last executing test programs: 2.57156932s ago: executing program 2 (id=1696): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.722739169s ago: executing program 3 (id=1712): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e00000010000000000000000000000000000a9"], 0x38}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x6, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xffff0559, 0x40, 0x3c, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r3, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() timer_settime(0x0, 0x1, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x497c, &(0x7f0000001440)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close(r4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000080)=""/49, &(0x7f0000000140)=0x31) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 1.70766919s ago: executing program 0 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.687373162s ago: executing program 0 (id=1714): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 1.667914144s ago: executing program 0 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0), 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 1.663110364s ago: executing program 2 (id=1716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010b0000000000000000000000000500010007"], 0x1c}}, 0x0) 1.651592985s ago: executing program 0 (id=1717): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2cdf, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}, {0x0, 0x0, 0x7f}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = epoll_create(0x7ffffffe) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r2, 0x0) dup3(r4, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nouid32}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r5, &(0x7f0000000140), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) 1.648208225s ago: executing program 2 (id=1718): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCDISCONN(r4, 0x7439) 1.58903006s ago: executing program 0 (id=1719): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x0, 0xe, 0x1}, {0x0, 0xff}, 0xff, 0x1}, {0x0, 0x0, {0x1}, {0x1, 0xf0, 0x2}}, {0x0, 0x0, {0x0, 0xfe}, {0x2}, 0x1}], 0x60) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x4, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.506308357s ago: executing program 2 (id=1722): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 1.506180237s ago: executing program 2 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c0200, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, 0x0, 0x240) 1.365770238s ago: executing program 2 (id=1725): socket(0x2, 0x3, 0xff) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200083300158100"/35, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 877.830489ms ago: executing program 3 (id=1731): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xc0002016}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) close(r0) 780.053757ms ago: executing program 4 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000703140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 746.549839ms ago: executing program 4 (id=1734): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCDISCONN(r3, 0x7439) 738.67781ms ago: executing program 3 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c0200, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, 0x0, 0x240) 672.575325ms ago: executing program 4 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x28bc, &(0x7f0000000480)={0x0, 0x902e, 0x8}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xf, &(0x7f0000000500)={0x2ff6, 0x0, 0x0, 0x0, 0x52}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x11, 0xa, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, &(0x7f0000000600)="b545279525d1b2c040fd2f8f2c22eb656ad5d222e93eaf6b660b91ec4bf5ccd8cbcb1c51f38a477977c8255e3817a34291eae11f58c0d48c44ec9da4c73f663f38e046a98064af2f", 0x48, 0x4044800, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xf3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) syz_io_uring_setup(0x0, 0xfffffffffffffffc, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x200}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="83885ec3e10e76d4498cae50b52791c69047d5359baed84dfa742a52b9cdf70b46f4ea1a7e7f4bfbfecc8d54c4e16effdce1ea722a6fd2e35bc1f3d3356ff26469c79ae1f2ad7ee9075867d24b77742e2ebcb89191587224bf59a2075abff535c40165417e4c2a3a9572ae9aed17b4c056ec15f5d0f614a17060d510a15b6dda727bcc"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000e8ff00508e0f47b9f0000000008500000000000040496db842da65cefab885944df09c7851da18da5419bf09023e8e41519d66929e3a771f9979509f99"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000000)={0x1900}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) pwrite64(r4, &(0x7f0000000300)="8c673f6b7210eb2411b83b567e784574da224b96242917ed86794ca53d531bc5dc85749ceaeb3f74048bf70393cf2ec2bfb86a2ad359eb68898fa9e55f3d111b12bda1955dc1e8c436b110bcebc21571c002e8c67b5b932485d550912590a4b0ddb8552c79ef307870f46ecb263d0a941c11102cc1efa0a66e4e706d65fe527b8db808ee40d76d36966b1254945de616007cf2cac6790eddc5b2f37a2b1be6cd32c990d4581a7f1c3f55ee1639382be99a5c4545a363f6d4", 0xb8, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX=r9, @ANYRESDEC, @ANYRES64=r8, @ANYRES16=r2, @ANYRES8=r7], 0x0) 672.341605ms ago: executing program 4 (id=1737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 629.034099ms ago: executing program 3 (id=1738): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928a2ced1fe6000800", @ANYRES32=r1], 0x74}}, 0x20004044) 604.729251ms ago: executing program 4 (id=1739): r0 = io_uring_setup(0x79bb, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 598.047941ms ago: executing program 3 (id=1740): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080001", @ANYRES32], 0x1c}}, 0x0) 569.863034ms ago: executing program 3 (id=1741): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e00000010000000000000000000000000000a9"], 0x38}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x6, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xffff0559, 0x40, 0x3c, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r3, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() timer_settime(0x0, 0x1, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x497c, &(0x7f0000001440)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close(r4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000080)=""/49, &(0x7f0000000140)=0x31) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 569.524904ms ago: executing program 4 (id=1742): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x66446000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3c0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x101f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000001600010000000000fcfffffffe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff000000000000000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000005866ca8e53aff1436b188c411193310c968855edeb211e97b243076e"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf8}}, 0x0) syz_open_pts(r4, 0x141601) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0xf0ff1f00000000) 469.218302ms ago: executing program 0 (id=1744): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000020000000007112370000000000000000000000000019d428d1760cada68e7dab1eacb7684f302a559a0764815db3984e50ce0cb4a892c50d1418db57df61e14a4bcd065f2ddf991f20cf40b23bf1704dafd8a04e92524c618b295ee1ee1d893b35e482720569d071a3d346b679e1d9e359571282837c3fac880d953005abf6847053378f1c632a4de4e88c0c636d77f6f078c0b1a5209549834c4f0abc75050058aa30"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000810b000007010000f8ffffffb702000008000000b70300000000000085000000710000009500800000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c00fc01000000000000000000000000000000aa00"/54], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") 386.812818ms ago: executing program 1 (id=1747): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 335.154243ms ago: executing program 1 (id=1748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r5, @ANYBLOB="925979421d47c54f99f14a976e370100000000000068bdaf8c27807223741b8f3bedd6aa485e2988f6acb832adf95e0e297ba0112695f660760311beec63fa198d8ee1efea333f0f96eb6f74fe76eeb4662a5a638d2d55dffa39fa19e0e9ee906dacbc0269163a84530dc04c6f986a316c1087b429bbe3ccef08e7c15e563d459307bc1bdcffe050f64a"], 0x20}}, 0x0) 151.853988ms ago: executing program 1 (id=1749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 114.092191ms ago: executing program 1 (id=1750): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928a2ced1fe6000800", @ANYRES32=r1], 0x74}}, 0x20004044) 56.801336ms ago: executing program 1 (id=1751): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080001", @ANYRES32], 0x1c}}, 0x0) 0s ago: executing program 1 (id=1752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCDISCONN(r4, 0x7439) kernel console output (not intermixed with test programs): bject_r:ppp_device_t tclass=chr_file permissive=1 [ 45.977847][ T321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.986782][ T4120] loop3: detected capacity change from 0 to 1024 [ 46.002666][ T4124] syz.0.229 uses obsolete (PF_INET,SOCK_PACKET) [ 46.028845][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.093816][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.103303][ T4136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.111854][ T4136] batadv_slave_0: entered promiscuous mode [ 46.240591][ T3334] IPVS: starting estimator thread 0... [ 46.280368][ T4152] loop1: detected capacity change from 0 to 256 [ 46.297402][ T4152] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.353640][ T4152] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.379143][ T4149] IPVS: using max 2880 ests per chain, 144000 per kthread [ 46.409205][ T321] bridge_slave_1: left allmulticast mode [ 46.415181][ T321] bridge_slave_1: left promiscuous mode [ 46.420912][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.688229][ T321] bridge_slave_0: left allmulticast mode [ 46.693954][ T321] bridge_slave_0: left promiscuous mode [ 46.699901][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.713078][ T29] audit: type=1400 audit(1723958388.649:248): avc: denied { ioctl } for pid=4146 comm="syz.1.237" path="socket:[6202]" dev="sockfs" ino=6202 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.739508][ T29] audit: type=1400 audit(1723958388.649:249): avc: denied { execute } for pid=4161 comm="syz.3.243" path="/40/cgroup.events" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.306459][ T321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.316850][ T321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.326888][ T321] bond0 (unregistering): Released all slaves [ 47.336166][ T4160] veth0_vlan: entered allmulticast mode [ 47.436466][ T4098] chnl_net:caif_netlink_parms(): no params data found [ 47.466236][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.475797][ T321] hsr_slave_0: left promiscuous mode [ 47.482595][ T321] hsr_slave_1: left promiscuous mode [ 47.488720][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.498580][ T321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.506242][ T321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.516446][ T321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.524055][ T321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.535793][ T321] veth1_macvtap: left promiscuous mode [ 47.541942][ T321] veth0_macvtap: left promiscuous mode [ 47.548214][ T321] veth1_vlan: left promiscuous mode [ 47.553958][ T321] veth0_vlan: left promiscuous mode [ 47.649014][ T321] team0 (unregistering): Port device team_slave_1 removed [ 47.662417][ T321] team0 (unregistering): Port device team_slave_0 removed [ 47.753206][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.779835][ T4204] batadv_slave_0: entered promiscuous mode [ 47.972991][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.977130][ T29] audit: type=1400 audit(1723958389.949:250): avc: denied { name_bind } for pid=4222 comm="syz.2.256" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 47.981645][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.026757][ T4098] bridge_slave_0: entered allmulticast mode [ 48.087933][ T4236] loop2: detected capacity change from 0 to 512 [ 48.100058][ T4098] bridge_slave_0: entered promiscuous mode [ 48.107662][ T4236] ext4: Unknown parameter 'nouser_xattr' [ 48.116257][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.127064][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.172106][ T4098] bridge_slave_1: entered allmulticast mode [ 48.182979][ T4098] bridge_slave_1: entered promiscuous mode [ 48.237387][ T4098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.261953][ T4098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.298406][ T4098] team0: Port device team_slave_0 added [ 48.310692][ T4098] team0: Port device team_slave_1 added [ 48.369754][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.376816][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.403971][ T4098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.425308][ T4098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.432607][ T4098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.465531][ T4098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.526311][ T4098] hsr_slave_0: entered promiscuous mode [ 48.534112][ T4098] hsr_slave_1: entered promiscuous mode [ 48.698991][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.711851][ T4293] batadv_slave_0: entered promiscuous mode [ 48.802695][ T29] audit: type=1400 audit(1723958390.779:251): avc: denied { create } for pid=4304 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.833277][ T4305] __nla_validate_parse: 3 callbacks suppressed [ 48.833289][ T4305] netlink: 104 bytes leftover after parsing attributes in process `syz.2.275'. [ 48.855470][ T29] audit: type=1400 audit(1723958390.809:252): avc: denied { write } for pid=4304 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.879905][ T29] audit: type=1400 audit(1723958390.809:253): avc: denied { nlmsg_write } for pid=4304 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.881520][ T4098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.920020][ T4098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.931946][ T4098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.960662][ T4098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.038435][ T4098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.066134][ T4098] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.081673][ T4338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 49.105398][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.114527][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.128382][ T4347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.141215][ T29] audit: type=1326 audit(1723958391.109:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 49.145739][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.172638][ T29] audit: type=1326 audit(1723958391.109:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 49.182467][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.211726][ T29] audit: type=1326 audit(1723958391.109:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 49.248560][ T29] audit: type=1326 audit(1723958391.109:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 49.262668][ T4098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.276030][ T29] audit: type=1326 audit(1723958391.109:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2f188810 code=0x7ffc0000 [ 49.276107][ T29] audit: type=1326 audit(1723958391.109:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c2f189a7b code=0x7ffc0000 [ 49.276127][ T29] audit: type=1326 audit(1723958391.109:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c2f189a7b code=0x7ffc0000 [ 49.289440][ T4098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.394476][ T4347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.506472][ T4098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.685625][ T4098] veth0_vlan: entered promiscuous mode [ 49.703024][ T4098] veth1_vlan: entered promiscuous mode [ 49.710002][ T4416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 49.737150][ T4098] veth0_macvtap: entered promiscuous mode [ 49.745628][ T4098] veth1_macvtap: entered promiscuous mode [ 49.758618][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.771392][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.782328][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.794786][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.806768][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.819932][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.830862][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.841649][ T4098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.852941][ T4098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.865115][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.873388][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 49.884932][ T4098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.893965][ T4098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.902990][ T4098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912276][ T4098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.018533][ T4440] process 'syz.3.303' launched './file2' with NULL argv: empty string added [ 50.153129][ T4457] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 50.180320][ T4457] team0: Failed to send options change via netlink (err -105) [ 50.188354][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.188594][ T4457] team0: Port device netdevsim1 added [ 50.205936][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.209087][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 50.682796][ T4502] loop0: detected capacity change from 0 to 512 [ 50.689792][ T4502] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 50.716519][ T4502] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 50.821830][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 51.035743][ T4538] loop2: detected capacity change from 0 to 2048 [ 51.138500][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.151113][ T4538] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.186239][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.268343][ T4549] loop2: detected capacity change from 0 to 512 [ 51.282129][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.323380][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.372485][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.381008][ T4565] batadv_slave_0: entered promiscuous mode [ 51.921181][ T4652] loop1: detected capacity change from 0 to 512 [ 51.947531][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.959775][ T4655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 51.984374][ T4652] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.895837][ T3261] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /78/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 53.254600][ T4703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'. [ 53.794588][ T4718] loop3: detected capacity change from 0 to 512 [ 53.801712][ T4718] EXT4-fs: Ignoring removed bh option [ 53.836084][ T4718] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c118, mo2=0002] [ 53.854386][ T4718] System zones: 0-2, 18-18, 34-35 [ 53.876429][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.896765][ T4718] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.981065][ T4721] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.419: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.110746][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 54.110814][ T29] audit: type=1400 audit(1723958396.089:283): avc: denied { create } for pid=4733 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 54.202895][ T4741] loop2: detected capacity change from 0 to 512 [ 54.216806][ T4741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.225849][ T4741] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 54.261694][ T4743] loop0: detected capacity change from 0 to 512 [ 54.269452][ T4743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.278470][ T4743] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 54.337294][ T29] audit: type=1400 audit(1723958396.319:284): avc: denied { mounton } for pid=4748 comm="syz.0.432" path="/100/file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.347696][ T4745] loop2: detected capacity change from 0 to 512 [ 54.364582][ T29] audit: type=1400 audit(1723958396.319:285): avc: denied { mount } for pid=4748 comm="syz.0.432" name="/" dev="ramfs" ino=8166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.397500][ T4745] ext4: Unknown parameter 'noacl' [ 54.506710][ T29] audit: type=1326 audit(1723958396.489:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 54.531147][ T29] audit: type=1326 audit(1723958396.489:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 54.558078][ T29] audit: type=1326 audit(1723958396.489:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 54.582373][ T29] audit: type=1326 audit(1723958396.519:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 54.607202][ T29] audit: type=1326 audit(1723958396.519:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 54.631900][ T29] audit: type=1326 audit(1723958396.539:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x0 [ 54.634622][ T4765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 54.685670][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.721485][ T29] audit: type=1326 audit(1723958396.649:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4763 comm="syz.2.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f6c2f189e79 code=0x0 [ 54.801778][ T4771] loop3: detected capacity change from 0 to 512 [ 54.828750][ T4771] ext4: Unknown parameter 'noacl' [ 55.338847][ T4796] loop2: detected capacity change from 0 to 1024 [ 55.395508][ T4796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.411206][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 55.417646][ T4796] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.449880][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.648152][ T4833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 55.676123][ T4836] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.075096][ T4865] syzkaller0: entered promiscuous mode [ 56.080666][ T4865] syzkaller0: entered allmulticast mode [ 56.278657][ T4876] loop4: detected capacity change from 0 to 512 [ 56.296380][ T4876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.310002][ T4876] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.330575][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.623426][ T4900] veth0_vlan: entered allmulticast mode [ 56.721856][ T4910] sock: sock_set_timeout: `syz.3.503' (pid 4910) tries to set negative timeout [ 56.875672][ T4919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 57.922981][ T5005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 58.681969][ T5029] loop2: detected capacity change from 0 to 1024 [ 58.703604][ T5029] EXT4-fs: test_dummy_encryption option not supported [ 58.877357][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.888409][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.022231][ T5041] loop3: detected capacity change from 0 to 512 [ 59.055077][ T5041] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 59.154212][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 59.154225][ T29] audit: type=1400 audit(1723958401.129:313): avc: denied { connect } for pid=5034 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.187077][ T29] audit: type=1400 audit(1723958401.159:314): avc: denied { getopt } for pid=5034 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.207983][ T5041] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.555: iget: bad i_size value: -67835469387268086 [ 59.224669][ T5041] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.555: couldn't read orphan inode 15 (err -117) [ 59.270044][ T5041] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.318199][ T5041] ext2 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.370683][ T5041] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.555: Directory hole found for htree leaf block 0 [ 59.536575][ T5051] loop0: detected capacity change from 0 to 512 [ 59.544657][ T5051] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.554269][ T5051] EXT4-fs: journaled quota format not specified [ 59.745351][ T5041] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.555: Directory hole found for htree leaf block 0 [ 59.825533][ T5058] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 59.971211][ T3264] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 59.984284][ T29] audit: type=1326 audit(1723958401.959:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.008247][ T29] audit: type=1326 audit(1723958401.959:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.072489][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 60.084349][ T29] audit: type=1326 audit(1723958402.029:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.109190][ T29] audit: type=1326 audit(1723958402.029:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.136427][ T29] audit: type=1326 audit(1723958402.029:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.164415][ T29] audit: type=1326 audit(1723958402.029:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.190533][ T29] audit: type=1326 audit(1723958402.029:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.214580][ T29] audit: type=1326 audit(1723958402.029:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2f189e79 code=0x7ffc0000 [ 60.405776][ T5081] loop3: detected capacity change from 0 to 1024 [ 60.416167][ T5081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.444961][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.881654][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 60.922800][ T5097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 61.176029][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 61.253967][ T5116] loop4: detected capacity change from 0 to 1024 [ 61.274658][ T5116] EXT4-fs: Ignoring removed orlov option [ 61.280366][ T5116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.316684][ T5116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.333108][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.142579][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.409045][ T5159] loop4: detected capacity change from 0 to 1024 [ 62.420905][ T5159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.705819][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 62.724893][ T5159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.265498][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.283179][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.292616][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.325283][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.336920][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.407970][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.448094][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.546454][ T5170] chnl_net:caif_netlink_parms(): no params data found [ 63.571250][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.991709][ T5222] loop4: detected capacity change from 0 to 1024 [ 63.999570][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.007071][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.015531][ T5170] bridge_slave_0: entered allmulticast mode [ 64.022682][ T5170] bridge_slave_0: entered promiscuous mode [ 64.029044][ T5222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.040227][ T28] bridge_slave_1: left allmulticast mode [ 64.046104][ T28] bridge_slave_1: left promiscuous mode [ 64.051929][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.065238][ T5222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.081107][ T28] bridge_slave_0: left allmulticast mode [ 64.087951][ T28] bridge_slave_0: left promiscuous mode [ 64.095066][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.323323][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.347154][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.371822][ T28] bond0 (unregistering): Released all slaves [ 64.399199][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.407536][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.415446][ T5170] bridge_slave_1: entered allmulticast mode [ 64.421968][ T5170] bridge_slave_1: entered promiscuous mode [ 64.437148][ T5224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 64.461693][ T5170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.511014][ T5170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.526903][ T28] IPVS: stopping master sync thread 3816 ... [ 64.530837][ T5250] loop2: detected capacity change from 0 to 512 [ 64.543646][ T28] IPVS: stopping master sync thread 3815 ... [ 64.557156][ T28] IPVS: stopping master sync thread 3814 ... [ 64.570481][ T28] IPVS: stopping master sync thread 3812 ... [ 64.582795][ T5170] team0: Port device team_slave_0 added [ 64.589584][ T5250] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.609236][ T28] hsr_slave_0: left promiscuous mode [ 64.620891][ T5250] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.625: iget: bad i_size value: -67835469387268086 [ 64.634488][ T28] hsr_slave_1: left promiscuous mode [ 64.655575][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.664922][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.673178][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.681981][ T5250] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.625: couldn't read orphan inode 15 (err -117) [ 64.711259][ T28] veth1_macvtap: left promiscuous mode [ 64.716982][ T28] veth0_macvtap: left promiscuous mode [ 64.722522][ T28] veth0_vlan: left promiscuous mode [ 64.729888][ T5250] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.766032][ T5250] ext2 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.909506][ T28] team0 (unregistering): Port device team_slave_1 removed [ 64.921719][ T28] team0 (unregistering): Port device team_slave_0 removed [ 64.936730][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.994231][ T5170] team0: Port device team_slave_1 added [ 65.012848][ T5281] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.625: Directory hole found for htree leaf block 0 [ 65.043498][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.051187][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.078247][ T5170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.203537][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.210535][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.238021][ T5170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.617339][ T5170] hsr_slave_0: entered promiscuous mode [ 65.649978][ T5170] hsr_slave_1: entered promiscuous mode [ 65.672340][ T5170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.685432][ T5170] Cannot create hsr debugfs directory [ 66.000208][ T3265] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 66.150270][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.150737][ T5170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.184517][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.199842][ T5170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.225650][ T5170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.253665][ T5170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.270700][ T5337] loop4: detected capacity change from 0 to 1024 [ 66.294917][ T5337] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.326547][ T5170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.341723][ T5337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.358498][ T5170] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.391277][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.398452][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.439351][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.446584][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.623388][ T5170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.840161][ T5170] veth0_vlan: entered promiscuous mode [ 66.855450][ T5389] loop3: detected capacity change from 0 to 512 [ 66.873706][ T5170] veth1_vlan: entered promiscuous mode [ 66.880077][ T5389] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.906005][ T5389] EXT4-fs: journaled quota format not specified [ 66.910596][ T5170] veth0_macvtap: entered promiscuous mode [ 66.940029][ T5170] veth1_macvtap: entered promiscuous mode [ 66.963535][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.976160][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.986746][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.997113][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.007655][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.017819][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.029277][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.039262][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.050079][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.065873][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.079095][ T5170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.090005][ T5170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.100921][ T5170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.110904][ T5170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222934][ T5403] Cannot find set identified by id 0 to match [ 67.250745][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.394755][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 67.394770][ T29] audit: type=1400 audit(1723958409.339:331): avc: denied { mount } for pid=5170 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.801843][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.851598][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.883421][ T5428] loop0: detected capacity change from 0 to 1024 [ 67.911838][ T5428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.931731][ T5428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.349506][ T5446] loop1: detected capacity change from 0 to 512 [ 68.357083][ T5446] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 68.374362][ T5446] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.663: iget: bad i_size value: -67835469387268086 [ 68.400182][ T5446] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.663: couldn't read orphan inode 15 (err -117) [ 68.416054][ T5446] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.435559][ T5446] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.879103][ T5473] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.663: Directory hole found for htree leaf block 0 [ 69.045265][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.116820][ T5481] xt_hashlimit: size too large, truncated to 1048576 [ 69.440480][ T5489] loop0: detected capacity change from 0 to 256 [ 70.301997][ T5170] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 70.435564][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.456186][ T5512] loop1: detected capacity change from 0 to 512 [ 70.465251][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.474918][ T5513] loop2: detected capacity change from 0 to 1024 [ 70.485532][ T5513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.509783][ T5513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.530589][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.547976][ T5512] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.679454][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.700392][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.963970][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.074544][ T5535] loop0: detected capacity change from 0 to 128 [ 71.098621][ T5535] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.155711][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.170554][ T5535] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.215417][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.515771][ T5546] loop4: detected capacity change from 0 to 512 [ 71.525232][ T5546] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 71.541141][ T5546] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.697: iget: bad i_size value: -67835469387268086 [ 71.541404][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.565156][ T5546] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.697: couldn't read orphan inode 15 (err -117) [ 71.604085][ T5546] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.626853][ T5546] ext2 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.644133][ T5551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.650100][ T5546] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.697: Directory hole found for htree leaf block 0 [ 71.665828][ T5551] batadv_slave_0: entered promiscuous mode [ 71.796174][ T5555] loop2: detected capacity change from 0 to 1024 [ 71.805501][ T5555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.827059][ T5555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.065708][ T3258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.247493][ T5562] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.697: Directory hole found for htree leaf block 0 [ 72.503070][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.697964][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.707169][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.816906][ T5578] loop2: detected capacity change from 0 to 128 [ 72.828826][ T5578] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.848027][ T5578] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.870908][ T4098] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 72.975883][ T5588] loop4: detected capacity change from 0 to 512 [ 72.999260][ T5588] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 73.119942][ T5588] loop4: detected capacity change from 0 to 512 [ 73.128176][ T5588] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 73.162241][ T5592] loop0: detected capacity change from 0 to 1024 [ 73.177925][ T5592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.199943][ T5592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.219448][ T5588] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.712: iget: bad i_size value: -67835469387268086 [ 73.233614][ T5588] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.712: couldn't read orphan inode 15 (err -117) [ 73.247591][ T5588] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.259693][ T5588] ext2 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.293041][ T4098] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 73.615013][ T29] audit: type=1400 audit(1723958415.529:332): avc: denied { create } for pid=5597 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 73.635618][ T29] audit: type=1400 audit(1723958415.529:333): avc: denied { write } for pid=5597 comm="syz.4.714" path="socket:[10871]" dev="sockfs" ino=10871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 73.660122][ T29] audit: type=1400 audit(1723958415.529:334): avc: denied { nlmsg_write } for pid=5597 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 73.693458][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.837336][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.839758][ T3265] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.856405][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.937111][ T5624] loop0: detected capacity change from 0 to 128 [ 73.944690][ T5624] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.414240][ T5630] loop4: detected capacity change from 0 to 1024 [ 74.468902][ T5630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.494935][ T5630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.682267][ T5641] loop1: detected capacity change from 0 to 512 [ 74.874517][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 74.948218][ T5641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.017364][ T5641] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.035360][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.049492][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 75.073127][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 75.100019][ T5649] loop0: detected capacity change from 0 to 512 [ 75.108232][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 75.135448][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 75.158868][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 75.181373][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 75.181978][ T5649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.215106][ T5649] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.234652][ T5641] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 18: comm syz.1.731: lblock 23 mapped to illegal pblock 18 (length 1) [ 75.249911][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 75.271837][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 75.293863][ T5641] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 21: comm syz.1.731: path /14/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 75.447057][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.465156][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.604380][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.812155][ T5671] loop4: detected capacity change from 0 to 512 [ 75.820506][ T5673] loop1: detected capacity change from 0 to 512 [ 75.831123][ T5671] EXT4-fs (loop4): 1 truncate cleaned up [ 75.846947][ T5673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.865987][ T5671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.869956][ T5673] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.894665][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 75.900610][ T5678] loop2: detected capacity change from 0 to 1024 [ 75.921893][ T5671] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.741: Directory hole found for htree leaf block 0 [ 75.944992][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 75.978111][ T5678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.987430][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 76.010086][ T5679] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 18: comm syz.1.742: lblock 23 mapped to illegal pblock 18 (length 1) [ 76.025818][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 76.051064][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.054351][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 76.090871][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 76.093735][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.124663][ T5673] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 18: comm syz.1.742: lblock 23 mapped to illegal pblock 18 (length 1) [ 76.144199][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 76.167184][ T5673] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.742: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 76.683408][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.694420][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.012670][ T5723] loop0: detected capacity change from 0 to 512 [ 77.043361][ T5725] loop2: detected capacity change from 0 to 128 [ 77.059441][ T5723] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 77.096220][ T5725] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 77.180505][ T5725] syz.2.755: attempt to access beyond end of device [ 77.180505][ T5725] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 77.210126][ T5725] syz.2.755: attempt to access beyond end of device [ 77.210126][ T5725] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 77.260278][ T5729] loop2: detected capacity change from 0 to 512 [ 77.276866][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.311019][ T5729] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.359823][ T29] audit: type=1400 audit(1723958419.319:335): avc: denied { map } for pid=5722 comm="syz.0.754" path="socket:[11022]" dev="sockfs" ino=11022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.633022][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 77.670633][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 77.706715][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 77.729786][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.749603][ T5737] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.756: lblock 23 mapped to illegal pblock 18 (length 1) [ 77.777655][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 77.803227][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 77.842416][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 77.863063][ T5749] loop0: detected capacity change from 0 to 1024 [ 77.892808][ T5729] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.756: lblock 23 mapped to illegal pblock 18 (length 1) [ 77.922993][ T5749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.926541][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 77.952667][ T5729] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz.2.756: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 77.976483][ T5749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.116189][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.298742][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.329086][ T5767] loop2: detected capacity change from 0 to 512 [ 78.341755][ T5767] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 78.389877][ T5775] loop4: detected capacity change from 0 to 2048 [ 78.411949][ T5767] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 78.422367][ T5778] loop1: detected capacity change from 0 to 1024 [ 78.426993][ T29] audit: type=1400 audit(1723958420.399:336): avc: denied { write } for pid=5782 comm="syz.3.778" path="socket:[11111]" dev="sockfs" ino=11111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.454072][ T5778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.467759][ T5775] loop4: p2 p3 < > p4 < p5 > [ 78.472547][ T5775] loop4: partition table partially beyond EOD, truncated [ 78.485253][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.504428][ T5775] loop4: p2 start 33028 is beyond EOD, truncated [ 78.510847][ T5775] loop4: p3 start 4284160 is beyond EOD, truncated [ 78.567585][ T5775] loop4: p5 start 33028 is beyond EOD, truncated [ 78.621669][ T29] audit: type=1400 audit(1723958420.599:337): avc: denied { create } for pid=5777 comm="syz.1.776" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.650219][ T29] audit: type=1400 audit(1723958420.629:338): avc: denied { write open } for pid=5777 comm="syz.1.776" path="/23/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.727249][ T29] audit: type=1400 audit(1723958420.649:339): avc: denied { read } for pid=5777 comm="syz.1.776" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.749892][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.778841][ T5813] loop0: detected capacity change from 0 to 512 [ 78.810553][ T5813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.882255][ T5813] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.917666][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.950049][ T29] audit: type=1400 audit(1723958420.929:340): avc: denied { read } for pid=5832 comm="syz.0.797" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.972815][ T29] audit: type=1400 audit(1723958420.929:341): avc: denied { open } for pid=5832 comm="syz.0.797" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.002309][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 79.003493][ T5838] loop1: detected capacity change from 0 to 128 [ 79.018765][ T5837] loop2: detected capacity change from 0 to 1024 [ 79.026935][ T5838] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.046690][ T5837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.047812][ T5838] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.083716][ T5837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.140512][ T5170] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.213093][ T5847] loop1: detected capacity change from 0 to 128 [ 79.267943][ T5847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.290528][ T5847] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.313130][ T5170] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.369986][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.400732][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.500996][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.547047][ T5857] netlink: 'syz.0.808': attribute type 16 has an invalid length. [ 79.554949][ T5857] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 79.562924][ T5857] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.808'. [ 79.595417][ T29] audit: type=1400 audit(1723958421.579:342): avc: denied { connect } for pid=5860 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.646989][ T5867] loop1: detected capacity change from 0 to 512 [ 79.667973][ T5867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.688850][ T29] audit: type=1400 audit(1723958421.659:343): avc: denied { mounton } for pid=5872 comm="syz.2.815" path="/proc/495/task" dev="proc" ino=12302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 79.714883][ T5867] EXT4-fs (loop1): 1 truncate cleaned up [ 79.720923][ T5867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.765872][ T5867] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 79.779680][ T5867] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 79.825828][ T5881] loop3: detected capacity change from 0 to 1024 [ 79.843766][ T5881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.873306][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.889810][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.409761][ T29] audit: type=1400 audit(1723958422.369:344): avc: denied { getopt } for pid=5903 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.558226][ T29] audit: type=1400 audit(1723958422.539:345): avc: denied { ioctl } for pid=5909 comm="syz.0.831" path="socket:[12371]" dev="sockfs" ino=12371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.588736][ T5914] loop1: detected capacity change from 0 to 128 [ 80.609569][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 80.646109][ T5914] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.684855][ T5914] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.741469][ T5170] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.823416][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.885293][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 81.677868][ T5969] Illegal XDP return value 4294967274 on prog (id 180) dev N/A, expect packet loss! [ 81.826074][ T5971] loop4: detected capacity change from 0 to 1024 [ 81.834437][ T5971] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.852245][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.947834][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811583a200: rx timeout, send abort [ 81.956175][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881120d3200: rx timeout, send abort [ 81.964544][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811583a200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.978898][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881120d3200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.054290][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.077694][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.469891][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.569900][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 82.939087][ T29] audit: type=1400 audit(1723958424.919:346): avc: denied { unmount } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.969668][ T6031] loop0: detected capacity change from 0 to 1024 [ 82.981911][ T6031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.985744][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.000187][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.010764][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.088997][ T29] audit: type=1400 audit(1723958425.069:347): avc: denied { read } for pid=6017 comm="syz.1.875" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.396391][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.786850][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.907330][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.930957][ T6060] loop3: detected capacity change from 0 to 8192 [ 83.948003][ T6060] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.021714][ T6067] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 84.029669][ T6067] FAT-fs (loop3): Filesystem has been set read-only [ 84.227217][ T6072] loop1: detected capacity change from 0 to 1024 [ 84.236648][ T6072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.426668][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.600516][ T6084] loop4: detected capacity change from 0 to 512 [ 84.607303][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.617466][ T6084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.640410][ T6084] EXT4-fs (loop4): 1 orphan inode deleted [ 84.646360][ T6084] EXT4-fs (loop4): 1 truncate cleaned up [ 84.655265][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.798148][ T6084] syzkaller0: entered promiscuous mode [ 84.803639][ T6084] syzkaller0: entered allmulticast mode [ 84.813408][ T6090] team_slave_0: entered promiscuous mode [ 84.819117][ T6090] team_slave_1: entered promiscuous mode [ 84.825265][ T6090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.833822][ T6090] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 84.917973][ T9] kernel write not supported for file /vcs (pid: 9 comm: kworker/0:1) [ 84.972042][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.031274][ T6106] Cannot find set identified by id 0 to match [ 85.047724][ T6109] loop1: detected capacity change from 0 to 1024 [ 85.077767][ T6109] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.110339][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.110501][ T6116] batadv_slave_1: entered promiscuous mode [ 85.165448][ T6114] batadv_slave_1: left promiscuous mode [ 85.725080][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 85.725096][ T29] audit: type=1400 audit(1723958427.669:349): avc: denied { write } for pid=6148 comm="syz.3.927" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.787963][ T29] audit: type=1400 audit(1723958427.759:350): avc: denied { nlmsg_read } for pid=6152 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.954620][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.027921][ T6165] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 86.103462][ T6173] Cannot find set identified by id 0 to match [ 86.162021][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.224108][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.393774][ T6209] Cannot find set identified by id 0 to match [ 86.749045][ T6246] Cannot find set identified by id 0 to match [ 87.008662][ T6252] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 87.023259][ T6252] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 87.345414][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 88.361255][ T6304] loop1: detected capacity change from 0 to 512 [ 88.383392][ T6304] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.420425][ T29] audit: type=1400 audit(1723958430.399:351): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.440394][ T29] audit: type=1326 audit(1723958430.399:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 88.460955][ T6304] EXT4-fs (loop1): 1 orphan inode deleted [ 88.464176][ T29] audit: type=1326 audit(1723958430.399:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 88.469895][ T6304] EXT4-fs (loop1): 1 truncate cleaned up [ 88.514971][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.072110][ T29] audit: type=1326 audit(1723958430.479:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 89.095548][ T29] audit: type=1326 audit(1723958430.479:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 89.118931][ T29] audit: type=1326 audit(1723958430.479:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 89.119016][ T29] audit: type=1326 audit(1723958430.479:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 89.119037][ T29] audit: type=1326 audit(1723958430.479:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.3.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296bc39e79 code=0x7ffc0000 [ 89.289587][ T6311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.331202][ T6311] EXT4-fs (loop1): Remounting filesystem read-only [ 89.355104][ T6339] syz.4.998 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.454936][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.587945][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.596541][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.914662][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.615385][ T6383] loop4: detected capacity change from 0 to 512 [ 90.622494][ T6383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.639047][ T6383] EXT4-fs (loop4): 1 orphan inode deleted [ 90.645113][ T6383] EXT4-fs (loop4): 1 truncate cleaned up [ 90.652447][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.800590][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.809810][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.858408][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.020895][ T6433] loop4: detected capacity change from 0 to 512 [ 91.027830][ T6433] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.039920][ T6433] EXT4-fs (loop4): 1 orphan inode deleted [ 91.045821][ T6433] EXT4-fs (loop4): 1 truncate cleaned up [ 91.370786][ T6463] loop3: detected capacity change from 0 to 512 [ 91.386063][ T6463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.401434][ T6463] EXT4-fs (loop3): 1 orphan inode deleted [ 91.407455][ T6463] EXT4-fs (loop3): 1 truncate cleaned up [ 91.525644][ T6463] syzkaller0: entered promiscuous mode [ 91.531148][ T6463] syzkaller0: entered allmulticast mode [ 91.825723][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.317048][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 92.317111][ T29] audit: type=1400 audit(1723958434.299:370): avc: denied { read } for pid=6515 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.339647][ T6518] loop1: detected capacity change from 0 to 512 [ 92.352394][ T6518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.371210][ T6518] EXT4-fs (loop1): 1 orphan inode deleted [ 92.377211][ T6518] EXT4-fs (loop1): 1 truncate cleaned up [ 92.487246][ T6518] syzkaller0: entered promiscuous mode [ 92.492887][ T6518] syzkaller0: entered allmulticast mode [ 92.522779][ T6530] Cannot find set identified by id 0 to match [ 92.603742][ T6536] netlink: 'syz.4.1076': attribute type 64 has an invalid length. [ 92.611756][ T6536] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1076'. [ 92.671858][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.681147][ T6543] loop4: detected capacity change from 0 to 1024 [ 92.691172][ T6543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.700028][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.713847][ T29] audit: type=1400 audit(1723958434.689:371): avc: denied { map } for pid=6549 comm="syz.0.1083" path="socket:[14467]" dev="sockfs" ino=14467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.765391][ T6558] loop1: detected capacity change from 0 to 512 [ 92.775676][ T6558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.787747][ T6558] EXT4-fs (loop1): 1 orphan inode deleted [ 92.793489][ T6558] EXT4-fs (loop1): 1 truncate cleaned up [ 92.898108][ T6558] syzkaller0: entered promiscuous mode [ 92.903607][ T6558] syzkaller0: entered allmulticast mode [ 93.024421][ T6564] Cannot find set identified by id 0 to match [ 93.051730][ T6566] capability: warning: `syz.1.1087' uses 32-bit capabilities (legacy support in use) [ 93.062474][ T29] audit: type=1400 audit(1723958435.039:372): avc: denied { setopt } for pid=6565 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.141242][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.149840][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.266728][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.275587][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.623407][ T6582] syz.4.1093(6582): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 93.650172][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 93.665432][ T993] kernel write not supported for file /vcs (pid: 993 comm: kworker/0:2) [ 93.710334][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1101'. [ 94.604928][ T6619] IPVS: Error connecting to the multicast addr [ 94.636640][ T993] kernel write not supported for file /vcs (pid: 993 comm: kworker/0:2) [ 94.741123][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.767479][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.970911][ T6688] batadv_slave_1: entered promiscuous mode [ 94.977224][ T6687] batadv_slave_1: left promiscuous mode [ 95.014844][ T6693] batadv_slave_1: entered promiscuous mode [ 95.021042][ T6692] batadv_slave_1: left promiscuous mode [ 95.673211][ T6719] loop0: detected capacity change from 0 to 1024 [ 95.680550][ T6719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.786405][ T6726] loop3: detected capacity change from 0 to 512 [ 95.793659][ T6726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.806436][ T6726] EXT4-fs (loop3): 1 orphan inode deleted [ 95.812248][ T6726] EXT4-fs (loop3): 1 truncate cleaned up [ 96.414852][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 96.547039][ T29] audit: type=1400 audit(1723958438.529:373): avc: denied { ioctl } for pid=6752 comm="syz.3.1163" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.555780][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 96.602381][ T29] audit: type=1326 audit(1723958438.579:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.625996][ T29] audit: type=1326 audit(1723958438.579:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.649533][ T29] audit: type=1326 audit(1723958438.579:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.685096][ T29] audit: type=1326 audit(1723958438.579:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.708508][ T29] audit: type=1326 audit(1723958438.579:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.732536][ T29] audit: type=1326 audit(1723958438.579:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e3959e79 code=0x7ffc0000 [ 96.883217][ T6765] ebt_among: dst integrity fail: 101 [ 97.499142][ T6784] Cannot find set identified by id 0 to match [ 97.885338][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 98.156498][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 98.156512][ T29] audit: type=1400 audit(1723958440.009:384): avc: denied { create } for pid=6793 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.181934][ T29] audit: type=1400 audit(1723958440.009:385): avc: denied { connect } for pid=6793 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.201709][ T29] audit: type=1400 audit(1723958440.059:386): avc: denied { write } for pid=6793 comm="syz.0.1179" path="socket:[14057]" dev="sockfs" ino=14057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.718563][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.727137][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.833617][ T6826] loop1: detected capacity change from 0 to 1024 [ 98.842252][ T6826] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.751124][ T5170] EXT4-fs unmount: 15 callbacks suppressed [ 99.751139][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.455292][ T6908] loop4: detected capacity change from 0 to 1024 [ 100.470782][ T6908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.501135][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.722869][ T29] audit: type=1400 audit(1723958442.699:387): avc: denied { watch_reads } for pid=6909 comm="syz.2.1226" path="/306" dev="tmpfs" ino=1586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.021946][ T29] audit: type=1400 audit(1723958442.999:388): avc: denied { write } for pid=6926 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.144082][ T6938] syzkaller0: entered promiscuous mode [ 101.149682][ T6938] syzkaller0: entered allmulticast mode [ 101.274075][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.292140][ T6942] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1239'. [ 101.493233][ T6963] loop1: detected capacity change from 0 to 1024 [ 101.500869][ T6963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.511851][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.649930][ T29] audit: type=1400 audit(1723958443.629:389): avc: denied { create } for pid=6966 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.669522][ T29] audit: type=1400 audit(1723958443.629:390): avc: denied { ioctl } for pid=6966 comm="syz.2.1250" path="socket:[15432]" dev="sockfs" ino=15432 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.694246][ T29] audit: type=1400 audit(1723958443.629:391): avc: denied { ioctl } for pid=6966 comm="syz.2.1250" path="socket:[15433]" dev="sockfs" ino=15433 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 101.795297][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.902004][ T6987] Cannot find set identified by id 0 to match [ 101.934325][ T29] audit: type=1400 audit(1723958443.909:392): avc: denied { connect } for pid=6989 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.023763][ T7011] netdevsim netdevsim1 €: renamed from netdevsim0 (while UP) [ 102.043525][ T29] audit: type=1400 audit(1723958444.019:393): avc: denied { create } for pid=7007 comm="syz.3.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.109641][ T7025] : renamed from bond0 (while UP) [ 102.364010][ T3490] kernel write not supported for file /vcs (pid: 3490 comm: kworker/1:4) [ 103.286088][ T7091] Cannot find set identified by id 0 to match [ 103.949031][ T7121] loop2: detected capacity change from 0 to 512 [ 103.956420][ T7121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.972691][ T7121] EXT4-fs (loop2): 1 orphan inode deleted [ 103.978576][ T7121] EXT4-fs (loop2): 1 truncate cleaned up [ 103.985005][ T7121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.037726][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.150019][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.173256][ T29] audit: type=1400 audit(1723958446.149:394): avc: denied { name_connect } for pid=7146 comm="syz.2.1324" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 104.305622][ T7163] loop2: detected capacity change from 0 to 1024 [ 104.313179][ T7163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.346543][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.368302][ T7168] loop3: detected capacity change from 0 to 512 [ 104.375514][ T7168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.389366][ T7168] EXT4-fs (loop3): 1 orphan inode deleted [ 104.395243][ T7168] EXT4-fs (loop3): 1 truncate cleaned up [ 104.405263][ T7168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.582019][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.740298][ T29] audit: type=1400 audit(1723958446.719:395): avc: denied { read } for pid=7191 comm="syz.3.1341" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.170448][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.226392][ T7225] Cannot find set identified by id 0 to match [ 105.316647][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.324081][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.348414][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.355646][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.363232][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.371030][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.381230][ T7233] team0: Port device bridge0 added [ 105.382632][ T29] audit: type=1400 audit(1723958447.359:396): avc: denied { ioctl } for pid=7232 comm="syz.3.1360" path="socket:[15891]" dev="sockfs" ino=15891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.440420][ T7233] bridge_slave_1: left allmulticast mode [ 105.446233][ T7233] bridge_slave_1: left promiscuous mode [ 105.452010][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.465623][ T7233] bridge_slave_0: left allmulticast mode [ 105.471360][ T7233] bridge_slave_0: left promiscuous mode [ 105.477064][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.497888][ T7233] team0: Port device bridge0 removed [ 105.699209][ T29] audit: type=1400 audit(1723958447.679:397): avc: denied { lock } for pid=7251 comm="syz.2.1368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.135378][ T7260] batadv_slave_1: entered promiscuous mode [ 106.149588][ T7259] batadv_slave_1: left promiscuous mode [ 106.440453][ T7290] batadv_slave_1: entered promiscuous mode [ 106.454085][ T7289] batadv_slave_1: left promiscuous mode [ 106.665475][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 106.744075][ T7302] loop3: detected capacity change from 0 to 2048 [ 106.881796][ T7302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.894182][ T7302] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.298303][ T7320] batadv_slave_1: entered promiscuous mode [ 107.314395][ T7319] batadv_slave_1: left promiscuous mode [ 107.407073][ T29] audit: type=1400 audit(1723958449.389:398): avc: denied { unmount } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 107.430190][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.541419][ T7338] loop0: detected capacity change from 0 to 512 [ 107.556994][ T7338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.582789][ T7338] EXT4-fs (loop0): 1 orphan inode deleted [ 107.588937][ T7338] EXT4-fs (loop0): 1 truncate cleaned up [ 107.637617][ T7338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.801899][ T7338] syzkaller0: entered promiscuous mode [ 107.807419][ T7338] syzkaller0: entered allmulticast mode [ 107.839456][ T7350] batadv_slave_1: entered promiscuous mode [ 107.845660][ T7349] batadv_slave_1: left promiscuous mode [ 107.923107][ T29] audit: type=1400 audit(1723958449.899:399): avc: denied { write } for pid=7353 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.943779][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.076093][ T7373] loop3: detected capacity change from 0 to 1024 [ 108.087832][ T7373] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.111319][ T7380] loop0: detected capacity change from 0 to 512 [ 108.130909][ T7373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.149338][ T7380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.198697][ T7380] EXT4-fs (loop0): 1 orphan inode deleted [ 108.204498][ T7380] EXT4-fs (loop0): 1 truncate cleaned up [ 108.234715][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.317641][ T7399] batadv_slave_1: entered promiscuous mode [ 108.323936][ T7398] batadv_slave_1: left promiscuous mode [ 108.389382][ T7380] syzkaller0: entered promiscuous mode [ 108.394946][ T7380] syzkaller0: entered allmulticast mode [ 108.468083][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.538161][ T7424] batadv_slave_1: entered promiscuous mode [ 108.546317][ T7423] batadv_slave_1: left promiscuous mode [ 108.709650][ T7440] loop0: detected capacity change from 0 to 512 [ 108.719391][ T7440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.738322][ T7440] EXT4-fs (loop0): 1 orphan inode deleted [ 108.744085][ T7440] EXT4-fs (loop0): 1 truncate cleaned up [ 108.754652][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.794531][ T7440] syzkaller0: entered promiscuous mode [ 108.800143][ T7440] syzkaller0: entered allmulticast mode [ 108.863764][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.993403][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.019550][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 109.360699][ T29] audit: type=1400 audit(1723958451.339:400): avc: denied { bind } for pid=7462 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.455989][ T7472] loop4: detected capacity change from 0 to 512 [ 109.463751][ T7472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.474974][ T7472] EXT4-fs (loop4): 1 orphan inode deleted [ 109.480726][ T7472] EXT4-fs (loop4): 1 truncate cleaned up [ 109.487105][ T7472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.526474][ T7472] syzkaller0: entered promiscuous mode [ 109.531959][ T7472] syzkaller0: entered allmulticast mode [ 109.621485][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.645279][ T7477] loop4: detected capacity change from 0 to 1024 [ 109.652357][ T7477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.666025][ T7477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.768348][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 109.870053][ T7499] loop1: detected capacity change from 0 to 512 [ 109.894439][ T7499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.908562][ T7499] EXT4-fs (loop1): 1 orphan inode deleted [ 109.914802][ T7499] EXT4-fs (loop1): 1 truncate cleaned up [ 109.930891][ T7499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.967018][ T7499] syzkaller0: entered promiscuous mode [ 109.972681][ T7499] syzkaller0: entered allmulticast mode [ 110.094678][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.598234][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.665635][ T7535] loop4: detected capacity change from 0 to 512 [ 110.735629][ T7535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.833158][ T7535] EXT4-fs (loop4): 1 orphan inode deleted [ 110.839064][ T7535] EXT4-fs (loop4): 1 truncate cleaned up [ 110.857877][ T29] audit: type=1400 audit(1723958452.829:401): avc: denied { unlink } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.958080][ T7535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.995137][ T7535] syzkaller0: entered promiscuous mode [ 111.001178][ T7535] syzkaller0: entered allmulticast mode [ 111.142273][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.408489][ T7567] loop4: detected capacity change from 0 to 512 [ 111.427109][ T7567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.446195][ T7567] EXT4-fs (loop4): 1 truncate cleaned up [ 111.455564][ T7567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.471626][ T29] audit: type=1400 audit(1723958453.449:402): avc: denied { append } for pid=7566 comm="syz.4.1500" path="/276/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.591312][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.675028][ T7577] loop4: detected capacity change from 0 to 512 [ 111.707683][ T7577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.734289][ T7577] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.792934][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.852686][ T7585] loop1: detected capacity change from 0 to 256 [ 111.883602][ T993] kernel write not supported for file /vcs (pid: 993 comm: kworker/0:2) [ 112.131601][ T7585] FAT-fs (loop1): codepage cp865 not found [ 112.288403][ T29] audit: type=1400 audit(1723958454.269:403): avc: denied { mount } for pid=7591 comm="syz.0.1507" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.353840][ T29] audit: type=1400 audit(1723958454.289:404): avc: denied { search } for pid=7591 comm="syz.0.1507" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.356063][ T7598] loop0: detected capacity change from 0 to 128 [ 112.375817][ T29] audit: type=1400 audit(1723958454.299:405): avc: denied { write } for pid=7591 comm="syz.0.1507" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.403782][ T29] audit: type=1400 audit(1723958454.309:406): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.424601][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.431892][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.436675][ T29] audit: type=1400 audit(1723958454.359:407): avc: denied { mount } for pid=7596 comm="syz.0.1510" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.453769][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.462379][ T29] audit: type=1400 audit(1723958454.359:408): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.479045][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.498634][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.506241][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.513423][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.526302][ T7600] team0: Port device bridge0 added [ 112.538060][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.603848][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.619261][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.671729][ T7603] bridge_slave_1: left allmulticast mode [ 112.677612][ T7603] bridge_slave_1: left promiscuous mode [ 112.683486][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.694385][ T7603] bridge_slave_0: left allmulticast mode [ 112.700080][ T7603] bridge_slave_0: left promiscuous mode [ 112.705891][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.716332][ T7609] loop3: detected capacity change from 0 to 256 [ 112.756623][ T7609] FAT-fs (loop3): codepage cp866 not found [ 112.882865][ T7603] team0: Port device bridge0 removed [ 115.316955][ T7644] loop2: detected capacity change from 0 to 512 [ 115.336885][ T7644] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.346446][ T7644] EXT4-fs: journaled quota format not specified [ 115.721509][ T7652] Cannot find set identified by id 0 to match [ 115.876524][ T29] audit: type=1400 audit(1723958457.599:409): avc: denied { getopt } for pid=7650 comm="syz.1.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.929376][ T7654] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.937675][ T7654] vhci_hcd: invalid port number 38 [ 115.949234][ T29] audit: type=1400 audit(1723958457.929:410): avc: denied { bind } for pid=7657 comm="syz.1.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.971595][ T7654] sg_write: data in/out 54/14 bytes for SCSI command 0x0-- guessing data in; [ 115.971595][ T7654] program syz.3.1529 not setting count and/or reply_len properly [ 115.974764][ T29] audit: type=1400 audit(1723958457.929:411): avc: denied { name_bind } for pid=7657 comm="syz.1.1531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 116.010564][ T29] audit: type=1400 audit(1723958457.929:412): avc: denied { node_bind } for pid=7657 comm="syz.1.1531" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 116.033119][ T29] audit: type=1400 audit(1723958457.949:413): avc: denied { read write } for pid=7653 comm="syz.3.1529" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.057484][ T29] audit: type=1400 audit(1723958457.949:414): avc: denied { open } for pid=7653 comm="syz.3.1529" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.123589][ T29] audit: type=1400 audit(1723958458.009:415): avc: denied { listen } for pid=7657 comm="syz.1.1531" lport=46686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.145103][ T29] audit: type=1400 audit(1723958458.039:416): avc: denied { accept } for pid=7657 comm="syz.1.1531" lport=46686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.212360][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 116.217316][ T7671] loop4: detected capacity change from 0 to 512 [ 116.271624][ T7671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.333326][ T7671] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.469956][ T29] audit: type=1400 audit(1723958458.449:417): avc: denied { setattr } for pid=7664 comm="syz.4.1532" name="net_prio.prioidx" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.667637][ T29] audit: type=1400 audit(1723958458.629:418): avc: denied { map } for pid=7664 comm="syz.4.1532" path="/282/bus/net_prio.prioidx" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.876374][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.131754][ T7706] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.144613][ T7706] vhci_hcd: invalid port number 38 [ 117.150762][ T7706] sg_write: data in/out 54/14 bytes for SCSI command 0x0-- guessing data in; [ 117.150762][ T7706] program syz.4.1547 not setting count and/or reply_len properly [ 117.249533][ T7708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 117.250431][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 117.256167][ T7708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.256296][ T7708] vhci_hcd vhci_hcd.0: Device attached [ 117.309075][ T7718] loop4: detected capacity change from 0 to 128 [ 117.322553][ T7708] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 117.329165][ T7708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.336693][ T7708] vhci_hcd vhci_hcd.0: Device attached [ 117.347445][ T7718] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.350064][ T7708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1549'. [ 117.355052][ T7718] vhci_hcd: invalid port number 99 [ 117.363863][ T7708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1549'. [ 117.369030][ T7718] vhci_hcd: default hub control req: 726f v2f63 i0063 l29550 [ 117.388882][ T7719] vhci_hcd: connection closed [ 117.389036][ T7709] vhci_hcd: connection closed [ 117.393965][ T3369] vhci_hcd: stop threads [ 117.403162][ T3369] vhci_hcd: release socket [ 117.406714][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.407630][ T3369] vhci_hcd: disconnect device [ 117.421036][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.428172][ T3369] vhci_hcd: stop threads [ 117.432998][ T3369] vhci_hcd: release socket [ 117.437567][ T3369] vhci_hcd: disconnect device [ 117.519723][ T24] vhci_hcd: vhci_device speed not set [ 117.521466][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 117.596647][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'. [ 118.090721][ T7749] loop2: detected capacity change from 0 to 512 [ 118.198256][ T7749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.240107][ T7749] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.326151][ T7753] loop1: detected capacity change from 0 to 1764 [ 118.485823][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.063828][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 119.448865][ T7779] loop1: detected capacity change from 0 to 512 [ 119.460049][ T7779] ext4: Bad value for 'init_itable' [ 119.583341][ T7790] loop4: detected capacity change from 0 to 1024 [ 119.592875][ T7790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.603694][ T7790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.216303][ T7797] loop1: detected capacity change from 0 to 512 [ 120.223306][ T7797] ext4: Bad value for 'init_itable' [ 120.490756][ T7801] Cannot find set identified by id 0 to match [ 120.522739][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.526380][ T7803] loop3: detected capacity change from 0 to 1764 [ 120.590848][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1584'. [ 121.664343][ T7835] Cannot find set identified by id 0 to match [ 121.752254][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 121.761355][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 122.525801][ T7864] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.533347][ T7864] vhci_hcd: invalid port number 38 [ 122.584811][ T7875] Cannot find set identified by id 0 to match [ 122.611018][ T7872] loop2: detected capacity change from 0 to 4096 [ 122.681425][ T7872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.720707][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 122.738511][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 122.738524][ T29] audit: type=1400 audit(1723958464.719:424): avc: denied { execute } for pid=7870 comm="syz.2.1603" path="/369/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.766325][ T7892] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 122.773900][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.781672][ T7892] vhci_hcd vhci_hcd.0: Device attached [ 122.797283][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.876450][ T7892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1609'. [ 122.890691][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.898171][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.914259][ T7856] bridge_slave_0: entered allmulticast mode [ 122.925522][ T7856] bridge_slave_0: entered promiscuous mode [ 122.925754][ T7893] vhci_hcd: connection closed [ 122.932018][ T3369] vhci_hcd: stop threads [ 122.937522][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.941004][ T3369] vhci_hcd: release socket [ 122.941012][ T3369] vhci_hcd: disconnect device [ 122.948124][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.995267][ T29] audit: type=1400 audit(1723958464.979:425): avc: denied { ioctl } for pid=7909 comm="syz.4.1613" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.998191][ T7856] bridge_slave_1: entered allmulticast mode [ 123.020841][ T7910] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.048975][ T7856] bridge_slave_1: entered promiscuous mode [ 123.049798][ T29] audit: type=1400 audit(1723958465.029:426): avc: denied { mount } for pid=7909 comm="syz.4.1613" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.106114][ T7911] loop2: detected capacity change from 0 to 512 [ 123.107121][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.132859][ T29] audit: type=1400 audit(1723958465.109:427): avc: denied { unmount } for pid=4098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.141793][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.177837][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.203457][ T7911] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.219615][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 123.230567][ T7856] team0: Port device team_slave_0 added [ 123.237629][ T7856] team0: Port device team_slave_1 added [ 123.259906][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.266975][ T7927] loop1: detected capacity change from 0 to 4096 [ 123.267048][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.299534][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.301849][ T7927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.338893][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.346210][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.372399][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.387772][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.407287][ T7856] hsr_slave_0: entered promiscuous mode [ 123.416373][ T7856] hsr_slave_1: entered promiscuous mode [ 123.427906][ T7856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.436492][ T7856] Cannot create hsr debugfs directory [ 123.508510][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 123.645738][ T7856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.729611][ T29] audit: type=1400 audit(1723958465.709:428): avc: denied { write } for pid=7933 comm="syz.3.1622" path="socket:[18543]" dev="sockfs" ino=18543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.768647][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.780117][ T7856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.867294][ T7856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.929591][ T7856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.950902][ T29] audit: type=1400 audit(1723958465.929:429): avc: denied { override_creds } for pid=7946 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.991441][ T29] audit: type=1400 audit(1723958465.969:430): avc: denied { bind } for pid=7946 comm="syz.2.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.047983][ T7856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.081896][ T7856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.105261][ T7954] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.120432][ T7956] loop2: detected capacity change from 0 to 1024 [ 124.131899][ T7856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.141541][ T7956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.166792][ T7856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.192141][ T7956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.242456][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.258535][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.271043][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.279082][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.301450][ T7856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.311922][ T7856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.327026][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.334285][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.429079][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.531636][ T7856] veth0_vlan: entered promiscuous mode [ 124.538674][ T7974] loop3: detected capacity change from 0 to 128 [ 124.543141][ T7856] veth1_vlan: entered promiscuous mode [ 124.553263][ T7974] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 124.572297][ T7856] veth0_macvtap: entered promiscuous mode [ 124.582143][ T7856] veth1_macvtap: entered promiscuous mode [ 124.598138][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.610787][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.616281][ T7974] syz.3.1630: attempt to access beyond end of device [ 124.616281][ T7974] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.621299][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.634640][ T7974] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 124.653052][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.663519][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.673524][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.684113][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.694116][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.704643][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.714477][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.724974][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.736842][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.744844][ T3369] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 124.746080][ T7856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.762909][ T7856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.771789][ T7856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.780512][ T7856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.883631][ T7983] loop0: detected capacity change from 0 to 1764 [ 124.978287][ T29] audit: type=1400 audit(1723958466.919:431): avc: denied { listen } for pid=7986 comm="syz.3.1635" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.999780][ T29] audit: type=1400 audit(1723958466.919:432): avc: denied { connect } for pid=7986 comm="syz.3.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.019491][ T29] audit: type=1400 audit(1723958466.919:433): avc: denied { name_connect } for pid=7986 comm="syz.3.1635" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 125.906464][ T7997] loop0: detected capacity change from 0 to 1024 [ 125.992445][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.010426][ T7997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.032074][ T8002] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.041253][ T7997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.175567][ T8011] loop3: detected capacity change from 0 to 1024 [ 126.186252][ T8011] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.222474][ T8011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.378663][ T8021] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1638: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 127.005403][ T7856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.128344][ T8036] loop1: detected capacity change from 0 to 1024 [ 127.144331][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.171574][ T8036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.207476][ T8036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.250288][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 127.277755][ T8047] loop3: detected capacity change from 0 to 1024 [ 127.292598][ T8047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.339114][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.539172][ T8056] loop2: detected capacity change from 0 to 1024 [ 127.565310][ T8056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.576316][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.638010][ T8063] loop4: detected capacity change from 0 to 1024 [ 127.670068][ T8063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.682484][ T8064] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1651: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 127.711339][ T8063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.161581][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.230319][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.882883][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.957997][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.115105][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 129.123996][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 129.152995][ T8102] loop4: detected capacity change from 0 to 1024 [ 129.200468][ T8102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.319223][ T8102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.338398][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 129.352101][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 129.352114][ T29] audit: type=1400 audit(1723958471.329:436): avc: denied { append } for pid=8107 comm="syz.3.1674" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.358154][ C1] vcan0: j1939_session_tx_dat: 0xffff888110998400: queue data error: -100 [ 129.488541][ T8134] loop0: detected capacity change from 0 to 1024 [ 129.495709][ T8134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.508972][ T8134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.076976][ T8141] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1682: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 130.099958][ T8143] loop3: detected capacity change from 0 to 1024 [ 130.116231][ T8143] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.146844][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.208315][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.257600][ T8148] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 130.264175][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.271868][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 130.348404][ T8152] loop2: detected capacity change from 0 to 1024 [ 130.367293][ T8148] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 130.373834][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.381552][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 130.393987][ T8152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.405911][ T8152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.420498][ T8148] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1684'. [ 130.429599][ T8148] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1684'. [ 130.444224][ T8149] vhci_hcd: connection closed [ 130.444333][ T8153] vhci_hcd: connection closed [ 130.449090][ T321] vhci_hcd: stop threads [ 130.458028][ T321] vhci_hcd: release socket [ 130.462457][ T321] vhci_hcd: disconnect device [ 130.484202][ T24] vhci_hcd: vhci_device speed not set [ 130.490179][ T321] vhci_hcd: stop threads [ 130.494779][ T321] vhci_hcd: release socket [ 130.499427][ T321] vhci_hcd: disconnect device [ 130.515470][ T7856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.117678][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.254839][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.357963][ T8192] loop2: detected capacity change from 0 to 128 [ 131.375557][ T8192] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 131.429614][ T321] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 132.046884][ T8207] loop4: detected capacity change from 0 to 512 [ 132.077049][ T8207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.092199][ T8207] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.131736][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.182777][ T8221] syzkaller0: entered promiscuous mode [ 132.188379][ T8221] syzkaller0: entered allmulticast mode [ 132.189828][ T8228] loop1: detected capacity change from 0 to 512 [ 132.195578][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 132.216510][ T8228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.229244][ T8228] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.260487][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.359301][ T8253] loop0: detected capacity change from 0 to 512 [ 132.376171][ T8253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.388818][ T8253] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.412328][ T7856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.432367][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 132.480490][ T8264] loop1: detected capacity change from 0 to 512 [ 132.496653][ T8264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.510631][ T8264] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.530387][ T8270] syzkaller0: entered promiscuous mode [ 132.536008][ T8270] syzkaller0: entered allmulticast mode [ 132.542645][ T5170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.564386][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.571558][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.583705][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.590950][ T8272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.598309][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.605463][ T8272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.615132][ T8272] bridge0: entered promiscuous mode [ 132.620644][ T8272] team0: Port device bridge0 added [ 132.642024][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.652154][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.048610][ T8286] loop4: detected capacity change from 0 to 512 [ 133.066293][ T8286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.079098][ T8286] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.103590][ T4098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.297330][ T8300] syzkaller0: entered promiscuous mode [ 133.302879][ T8300] syzkaller0: entered allmulticast mode [ 133.376804][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 133.385723][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 133.543108][ T8323] 9pnet_fd: Insufficient options for proto=fd [ 133.543127][ T8321] loop0: detected capacity change from 0 to 1024 [ 133.556399][ T8321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.566708][ T8321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.901223][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 133.910254][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 134.057785][ T8321] ================================================================== [ 134.068923][ T8321] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 134.078485][ T8321] [ 134.080807][ T8321] read-write to 0xffff888106058ac8 of 8 bytes by task 8333 on cpu 0: [ 134.088863][ T8321] __writeback_single_inode+0x201/0x870 [ 134.094417][ T8321] writeback_single_inode+0x12f/0x4a0 [ 134.099794][ T8321] sync_inode_metadata+0x5c/0x90 [ 134.104737][ T8321] generic_buffers_fsync_noflush+0xe4/0x130 [ 134.110639][ T8321] ext4_sync_file+0x20b/0x6c0 [ 134.115326][ T8321] vfs_fsync_range+0x122/0x140 [ 134.120111][ T8321] ext4_buffered_write_iter+0x338/0x380 [ 134.125670][ T8321] ext4_file_write_iter+0x29f/0xe30 [ 134.130876][ T8321] iter_file_splice_write+0x5e6/0x970 [ 134.136246][ T8321] direct_splice_actor+0x16c/0x2c0 [ 134.141363][ T8321] splice_direct_to_actor+0x305/0x670 [ 134.146736][ T8321] do_splice_direct+0xd7/0x150 [ 134.151499][ T8321] do_sendfile+0x3ab/0x950 [ 134.155918][ T8321] __x64_sys_sendfile64+0x110/0x150 [ 134.161122][ T8321] x64_sys_call+0xed5/0x2d60 [ 134.165735][ T8321] do_syscall_64+0xc9/0x1c0 [ 134.170249][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.176154][ T8321] [ 134.178473][ T8321] read to 0xffff888106058ac8 of 8 bytes by task 8321 on cpu 1: [ 134.186010][ T8321] generic_buffers_fsync_noflush+0x89/0x130 [ 134.191910][ T8321] ext4_sync_file+0x20b/0x6c0 [ 134.196606][ T8321] vfs_fsync_range+0x122/0x140 [ 134.201385][ T8321] ext4_buffered_write_iter+0x338/0x380 [ 134.206941][ T8321] ext4_file_write_iter+0x29f/0xe30 [ 134.212146][ T8321] iter_file_splice_write+0x5e6/0x970 [ 134.217529][ T8321] direct_splice_actor+0x16c/0x2c0 [ 134.222654][ T8321] splice_direct_to_actor+0x305/0x670 [ 134.228033][ T8321] do_splice_direct+0xd7/0x150 [ 134.232802][ T8321] do_sendfile+0x3ab/0x950 [ 134.237481][ T8321] __x64_sys_sendfile64+0x110/0x150 [ 134.242679][ T8321] x64_sys_call+0xed5/0x2d60 [ 134.247273][ T8321] do_syscall_64+0xc9/0x1c0 [ 134.251786][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.257690][ T8321] [ 134.260090][ T8321] value changed: 0x0000000000000084 -> 0x0000000000000000 [ 134.267191][ T8321] [ 134.269514][ T8321] Reported by Kernel Concurrency Sanitizer on: [ 134.275674][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.0.1744 Not tainted 6.11.0-rc3-syzkaller-00321-g810996a36309 #0 [ 134.286358][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.296505][ T8321] ================================================================== [ 134.433656][ T7856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.