last executing test programs: 1m26.515853066s ago: executing program 4 (id=2003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x186, 0x4) 1m26.492993248s ago: executing program 4 (id=2005): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xf}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x75}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9b93}, @TCA_FQ_CODEL_MEMORY_LIMIT={0xfffffffffffffeca, 0x9, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m26.441829643s ago: executing program 4 (id=2006): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.331446902s ago: executing program 4 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x44000, 0x0) 1m26.316563904s ago: executing program 4 (id=2011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0xc2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x5, 0x1]}, @timestamp={0x8, 0xa, 0xee, 0x500000}, @sack={0x5, 0x16, [0x5, 0xfffff000, 0x9, 0xd, 0x80000001]}, @timestamp={0x8, 0xa, 0x1, 0x2}]}}}}}}}, 0x0) 1m26.239551321s ago: executing program 4 (id=2015): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m26.229670551s ago: executing program 32 (id=2015): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 26.078033543s ago: executing program 1 (id=3593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 25.920206227s ago: executing program 1 (id=3596): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setresuid(0x0, 0xee00, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 25.851215713s ago: executing program 1 (id=3601): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/151, 0x97}], 0x7, &(0x7f00000005c0)=""/101, 0x65}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/15, 0xf}, {&(0x7f0000001780)=""/215, 0xd7}, {&(0x7f0000001880)=""/4, 0x4}, {&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/76, 0x4c}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000001e80)=""/16, 0x10}], 0xa, &(0x7f0000001c40)=""/122, 0x7a}, 0x3ca}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f0000001dc0)=""/188, 0xbc}, {&(0x7f0000002500)=""/118, 0x76}, {&(0x7f0000001f00)=""/234, 0xea}, {&(0x7f0000002000)=""/94, 0x5e}, {&(0x7f0000002080)=""/132, 0x84}, {&(0x7f0000002140)=""/185, 0xb9}, {&(0x7f0000002200)=""/223, 0xdf}, {&(0x7f0000002300)=""/119, 0x77}], 0x9}, 0x4}], 0x3, 0x1000400000de, 0x0) 25.844520474s ago: executing program 1 (id=3604): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 25.819326766s ago: executing program 1 (id=3605): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) write$UHID_INPUT(r2, 0x0, 0x0) 25.760536071s ago: executing program 1 (id=3607): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b8759b431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ad931e221093aa4099", 0x9}], 0x1}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x400000000000256, 0x40, 0x0) 25.736256873s ago: executing program 33 (id=3607): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b8759b431a05b9319c", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ad931e221093aa4099", 0x9}], 0x1}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x400000000000256, 0x40, 0x0) 5.917936897s ago: executing program 0 (id=4160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xfffc, 0x0, 0xff6b}}}}}}}, 0x0) 5.742989642s ago: executing program 0 (id=4166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) 5.691692357s ago: executing program 0 (id=4168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.360323926s ago: executing program 0 (id=4174): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 5.266505494s ago: executing program 0 (id=4176): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) write$UHID_INPUT(r2, 0x0, 0x0) 5.166052453s ago: executing program 0 (id=4178): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c6fcae84cb7adca}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.135448966s ago: executing program 34 (id=4178): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2c6fcae84cb7adca}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.527428525s ago: executing program 2 (id=4268): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r2, 0x16, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000003e000000", 0x30) 1.48032279s ago: executing program 2 (id=4270): semget(0x1, 0x4, 0x1a0) getuid() r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='!=u&00\t&&') 1.47143645s ago: executing program 6 (id=4272): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.400041126s ago: executing program 7 (id=4273): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x80000d6e, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.385103398s ago: executing program 2 (id=4274): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) 1.276756217s ago: executing program 3 (id=4275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9b1", 0x2}], 0x1, 0xf) write(r0, 0x0, 0x0) 1.269997858s ago: executing program 7 (id=4276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.231333072s ago: executing program 7 (id=4277): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 1.230801431s ago: executing program 5 (id=4278): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3b05824, 0x0) 1.124001001s ago: executing program 5 (id=4279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.005376961s ago: executing program 5 (id=4280): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "941895a14fa6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/90, 0x5a}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x10023, 0x0) 986.960993ms ago: executing program 5 (id=4281): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) close(r0) 923.999489ms ago: executing program 2 (id=4282): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa8456e6c47a34048ff2ece1e75f1fc0100f41e4de62a61093825abbc8a1dd888935ace522fa788000000000033035551502f00000000000000000000000500"}, 0xd8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 580.325819ms ago: executing program 6 (id=4283): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) 437.215022ms ago: executing program 6 (id=4284): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x8610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x980d, 0x3, 0x7fc, 0x6, 0x8fa0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x1) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 368.016318ms ago: executing program 3 (id=4285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) 363.725989ms ago: executing program 3 (id=4286): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 341.93251ms ago: executing program 2 (id=4287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 341.67815ms ago: executing program 7 (id=4288): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 302.792354ms ago: executing program 3 (id=4289): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r1, 0x0, 0x7}, 0x38) 302.375204ms ago: executing program 7 (id=4290): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) setrlimit(0x7, &(0x7f0000000040)) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 274.097026ms ago: executing program 5 (id=4291): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000f0000000000000000000a00000a20000000000a05290000000001000000070000000900010073797a300000000048000000090a01040000000000000000070000000900010073797a30000000000c00098008000140e0000000080005400000003c08000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 260.333757ms ago: executing program 7 (id=4292): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 232.03139ms ago: executing program 3 (id=4293): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x258, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x149842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) 224.577521ms ago: executing program 2 (id=4294): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "941895a14fa6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/90, 0x5a}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x10023, 0x0) 223.962961ms ago: executing program 6 (id=4304): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028005000900040000001400030000000000000000000000ff"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 163.310106ms ago: executing program 6 (id=4295): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002280)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 119.6428ms ago: executing program 5 (id=4296): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000300ffffffff49"], 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 27.218448ms ago: executing program 3 (id=4297): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x87, 0x7, 0x10}, 0x0, &(0x7f0000000240)={0x21, 0xc, 0x715, 0x8000000000000000, 0x10000000, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 0s ago: executing program 6 (id=4298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) kernel console output (not intermixed with test programs): 6258][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.501567][ T4173] kworker/u8:19: attempt to access beyond end of device [ 110.501567][ T4173] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 110.531725][ T4173] kworker/u8:19: attempt to access beyond end of device [ 110.531725][ T4173] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 110.555915][ T4173] kworker/u8:19: attempt to access beyond end of device [ 110.555915][ T4173] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 110.593150][ T8791] batadv_slave_1: entered promiscuous mode [ 110.593889][ T4173] kworker/u8:19: attempt to access beyond end of device [ 110.593889][ T4173] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 110.635700][ T8788] batadv_slave_1: left promiscuous mode [ 110.689820][ T28] audit: type=1400 audit(1771886501.807:804): avc: denied { lock } for pid=8799 comm="syz.3.2088" path="socket:[22639]" dev="sockfs" ino=22639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 110.757968][ T4173] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.905157][ T8835] batadv_slave_1: entered promiscuous mode [ 110.925572][ T8834] batadv_slave_1: left promiscuous mode [ 111.845325][ T8901] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.884467][ T28] audit: type=1400 audit(1771886503.007:805): avc: denied { create } for pid=8904 comm="syz.2.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 111.909346][ T28] audit: type=1400 audit(1771886503.027:806): avc: denied { ioctl } for pid=8904 comm="syz.2.2115" path="socket:[22357]" dev="sockfs" ino=22357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 112.081623][ T8923] loop5: detected capacity change from 0 to 512 [ 112.090286][ T8923] EXT4-fs: Ignoring removed nobh option [ 112.125871][ T8923] EXT4-fs (loop5): 1 orphan inode deleted [ 112.135052][ T8923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.225683][ T8939] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 112.247688][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.281244][ T28] audit: type=1400 audit(1771886503.397:807): avc: denied { kexec_image_load } for pid=8944 comm="syz.2.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 112.318522][ T8941] xt_hashlimit: size too large, truncated to 1048576 [ 112.507001][ T28] audit: type=1400 audit(1771886503.627:808): avc: denied { mount } for pid=8971 comm="syz.2.2144" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 112.762992][ T6269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.763591][ T3737] Bluetooth: hci0: command 0x1003 tx timeout [ 113.092531][ T9033] loop5: detected capacity change from 0 to 1024 [ 113.124710][ T9033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.445755][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 113.455104][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2181'. [ 114.316941][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.365939][ T28] audit: type=1400 audit(1771886505.477:809): avc: denied { map } for pid=9062 comm="syz.5.2182" path="socket:[22998]" dev="sockfs" ino=22998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.390026][ T9061] loop3: detected capacity change from 0 to 2048 [ 114.412958][ T28] audit: type=1400 audit(1771886505.477:810): avc: denied { create } for pid=9062 comm="syz.5.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.452746][ T28] audit: type=1400 audit(1771886505.477:811): avc: denied { setopt } for pid=9062 comm="syz.5.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.483233][ T9061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.547881][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.744411][ T9111] netlink: 'syz.2.2205': attribute type 30 has an invalid length. [ 114.795193][ T9114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.898602][ T9129] pim6reg1: entered promiscuous mode [ 114.910878][ T9129] pim6reg1: entered allmulticast mode [ 115.060710][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 115.060726][ T28] audit: type=1400 audit(1771886506.177:815): avc: denied { write } for pid=9146 comm="syz.3.2220" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 115.810709][ T28] audit: type=1400 audit(1771886506.927:816): avc: denied { sys_module } for pid=9169 comm="syz.1.2229" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.017566][ T2449] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 116.071117][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 116.081109][ T9197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2237'. [ 116.154433][ T9203] netlink: 'syz.0.2241': attribute type 30 has an invalid length. [ 117.009634][ T28] audit: type=1400 audit(1771886508.117:817): avc: denied { bind } for pid=9211 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.083163][ T28] audit: type=1400 audit(1771886508.117:818): avc: denied { read } for pid=9211 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.107728][ T9226] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.120041][ T28] audit: type=1400 audit(1771886508.227:819): avc: denied { load_policy } for pid=9213 comm="syz.2.2249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.143301][ T9226] SELinux: failed to load policy [ 117.480403][ T9274] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2272'. [ 117.503276][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 117.532812][ T9278] netlink: 'syz.1.2273': attribute type 30 has an invalid length. [ 117.704936][ T9285] process '/newroot/480/file0' started with executable stack [ 117.925848][ T4172] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.095791][ T9325] ªªªªªª„†‚­ZÄ‚: renamed from vlan0 [ 118.604008][ T9356] Invalid argument reading file caps for ./file0 [ 119.316961][ T9369] pim6reg1: entered promiscuous mode [ 119.347950][ T9369] pim6reg1: entered allmulticast mode [ 119.524484][ T28] audit: type=1400 audit(1771886766.639:820): avc: denied { name_bind } for pid=9370 comm="syz.0.2324" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 119.619593][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 119.962926][ T6269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.963098][ T3737] Bluetooth: hci0: command 0x1003 tx timeout [ 120.511876][ T9424] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2336'. [ 121.066635][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 121.102390][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 121.126273][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 121.144427][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 121.203090][ T9464] loop3: detected capacity change from 0 to 32768 [ 121.263990][ T3309] loop3: p1 p3 < > [ 121.271349][ T9507] block device autoloading is deprecated and will be removed. [ 121.291392][ T9464] loop3: p1 p3 < > [ 121.400176][ T28] audit: type=1326 audit(1771886768.509:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.480663][ T28] audit: type=1326 audit(1771886768.549:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.509816][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 121.514063][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 121.551409][ T28] audit: type=1326 audit(1771886768.549:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.616632][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 121.618453][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 121.627159][ T28] audit: type=1326 audit(1771886768.549:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.716612][ T28] audit: type=1326 audit(1771886768.549:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.755579][ T28] audit: type=1326 audit(1771886768.549:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.788496][ T28] audit: type=1326 audit(1771886768.549:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.812375][ T28] audit: type=1326 audit(1771886768.549:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.863113][ T28] audit: type=1326 audit(1771886768.549:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 121.902971][ T28] audit: type=1326 audit(1771886768.549:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 122.351231][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 122.372912][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'. [ 122.381807][ T9591] netlink: 'syz.5.2384': attribute type 6 has an invalid length. [ 122.403135][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 122.412040][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'. [ 122.433008][ T9591] netlink: 'syz.5.2384': attribute type 6 has an invalid length. [ 122.605942][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.633109][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.700483][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 123.854266][ T9684] syz.0.2438: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 123.873425][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.0.2438 Tainted: G W syzkaller #0 PREEMPT(full) [ 123.873462][ T9684] Tainted: [W]=WARN [ 123.873470][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.873486][ T9684] Call Trace: [ 123.873493][ T9684] [ 123.873555][ T9684] __dump_stack+0x1d/0x30 [ 123.873664][ T9684] dump_stack_lvl+0x95/0xd0 [ 123.873691][ T9684] dump_stack+0x15/0x1b [ 123.873717][ T9684] warn_alloc+0x145/0x1c0 [ 123.873745][ T9684] ? _raw_spin_unlock+0x9/0x30 [ 123.873773][ T9684] ? __schedule+0x85a/0xd40 [ 123.873847][ T9684] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 123.873877][ T9684] ? __futex_wait+0x1fd/0x260 [ 123.873902][ T9684] ? preempt_schedule_irq+0x2d/0x50 [ 123.874001][ T9684] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 123.874026][ T9684] ? irqentry_exit+0x91/0x520 [ 123.874155][ T9684] ? avc_has_perm_noaudit+0xab/0x130 [ 123.874183][ T9684] ? should_fail_ex+0x30/0x280 [ 123.874285][ T9684] ? xskq_create+0x36/0xe0 [ 123.874308][ T9684] vmalloc_user_noprof+0x7d/0xb0 [ 123.874336][ T9684] ? xskq_create+0x80/0xe0 [ 123.874357][ T9684] xskq_create+0x80/0xe0 [ 123.874410][ T9684] xsk_init_queue+0x70/0xb0 [ 123.874486][ T9684] xsk_setsockopt+0x477/0x640 [ 123.874522][ T9684] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.874559][ T9684] __sys_setsockopt+0x184/0x200 [ 123.874602][ T9684] __x64_sys_setsockopt+0x64/0x80 [ 123.874632][ T9684] x64_sys_call+0x2327/0x3020 [ 123.874663][ T9684] do_syscall_64+0x12c/0x370 [ 123.874702][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.874745][ T9684] RIP: 0033:0x7f05bf3bc629 [ 123.874771][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.874793][ T9684] RSP: 002b:00007f05bde0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.874818][ T9684] RAX: ffffffffffffffda RBX: 00007f05bf635fa0 RCX: 00007f05bf3bc629 [ 123.874890][ T9684] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 123.874919][ T9684] RBP: 00007f05bf452b39 R08: 0000000000000004 R09: 0000000000000000 [ 123.875002][ T9684] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 123.875017][ T9684] R13: 00007f05bf636038 R14: 00007f05bf635fa0 R15: 00007ffda41f5eb8 [ 123.875038][ T9684] [ 123.875095][ T9684] Mem-Info: [ 124.107295][ T9684] active_anon:12871 inactive_anon:1 isolated_anon:0 [ 124.107295][ T9684] active_file:25358 inactive_file:2341 isolated_file:0 [ 124.107295][ T9684] unevictable:0 dirty:231 writeback:0 [ 124.107295][ T9684] slab_reclaimable:3494 slab_unreclaimable:19470 [ 124.107295][ T9684] mapped:29292 shmem:4925 pagetables:1640 [ 124.107295][ T9684] sec_pagetables:0 bounce:0 [ 124.107295][ T9684] kernel_misc_reclaimable:0 [ 124.107295][ T9684] free:1861781 free_pcp:15223 free_cma:0 [ 124.155591][ T9684] Node 0 active_anon:43944kB inactive_anon:4kB active_file:101432kB inactive_file:9364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:924kB writeback:0kB shmem:12276kB kernel_stack:4448kB pagetables:6212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.183640][ T9684] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.244719][ T9684] lowmem_reserve[]: 0 2879 7857 7857 [ 124.262820][ T9684] Node 0 DMA32 free:2944672kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948196kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 124.324153][ T9684] lowmem_reserve[]: 0 0 4978 4978 [ 124.336204][ T9684] Node 0 Normal free:4487220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55312kB inactive_anon:4kB active_file:101432kB inactive_file:9364kB unevictable:0kB writepending:924kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55472kB local_pcp:41648kB free_cma:0kB [ 124.398909][ T9705] loop3: detected capacity change from 0 to 1764 [ 124.412929][ T9684] lowmem_reserve[]: 0 0 0 0 [ 124.417535][ T9684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.441606][ T9684] Node 0 DMA32: 6*4kB (M) 3*8kB (M) 3*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944672kB [ 124.459016][ T9684] Node 0 Normal: 301*4kB (UE) 214*8kB (UME) 79*16kB (UE) 216*32kB (UME) 248*64kB (UME) 65*128kB (UM) 34*256kB (UM) 14*512kB (UME) 6*1024kB (UME) 1*2048kB (U) 1081*4096kB (UM) = 4487124kB [ 124.499010][ T9684] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 124.509110][ T9684] 30785 total pagecache pages [ 124.514813][ T9684] 1 pages in swap cache [ 124.520770][ T9684] Free swap = 124992kB [ 124.541803][ T9684] Total swap = 124996kB [ 124.546471][ T9684] 2097051 pages RAM [ 124.550374][ T9684] 0 pages HighMem/MovableOnly [ 124.555470][ T9684] 81602 pages reserved [ 125.342571][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.353008][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.133123][ T9835] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967280. macoff=96 [ 126.402918][ T9845] netlink: 'syz.5.2496': attribute type 22 has an invalid length. [ 126.766499][ T9875] sit1: entered promiscuous mode [ 126.785052][ T2558] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.793643][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 126.793658][ T28] audit: type=1400 audit(1771886773.909:972): avc: denied { create } for pid=9876 comm="syz.3.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.823360][ T28] audit: type=1400 audit(1771886773.909:973): avc: denied { bind } for pid=9876 comm="syz.3.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.847494][ T28] audit: type=1400 audit(1771886773.909:974): avc: denied { ioctl } for pid=9876 comm="syz.3.2511" path="socket:[25721]" dev="sockfs" ino=25721 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.876487][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 126.893202][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 126.907170][ T9880] netlink: 'syz.0.2512': attribute type 6 has an invalid length. [ 126.915525][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 126.924736][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 126.936749][ T9880] netlink: 'syz.0.2512': attribute type 6 has an invalid length. [ 126.945237][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2515'. [ 127.135553][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2513'. [ 127.229567][ T9907] netlink: 'syz.1.2522': attribute type 22 has an invalid length. [ 128.842951][ T3737] Bluetooth: hci0: command 0x1003 tx timeout [ 128.843011][ T6269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.866326][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.883551][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.225441][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'. [ 130.027084][T10031] loop5: detected capacity change from 0 to 1024 [ 130.053271][T10031] EXT4-fs: Ignoring removed orlov option [ 130.067039][T10031] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 130.107647][T10031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.159791][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.964306][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2586'. [ 130.974265][ T28] audit: type=1400 audit(1771886778.079:975): avc: denied { read } for pid=10058 comm="syz.0.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.264338][T10070] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 131.607330][T10074] loop5: detected capacity change from 0 to 128 [ 131.874059][T10074] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.903158][T10074] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.976666][ T8471] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.041274][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.069726][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.127696][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 132.818745][T10116] bridge0: port 3(syz_tun) entered blocking state [ 132.826899][T10116] bridge0: port 3(syz_tun) entered disabled state [ 132.839975][T10116] syz_tun: entered allmulticast mode [ 132.875236][T10116] syz_tun: entered promiscuous mode [ 133.584212][ T28] audit: type=1326 audit(1771886780.699:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.640206][ T28] audit: type=1326 audit(1771886780.699:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.702451][ T28] audit: type=1326 audit(1771886780.699:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.775666][T10179] SELinux: failed to load policy [ 133.783097][ T28] audit: type=1326 audit(1771886780.699:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.808066][ T28] audit: type=1326 audit(1771886780.699:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.843406][ T28] audit: type=1326 audit(1771886780.699:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.867419][ T28] audit: type=1326 audit(1771886780.699:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 133.891396][ T28] audit: type=1400 audit(1771886780.959:983): avc: denied { read } for pid=10189 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 134.030629][T10197] loop5: detected capacity change from 0 to 512 [ 134.044529][T10197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.057444][T10197] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.080383][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.118057][ T28] audit: type=1400 audit(1771886781.229:984): avc: denied { write } for pid=10203 comm="syz.5.2643" path="socket:[26145]" dev="sockfs" ino=26145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.613019][T10234] lo: entered allmulticast mode [ 134.618787][T10234] bond3: (slave lo): Releasing backup interface [ 134.625619][T10234] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 134.637725][T10234] tunl0: entered allmulticast mode [ 134.655130][T10234] gre0: entered allmulticast mode [ 134.665271][T10234] gretap0: entered allmulticast mode [ 134.671512][T10234] erspan0: entered allmulticast mode [ 134.677826][T10234] ip_vti0: entered allmulticast mode [ 134.684682][T10234] ip6_vti0: entered allmulticast mode [ 134.690914][T10234] sit0: entered allmulticast mode [ 134.698181][T10234] ip6tnl0: entered allmulticast mode [ 134.704631][T10234] ip6gre0: entered allmulticast mode [ 134.710786][T10234] ip6gretap0: entered allmulticast mode [ 134.723569][T10234] bridge0: entered allmulticast mode [ 134.729358][T10234] vcan0: entered allmulticast mode [ 134.735530][T10234] bond0: entered allmulticast mode [ 134.740992][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.749301][T10234] team0: entered allmulticast mode [ 134.754855][T10234] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.762730][T10234] dummy0: entered allmulticast mode [ 134.768827][T10234] nlmon0: entered allmulticast mode [ 134.775182][T10234] caif0: entered allmulticast mode [ 134.780295][T10234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.827824][T10244] 9p: Bad value for 'rfdno' [ 134.844374][T10246] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2659'. [ 134.905982][T10250] rtc_cmos 00:00: Alarms can be up to one day in the future [ 134.936171][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 134.949150][T10254] netlink: 'syz.0.2663': attribute type 26 has an invalid length. [ 134.957361][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 134.966953][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 134.976319][T10254] netlink: 'syz.0.2663': attribute type 26 has an invalid length. [ 134.990768][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 135.003909][T10260] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 135.030505][T10260] bond3: entered promiscuous mode [ 135.035969][T10260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.053707][T10260] bond3: (slave bridge2): making interface the new active one [ 135.061362][T10260] bridge2: entered promiscuous mode [ 135.068299][T10260] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 135.129275][T10267] ip6gre1: entered promiscuous mode [ 135.310738][ T28] audit: type=1400 audit(1771886782.419:985): avc: denied { append } for pid=10283 comm="syz.5.2677" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.373426][T10293] syzkaller1: entered promiscuous mode [ 135.383140][T10293] syzkaller1: entered allmulticast mode [ 135.481156][T10308] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 135.492425][T10308] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2687'. [ 136.477376][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 136.634676][T10366] loop3: detected capacity change from 0 to 512 [ 136.663567][T10366] EXT4-fs (loop3): failed to initialize system zone (-117) [ 136.686724][T10366] EXT4-fs (loop3): mount failed [ 136.809461][T10391] netlink: 'syz.5.2721': attribute type 15 has an invalid length. [ 136.819439][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 136.866518][ T3396] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 136.867165][ T2558] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 136.892234][ T3396] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.902149][ T2558] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 136.918333][T10391] netlink: 'syz.5.2721': attribute type 15 has an invalid length. [ 136.934594][ T2558] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 136.952243][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 136.962248][ T2558] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 137.384807][T10444] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 137.400515][T10444] dvmrp1: ignored: set checksum enabled [ 137.501223][T10453] ipip0: entered promiscuous mode [ 137.519772][T10453] ipip0: entered allmulticast mode [ 137.555192][T10456] loop3: detected capacity change from 0 to 256 [ 137.579798][T10462] sctp: [Deprecated]: syz.0.2751 (pid 10462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.579798][T10462] Use struct sctp_sack_info instead [ 137.711967][T10485] loop5: detected capacity change from 0 to 1024 [ 137.766948][T10485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.862055][ T4173] tipc: Subscription rejected, illegal request [ 137.925771][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.213013][T10543] loop3: detected capacity change from 0 to 1764 [ 138.457532][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.477246][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.061262][T10644] bond2: option mode: unable to set because the bond device has slaves [ 139.138220][T10654] __nla_validate_parse: 1 callbacks suppressed [ 139.138317][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2825'. [ 139.158398][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2825'. [ 139.273214][ T28] kauditd_printk_skb: 1911 callbacks suppressed [ 139.273228][ T28] audit: type=1400 audit(1771886786.389:2897): avc: denied { mount } for pid=10670 comm="syz.1.2834" name="/" dev="autofs" ino=27743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.466687][T10684] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2840'. [ 139.623202][T10694] netlink: 'syz.1.2844': attribute type 3 has an invalid length. [ 139.669835][T10703] netlink: 'syz.0.2848': attribute type 4 has an invalid length. [ 139.814404][T10724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.959191][T10736] syzkaller1: entered promiscuous mode [ 139.964868][T10736] syzkaller1: entered allmulticast mode [ 140.004020][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 140.164561][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2873'. [ 140.225955][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 140.235083][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 140.278431][T10769] loop3: detected capacity change from 0 to 1024 [ 140.315682][T10769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.327398][T10773] pim6reg1: entered promiscuous mode [ 140.346735][T10769] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.357358][T10773] pim6reg1: entered allmulticast mode [ 140.372010][T10769] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.2877: lblock 0 mapped to illegal pblock 0 (length 1) [ 140.395995][T10769] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 140.408710][T10769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.408710][T10769] [ 140.446944][ T2558] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.463988][ T2558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 140.492166][ T2558] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.492166][ T2558] [ 140.506520][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.941559][T10841] netlink: 'syz.0.2907': attribute type 7 has an invalid length. [ 140.949744][T10841] netlink: 'syz.0.2907': attribute type 7 has an invalid length. [ 141.080507][T10856] netlink: 'syz.5.2914': attribute type 19 has an invalid length. [ 141.103202][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2914'. [ 141.112151][T10856] netlink: 'syz.5.2914': attribute type 19 has an invalid length. [ 141.123412][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2914'. [ 141.244345][ T28] audit: type=1326 audit(1771887044.361:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 141.386587][ T28] audit: type=1326 audit(1771887044.361:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 141.435476][ T28] audit: type=1326 audit(1771887044.361:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 141.483357][ T28] audit: type=1326 audit(1771887044.361:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 141.533471][ T28] audit: type=1326 audit(1771887044.361:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.2.2919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 141.606587][ T28] audit: type=1326 audit(1771887044.431:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10868 comm="syz.5.2920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5263b16417 code=0x0 [ 141.974197][T10849] syz.0.2911 (10849) used greatest stack depth: 7168 bytes left [ 142.133751][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 142.168334][T10886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.304267][T10900] loop5: detected capacity change from 0 to 256 [ 142.315397][T10900] loop5: detected capacity change from 0 to 256 [ 143.603284][T10805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.656184][T10927] loop5: detected capacity change from 0 to 4096 [ 143.679474][T10927] EXT4-fs: test_dummy_encryption option not supported [ 143.972816][T10965] loop5: detected capacity change from 0 to 512 [ 144.007798][T10965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.103469][T10965] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.203497][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.236653][T10984] __nla_validate_parse: 2 callbacks suppressed [ 144.236671][T10984] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2968'. [ 144.279306][ T28] audit: type=1400 audit(1771887047.391:2904): avc: denied { mount } for pid=10987 comm="syz.5.2970" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.345505][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 144.367409][ T28] audit: type=1400 audit(1771887047.431:2905): avc: denied { unmount } for pid=8471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.396620][T10995] mmap: syz.5.2972 (10995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.497901][ T28] audit: type=1326 audit(1771887047.611:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.2.2984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x0 [ 144.781420][T11002] loop5: detected capacity change from 0 to 32768 [ 145.359739][T11049] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2994'. [ 145.457855][T11061] loop3: detected capacity change from 0 to 512 [ 145.543820][T11061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.565091][T11061] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.694821][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.786654][T11075] batman_adv: batadv0: Adding interface: dummy0 [ 145.811647][T11075] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.845231][T11075] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 146.125640][ T28] audit: type=1326 audit(1771887049.231:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.182886][ T28] audit: type=1326 audit(1771887049.231:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.236585][ T28] audit: type=1326 audit(1771887049.231:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.321829][ T28] audit: type=1326 audit(1771887049.231:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.392083][ T28] audit: type=1326 audit(1771887049.231:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.468226][ T28] audit: type=1326 audit(1771887049.241:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.537151][ T28] audit: type=1326 audit(1771887049.241:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.595535][ T28] audit: type=1326 audit(1771887049.241:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.2.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 146.681008][T11055] syz.5.2996 (11055) used greatest stack depth: 7080 bytes left [ 146.722609][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 146.801999][T11105] netlink: 'syz.1.3013': attribute type 26 has an invalid length. [ 146.868258][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 146.896489][T11116] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 146.905549][T11115] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3019'. [ 146.913123][T11116] dvmrp1: linktype set to 0 [ 146.942392][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 146.969629][T11105] netlink: 'syz.1.3013': attribute type 26 has an invalid length. [ 147.035210][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 147.114876][T11123] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.180116][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 147.209485][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 147.365280][T11140] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 147.394352][T11144] loop5: detected capacity change from 0 to 512 [ 147.412612][T11144] EXT4-fs: quotafile must be on filesystem root [ 147.819709][T11167] loop5: detected capacity change from 0 to 256 [ 147.937857][T11167] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 148.335682][ T23] IPVS: starting estimator thread 0... [ 148.513173][T11193] IPVS: using max 2064 ests per chain, 103200 per kthread [ 148.851747][T11231] netlink: 'syz.0.3069': attribute type 15 has an invalid length. [ 148.892437][T11231] netlink: 'syz.0.3069': attribute type 15 has an invalid length. [ 149.570334][T11262] syzkaller1: entered promiscuous mode [ 149.582938][T11262] syzkaller1: entered allmulticast mode [ 149.597445][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 149.597461][ T28] audit: type=1326 audit(1771887052.711:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.662732][ T28] audit: type=1326 audit(1771887052.711:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.698621][ T28] audit: type=1326 audit(1771887052.711:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.752726][ T28] audit: type=1326 audit(1771887052.711:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.796315][ T28] audit: type=1326 audit(1771887052.711:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.880097][ T28] audit: type=1326 audit(1771887052.711:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.937483][ T28] audit: type=1326 audit(1771887052.711:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 149.981570][ T28] audit: type=1326 audit(1771887052.711:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 150.033672][T11282] sctp: [Deprecated]: syz.5.3090 (pid 11282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.033672][T11282] Use struct sctp_sack_info instead [ 150.063045][ T28] audit: type=1326 audit(1771887052.711:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 150.110079][ T28] audit: type=1326 audit(1771887052.711:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.2.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 150.119786][T11289] loop5: detected capacity change from 0 to 128 [ 150.251994][T11289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.312388][T11289] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.407775][ T8471] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.473734][T11308] __nla_validate_parse: 4 callbacks suppressed [ 150.473754][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 150.627821][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3097'. [ 150.639447][T11308] netlink: 'syz.5.3097': attribute type 7 has an invalid length. [ 150.672056][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 150.673184][ T4172] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 150.708747][ T4172] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 150.713382][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3097'. [ 150.744111][ T4172] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 150.777117][ T4172] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 150.783097][T11308] netlink: 'syz.5.3097': attribute type 7 has an invalid length. [ 150.994284][T11346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.596529][T11370] loop5: detected capacity change from 0 to 32768 [ 151.773188][ T3309] loop5: p1 p3 < > [ 151.785871][T11370] loop5: p1 p3 < > [ 151.994800][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 151.994916][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 152.074746][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 152.079179][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 152.107749][T11401] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3135'. [ 152.170495][T11404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 152.344264][T11416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.589839][T11438] ip6gre2: entered promiscuous mode [ 152.614571][T11440] netlink: 'syz.2.3152': attribute type 3 has an invalid length. [ 152.721062][T11451] syz_tun: left allmulticast mode [ 152.721935][ T3505] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 152.729336][T11451] syz_tun: left promiscuous mode [ 152.751068][ T3505] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.753290][T11451] bridge0: port 3(syz_tun) entered disabled state [ 152.821310][T11451] team0: Port device syz_tun added [ 152.865592][T11454] lo: entered allmulticast mode [ 152.878928][T11454] bond2: (slave lo): Releasing backup interface [ 152.909676][T11454] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 152.929800][T11454] tunl0: entered allmulticast mode [ 152.944956][T11454] gre0: entered allmulticast mode [ 152.953282][T11454] gretap0: entered allmulticast mode [ 152.971337][T11454] erspan0: entered allmulticast mode [ 152.977972][T11454] ip_vti0: entered allmulticast mode [ 152.986072][T11454] ip6_vti0: entered allmulticast mode [ 152.996308][T11454] sit0: entered allmulticast mode [ 153.014075][T11454] ip6tnl0: entered allmulticast mode [ 153.033860][T11454] ip6gre0: entered allmulticast mode [ 153.040274][T11454] syz_tun: entered allmulticast mode [ 153.061276][T11454] team0: Port device syz_tun removed [ 153.076439][T11454] bridge0: entered allmulticast mode [ 153.083875][T11454] vcan0: entered allmulticast mode [ 153.103211][T11454] bond0: entered allmulticast mode [ 153.108602][T11454] bond_slave_0: entered allmulticast mode [ 153.121169][T11454] bond_slave_1: entered allmulticast mode [ 153.128046][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.144429][T11454] team0: entered allmulticast mode [ 153.151404][T11454] team_slave_0: entered allmulticast mode [ 153.169958][T11454] team_slave_1: entered allmulticast mode [ 153.213339][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.233213][T11454] dummy0: entered allmulticast mode [ 153.244047][T11454] nlmon0: entered allmulticast mode [ 153.257707][T11454] caif0: entered allmulticast mode [ 153.274441][T11454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.619231][T11507] team0: Port device syz_tun added [ 153.713507][T11512] lo: entered allmulticast mode [ 153.725411][T11512] bond2: (slave lo): Releasing backup interface [ 153.733577][T11512] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 153.765798][T11512] tunl0: entered allmulticast mode [ 153.778838][T11512] gre0: entered allmulticast mode [ 153.792502][T11512] gretap0: entered allmulticast mode [ 153.813452][T11512] erspan0: entered allmulticast mode [ 153.828134][T11512] ip_vti0: entered allmulticast mode [ 153.841095][T11512] ip6_vti0: entered allmulticast mode [ 153.857604][T11512] sit0: entered allmulticast mode [ 153.888356][T11512] ip6tnl0: entered allmulticast mode [ 153.901860][T11512] ip6gre0: entered allmulticast mode [ 153.915319][T11512] syz_tun: entered allmulticast mode [ 153.928666][T11512] team0: Port device syz_tun removed [ 153.935650][T11512] ip6gretap0: entered allmulticast mode [ 153.947783][T11512] bridge0: entered allmulticast mode [ 153.959867][T11512] vcan0: entered allmulticast mode [ 153.973168][T11512] bond0: entered allmulticast mode [ 153.984264][T11512] bond_slave_0: entered allmulticast mode [ 153.995882][T11512] bond_slave_1: entered allmulticast mode [ 154.005418][T11512] team0: entered allmulticast mode [ 154.010707][T11512] team_slave_0: entered allmulticast mode [ 154.017058][T11512] team_slave_1: entered allmulticast mode [ 154.023605][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.031809][T11512] dummy0: entered allmulticast mode [ 154.037666][T11512] batman_adv: batadv0: Interface activated: dummy0 [ 154.044839][T11512] batadv0: mtu less than device minimum [ 154.050899][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.061903][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.073128][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.084139][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.095376][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.106440][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.117406][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.128329][T11512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.149765][T11512] batman_adv: batadv0: Interface deactivated: dummy0 [ 154.157482][T11512] batman_adv: batadv0: Removing interface: dummy0 [ 154.164864][T11512] nlmon0: entered allmulticast mode [ 154.171353][T11512] caif0: entered allmulticast mode [ 154.407699][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 154.453564][T11553] netlink: 'syz.5.3201': attribute type 7 has an invalid length. [ 154.458833][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 154.462106][T11553] netlink: 'syz.5.3201': attribute type 7 has an invalid length. [ 154.491612][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 154.493021][ T2449] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.532570][ T2449] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.545805][ T2449] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.571764][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 154.572991][ T2449] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.640250][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 154.640264][ T28] audit: type=1400 audit(1771887057.751:2934): avc: denied { setopt } for pid=11563 comm="syz.1.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.927392][T11580] team0: Port device syz_tun added [ 154.946237][T11580] lo: entered allmulticast mode [ 154.951840][T11580] tunl0: entered allmulticast mode [ 155.000074][T11580] gre0: entered allmulticast mode [ 155.021339][T11580] gretap0: entered allmulticast mode [ 155.049994][T11580] erspan0: entered allmulticast mode [ 155.056438][T11580] ip_vti0: entered allmulticast mode [ 155.083376][T11580] ip6_vti0: entered allmulticast mode [ 155.089765][T11580] sit0: entered allmulticast mode [ 155.117864][T11580] ip6tnl0: entered allmulticast mode [ 155.134548][T11580] ip6gre0: entered allmulticast mode [ 155.144189][T11580] syz_tun: entered allmulticast mode [ 155.163787][T11580] team0: Port device syz_tun removed [ 155.169299][T11580] ip6gretap0: entered allmulticast mode [ 155.204060][T11580] bridge0: entered allmulticast mode [ 155.210070][T11580] vcan0: entered allmulticast mode [ 155.223876][T11580] bond0: entered allmulticast mode [ 155.239556][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.264503][T11580] team0: entered allmulticast mode [ 155.280301][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.291574][T11580] dummy0: entered allmulticast mode [ 155.311073][T11580] nlmon0: entered allmulticast mode [ 155.333179][T11580] caif0: entered allmulticast mode [ 155.533006][ T28] audit: type=1326 audit(1771887058.641:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 155.562554][T11608] loop3: detected capacity change from 0 to 2048 [ 155.622162][ T28] audit: type=1326 audit(1771887058.641:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 155.693065][ T28] audit: type=1326 audit(1771887058.641:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 155.716834][ T28] audit: type=1326 audit(1771887058.641:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 155.723014][T11608] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 155.740441][ T28] audit: type=1326 audit(1771887058.641:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.2.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c64fc629 code=0x7ffc0000 [ 155.873025][T11608] System zones: 0-7 [ 155.893902][T11608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.942345][T11616] netlink: 'syz.5.3222': attribute type 1 has an invalid length. [ 155.970400][T11616] netlink: 'syz.5.3222': attribute type 2 has an invalid length. [ 156.046717][T11608] EXT4-fs (loop3): shut down requested (2) [ 156.235512][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.376219][T11656] netlink: 1508 bytes leftover after parsing attributes in process `syz.3.3238'. [ 156.674530][ T28] audit: type=1326 audit(1771887059.781:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.0.3247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05bf3bc629 code=0x0 [ 157.021853][ T28] audit: type=1400 audit(1771887060.131:2941): avc: denied { setopt } for pid=11699 comm="syz.2.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.138007][T11710] loop5: detected capacity change from 0 to 512 [ 157.158799][T11711] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3263'. [ 157.252624][T11710] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.3264: corrupted in-inode xattr: bad e_name length [ 157.342873][T11710] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 157.343036][T11710] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3264: couldn't read orphan inode 12 (err -117) [ 157.364099][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 157.364121][ C0] EXT4-fs (loop5): initial error at time 1771887060: ext4_iget_extra_inode:5025: inode 12 [ 157.364156][ C0] EXT4-fs (loop5): last error at time 1771887060: ext4_iget_extra_inode:5025: inode 12 [ 157.413237][T11710] loop5: lost filesystem error report for type 5 error -117 [ 157.413901][T11710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.513724][T11728] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 157.526687][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3264'. [ 157.534871][T11728] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 157.645837][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.748869][T11737] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 157.763775][T11737] bond3 (unregistering): Released all slaves [ 157.871125][ T28] audit: type=1400 audit(1771887060.971:2942): avc: denied { setopt } for pid=11742 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.159188][ T28] audit: type=1326 audit(1771887061.271:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.2.3283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98c64fc629 code=0x0 [ 158.315488][T11769] netlink: 'syz.0.3287': attribute type 12 has an invalid length. [ 158.553995][T11777] netlink: 'syz.3.3290': attribute type 10 has an invalid length. [ 158.562998][T11777] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3290'. [ 158.576718][T11777] net_ratelimit: 13 callbacks suppressed [ 158.576735][T11777] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 158.592370][T11789] loop5: detected capacity change from 0 to 512 [ 158.602293][T11789] journal_path: Non-blockdev passed as './file2' [ 158.615386][T11789] EXT4-fs: error: could not find journal device path [ 158.998914][T11840] tipc: Enabling of bearer rejected, media not registered [ 159.022717][T11844] netlink: 'syz.2.3321': attribute type 29 has an invalid length. [ 159.042762][T11844] netlink: 'syz.2.3321': attribute type 29 has an invalid length. [ 159.054982][T11844] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3321'. [ 159.079667][T11847] SELinux: failed to load policy [ 159.086124][T11850] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 159.121855][T11850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.153399][T11850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.178413][T11850] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 159.203249][T11850] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 159.229159][T11863] syz_tun: entered allmulticast mode [ 159.249964][T11856] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 159.258617][T11856] mroute: pending queue full, dropping entries [ 159.275812][T11855] syz_tun: left allmulticast mode [ 159.493118][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3345'. [ 159.502217][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3345'. [ 159.523219][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3345'. [ 159.532463][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3345'. [ 159.671800][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 159.671815][ T28] audit: type=1326 audit(1771887062.781:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.702226][ T28] audit: type=1326 audit(1771887062.781:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.738772][ T28] audit: type=1326 audit(1771887062.791:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b43d7cece code=0x7ffc0000 [ 159.775287][ T28] audit: type=1326 audit(1771887062.791:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.799585][ T28] audit: type=1326 audit(1771887062.791:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.823781][ T28] audit: type=1326 audit(1771887062.791:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.848094][ T28] audit: type=1326 audit(1771887062.791:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.871950][ T28] audit: type=1326 audit(1771887062.791:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.895722][ T28] audit: type=1326 audit(1771887062.791:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 159.920098][ T28] audit: type=1326 audit(1771887062.791:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43dbc629 code=0x7ffc0000 [ 160.998927][ T6737] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 161.008748][ T6737] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.267226][T12011] loop3: detected capacity change from 0 to 512 [ 161.314590][T12011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.327944][T12011] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.344607][T12011] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3390: corrupted xattr block 33: invalid header [ 161.359466][T12011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 161.369634][T12011] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3390: corrupted xattr block 33: invalid header [ 161.412607][T12011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 161.434059][T12011] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3390: corrupted xattr block 33: invalid header [ 161.448988][T12011] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3390: corrupted xattr block 33: invalid header [ 161.467743][T12011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 161.490753][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.519456][T12023] netlink: 'syz.3.3393': attribute type 12 has an invalid length. [ 161.530221][T12023] netlink: 'syz.3.3393': attribute type 29 has an invalid length. [ 161.538592][T12023] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3393'. [ 161.557340][T12023] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 161.565286][T12023] netlink: 'syz.3.3393': attribute type 2 has an invalid length. [ 161.746091][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 161.808023][T12039] loop3: detected capacity change from 0 to 4096 [ 161.835912][T12039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.891826][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.128538][T12070] ip6gre3: entered promiscuous mode [ 162.150467][T12070] ip6gre3: entered allmulticast mode [ 162.457008][T12096] loop5: detected capacity change from 0 to 128 [ 162.935974][T12143] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.3444'. [ 163.109919][T12160] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 163.286746][T12170] gretap0: entered promiscuous mode [ 163.292064][T12170] vlan2: entered promiscuous mode [ 163.397263][T12178] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 163.613238][T12191] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.628114][T12191] bond1: (slave lo): Enslaving as an active interface with an up link [ 163.645648][T12191] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 163.710601][T12198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12198 comm=syz.5.3468 [ 164.323201][T12233] validate_nla: 1 callbacks suppressed [ 164.323221][T12233] netlink: 'syz.2.3484': attribute type 27 has an invalid length. [ 164.378898][T12233] lo: left allmulticast mode [ 164.407767][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3489'. [ 164.408028][T12233] tunl0: left allmulticast mode [ 164.451400][T12233] gre0: left allmulticast mode [ 164.477481][T12257] loop3: detected capacity change from 0 to 128 [ 164.493341][T12233] gretap0: left allmulticast mode [ 164.508875][T12233] erspan0: left allmulticast mode [ 164.516373][T12233] ip_vti0: left allmulticast mode [ 164.516369][T12257] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.516488][T12257] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.531493][T12233] ip6_vti0: left allmulticast mode [ 164.565265][T12233] sit0: left allmulticast mode [ 164.568926][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.579216][T12233] ip6tnl0: left allmulticast mode [ 164.593490][T12233] ip6gre0: left allmulticast mode [ 164.599025][T12233] syz_tun: left allmulticast mode [ 164.623196][T12233] ip6gretap0: left allmulticast mode [ 164.629236][T12233] bridge0: left allmulticast mode [ 164.653506][T12233] vcan0: left allmulticast mode [ 164.673149][T12233] bond0: left allmulticast mode [ 164.682906][T12233] team0: left allmulticast mode [ 164.695594][T12233] dummy0: left allmulticast mode [ 164.703219][T12233] nlmon0: left allmulticast mode [ 164.711045][T12233] caif0: left allmulticast mode [ 164.723563][T12233] geneve2: left promiscuous mode [ 164.728525][T12233] geneve2: left allmulticast mode [ 164.743806][T12249] bridge0: entered promiscuous mode [ 164.749338][T12249] bridge0: port 1(macsec1) entered blocking state [ 164.763754][T12249] bridge0: port 1(macsec1) entered disabled state [ 164.773977][T12249] macsec1: entered allmulticast mode [ 164.786731][T12249] macsec1: left allmulticast mode [ 164.807043][T12249] bridge0: left promiscuous mode [ 164.891423][ T4172] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.902972][ T4172] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.911962][ T4172] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.921897][ T4172] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.080069][T12292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=12292 comm=syz.1.3507 [ 165.106738][T12292] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=12292 comm=syz.1.3507 [ 165.160651][T12301] loop3: detected capacity change from 0 to 128 [ 165.178656][T12301] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 165.203825][T12301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.223115][T12301] ext2 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.250629][T12311] netlink: 'syz.5.3517': attribute type 7 has an invalid length. [ 165.297178][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.339615][T12311] netlink: 'syz.5.3517': attribute type 7 has an invalid length. [ 165.565808][T12357] netlink: 'syz.1.3538': attribute type 5 has an invalid length. [ 165.581650][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 165.604404][T12362] loop3: detected capacity change from 0 to 164 [ 165.711219][T12378] ip6gre3: entered allmulticast mode [ 165.913643][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 165.913656][ T28] audit: type=1400 audit(1771887069.021:2974): avc: denied { firmware_load } for pid=12393 comm="syz.5.3556" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 166.237396][ T28] audit: type=1400 audit(1771887069.351:2975): avc: denied { write } for pid=12412 comm="syz.1.3565" lport=51725 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.332674][ T3396] Process accounting resumed [ 166.348786][T12424] loop5: detected capacity change from 0 to 1024 [ 166.405103][T12424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.432637][T12424] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.447549][T12424] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 3) [ 166.462072][T12424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 166.474498][T12424] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.474498][T12424] [ 166.485285][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.499817][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.516775][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.534044][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.549109][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.563838][T12435] netlink: 'syz.2.3570': attribute type 12 has an invalid length. [ 166.573489][T12424] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: block 3: comm syz.5.3569: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.588341][T12433] EXT4-fs error (device loop5): ext4_ext_remove_space:2954: inode #15: comm syz.5.3569: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 166.607050][T12433] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem [ 166.631917][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.720407][ T28] audit: type=1326 audit(1771887069.831:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 166.956940][ T28] audit: type=1326 audit(1771887069.831:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.018684][ T28] audit: type=1326 audit(1771887069.831:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.077976][ T28] audit: type=1326 audit(1771887069.831:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.105972][ T28] audit: type=1326 audit(1771887069.831:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.130105][ T28] audit: type=1326 audit(1771887069.831:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.154039][ T28] audit: type=1326 audit(1771887069.831:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.180931][ T28] audit: type=1326 audit(1771887069.831:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12446 comm="syz.5.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5263b1c629 code=0x7ffc0000 [ 167.292023][T12485] netlink: 'syz.1.3592': attribute type 4 has an invalid length. [ 167.357740][T12487] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 167.377022][T12487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.459312][T12487] bond4: (slave bridge1): making interface the new active one [ 167.468432][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3595'. [ 167.468539][T12487] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 167.835196][T12540] tipc: Started in network mode [ 167.859321][T12540] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.875467][T12540] tipc: Enabled bearer , priority 10 [ 168.083870][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 168.126382][T12530] chnl_net:caif_netlink_parms(): no params data found [ 168.319244][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.344112][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.362618][T12530] bridge_slave_0: entered allmulticast mode [ 168.387210][T12584] loop3: detected capacity change from 0 to 1024 [ 168.394717][T12530] bridge_slave_0: entered promiscuous mode [ 168.414975][T12582] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 168.436264][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.468431][T12584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.489246][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.498498][T12530] bridge_slave_1: entered allmulticast mode [ 168.531429][T12530] bridge_slave_1: entered promiscuous mode [ 168.549438][T12530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.564326][T12530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.565662][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.598530][T12530] team0: Port device team_slave_0 added [ 168.605612][T12530] team0: Port device team_slave_1 added [ 168.623986][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.636500][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.647287][T12600] loop3: detected capacity change from 0 to 1024 [ 168.652062][T12530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.658441][T12600] EXT4-fs: inline encryption not supported [ 168.667142][T12600] EXT4-fs: Ignoring removed nobh option [ 168.670386][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.682997][T12600] EXT4-fs: Ignoring removed nobh option [ 168.699088][T12530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.714795][T12600] EXT4-fs: Ignoring removed bh option [ 168.733679][T12530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.740671][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.772408][T12530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.789504][T12600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.809539][T12530] hsr_slave_0: entered promiscuous mode [ 168.817763][T12530] hsr_slave_1: entered promiscuous mode [ 168.824032][T12530] debugfs: 'hsr0' already exists in 'hsr' [ 168.829819][T12530] Cannot create hsr debugfs directory [ 168.831886][T12600] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.3632: Allocating blocks 385-513 which overlap fs metadata [ 168.854536][T12606] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 168.885105][T12600] EXT4-fs (loop3): pa ffff8881073d44d0: logic 16, phys. 129, len 24 [ 168.893251][T12600] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 168.929273][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.965918][T12530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.975042][T12530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.984036][T12530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.994543][T12530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.005397][ T3396] tipc: Node number set to 2886997162 [ 169.055446][T12530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.078270][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.090554][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.097698][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.126617][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.133803][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.195687][T12625] loop3: detected capacity change from 0 to 1024 [ 169.202442][T12625] EXT4-fs: Ignoring removed i_version option [ 169.223282][T12625] EXT4-fs: Ignoring removed bh option [ 169.233232][T12625] EXT4-fs: inline encryption not supported [ 169.242935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.286354][T12625] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.304213][T12530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.314519][T12625] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.3643: lblock 2 mapped to illegal pblock 2 (length 1) [ 169.349826][T12625] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.351801][T12625] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.3643: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.361145][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 169.361165][ C0] EXT4-fs (loop3): initial error at time 1771887072: ext4_map_blocks:776: inode 3: block 2 [ 169.361213][ C0] EXT4-fs (loop3): last error at time 1771887072: ext4_map_blocks:776: inode 3: block 2 [ 169.423867][T12625] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.424005][T12625] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3643: Failed to acquire dquot type 0 [ 169.485399][T12625] loop3: lost filesystem error report for type 5 error -117 [ 169.485540][T12625] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 169.503818][T12625] loop3: lost filesystem error report for type 5 error -117 [ 169.503944][T12625] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.3643: mark_inode_dirty error [ 169.522920][T12625] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.523176][T12625] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 169.561339][T12530] veth0_vlan: entered promiscuous mode [ 169.562885][T12625] EXT4-fs (loop3): 1 orphan inode deleted [ 169.573436][ T2558] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.573520][T12625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.591963][T12530] veth1_vlan: entered promiscuous mode [ 169.605420][ T2558] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.605521][ T2558] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 169.634073][T12660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12660 comm=syz.0.3650 [ 169.634529][T12625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.649787][T12530] veth0_macvtap: entered promiscuous mode [ 169.662009][T12625] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.3643: Invalid inode table block 1 in block_group 0 [ 169.664464][T12530] veth1_macvtap: entered promiscuous mode [ 169.680387][T12625] loop3: lost filesystem error report for type 5 error -117 [ 169.680624][T12625] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 169.698932][T12625] loop3: lost filesystem error report for type 5 error -117 [ 169.699172][T12625] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz.3.3643: mark_inode_dirty error [ 169.706587][T12530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.725147][T12625] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.732186][T12530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.760532][ T2449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.769648][ T2449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.791730][ T2449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.806663][ T2449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.852595][T12669] loop3: detected capacity change from 0 to 512 [ 169.879251][T12669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.892290][T12669] ext4 filesystem being mounted at /616/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.955085][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.496020][T12726] ip6gre1: entered promiscuous mode [ 170.530295][T12726] ip6gre1: entered allmulticast mode [ 170.680515][T12738] bond4: option miimon: invalid value (18446744073709551615) [ 170.688236][T12738] bond4: option miimon: allowed values 0 - 2147483647 [ 170.705120][T12738] bond4 (unregistering): Released all slaves [ 170.888143][T12753] netlink: 'syz.0.3685': attribute type 8 has an invalid length. [ 170.896202][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'. [ 170.907832][T12753] bond0: entered promiscuous mode [ 170.914352][T12753] gretap0: entered promiscuous mode [ 171.232856][T12753] bond0: left promiscuous mode [ 171.254688][T12753] gretap0: left promiscuous mode [ 171.376717][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 171.386604][T12771] loop3: detected capacity change from 0 to 8192 [ 171.477931][T12782] SELinux: failed to load policy [ 171.556136][T12796] ªªªªªª: renamed from vlan0 [ 171.579882][T12798] xt_hashlimit: size too large, truncated to 1048576 [ 171.953027][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 171.963102][T12827] loop6: detected capacity change from 0 to 512 [ 171.987458][T12827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.028503][T12827] xt_hashlimit: size too large, truncated to 1048576 [ 172.212451][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.214394][T12849] loop5: detected capacity change from 0 to 128 [ 172.231801][T12849] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.255382][T12849] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.273694][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3725'. [ 172.306365][ T8471] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.321112][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3725'. [ 172.338953][T12852] geneve2: entered promiscuous mode [ 172.344515][T12852] geneve2: entered allmulticast mode [ 172.481347][T12874] loop5: detected capacity change from 0 to 128 [ 172.969142][T12902] loop5: detected capacity change from 0 to 1024 [ 173.034876][T12902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.088887][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 173.088902][ T28] audit: type=1400 audit(1771887076.201:3013): avc: denied { setattr } for pid=12901 comm="syz.5.3746" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.122773][T12902] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.3746: inode #647214379: comm syz.5.3746: iget: illegal inode # [ 173.136692][T12902] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3746: error while reading EA inode 647214379 err=-117 [ 173.162635][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.222215][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 173.254291][T12919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.355306][ T28] audit: type=1400 audit(1771887076.471:3014): avc: denied { create } for pid=12925 comm="syz.3.3754" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.382951][ T28] audit: type=1400 audit(1771887076.501:3015): avc: denied { map } for pid=12925 comm="syz.3.3754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.407426][ T28] audit: type=1400 audit(1771887076.501:3016): avc: denied { read write } for pid=12925 comm="syz.3.3754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.450186][T12959] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 174.749788][T12981] netlink: 1508 bytes leftover after parsing attributes in process `syz.5.3776'. [ 174.759209][T12981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.775034][T12981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.936934][ T28] audit: type=1400 audit(1771887078.051:3017): avc: denied { setattr } for pid=12990 comm="syz.6.3781" name="task" dev="proc" ino=35069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 174.991183][T12833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.026773][T12997] loop6: detected capacity change from 0 to 512 [ 175.089172][T12997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.111044][T12997] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.153347][T12997] EXT4-fs (loop6): shut down requested (1) [ 175.181617][ T28] audit: type=1400 audit(1771887078.291:3018): avc: denied { execute } for pid=13009 comm="syz.2.3789" name="sg#" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 175.226602][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.260946][ T28] audit: type=1400 audit(1771887078.321:3019): avc: denied { execute_no_trans } for pid=13009 comm="syz.2.3789" path="/dev/sg#" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 175.378272][T13026] loop6: detected capacity change from 0 to 2048 [ 175.400292][T13028] loop3: detected capacity change from 0 to 512 [ 175.418973][T13026] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.438244][T13028] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 175.475006][T13028] EXT4-fs (loop3): 1 truncate cleaned up [ 175.481008][T13028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.523781][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.547534][ T28] audit: type=1400 audit(1771887078.661:3020): avc: denied { write } for pid=13027 comm="syz.3.3796" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 175.586031][ T28] audit: type=1400 audit(1771887078.661:3021): avc: denied { reparent } for pid=13027 comm="syz.3.3796" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 175.608107][ T28] audit: type=1400 audit(1771887078.691:3022): avc: denied { mounton } for pid=13027 comm="syz.3.3796" path="/644/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.658697][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.844048][T13066] netlink: 'syz.6.3811': attribute type 4 has an invalid length. [ 175.890093][T13066] netlink: 'syz.6.3811': attribute type 4 has an invalid length. [ 175.956658][T13078] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 175.984715][T13078] bond5 (unregistering): Released all slaves [ 176.013958][T13082] bridge1: entered allmulticast mode [ 176.241799][T13112] loop3: detected capacity change from 0 to 2048 [ 176.274439][T13112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.344770][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.101811][T13158] loop3: detected capacity change from 0 to 512 [ 177.133429][T13158] journal_path: Non-blockdev passed as './file2' [ 177.144969][T13158] EXT4-fs: error: could not find journal device path [ 177.185576][T13150] netlink: 'syz.5.3848': attribute type 10 has an invalid length. [ 177.202914][T13150] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3848'. [ 177.211935][T13150] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.290614][T13172] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3857'. [ 177.362529][T13183] loop3: detected capacity change from 0 to 128 [ 177.376467][T13183] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 177.389442][T13183] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 177.397739][T13183] FAT-fs (loop3): Filesystem has been set read-only [ 177.404787][T13183] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 177.413196][T13183] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 177.459272][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 177.503021][T13191] bridge0: port 1(batadv1) entered blocking state [ 177.509596][T13191] bridge0: port 1(batadv1) entered disabled state [ 177.533215][T13191] batadv1: entered allmulticast mode [ 177.543923][T13191] batadv1: entered promiscuous mode [ 177.607884][T13208] loop6: detected capacity change from 0 to 1024 [ 177.631607][T13208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.660735][T13217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3878'. [ 177.739100][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 177.761715][T13225] loop5: detected capacity change from 0 to 128 [ 177.987777][T13231] loop5: detected capacity change from 0 to 128 [ 177.994374][ T2449] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.002201][ T4173] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 178.011488][ T4173] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 178.038154][T13231] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.062918][T13231] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.121514][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 178.121604][ T28] audit: type=1400 audit(1771887081.231:3024): avc: denied { getopt } for pid=13237 comm="syz.2.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.129988][ T8471] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.519364][T13208] syz.6.3875 (13208) used greatest stack depth: 6736 bytes left [ 178.555423][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.576783][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3896'. [ 178.682617][ T28] audit: type=1400 audit(1771887081.791:3025): avc: denied { mount } for pid=13267 comm="syz.0.3900" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 178.721858][ T6737] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.778439][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3903'. [ 178.832478][T13283] loop5: detected capacity change from 0 to 512 [ 178.844492][T13283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.863180][T13283] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.928099][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.003000][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.011219][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.493839][T13324] syz_tun: entered allmulticast mode [ 179.500114][T13324] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 179.500630][T13323] netlink: 'syz.5.3924': attribute type 1 has an invalid length. [ 179.508670][T13324] mroute: pending queue full, dropping entries [ 179.529391][T13323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.538296][T13322] syz_tun: left allmulticast mode [ 179.572945][T13323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.589401][T13323] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 179.622153][T13323] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 179.842616][ T28] audit: type=1326 audit(1771887082.951:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa973c629 code=0x7ffc0000 [ 179.886459][ T28] audit: type=1326 audit(1771887082.951:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa973c629 code=0x7ffc0000 [ 179.910817][ T28] audit: type=1326 audit(1771887082.951:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafa96fcece code=0x7ffc0000 [ 179.935952][ T28] audit: type=1326 audit(1771887082.951:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafa973d957 code=0x7ffc0000 [ 179.959864][ T28] audit: type=1326 audit(1771887082.951:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafa973c629 code=0x7ffc0000 [ 179.983748][ T6425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.991859][ T28] audit: type=1326 audit(1771887082.951:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fafa973d957 code=0x7ffc0000 [ 180.015805][ T28] audit: type=1326 audit(1771887082.951:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fafa96fcece code=0x7ffc0000 [ 180.057043][ T28] audit: type=1326 audit(1771887082.951:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.6.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa973c629 code=0x7ffc0000 [ 180.169253][T13365] loop3: detected capacity change from 0 to 256 [ 180.216913][T13365] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.229460][T13365] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048) [ 180.237354][T13365] FAT-fs (loop3): Filesystem has been set read-only [ 180.247619][T13365] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 180.265371][T13365] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 180.306997][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3947'. [ 180.604695][T13386] loop3: detected capacity change from 0 to 512 [ 180.642305][T13386] EXT4-fs: Ignoring removed i_version option [ 180.648904][T13386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.663104][T13386] EXT4-fs (loop3): 1 truncate cleaned up [ 180.676999][T13386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.694523][T13396] 9p: Bad value for 'wfdno' [ 180.715422][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.868165][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3961'. [ 181.218702][T13421] loop6: detected capacity change from 0 to 4096 [ 181.239731][T13421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.508085][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.670464][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3975'. [ 181.681712][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3975'. [ 181.799199][T13459] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 181.908642][T13471] ip6gre1: entered promiscuous mode [ 181.920451][T13471] ip6gre1: entered allmulticast mode [ 181.928393][T13465] loop3: detected capacity change from 0 to 1764 [ 181.970858][T13465] ISOFS: Unable to identify CD-ROM format. [ 182.156572][T13503] netlink: 182 bytes leftover after parsing attributes in process `syz.2.4001'. [ 182.214163][T13514] loop3: detected capacity change from 0 to 128 [ 182.490924][ T6425] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 182.499163][ T6425] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.874435][T13552] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 182.892218][T13553] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4022'. [ 182.922889][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.165819][T13567] netlink: 'syz.3.4030': attribute type 1 has an invalid length. [ 183.180216][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 183.182554][T13567] bond5: entered promiscuous mode [ 183.197297][T13567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.216938][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4031'. [ 183.218279][T13567] bond5: (slave bridge3): making interface the new active one [ 183.233471][T13567] bridge3: entered promiscuous mode [ 183.239448][T13567] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 183.595750][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 183.595766][ T28] audit: type=1326 audit(1771887086.711:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.653297][T13601] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13601 comm=syz.2.4044 [ 183.656852][ T28] audit: type=1326 audit(1771887086.711:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.723274][ T28] audit: type=1326 audit(1771887086.711:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.744903][T13607] loop5: detected capacity change from 0 to 512 [ 183.772226][ T28] audit: type=1326 audit(1771887086.711:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.811256][ T28] audit: type=1326 audit(1771887086.741:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.818367][T13607] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.898448][ T28] audit: type=1326 audit(1771887086.741:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.922502][ T28] audit: type=1326 audit(1771887086.741:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 183.952927][T13618] __nla_validate_parse: 1 callbacks suppressed [ 183.952942][T13618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4052'. [ 183.979054][ T28] audit: type=1326 audit(1771887086.741:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 184.011967][ T28] audit: type=1326 audit(1771887086.741:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 184.038371][ T28] audit: type=1326 audit(1771887086.741:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.3.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd79fe1c629 code=0x7ffc0000 [ 184.063697][T13627] syzkaller1: entered promiscuous mode [ 184.069185][T13627] syzkaller1: entered allmulticast mode [ 184.410280][T13656] netlink: 'syz.0.4067': attribute type 27 has an invalid length. [ 184.420140][T13656] lo: left allmulticast mode [ 184.426949][T13656] tunl0: left allmulticast mode [ 184.432645][T13656] gre0: left allmulticast mode [ 184.440435][T13656] gretap0: left allmulticast mode [ 184.446885][T13656] erspan0: left allmulticast mode [ 184.452768][T13656] ip_vti0: left allmulticast mode [ 184.458932][T13656] ip6_vti0: left allmulticast mode [ 184.465089][T13656] sit0: left allmulticast mode [ 184.489885][T13656] ip6tnl0: left allmulticast mode [ 184.495751][T13656] ip6gre0: left allmulticast mode [ 184.501913][T13656] bridge0: left allmulticast mode [ 184.508837][T13656] vcan0: left allmulticast mode [ 184.527320][T13656] bond0: left allmulticast mode [ 184.543552][T13656] team0: left allmulticast mode [ 184.553205][T13656] dummy0: left allmulticast mode [ 184.566425][T13656] nlmon0: left allmulticast mode [ 184.573651][T13656] caif0: left allmulticast mode [ 184.581278][T13656] bond1: left allmulticast mode [ 184.586930][T13656] geneve2: left promiscuous mode [ 184.591930][T13656] geneve2: left allmulticast mode [ 184.597415][T13656] bridge1: left promiscuous mode [ 184.602402][T13656] bridge1: left allmulticast mode [ 184.611105][T13656] ip6gre1: left promiscuous mode [ 184.616242][T13656] ip6gre1: left allmulticast mode [ 184.644448][T13668] bridge0: port 1(macsec1) entered blocking state [ 184.650932][T13668] bridge0: port 1(macsec1) entered disabled state [ 184.682463][T13668] macsec1: entered allmulticast mode [ 184.691043][T13668] bridge0: entered allmulticast mode [ 184.724392][T13668] macsec1: left allmulticast mode [ 184.731878][T13668] bridge0: left allmulticast mode [ 184.745829][ T4172] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.803135][ T4172] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.816474][ T4172] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.835988][ T4172] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.846511][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4076'. [ 185.041283][T13691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4083'. [ 185.057706][T13693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=13693 comm=syz.6.4084 [ 185.071223][T13693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=13693 comm=syz.6.4084 [ 185.117339][T13697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.257329][T13699] ------------[ cut here ]------------ [ 185.264079][T13699] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 185.288356][T13699] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.4087/13699 [ 185.299765][T13699] Modules linked in: [ 185.304442][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.3.4087 Tainted: G W syzkaller #0 PREEMPT(full) [ 185.315748][T13699] Tainted: [W]=WARN [ 185.319828][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.330157][T13699] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 185.336588][T13699] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 185.356657][T13699] RSP: 0018:ffffc90001bcf368 EFLAGS: 00010246 [ 185.363169][T13699] RAX: ffff88810211cc78 RBX: 0000000000000000 RCX: fffffffefffff630 [ 185.371455][T13699] RDX: ffffffff86817254 RSI: ffffffff867eb8c1 RDI: ffffffff871d3f90 [ 185.379796][T13699] RBP: ffff8881051be190 R08: ffffffff00000000 R09: fffffffefffff630 [ 185.388062][T13699] R10: ffffffff893d2a68 R11: 0000000008000050 R12: ffff8881051be150 [ 185.396597][T13699] R13: fffffffe00000030 R14: ffff8881051be19c R15: ffff8881051be188 [ 185.405069][T13699] FS: 00007fd79e86f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 185.414235][T13699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.421108][T13699] CR2: 0000001b3471eff8 CR3: 000000011c228000 CR4: 00000000003506f0 [ 185.429417][T13699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.437827][T13699] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 185.446087][T13699] Call Trace: [ 185.449645][T13699] [ 185.452775][T13699] reg_set_min_max+0x21c/0x260 [ 185.458149][T13699] check_cond_jmp_op+0x13b0/0x1ab0 [ 185.463679][T13699] do_check+0x4a9b/0x9860 [ 185.468417][T13699] do_check_common+0xd0b/0x1630 [ 185.473565][T13699] bpf_check+0x2f78/0xcc30 [ 185.478222][T13699] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 185.484562][T13699] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 185.490356][T13699] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 185.496497][T13699] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 185.502777][T13699] ? irqentry_exit+0x91/0x520 [ 185.507678][T13699] ? css_rstat_updated+0xbb/0x280 [ 185.512958][T13699] ? try_charge_memcg+0x215/0xa10 [ 185.518318][T13699] ? pcpu_block_refresh_hint+0x10b/0x170 [ 185.524379][T13699] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 185.530712][T13699] ? irqentry_exit+0x91/0x520 [ 185.535722][T13699] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 185.542017][T13699] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 185.548417][T13699] ? irqentry_exit+0x91/0x520 [ 185.553330][T13699] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 185.559695][T13699] ? css_rstat_updated+0xbb/0x280 [ 185.563289][T13714] loop6: detected capacity change from 0 to 1024 [ 185.566264][T13699] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 185.574907][T13714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.577598][T13699] ? __rcu_read_unlock+0x4e/0x70 [ 185.589295][T13699] ? avc_has_perm_noaudit+0xab/0x130 [ 185.595028][T13699] ? avc_has_perm+0x101/0x190 [ 185.600397][T13699] ? selinux_bpf_prog_load+0x197/0x1c0 [ 185.606336][T13699] ? security_bpf_prog_load+0x9e/0x140 [ 185.612117][T13699] bpf_prog_load+0xf76/0x1140 [ 185.617287][T13699] ? security_bpf+0x2b/0x90 [ 185.622148][T13699] __sys_bpf+0x505/0x7e0 [ 185.626997][T13699] __x64_sys_bpf+0x41/0x50 [ 185.631655][T13699] x64_sys_call+0x10cb/0x3020 [ 185.636568][T13699] do_syscall_64+0x12c/0x370 [ 185.641395][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.647675][T13699] RIP: 0033:0x7fd79fe1c629 [ 185.652399][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.672469][T13699] RSP: 002b:00007fd79e86f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.681095][T13699] RAX: ffffffffffffffda RBX: 00007fd7a0095fa0 RCX: 00007fd79fe1c629 [ 185.689387][T13699] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 185.697625][T13699] RBP: 00007fd79feb2b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.705819][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.713966][T13699] R13: 00007fd7a0096038 R14: 00007fd7a0095fa0 R15: 00007ffc63672b28 [ 185.722451][T13699] [ 185.725909][T13699] ---[ end trace 0000000000000000 ]--- [ 185.732496][T13714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.953441][T13736] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 185.977642][T12530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.997776][T13736] SELinux: failed to load policy [ 186.057301][T13745] loop6: detected capacity change from 0 to 128 [ 186.313284][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 186.348709][T13783] xt_hashlimit: size too large, truncated to 1048576 [ 186.499109][T13801] netlink: 'syz.0.4129': attribute type 8 has an invalid length. [ 186.521449][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 186.550501][T13801] bond0: entered promiscuous mode [ 186.568673][T13801] gretap0: entered promiscuous mode [ 186.588172][T13801] hsr1: entered promiscuous mode [ 186.626475][T13767] loop5: detected capacity change from 0 to 32768 [ 187.552456][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 187.561867][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4162'. [ 187.573914][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 187.583126][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4162'. [ 187.617714][T13880] netlink: 'syz.3.4163': attribute type 4 has an invalid length. [ 187.735627][ T23] IPVS: starting estimator thread 0... [ 187.795806][T13895] netlink: 'syz.0.4168': attribute type 1 has an invalid length. [ 187.815380][T13895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.882951][T13891] IPVS: using max 2304 ests per chain, 115200 per kthread [ 187.911700][T13895] bond4: (slave bridge2): making interface the new active one [ 187.921758][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 187.947276][T13895] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 188.577254][T13918] loop5: detected capacity change from 0 to 1024 [ 188.600540][T13918] EXT4-fs: Ignoring removed orlov option [ 188.640217][T13918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.670891][T13920] chnl_net:caif_netlink_parms(): no params data found [ 188.718898][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.781434][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.798080][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.813290][T13920] bridge_slave_0: entered allmulticast mode [ 188.814068][T13920] bridge_slave_0: entered promiscuous mode [ 188.824318][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.824862][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.829243][T13920] bridge_slave_1: entered allmulticast mode [ 188.829893][T13920] bridge_slave_1: entered promiscuous mode [ 188.866693][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.888429][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.899514][T13920] team0: Port device team_slave_0 added [ 188.900648][T13920] team0: Port device team_slave_1 added [ 188.911654][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.911667][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.911710][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.912402][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.912413][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.912464][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.929683][T13920] hsr_slave_0: entered promiscuous mode [ 188.930141][T13920] hsr_slave_1: entered promiscuous mode [ 188.930434][T13920] debugfs: 'hsr0' already exists in 'hsr' [ 188.930448][T13920] Cannot create hsr debugfs directory [ 189.021346][T13920] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.102275][T13920] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.119315][T13920] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 189.131336][T13920] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 189.206767][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.234550][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.240537][T13985] loop6: detected capacity change from 0 to 128 [ 189.261675][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.268875][ T4172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.293506][T13984] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 189.335570][T13991] tipc: Started in network mode [ 189.341702][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4202'. [ 189.350674][T13991] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.363090][T13991] tipc: Enabled bearer , priority 10 [ 189.379707][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.386850][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.396076][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 189.396092][ T28] audit: type=1400 audit(1771887092.511:3098): avc: denied { write } for pid=13993 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.487015][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.526435][ T28] audit: type=1400 audit(1771887092.511:3099): avc: denied { read } for pid=13993 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.609227][ T28] audit: type=1400 audit(1771887092.571:3100): avc: denied { ioctl } for pid=13993 comm="syz.2.4203" path="socket:[38157]" dev="sockfs" ino=38157 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.652048][ T28] audit: type=1326 audit(1771887092.691:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.6.4211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa973c629 code=0x0 [ 189.734567][T14039] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4216'. [ 189.821181][T13920] veth0_vlan: entered promiscuous mode [ 189.850081][T13920] veth1_vlan: entered promiscuous mode [ 189.894539][T13920] veth0_macvtap: entered promiscuous mode [ 189.911968][T13920] veth1_macvtap: entered promiscuous mode [ 189.936648][T13920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.948119][T13920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.961084][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.981363][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.998167][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.026222][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.079675][T14060] loop3: detected capacity change from 0 to 8192 [ 190.483073][ T6425] tipc: Node number set to 2886997162 [ 190.655078][T14090] loop7: detected capacity change from 0 to 256 [ 190.716429][T14096] loop5: detected capacity change from 0 to 512 [ 190.750280][T14096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.783303][T14096] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.834750][T14105] loop7: detected capacity change from 0 to 512 [ 190.906874][T14105] EXT4-fs (loop7): 1 truncate cleaned up [ 190.926759][T14105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.951655][ T8471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.002895][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.143021][T14105] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4242: bg 0: block 465: padding at end of block bitmap is not set [ 191.158145][T14105] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 191.217074][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4248'. [ 191.227003][T13920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.307293][T14137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14137 comm=syz.2.4251 [ 191.381064][T14146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.412345][T14146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.493710][ T6425] IPVS: starting estimator thread 0... [ 191.595152][T14155] IPVS: using max 2160 ests per chain, 108000 per kthread [ 191.845360][T14169] ip6gre1: entered promiscuous mode [ 191.850606][T14169] ip6gre1: entered allmulticast mode [ 191.988001][T14180] netlink: 'syz.7.4273': attribute type 8 has an invalid length. [ 191.997974][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4273'. [ 192.011502][T14180] bond0: entered promiscuous mode [ 192.023297][T14180] bond_slave_0: entered promiscuous mode [ 192.032034][T14180] bond_slave_1: entered promiscuous mode [ 192.041780][T14180] gretap0: entered promiscuous mode [ 192.049360][T14180] bond0: left promiscuous mode [ 192.054395][T14180] bond_slave_0: left promiscuous mode [ 192.060233][T14180] bond_slave_1: left promiscuous mode [ 192.067870][T14180] gretap0: left promiscuous mode [ 192.209634][ T28] audit: type=1400 audit(1771887095.321:3102): avc: denied { remount } for pid=14191 comm="syz.5.4278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.081167][T14218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14218 comm=syz.3.4286 [ 193.208025][T14237] loop3: detected capacity change from 0 to 128 [ 193.224620][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4304'. [ 193.234767][T14237] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.270707][T14237] ext4 filesystem being mounted at /759/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.315661][T14242] loop6: detected capacity change from 0 to 8192 [ 193.335997][T14244] bond3: option miimon: invalid value (18446744073709551615) [ 193.343555][T14244] bond3: option miimon: allowed values 0 - 2147483647 [ 193.358349][T14244] bond3 (unregistering): Released all slaves [ 193.398870][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.429399][ T3009] ================================================================== [ 193.437511][ T3009] BUG: KCSAN: data-race in set_nlink / set_nlink [ 193.443841][ T3009] [ 193.446163][ T3009] read to 0xffff888108d13858 of 4 bytes by task 3309 on cpu 0: [ 193.453705][ T3009] set_nlink+0x29/0xb0 [ 193.457777][ T3009] kernfs_iop_permission+0x1e2/0x220 [ 193.463416][ T3009] inode_permission+0x31f/0x3b0 [ 193.468272][ T3009] link_path_walk+0x779/0xe30 [ 193.472953][ T3009] path_openat+0x1c6/0x2050 [ 193.477467][ T3009] do_file_open+0x16c/0x290 [ 193.481979][ T3009] do_sys_openat2+0x94/0x130 [ 193.486571][ T3009] __x64_sys_openat+0xf2/0x120 [ 193.491365][ T3009] x64_sys_call+0x1e39/0x3020 [ 193.496079][ T3009] do_syscall_64+0x12c/0x370 [ 193.500698][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.506604][ T3009] [ 193.508934][ T3009] write to 0xffff888108d13858 of 4 bytes by task 3009 on cpu 1: [ 193.516568][ T3009] set_nlink+0x99/0xb0 [ 193.520651][ T3009] kernfs_iop_permission+0x1e2/0x220 [ 193.525955][ T3009] inode_permission+0x31f/0x3b0 [ 193.530904][ T3009] link_path_walk+0x779/0xe30 [ 193.535594][ T3009] path_lookupat+0x8c/0x500 [ 193.540100][ T3009] filename_lookup+0x190/0x390 [ 193.544870][ T3009] vfs_statx+0x96/0x170 [ 193.549022][ T3009] vfs_fstatat+0x118/0x170 [ 193.553430][ T3009] __se_sys_newfstatat+0x55/0x3e0 [ 193.558550][ T3009] __x64_sys_newfstatat+0x55/0x70 [ 193.563572][ T3009] x64_sys_call+0x2c64/0x3020 [ 193.568243][ T3009] do_syscall_64+0x12c/0x370 [ 193.572830][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.578714][ T3009] [ 193.581021][ T3009] value changed: 0x00000009 -> 0x00000008 [ 193.586718][ T3009] [ 193.589027][ T3009] Reported by Kernel Concurrency Sanitizer on: [ 193.595164][ T3009] CPU: 1 UID: 0 PID: 3009 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 193.605567][ T3009] Tainted: [W]=WARN [ 193.609355][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.619402][ T3009] ==================================================================