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 92.679569][ T5890] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 92.725065][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.750592][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.758065][ T5771] bridge_slave_0: entered allmulticast mode [ 92.775459][ T5771] bridge_slave_0: entered promiscuous mode [ 92.783302][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.790722][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.798009][ T5771] bridge_slave_1: entered allmulticast mode [ 92.805518][ T5771] bridge_slave_1: entered promiscuous mode [ 92.806403][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.943333][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.065071][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.076411][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.114664][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.167183][ T5261] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.589591][ T5771] team0: Port device team_slave_0 added [ 93.601892][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.623907][ T5771] team0: Port device team_slave_1 added [ 93.838901][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.855965][ T28] audit: type=1400 audit(93.817:410): avc: denied { listen } for pid=5958 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.875059][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.907011][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.930776][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.940656][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.967943][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.094295][ T5771] hsr_slave_0: entered promiscuous mode [ 94.109727][ T5771] hsr_slave_1: entered promiscuous mode [ 94.123367][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 94.140112][ T5771] Cannot create hsr debugfs directory [ 94.159683][ T5971] netlink: 27 bytes leftover after parsing attributes in process `syz.0.803'. [ 94.242283][ T28] audit: type=1400 audit(94.207:411): avc: denied { listen } for pid=5980 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.273488][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 94.293031][ T28] audit: type=1400 audit(94.237:412): avc: denied { accept } for pid=5980 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.355589][ T5771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.376494][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.394066][ T5771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.403536][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.415518][ T5771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.433865][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.454032][ T5771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.483295][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.555466][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.578423][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.594823][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.601971][ T5261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.632634][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.639890][ T5261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.795137][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.929415][ T5771] veth0_vlan: entered promiscuous mode [ 94.937630][ T5771] veth1_vlan: entered promiscuous mode [ 94.956119][ T5771] veth0_macvtap: entered promiscuous mode [ 94.964558][ T5771] veth1_macvtap: entered promiscuous mode [ 94.977293][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.991370][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.003215][ T5261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.022733][ T5261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.041548][ T28] audit: type=1400 audit(95.007:413): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/root/syzkaller.67jL3A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 95.042706][ T5261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.104996][ T5261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.199538][ T6020] loop6: detected capacity change from 0 to 1024 [ 95.199547][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.284244][ T6020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.362661][ T5771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.755479][ T6044] loop3: detected capacity change from 0 to 512 [ 95.792538][ T6044] EXT4-fs: Ignoring removed oldalloc option [ 95.794076][ T28] audit: type=1400 audit(95.757:414): avc: denied { mounton } for pid=6043 comm="syz.3.813" path="/syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.836325][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.050816][ T6044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.813: bg 0: block 416: padding at end of block bitmap is not set [ 96.065395][ T28] audit: type=1400 audit(96.017:415): avc: denied { setattr } for pid=6043 comm="syz.3.813" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.102111][ T6044] Quota error (device loop3): write_blk: dquota write failed [ 96.116764][ T6044] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 96.137710][ T6044] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.813: Failed to acquire dquot type 1 [ 96.995760][ T28] audit: type=1400 audit(96.957:416): avc: denied { bind } for pid=6089 comm="syz.1.828" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.053910][ T28] audit: type=1400 audit(96.977:417): avc: denied { name_bind } for pid=6089 comm="syz.1.828" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.077697][ T28] audit: type=1400 audit(96.977:418): avc: denied { node_bind } for pid=6089 comm="syz.1.828" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.101493][ T28] audit: type=1400 audit(97.067:419): avc: denied { write } for pid=6096 comm="syz.0.831" name="kcm" dev="proc" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.180758][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.835'. [ 97.190777][ T6106] netlink: 'syz.6.835': attribute type 5 has an invalid length. [ 97.209688][ T1648] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.218635][ T1648] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.237516][ T1648] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.252450][ T28] audit: type=1400 audit(97.217:420): avc: denied { read } for pid=6110 comm="syz.3.836" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.276380][ T1648] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.286988][ T28] audit: type=1400 audit(97.217:421): avc: denied { open } for pid=6110 comm="syz.3.836" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.506719][ T6125] cgroup: none used incorrectly [ 98.669692][ T6162] cgroup: none used incorrectly [ 99.479935][ T6197] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 99.494438][ T6197] syzkaller1: Linktype set failed because interface is up [ 99.825092][ T6207] cgroup: none used incorrectly [ 100.065485][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'. [ 100.090643][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'. [ 100.173673][ T6215] netlink: 7 bytes leftover after parsing attributes in process `syz.1.876'. [ 100.514071][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.559697][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.591523][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.721836][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.765828][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.829028][ T6237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.893349][ T6237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.957515][ T6237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.988507][ T6237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.030794][ T6237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.062719][ T6237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.083494][ T6237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.104241][ T6237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.135161][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.142410][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.187384][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.194555][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.258298][ T5261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.291104][ T5261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.326990][ T5261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.352093][ T5261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.518662][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 101.518680][ T28] audit: type=1400 audit(101.477:451): avc: denied { execute_no_trans } for pid=6256 comm="syz.0.894" path="/177/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.558749][ T6305] all (unregistering): Released all slaves [ 102.697343][ T6308] netlink: 4764 bytes leftover after parsing attributes in process `syz.6.915'. [ 102.719669][ T6308] netlink: 'syz.6.915': attribute type 5 has an invalid length. [ 103.578370][ T6334] loop6: detected capacity change from 0 to 512 [ 103.610143][ T6334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.638517][ T6334] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.926: iget: bad i_size value: 38620345925642 [ 103.642628][ T6340] tipc: Failed to remove unknown binding: 66,1,1/0:3048615230/3048615232 [ 103.671527][ T6340] tipc: Failed to remove unknown binding: 66,1,1/0:3048615230/3048615232 [ 103.688495][ T6334] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.689068][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 103.704843][ C0] EXT4-fs (loop6): initial error at time 103: ext4_orphan_get:1397: inode 15 [ 103.713720][ C0] EXT4-fs (loop6): last error at time 103: ext4_orphan_get:1397: inode 15 [ 103.729286][ T6334] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.926: couldn't read orphan inode 15 (err -117) [ 103.760131][ T6334] loop6: lost filesystem error report for type 5 error -117 [ 103.760812][ T6334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.814996][ T28] audit: type=1400 audit(103.777:452): avc: denied { append } for pid=6333 comm="syz.6.926" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.867510][ T5771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.531260][ T28] audit: type=1400 audit(106.497:453): avc: denied { mount } for pid=6488 comm="syz.1.965" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.586714][ T6495] loop1: detected capacity change from 0 to 1024 [ 106.611766][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.712613][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.391766][ T6517] syzkaller0: entered promiscuous mode [ 107.411271][ T6517] syzkaller0: entered allmulticast mode [ 108.015847][ T28] audit: type=1400 audit(107.977:454): avc: denied { setopt } for pid=6555 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.080969][ T6565] loop4: detected capacity change from 0 to 512 [ 108.211780][ T28] audit: type=1400 audit(108.177:455): avc: denied { setopt } for pid=6572 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.268128][ T6571] syz.4.994: attempt to access beyond end of device [ 108.268128][ T6571] loop4: rw=0, sector=432, nr_sectors = 128 limit=512 [ 108.751057][ T5270] kworker/u8:19: attempt to access beyond end of device [ 108.751057][ T5270] loop4: rw=1, sector=560, nr_sectors = 3528 limit=512 [ 108.793989][ T5270] kworker/u8:19: attempt to access beyond end of device [ 108.793989][ T5270] loop4: rw=1, sector=4088, nr_sectors = 3064 limit=512 [ 108.820157][ T28] audit: type=1400 audit(108.777:456): avc: denied { associate } for pid=6593 comm="syz.3.1005" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.834547][ T5270] kworker/u8:19: attempt to access beyond end of device [ 108.834547][ T5270] loop4: rw=1, sector=7152, nr_sectors = 7720 limit=512 [ 108.903145][ T5270] kworker/u8:19: attempt to access beyond end of device [ 108.903145][ T5270] loop4: rw=1, sector=14872, nr_sectors = 1592 limit=512 [ 109.357941][ T28] audit: type=1400 audit(109.317:457): avc: denied { listen } for pid=6625 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.310126][ T6676] all (unregistering): Released all slaves [ 111.296933][ T6740] io-wq is not configured for unbound workers [ 111.363196][ T28] audit: type=1400 audit(111.327:458): avc: denied { create } for pid=6746 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.443465][ T28] audit: type=1400 audit(111.337:459): avc: denied { create } for pid=6727 comm="syz.0.1058" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.493795][ T28] audit: type=1400 audit(111.447:460): avc: denied { getopt } for pid=6749 comm="syz.6.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.557301][ T28] audit: type=1400 audit(111.487:461): avc: denied { write } for pid=6756 comm="syz.4.1068" path="socket:[16250]" dev="sockfs" ino=16250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.642652][ T28] audit: type=1400 audit(111.607:462): avc: denied { accept } for pid=6737 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.735432][ T6771] syzkaller1: entered promiscuous mode [ 111.756317][ T6771] syzkaller1: entered allmulticast mode [ 112.155556][ T28] audit: type=1400 audit(112.117:463): avc: denied { create } for pid=6783 comm="syz.1.1082" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 112.211318][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 112.378224][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.406508][ T6791] bond1: option ad_select: unable to set because the bond device is up [ 112.952297][ T6849] all (unregistering): Released all slaves [ 113.392714][ T6877] loop1: detected capacity change from 0 to 32768 [ 113.450651][ T6877] loop1: p1 p3 < > [ 113.516844][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 113.517506][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 113.600366][ T6881] loop4: detected capacity change from 0 to 128 [ 113.756933][ T6892] xt_hashlimit: size too large, truncated to 1048576 [ 114.171454][ T6862] syz.3.1112 (6862) used greatest stack depth: 7296 bytes left [ 114.388911][ T28] audit: type=1400 audit(114.347:464): avc: denied { create } for pid=6925 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.440852][ T28] audit: type=1400 audit(114.367:465): avc: denied { bind } for pid=6925 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.474641][ T28] audit: type=1400 audit(114.377:466): avc: denied { listen } for pid=6925 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.516174][ T6932] all (unregistering): Released all slaves [ 114.703482][ T28] audit: type=1400 audit(114.667:467): avc: denied { execute } for pid=6950 comm="syz.1.1150" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.996035][ T6983] all (unregistering): Released all slaves [ 117.321809][ T28] audit: type=1400 audit(117.287:468): avc: denied { mounton } for pid=7005 comm="syz.1.1173" path="/276/file1" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.535356][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 118.397781][ T7047] loop1: detected capacity change from 0 to 512 [ 118.416524][ T7047] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 118.486776][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 118.506808][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 118.517512][ T5274] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 118.584544][ T7056] hsr_slave_1 (unregistering): left promiscuous mode [ 118.715449][ T28] audit: type=1326 audit(118.677:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 118.782226][ T28] audit: type=1326 audit(118.677:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 118.848735][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 118.859683][ T28] audit: type=1326 audit(118.677:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 118.893734][ T7085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.902684][ T28] audit: type=1326 audit(118.677:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 118.953691][ T28] audit: type=1326 audit(118.677:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 119.000493][ T28] audit: type=1326 audit(118.677:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 119.062571][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 119.062684][ T28] audit: type=1326 audit(118.677:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 119.132027][ T7095] hsr_slave_1 (unregistering): left promiscuous mode [ 119.151603][ T28] audit: type=1326 audit(118.677:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 119.204621][ T28] audit: type=1326 audit(118.677:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 119.359918][ T7111] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1218'. [ 119.767012][ T7127] loop1: detected capacity change from 0 to 512 [ 119.780129][ T7127] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.789472][ T7127] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 119.871397][ T7131] loop6: detected capacity change from 0 to 256 [ 121.041790][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 121.085343][ T7169] hsr_slave_1 (unregistering): left promiscuous mode [ 121.278089][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 121.320471][ T7181] bond2: entered promiscuous mode [ 121.343530][ T7181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.844771][ T7211] veth0: entered promiscuous mode [ 121.863103][ T7211] bond0: entered promiscuous mode [ 121.879397][ T7211] bond_slave_0: entered promiscuous mode [ 121.900305][ T7211] bond_slave_1: entered promiscuous mode [ 121.908830][ T7209] bond0: left promiscuous mode [ 121.929337][ T7209] bond_slave_0: left promiscuous mode [ 121.944970][ T7209] bond_slave_1: left promiscuous mode [ 121.965645][ T7209] veth0: left promiscuous mode [ 122.520983][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 122.560341][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 122.560815][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.603054][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.612844][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 122.612872][ T28] audit: type=1400 audit(122.577:496): avc: denied { read } for pid=7242 comm="syz.3.1283" path="socket:[17203]" dev="sockfs" ino=17203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.622132][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.674383][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.717733][ T28] audit: type=1400 audit(122.677:497): avc: denied { bind } for pid=7254 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.130574][ T7279] loop1: detected capacity change from 0 to 512 [ 123.160293][ T7279] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1286: inode has both inline data and extents flags [ 123.182446][ T7279] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.182672][ T7279] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1286: couldn't read orphan inode 15 (err -117) [ 123.192135][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 123.192156][ C1] EXT4-fs (loop1): initial error at time 123: ext4_orphan_get:1397: inode 15 [ 123.192188][ C1] EXT4-fs (loop1): last error at time 123: ext4_orphan_get:1397: inode 15 [ 123.229601][ T7279] loop1: lost filesystem error report for type 5 error -117 [ 123.230374][ T7279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.680179][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.870806][ T10] IPVS: starting estimator thread 0... [ 123.959315][ T7299] IPVS: using max 2544 ests per chain, 127200 per kthread [ 123.973721][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1295'. [ 124.003089][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1295'. [ 124.526545][ T7329] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1302'. [ 124.554869][ T7329] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1302'. [ 124.642939][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 125.236339][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 125.272661][ T7366] loop1: detected capacity change from 0 to 1024 [ 125.300413][ T7364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.327636][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.345528][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 125.380028][ T7368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.415716][ T7368] bond1: (slave bond2): Enslaving as an active interface with an up link [ 125.651438][ T7372] bond1 (unregistering): (slave bond2): Releasing backup interface [ 125.660334][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.671316][ T7372] bond1 (unregistering): Released all slaves [ 125.806837][ T7389] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 125.824948][ T7389] netlink: 'syz.1.1324': attribute type 2 has an invalid length. [ 125.840053][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 125.918649][ T28] audit: type=1400 audit(125.877:498): avc: denied { remount } for pid=7399 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.954683][ T28] audit: type=1400 audit(125.907:499): avc: denied { write } for pid=7407 comm="syz.1.1334" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.176387][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 126.526557][ T7416] loop1: detected capacity change from 0 to 512 [ 126.607770][ T7416] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 126.659667][ T7416] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1338: iget: bogus i_mode (2) [ 126.680140][ T7416] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.683252][ T7416] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1338: couldn't read orphan inode 15 (err -117) [ 126.694022][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 126.694273][ C0] EXT4-fs (loop1): initial error at time 126: ext4_orphan_get:1397: inode 15 [ 126.694583][ C0] EXT4-fs (loop1): last error at time 126: ext4_orphan_get:1397: inode 15 [ 126.819401][ T7416] loop1: lost filesystem error report for type 5 error -117 [ 126.847051][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.138670][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.361961][ T28] audit: type=1326 audit(127.317:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.414756][ T28] audit: type=1326 audit(127.317:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.472221][ T28] audit: type=1326 audit(127.317:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.515865][ T7475] loop4: detected capacity change from 0 to 4096 [ 127.521081][ T28] audit: type=1326 audit(127.327:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.568849][ T28] audit: type=1326 audit(127.327:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.607048][ T7475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.607387][ T28] audit: type=1326 audit(127.327:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.712684][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.722233][ T28] audit: type=1326 audit(127.327:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.757975][ T28] audit: type=1326 audit(127.327:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.784072][ T28] audit: type=1326 audit(127.327:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.807384][ T28] audit: type=1326 audit(127.327:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.853951][ T28] audit: type=1326 audit(127.327:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.893135][ T28] audit: type=1326 audit(127.407:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7469 comm="syz.6.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe287afcdd9 code=0x7ffc0000 [ 127.912013][ T7483] __nla_validate_parse: 1 callbacks suppressed [ 127.912031][ T7483] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1365'. [ 128.142409][ T7490] loop6: detected capacity change from 0 to 8192 [ 131.174961][ T7525] xt_hashlimit: size too large, truncated to 1048576 [ 131.193032][ T7525] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 131.232187][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1384'. [ 131.402014][ T7541] netlink: 'syz.6.1389': attribute type 10 has an invalid length. [ 131.455470][ T7542] netlink: 'syz.6.1389': attribute type 10 has an invalid length. [ 132.061523][ T7541] team0: Failed to send options change via netlink (err -105) [ 132.086704][ T7541] team0: Port device dummy0 added [ 132.094622][ T7542] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 132.105780][ T7542] team0: Failed to send options change via netlink (err -105) [ 132.114015][ T7542] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 132.122997][ T7542] team0: Port device dummy0 removed [ 132.131178][ T7542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.609529][ T7574] xt_hashlimit: size too large, truncated to 1048576 [ 132.661886][ T28] audit: type=1400 audit(132.627:512): avc: denied { setopt } for pid=7573 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.077742][ T7607] xt_CT: No such helper "pptp" [ 133.357673][ T28] audit: type=1400 audit(133.317:513): avc: denied { ioctl } for pid=7621 comm="syz.0.1422" path="socket:[19775]" dev="sockfs" ino=19775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.416858][ T7624] loop4: detected capacity change from 0 to 2048 [ 133.458580][ T7624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.561656][ T7624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1423: bg 0: block 234: padding at end of block bitmap is not set [ 133.610990][ T7624] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 210 with error 28 [ 133.669288][ T7624] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.669288][ T7624] [ 133.706838][ T7624] EXT4-fs (loop4): Total free blocks count 0 [ 133.723227][ T7624] EXT4-fs (loop4): Free/Dirty block details [ 133.739296][ T7624] EXT4-fs (loop4): free_blocks=0 [ 133.745842][ T7637] loop6: detected capacity change from 0 to 512 [ 133.758804][ T7624] EXT4-fs (loop4): dirty_blocks=224 [ 133.772036][ T7624] EXT4-fs (loop4): Block reservation details [ 133.795907][ T7624] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 133.851948][ T7647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7647 comm=syz.1.1430 [ 133.865064][ T7637] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 133.909213][ T7637] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1426: iget: bogus i_mode (2) [ 133.933875][ T7637] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.935113][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 133.949708][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 133.958036][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.962767][ C0] EXT4-fs (loop6): initial error at time 133: ext4_orphan_get:1397: inode 15 [ 133.974714][ T7637] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1426: couldn't read orphan inode 15 (err -117) [ 133.983027][ C0] EXT4-fs (loop6): last error at time 133: ext4_orphan_get:1397: inode 15 [ 134.011081][ T7637] loop6: lost filesystem error report for type 5 error -117 [ 134.032092][ T7637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.225236][ T7659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7659 comm=syz.0.1434 [ 134.225531][ T5771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.290286][ T28] audit: type=1400 audit(134.257:514): avc: denied { checkpoint_restore } for pid=7661 comm="syz.4.1436" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap2_userns permissive=1 [ 134.317100][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 134.328254][ T28] audit: type=1400 audit(134.257:515): avc: denied { checkpoint_restore } for pid=7661 comm="syz.4.1436" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.437296][ T7675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.522336][ T7675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.593034][ T7675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.664651][ T7675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.773985][ T5265] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.800189][ T5265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.825040][ T5265] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.833743][ T5265] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.041910][ T7709] loop6: detected capacity change from 0 to 512 [ 135.382201][ T28] audit: type=1400 audit(135.347:516): avc: denied { listen } for pid=7720 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.412530][ T28] audit: type=1400 audit(135.377:517): avc: denied { accept } for pid=7720 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.534935][ T28] audit: type=1400 audit(135.497:518): avc: denied { mounton } for pid=7728 comm="syz.0.1461" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.566783][ T7731] bridge_slave_0: left allmulticast mode [ 135.576475][ T7731] bridge_slave_0: left promiscuous mode [ 135.582473][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.590800][ T28] audit: type=1400 audit(135.557:519): avc: denied { unmount } for pid=7728 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 135.620338][ T7731] bridge_slave_1: left allmulticast mode [ 135.627414][ T7731] bridge_slave_1: left promiscuous mode [ 135.640267][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.651918][ T7731] bond0: (slave bond_slave_0): Releasing backup interface [ 135.661755][ T7731] bond0: (slave bond_slave_1): Releasing backup interface [ 135.678371][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.696525][ T7731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.885451][ T7745] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 135.899133][ T28] audit: type=1400 audit(135.847:520): avc: denied { mount } for pid=7748 comm="syz.1.1469" name="/" dev="autofs" ino=20034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 135.911094][ T7745] SELinux: failed to load policy [ 135.948277][ T28] audit: type=1400 audit(135.907:521): avc: denied { open } for pid=7752 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.984981][ T7756] tmpfs: Bad value for 'mpol' [ 135.990597][ T28] audit: type=1400 audit(135.907:522): avc: denied { kernel } for pid=7752 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 136.084886][ T7763] loop1: detected capacity change from 0 to 512 [ 136.102112][ T7763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.124061][ T7763] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1474: iget: bad i_size value: 38620345925642 [ 136.151479][ T7763] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.151777][ T7763] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1474: couldn't read orphan inode 15 (err -117) [ 136.161131][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 136.161154][ C0] EXT4-fs (loop1): initial error at time 136: ext4_orphan_get:1397: inode 15 [ 136.161190][ C0] EXT4-fs (loop1): last error at time 136: ext4_orphan_get:1397: inode 15 [ 136.197495][ T7763] loop1: lost filesystem error report for type 5 error -117 [ 136.198351][ T7763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.383127][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.099383][ T7793] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 137.158328][ T7793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.174171][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 137.184620][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'. [ 137.203822][ T7799] bond2: (slave gretap1): making interface the new active one [ 137.228986][ T7799] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.246094][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 137.256942][ T7806] netlink: 'syz.1.1492': attribute type 25 has an invalid length. [ 137.265032][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 137.398125][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 138.123333][ T7845] loop1: detected capacity change from 0 to 1024 [ 138.195956][ T7845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.297179][ T7845] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1509: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.364685][ T7845] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 138.424588][ T7845] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.424588][ T7845] [ 138.505943][ T3292] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 138.549668][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.572997][ T7859] netlink: 'syz.6.1514': attribute type 1 has an invalid length. [ 138.616685][ T7859] netlink: 'syz.6.1514': attribute type 4 has an invalid length. [ 138.638929][ T7859] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1514'. [ 139.000874][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 139.000896][ T28] audit: type=1400 audit(138.967:528): avc: denied { tracepoint } for pid=7869 comm="syz.0.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.380061][ T7886] bridge0: port 3(macsec1) entered blocking state [ 139.401062][ T7886] bridge0: port 3(macsec1) entered disabled state [ 139.420331][ T7886] macsec1: entered allmulticast mode [ 139.436504][ T7886] bridge0: entered allmulticast mode [ 139.449799][ T7886] macsec1: left allmulticast mode [ 139.462870][ T7886] bridge0: left allmulticast mode [ 140.044365][ T7868] kexec: Could not allocate control_code_buffer [ 140.190287][ T7913] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1537'. [ 141.252197][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 141.273751][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 141.325841][ T7942] loop6: detected capacity change from 0 to 32768 [ 141.481926][ T7909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.491247][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 141.523268][ T7964] erspan0: entered promiscuous mode [ 141.529508][ T7964] macvtap1: entered promiscuous mode [ 141.542251][ T7964] macvtap1: entered allmulticast mode [ 141.542615][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 141.591459][ T7964] erspan0: entered allmulticast mode [ 141.663990][ T7968] erspan0: left allmulticast mode [ 141.669874][ T7968] erspan0: left promiscuous mode [ 141.875602][ T7990] loop6: detected capacity change from 0 to 256 [ 142.084981][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1576'. [ 142.097060][ T8007] erspan0: entered promiscuous mode [ 142.102737][ T8007] macvtap1: entered promiscuous mode [ 142.108304][ T8007] macvtap1: entered allmulticast mode [ 142.113823][ T8007] erspan0: entered allmulticast mode [ 142.127416][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 142.137292][ T8007] erspan0: left allmulticast mode [ 142.142945][ T8007] erspan0: left promiscuous mode [ 142.187006][ T28] audit: type=1326 audit(142.147:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.209968][ T28] audit: type=1326 audit(142.147:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.241775][ T28] audit: type=1326 audit(142.157:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.264895][ T28] audit: type=1326 audit(142.157:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.288692][ T28] audit: type=1326 audit(142.157:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.312476][ T28] audit: type=1326 audit(142.207:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.335937][ T28] audit: type=1326 audit(142.207:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.360626][ T28] audit: type=1326 audit(142.207:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.385614][ T28] audit: type=1326 audit(142.207:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 142.709070][ T8039] loop4: detected capacity change from 0 to 128 [ 143.542828][ T8050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.618557][ T8050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.737834][ T8050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.763351][ T8050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.825711][ T8050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.852429][ T8050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.878477][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.902870][ T8073] bridge_slave_0 (unregistering): left allmulticast mode [ 143.921863][ T8073] bridge_slave_0 (unregistering): left promiscuous mode [ 143.938082][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.952224][ T8050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.963035][ T8050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.977988][ T8075] ipip0: entered promiscuous mode [ 143.983567][ T8075] ipip0: entered allmulticast mode [ 144.032223][ T5270] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.040996][ T5270] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.079794][ T8087] bond0: (slave dummy0): Releasing backup interface [ 144.117908][ T8087] bridge_slave_1: left allmulticast mode [ 144.124223][ T8087] bridge_slave_1: left promiscuous mode [ 144.130249][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.140845][ T8087] bond0: (slave bond_slave_0): Releasing backup interface [ 144.154959][ T8087] bond0: (slave bond_slave_1): Releasing backup interface [ 144.171598][ T8087] team0: Port device team_slave_0 removed [ 144.184418][ T8087] team0: Port device team_slave_1 removed [ 144.191664][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.199545][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.208899][ T8087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.216843][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.227694][ T8087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.255517][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 144.273254][ T1648] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.283144][ T1648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.384022][ T8091] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.400296][ T8091] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 144.414690][ T8091] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 144.500609][ T5261] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.518452][ T5261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.554123][ T1648] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.578753][ T1648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.612422][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 144.612440][ T28] audit: type=1400 audit(144.577:560): avc: denied { create } for pid=8126 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 144.671094][ T8129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=8129 comm=syz.4.1627 [ 144.699778][ T28] audit: type=1400 audit(144.647:561): avc: denied { write } for pid=8126 comm="syz.0.1626" path="socket:[21699]" dev="sockfs" ino=21699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 145.339936][ T28] audit: type=1400 audit(145.297:562): avc: denied { read } for pid=8140 comm="syz.6.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.701786][ T28] audit: type=1400 audit(145.667:563): avc: denied { create } for pid=8151 comm="syz.0.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 146.594628][ T8183] loop1: detected capacity change from 0 to 512 [ 146.653734][ T8183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.679327][ T8183] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1649: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 146.737698][ T8183] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 12: comm syz.1.1649: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 146.799980][ T8190] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.1649: lblock 23 mapped to illegal pblock 18 (length 1) [ 146.852220][ T8183] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.1649: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 146.908232][ T8183] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.1649: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 146.958714][ T8183] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.1649: lblock 23 mapped to illegal pblock 18 (length 1) [ 147.283381][ T8219] loop6: detected capacity change from 0 to 2048 [ 147.440526][ T8200] loop4: detected capacity change from 0 to 1024 [ 147.502296][ T8200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.588304][ T8200] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1654: lblock 3 mapped to illegal pblock 3 (length 1) [ 147.644625][ T8200] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 147.684523][ T8200] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.684523][ T8200] [ 147.714802][ T8228] loop6: detected capacity change from 0 to 128 [ 147.742527][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.759148][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 147.789836][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.860188][ T28] audit: type=1400 audit(147.827:564): avc: denied { setopt } for pid=8235 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.929782][ T28] audit: type=1400 audit(147.887:565): avc: denied { name_bind } for pid=8238 comm="syz.4.1669" src=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 147.993105][ T28] audit: type=1326 audit(147.917:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.3.1670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc78d28cdd9 code=0x0 [ 148.324669][ T8268] netlink: 'syz.6.1682': attribute type 39 has an invalid length. [ 148.342568][ T8270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=8270 comm=syz.0.1683 [ 148.582847][ T8288] tipc: Started in network mode [ 148.587975][ T8288] tipc: Node identity ac14140f, cluster identity 4711 [ 148.595408][ T8288] tipc: Enabled bearer , priority 10 [ 148.721757][ T8295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=8295 comm=syz.6.1695 [ 149.429558][ T8315] loop6: detected capacity change from 0 to 1024 [ 149.473696][ T8315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.496933][ T8315] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.1703: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.512877][ T8315] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 149.526268][ T8315] EXT4-fs (loop6): This should not happen!! Data will be lost [ 149.526268][ T8315] [ 149.543634][ T8315] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1703: Freeing blocks not in datazone - block = 3, count = 1 [ 149.544649][ T28] audit: type=1400 audit(149.507:567): avc: denied { ioctl } for pid=8314 comm="syz.6.1703" path="/185/file1/file1" dev="loop6" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.589085][ T10] tipc: Node number set to 2886997007 [ 149.595088][ T5771] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 149.619461][ T5771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.689856][ T28] audit: type=1400 audit(149.647:568): avc: denied { sys_module } for pid=8321 comm="syz.0.1715" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 149.955555][ T8334] geneve2: entered promiscuous mode [ 149.979241][ T8334] geneve2: entered allmulticast mode [ 150.005723][ T5263] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.019281][ T5263] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.036621][ T5263] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.059203][ T5263] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.087147][ T28] audit: type=1400 audit(150.047:569): avc: denied { cpu } for pid=8342 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.112066][ T4901] Process accounting resumed [ 150.143268][ T8346] loop6: detected capacity change from 0 to 128 [ 150.186222][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.193380][ T8348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.200883][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.207984][ T8348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.490889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.503187][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 150.516242][ T28] audit: type=1326 audit(150.457:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 150.562408][ T28] audit: type=1326 audit(150.457:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 150.649953][ T28] audit: type=1326 audit(150.457:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 150.721064][ T28] audit: type=1326 audit(150.457:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 150.772344][ T8369] bridge_slave_0: left allmulticast mode [ 150.782392][ T28] audit: type=1400 audit(150.467:574): avc: denied { egress } for pid=5276 comm="kworker/u8:22" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::1 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 150.808554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.856526][ T8369] bridge_slave_0: left promiscuous mode [ 150.870156][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.873311][ T28] audit: type=1400 audit(150.467:575): avc: denied { sendto } for pid=5276 comm="kworker/u8:22" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::1 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 150.903508][ T8369] bridge_slave_1: left allmulticast mode [ 150.913303][ T8369] bridge_slave_1: left promiscuous mode [ 150.939229][ T28] audit: type=1326 audit(150.477:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 150.962396][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.008677][ T28] audit: type=1326 audit(150.477:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x7ffc0000 [ 151.046465][ T8369] bond0: (slave bond_slave_0): Releasing backup interface [ 151.080106][ T8369] bond0: (slave bond_slave_1): Releasing backup interface [ 151.098073][ T8369] team0: Port device team_slave_0 removed [ 151.116324][ T8369] team0: Port device team_slave_1 removed [ 151.136679][ T8369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.351888][ T8429] loop1: detected capacity change from 0 to 256 [ 152.367800][ T8429] msdos: Unknown parameter 'dotĒļ' [ 152.851351][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1760'. [ 152.995994][ T8465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.018395][ T8465] ip6erspan0: entered promiscuous mode [ 153.099659][ T8476] xt_hashlimit: size too large, truncated to 1048576 [ 153.351097][ T8481] loop6: detected capacity change from 0 to 164 [ 153.385222][ T8481] iso9660: Bad value for 'check' [ 153.543637][ T8491] bridge_slave_0: left allmulticast mode [ 153.549846][ T8491] bridge_slave_0: left promiscuous mode [ 153.555707][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.578415][ T8491] bridge_slave_1: left allmulticast mode [ 153.585487][ T8491] bridge_slave_1: left promiscuous mode [ 153.591647][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.601730][ T8491] bond0: (slave bond_slave_0): Releasing backup interface [ 153.613506][ T8491] bond0: (slave bond_slave_1): Releasing backup interface [ 153.628381][ T8491] team0: Port device team_slave_0 removed [ 153.646973][ T8491] team0: Port device team_slave_1 removed [ 153.664245][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.681142][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.698927][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.710528][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.720097][ T8491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.844773][ T8493] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 153.886360][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 153.895977][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1775'. [ 153.931305][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 153.951244][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1775'. [ 154.168420][ T8534] loop4: detected capacity change from 0 to 512 [ 154.186101][ T8534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.223168][ T8534] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.1788: orphan file block 0: bad magic [ 154.244411][ T8534] loop4: lost filesystem error report for type 5 error -117 [ 154.249050][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 154.263063][ C1] EXT4-fs (loop4): initial error at time 154: ext4_init_orphan_info:618 [ 154.271448][ C1] EXT4-fs (loop4): last error at time 154: ext4_init_orphan_info:618 [ 154.286453][ T8534] EXT4-fs (loop4): Remounting filesystem read-only [ 154.295574][ T8534] EXT4-fs (loop4): mount failed [ 154.349303][ T8545] loop1: detected capacity change from 0 to 128 [ 154.745497][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 154.745513][ T28] audit: type=1326 audit(154.707:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.0.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65778cdd9 code=0x0 [ 155.130234][ T8623] loop6: detected capacity change from 0 to 256 [ 155.387649][ T8626] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.408468][ T8626] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 155.441562][ T8626] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 155.588357][ T28] audit: type=1400 audit(155.547:600): avc: denied { mount } for pid=8636 comm="syz.6.1805" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 155.667212][ T8637] loop6: detected capacity change from 0 to 2048 [ 155.721568][ T8637] Alternate GPT is invalid, using primary GPT. [ 155.738818][ T8637] loop6: p1 p2 p3 [ 155.750444][ T8637] loop6: partition table partially beyond EOD, truncated [ 155.821834][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 155.833723][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 155.846543][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 155.864160][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 155.875439][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 155.890336][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 156.846434][ T28] audit: type=1400 audit(156.807:601): avc: denied { setopt } for pid=8689 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.867300][ T8688] bridge_slave_0: left allmulticast mode [ 156.875980][ T8688] bridge_slave_0: left promiscuous mode [ 156.882612][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.892572][ T8694] loop4: detected capacity change from 0 to 512 [ 156.893036][ T8688] bridge_slave_1: left allmulticast mode [ 156.915686][ T8688] bridge_slave_1: left promiscuous mode [ 156.925325][ T8697] loop1: detected capacity change from 0 to 256 [ 156.931805][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.946210][ T8688] bond0: (slave bond_slave_0): Releasing backup interface [ 156.954445][ T8694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.966156][ T8694] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.982027][ T8694] EXT4-fs (loop4): 1 truncate cleaned up [ 156.989169][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 156.995643][ C1] EXT4-fs (loop4): initial error at time 156: ext4_mb_generate_buddy:1317 [ 157.004553][ C1] EXT4-fs (loop4): last error at time 156: ext4_mb_generate_buddy:1317 [ 157.013535][ T8694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.026878][ T8688] bond0: (slave bond_slave_1): Releasing backup interface [ 157.039276][ T8688] team0: Port device team_slave_0 removed [ 157.047844][ T8688] team0: Port device team_slave_1 removed [ 157.055501][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.063099][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.072238][ T8688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.080246][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.097997][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.102889][ T8688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.264509][ T8695] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 157.413265][ T8720] netlink: 'syz.6.1839': attribute type 4 has an invalid length. [ 157.464441][ T8724] netlink: 'syz.6.1839': attribute type 4 has an invalid length. [ 157.599515][ T4901] dummy0: entered promiscuous mode [ 157.616105][ T23] dummy0: left promiscuous mode [ 157.755480][ T8746] netlink: 'syz.1.1847': attribute type 5 has an invalid length. [ 158.195955][ T8751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.207842][ T8751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.791886][ T8751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.810703][ T8751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.835929][ T28] audit: type=1400 audit(158.797:602): avc: denied { read } for pid=8757 comm="syz.6.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.891138][ T8751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.908716][ T8751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.972051][ T8751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.982663][ T8751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 159.067078][ T5255] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.077969][ T5255] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.102619][ T5255] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.113925][ T5255] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.126703][ T5255] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.136756][ T5255] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.150661][ T5255] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.159366][ T5255] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.180820][ T8777] bridge0: port 1(vlan0) entered blocking state [ 159.196078][ T8777] bridge0: port 1(vlan0) entered disabled state [ 159.206188][ T8777] vlan0: entered allmulticast mode [ 159.216062][ T8777] geneve0: entered allmulticast mode [ 159.833303][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 159.872127][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 159.945630][ T28] audit: type=1400 audit(159.907:603): avc: denied { setopt } for pid=8810 comm="syz.6.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.994448][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 160.028024][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 160.190775][ C0] ================================================================== [ 160.198931][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 160.206348][ C0] [ 160.208684][ C0] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 1: [ 160.216780][ C0] can_can_gw_rcv+0x863/0x870 [ 160.221492][ C0] can_rcv_filter+0xc3/0x480 [ 160.226109][ C0] can_receive+0x13e/0x190 [ 160.230548][ C0] can_rcv+0x17d/0x1f0 [ 160.234641][ C0] process_backlog+0x363/0x670 [ 160.239432][ C0] __napi_poll+0x61/0x300 [ 160.243796][ C0] net_rx_action+0x452/0x930 [ 160.248430][ C0] handle_softirqs+0xb9/0x280 [ 160.253224][ C0] run_ksoftirqd+0x1c/0x30 [ 160.257769][ C0] smpboot_thread_fn+0x32a/0x510 [ 160.262749][ C0] kthread+0x22a/0x280 [ 160.266841][ C0] ret_from_fork+0x146/0x330 [ 160.271464][ C0] ret_from_fork_asm+0x1a/0x30 [ 160.276259][ C0] [ 160.278597][ C0] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 0: [ 160.286769][ C0] can_can_gw_rcv+0x863/0x870 [ 160.291489][ C0] can_rcv_filter+0xc3/0x480 [ 160.296100][ C0] can_receive+0x13e/0x190 [ 160.300547][ C0] can_rcv+0x17d/0x1f0 [ 160.304751][ C0] process_backlog+0x363/0x670 [ 160.309559][ C0] __napi_poll+0x61/0x300 [ 160.313922][ C0] net_rx_action+0x452/0x930 [ 160.318543][ C0] handle_softirqs+0xb9/0x280 [ 160.323339][ C0] do_softirq+0x45/0x60 [ 160.327605][ C0] __local_bh_enable_ip+0x70/0x80 [ 160.332742][ C0] __alloc_skb+0x658/0x690 [ 160.337193][ C0] alloc_uevent_skb+0x5c/0x120 [ 160.341993][ C0] kobject_uevent_net_broadcast+0xfb/0x410 [ 160.347835][ C0] kobject_uevent_env+0x43d/0x570 [ 160.352978][ C0] kobject_uevent+0x1d/0x30 [ 160.357515][ C0] device_add+0x41f/0x790 [ 160.361952][ C0] netdev_register_kobject+0x109/0x230 [ 160.367445][ C0] register_netdevice+0xaaf/0x1160 [ 160.372572][ C0] __ip_tunnel_create+0x31d/0x430 [ 160.377637][ C0] ip_tunnel_init_net+0x210/0x490 [ 160.382783][ C0] erspan_init_net+0x35/0x40 [ 160.387401][ C0] ops_init+0x22a/0x2e0 [ 160.391677][ C0] setup_net+0x9f/0x230 [ 160.395867][ C0] copy_net_ns+0x310/0x450 [ 160.400316][ C0] create_new_namespaces+0x20e/0x440 [ 160.405633][ C0] copy_namespaces+0x1ad/0x210 [ 160.410431][ C0] copy_process+0x10ae/0x23a0 [ 160.415483][ C0] kernel_clone+0x1a5/0x5e0 [ 160.420189][ C0] __x64_sys_clone+0x143/0x180 [ 160.425051][ C0] x64_sys_call+0x1222/0x3020 [ 160.429825][ C0] do_syscall_64+0x12c/0x3b0 [ 160.434669][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.440573][ C0] [ 160.442946][ C0] value changed: 0x00002ddd -> 0x00002dde [ 160.448751][ C0] [ 160.451161][ C0] Reported by Kernel Concurrency Sanitizer on: [ 160.457441][ C0] CPU: 0 UID: 0 PID: 8815 Comm: syz.3.1876 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.468476][ C0] Tainted: [W]=WARN [ 160.472279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.482337][ C0] ================================================================== [ 163.377105][ C1] ================================================================== [ 163.385248][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 163.392485][ C1] [ 163.394817][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 0: [ 163.402909][ C1] can_can_gw_rcv+0x863/0x870 [ 163.407728][ C1] can_rcv_filter+0xc3/0x480 [ 163.412346][ C1] can_receive+0x13e/0x190 [ 163.416873][ C1] can_rcv+0x17d/0x1f0 [ 163.421053][ C1] process_backlog+0x363/0x670 [ 163.426307][ C1] __napi_poll+0x61/0x300 [ 163.430668][ C1] net_rx_action+0x452/0x930 [ 163.435284][ C1] handle_softirqs+0xb9/0x280 [ 163.440096][ C1] do_softirq+0x45/0x60 [ 163.444263][ C1] __local_bh_enable_ip+0x70/0x80 [ 163.449304][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 163.454267][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 163.459933][ C1] process_scheduled_works+0x4f0/0x9c0 [ 163.465428][ C1] worker_thread+0x58a/0x780 [ 163.470123][ C1] kthread+0x22a/0x280 [ 163.474297][ C1] ret_from_fork+0x146/0x330 [ 163.478949][ C1] ret_from_fork_asm+0x1a/0x30 [ 163.483750][ C1] [ 163.486091][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 1: [ 163.494261][ C1] can_can_gw_rcv+0x863/0x870 [ 163.498967][ C1] can_rcv_filter+0xc3/0x480 [ 163.503582][ C1] can_receive+0x13e/0x190 [ 163.508016][ C1] can_rcv+0x17d/0x1f0 [ 163.512108][ C1] process_backlog+0x363/0x670 [ 163.516904][ C1] __napi_poll+0x61/0x300 [ 163.521256][ C1] net_rx_action+0x452/0x930 [ 163.525875][ C1] handle_softirqs+0xb9/0x280 [ 163.530572][ C1] do_softirq+0x45/0x60 [ 163.534750][ C1] __local_bh_enable_ip+0x70/0x80 [ 163.539791][ C1] xt_replace_table+0x26a/0x460 [ 163.544670][ C1] __do_replace+0xc9/0x570 [ 163.549116][ C1] do_ipt_set_ctl+0x774/0x8e0 [ 163.553829][ C1] nf_setsockopt+0x199/0x1b0 [ 163.558449][ C1] ip_setsockopt+0x102/0x110 [ 163.563060][ C1] tcp_setsockopt+0x98/0xb0 [ 163.567693][ C1] sock_common_setsockopt+0x69/0x80 [ 163.572936][ C1] __sys_setsockopt+0x184/0x200 [ 163.577811][ C1] __x64_sys_setsockopt+0x64/0x80 [ 163.582864][ C1] x64_sys_call+0x2327/0x3020 [ 163.587568][ C1] do_syscall_64+0x12c/0x3b0 [ 163.592186][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.598228][ C1] [ 163.600566][ C1] value changed: 0x0004549f -> 0x000454a0 [ 163.606397][ C1] [ 163.608742][ C1] Reported by Kernel Concurrency Sanitizer on: [ 163.614912][ C1] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 163.625977][ C1] Tainted: [W]=WARN [ 163.629810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.639978][ C1] ================================================================== [ 166.469130][ C1] ================================================================== [ 166.477361][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 166.484637][ C1] [ 166.486979][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 0: [ 166.495264][ C1] can_can_gw_rcv+0x863/0x870 [ 166.500060][ C1] can_rcv_filter+0xc3/0x480 [ 166.504679][ C1] can_receive+0x13e/0x190 [ 166.509117][ C1] can_rcv+0x17d/0x1f0 [ 166.513199][ C1] process_backlog+0x363/0x670 [ 166.517985][ C1] __napi_poll+0x61/0x300 [ 166.522346][ C1] net_rx_action+0x452/0x930 [ 166.526956][ C1] handle_softirqs+0xb9/0x280 [ 166.531736][ C1] run_ksoftirqd+0x1c/0x30 [ 166.536173][ C1] smpboot_thread_fn+0x32a/0x510 [ 166.541239][ C1] kthread+0x22a/0x280 [ 166.545328][ C1] ret_from_fork+0x146/0x330 [ 166.549948][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.554739][ C1] [ 166.557074][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 1: [ 166.565171][ C1] can_can_gw_rcv+0x863/0x870 [ 166.569891][ C1] can_rcv_filter+0xc3/0x480 [ 166.574496][ C1] can_receive+0x13e/0x190 [ 166.578934][ C1] can_rcv+0x17d/0x1f0 [ 166.583021][ C1] process_backlog+0x363/0x670 [ 166.587818][ C1] __napi_poll+0x61/0x300 [ 166.592262][ C1] net_rx_action+0x452/0x930 [ 166.596881][ C1] handle_softirqs+0xb9/0x280 [ 166.601655][ C1] do_softirq+0x45/0x60 [ 166.605835][ C1] __local_bh_enable_ip+0x70/0x80 [ 166.610881][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 166.615849][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 166.621511][ C1] process_scheduled_works+0x4f0/0x9c0 [ 166.626998][ C1] worker_thread+0x58a/0x780 [ 166.631615][ C1] kthread+0x22a/0x280 [ 166.635705][ C1] ret_from_fork+0x146/0x330 [ 166.640340][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.645128][ C1] [ 166.647459][ C1] value changed: 0x000878c5 -> 0x000878c6 [ 166.653192][ C1] [ 166.655536][ C1] Reported by Kernel Concurrency Sanitizer on: [ 166.661711][ C1] CPU: 1 UID: 0 PID: 1350 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.672850][ C1] Tainted: [W]=WARN [ 166.676664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.686738][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 166.693539][ C1] ================================================================== [ 169.489462][ C1] ================================================================== [ 169.497606][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 169.504848][ C1] [ 169.507204][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 0: [ 169.515287][ C1] can_can_gw_rcv+0x863/0x870 [ 169.520000][ C1] can_rcv_filter+0xc3/0x480 [ 169.524609][ C1] can_receive+0x13e/0x190 [ 169.529046][ C1] can_rcv+0x17d/0x1f0 [ 169.533225][ C1] process_backlog+0x363/0x670 [ 169.538020][ C1] __napi_poll+0x61/0x300 [ 169.542373][ C1] net_rx_action+0x452/0x930 [ 169.547000][ C1] handle_softirqs+0xb9/0x280 [ 169.551694][ C1] do_softirq+0x45/0x60 [ 169.555874][ C1] __local_bh_enable_ip+0x70/0x80 [ 169.560921][ C1] __alloc_skb+0x658/0x690 [ 169.565375][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 169.571046][ C1] process_scheduled_works+0x4f0/0x9c0 [ 169.576531][ C1] worker_thread+0x58a/0x780 [ 169.581161][ C1] kthread+0x22a/0x280 [ 169.585339][ C1] ret_from_fork+0x146/0x330 [ 169.589957][ C1] ret_from_fork_asm+0x1a/0x30 [ 169.594845][ C1] [ 169.597358][ C1] read-write to 0xffff888100173800 of 4 bytes by interrupt on cpu 1: [ 169.605443][ C1] can_can_gw_rcv+0x863/0x870 [ 169.610160][ C1] can_rcv_filter+0xc3/0x480 [ 169.614777][ C1] can_receive+0x13e/0x190 [ 169.619212][ C1] can_rcv+0x17d/0x1f0 [ 169.623313][ C1] process_backlog+0x363/0x670 [ 169.628110][ C1] __napi_poll+0x61/0x300 [ 169.632463][ C1] net_rx_action+0x452/0x930 [ 169.637084][ C1] handle_softirqs+0xb9/0x280 [ 169.641812][ C1] do_softirq+0x45/0x60 [ 169.645988][ C1] __local_bh_enable_ip+0x70/0x80 [ 169.651038][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 169.656093][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 169.661759][ C1] process_scheduled_works+0x4f0/0x9c0 [ 169.667343][ C1] worker_thread+0x58a/0x780 [ 169.671961][ C1] kthread+0x22a/0x280 [ 169.676102][ C1] ret_from_fork+0x146/0x330 [ 169.680720][ C1] ret_from_fork_asm+0x1a/0x30 [ 169.685510][ C1] [ 169.687849][ C1] value changed: 0x000c96a9 -> 0x000c96aa [ 169.693579][ C1] [ 169.695916][ C1] Reported by Kernel Concurrency Sanitizer on: [ 169.702089][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.712971][ C1] Tainted: [W]=WARN [ 169.716885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.727047][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 169.733853][ C1] ==================================================================