last executing test programs: 1m19.350329001s ago: executing program 2 (id=2285): openat$tun(0xffffffffffffff9c, 0x0, 0x46000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) lseek(r0, 0x8, 0x2) 1m19.268084862s ago: executing program 2 (id=2292): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.244137832s ago: executing program 2 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.182227103s ago: executing program 2 (id=2297): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) 1m19.148727264s ago: executing program 2 (id=2301): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) 1m19.117765545s ago: executing program 2 (id=2307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) 1m17.237218713s ago: executing program 0 (id=2378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x2, 0xfffffffd, @mcast2}}}, &(0x7f0000000180)=0x84) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='F', 0x1}], 0x1}}], 0x1, 0xc841) 1m17.178152124s ago: executing program 0 (id=2380): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m16.300984047s ago: executing program 0 (id=2399): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 1m16.279712888s ago: executing program 0 (id=2401): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31005, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2205080, 0x0) 1m15.999540072s ago: executing program 0 (id=2416): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') 1m15.751079706s ago: executing program 0 (id=2414): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 1m15.688983187s ago: executing program 32 (id=2414): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 1m3.973182987s ago: executing program 33 (id=2307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) 1.149106552s ago: executing program 3 (id=6430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(r1) 1.105798183s ago: executing program 3 (id=6433): r0 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 862.982436ms ago: executing program 3 (id=6449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000002000}) 756.174568ms ago: executing program 3 (id=6452): unshare(0x2c000600) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) 712.349039ms ago: executing program 3 (id=6457): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x64842, 0x81) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 588.432461ms ago: executing program 5 (id=6466): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 587.441931ms ago: executing program 5 (id=6468): r0 = memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x17) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 548.264451ms ago: executing program 5 (id=6471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x2a3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 513.196772ms ago: executing program 3 (id=6473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 439.423813ms ago: executing program 5 (id=6476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}], 0x28}, 0xc4) 418.716153ms ago: executing program 5 (id=6481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 274.929935ms ago: executing program 5 (id=6486): listen(0xffffffffffffffff, 0x0) close(0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 274.346796ms ago: executing program 4 (id=6488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 241.157336ms ago: executing program 4 (id=6491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) memfd_secret(0x0) 210.659536ms ago: executing program 4 (id=6493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0xc010) 210.278486ms ago: executing program 6 (id=6494): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 190.436677ms ago: executing program 4 (id=6495): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 189.913867ms ago: executing program 1 (id=6496): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00b6b318cac4e8120006", 0xd, 0x44840, 0x0, 0x0) ptrace(0x10, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 166.742467ms ago: executing program 6 (id=6497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 166.184817ms ago: executing program 4 (id=6498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x1008, &(0x7f0000000540)) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 123.982638ms ago: executing program 1 (id=6499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 123.649107ms ago: executing program 6 (id=6500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") 123.302918ms ago: executing program 4 (id=6502): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) 117.790168ms ago: executing program 1 (id=6503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 59.972059ms ago: executing program 1 (id=6504): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 59.758099ms ago: executing program 6 (id=6505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 41.374619ms ago: executing program 6 (id=6506): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x90) getdents(r2, &(0x7f0000000080)=""/172, 0xac) 38.860809ms ago: executing program 1 (id=6507): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xe3, @dev={0xfe, 0x80, '\x00', 0x6}, 0x1}, 0x1c) shutdown(r1, 0x1) 25.033419ms ago: executing program 6 (id=6508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',dont_measure,defcontext=']) 0s ago: executing program 1 (id=6509): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): device loop1): ext4_search_dir:1474: inode #12: block 9: comm syz.1.2114: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 78.021482][ T8304] EXT4-fs (loop1): Remounting filesystem read-only [ 78.028271][ T3598] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 78.063403][ T3598] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1024 with error 28 [ 78.075902][ T3598] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.075902][ T3598] [ 78.085577][ T3598] EXT4-fs (loop3): Total free blocks count 0 [ 78.091577][ T3598] EXT4-fs (loop3): Free/Dirty block details [ 78.097567][ T3598] EXT4-fs (loop3): free_blocks=2415919504 [ 78.103353][ T3598] EXT4-fs (loop3): dirty_blocks=1024 [ 78.108723][ T3598] EXT4-fs (loop3): Block reservation details [ 78.114845][ T3598] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 78.141160][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.160851][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2124'. [ 78.180565][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.362130][ T8354] loop4: detected capacity change from 0 to 2048 [ 78.384742][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.424291][ T8354] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 9: comm syz.4.2136: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 78.443857][ T8354] EXT4-fs (loop4): Remounting filesystem read-only [ 78.484705][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.724469][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2161'. [ 78.878133][ T8444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2175'. [ 79.128370][ T8477] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 79.275208][ T8501] netlink: 'syz.1.2204': attribute type 3 has an invalid length. [ 79.374097][ T8513] loop3: detected capacity change from 0 to 2048 [ 79.421633][ T8513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.536344][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.603669][ T8541] loop1: detected capacity change from 0 to 1024 [ 79.617461][ T8541] EXT4-fs: Ignoring removed nobh option [ 79.623194][ T8541] EXT4-fs: Ignoring removed bh option [ 79.647739][ T8541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.691930][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.873732][ T8583] loop2: detected capacity change from 0 to 1024 [ 79.880681][ T8583] EXT4-fs: Ignoring removed nobh option [ 79.886301][ T8583] EXT4-fs: Ignoring removed bh option [ 79.899250][ T8583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.941852][ T8590] loop1: detected capacity change from 0 to 2048 [ 79.972226][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.984033][ T8590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.034418][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.034627][ T8598] loop0: detected capacity change from 0 to 2048 [ 80.068346][ T8598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.083553][ T8598] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.133436][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 80.289787][ T8652] loop1: detected capacity change from 0 to 2048 [ 80.309017][ T8652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.330153][ T8652] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.364410][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 80.443823][ T8681] __nla_validate_parse: 4 callbacks suppressed [ 80.443837][ T8681] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2280'. [ 80.486396][ T8690] @: renamed from vlan0 (while UP) [ 80.524813][ T8697] loop4: detected capacity change from 0 to 2048 [ 80.548234][ T8697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 80.586574][ T8697] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.619258][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 81.287043][ T8797] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2334'. [ 81.296260][ T8797] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2334'. [ 81.338902][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 81.338914][ T29] audit: type=1326 audit(1752715693.787:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 81.406128][ T29] audit: type=1326 audit(1752715693.787:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 81.429724][ T29] audit: type=1326 audit(1752715693.787:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 81.453200][ T29] audit: type=1326 audit(1752715693.787:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 81.496133][ T8804] geneve1: entered promiscuous mode [ 81.526728][ T29] audit: type=1400 audit(1752715693.977:2361): avc: denied { sys_module } for pid=8807 comm="syz.3.2339" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.549969][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 81.613632][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2344'. [ 81.622637][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2344'. [ 81.646143][ T29] audit: type=1326 audit(1752715694.087:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 81.656151][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2344'. [ 81.669576][ T29] audit: type=1326 audit(1752715694.087:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 81.701874][ T29] audit: type=1326 audit(1752715694.087:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 81.772215][ T8827] bond1: entered promiscuous mode [ 81.777314][ T8827] bond1: entered allmulticast mode [ 81.800203][ T8827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.820324][ T8834] loop0: detected capacity change from 0 to 512 [ 81.839247][ T8827] bond1 (unregistering): Released all slaves [ 81.864156][ T8834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.928584][ T8834] EXT4-fs (loop0): 1 truncate cleaned up [ 81.947427][ T8834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.997494][ T8844] Invalid ELF header magic: != ELF [ 82.005868][ T29] audit: type=1400 audit(1752715694.447:2365): avc: denied { module_load } for pid=8843 comm="syz.3.2354" path="/sys/kernel/notes" dev="sysfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 82.068724][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.129213][ T29] audit: type=1326 audit(1752715694.577:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f004e929 code=0x7ffc0000 [ 82.208655][ T8861] loop3: detected capacity change from 0 to 1024 [ 82.234042][ T8861] EXT4-fs: Ignoring removed orlov option [ 82.239796][ T8861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.279357][ T8861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.327148][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.502003][ T8894] geneve1: entered promiscuous mode [ 82.523699][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2377'. [ 82.532759][ T8898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2377'. [ 82.555905][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 82.837129][ T8913] loop4: detected capacity change from 0 to 512 [ 82.871098][ T8913] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 82.886471][ T8913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 82.906040][ T8913] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.2384: corrupted in-inode xattr: e_value size too large [ 82.945946][ T8913] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2384: couldn't read orphan inode 15 (err -117) [ 82.976264][ T8913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.014904][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.092950][ T8925] bond1: entered promiscuous mode [ 83.098067][ T8925] bond1: entered allmulticast mode [ 83.116534][ T8925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.137088][ T8925] bond1 (unregistering): Released all slaves [ 83.243822][ T8928] loop1: detected capacity change from 0 to 8192 [ 83.289613][ T8928] loop1: p1 p2 < > p3 p4 < p5 > [ 83.294661][ T8928] loop1: partition table partially beyond EOD, truncated [ 83.316722][ T8928] loop1: p1 size 100663296 extends beyond EOD, truncated [ 83.334316][ T8928] loop1: p2 start 591104 is beyond EOD, truncated [ 83.340777][ T8928] loop1: p3 start 33572980 is beyond EOD, truncated [ 83.370115][ T8928] loop1: p5 size 100663296 extends beyond EOD, truncated [ 83.569295][ T8953] loop0: detected capacity change from 0 to 164 [ 83.601503][ T8953] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.674506][ T8958] loop3: detected capacity change from 0 to 8192 [ 83.716257][ T8958] loop3: p1 p2 < > p3 p4 < p5 > [ 83.721233][ T8958] loop3: partition table partially beyond EOD, truncated [ 83.735814][ T8958] loop3: p1 size 100663296 extends beyond EOD, truncated [ 83.748097][ T8958] loop3: p2 start 591104 is beyond EOD, truncated [ 83.754556][ T8958] loop3: p3 start 33572980 is beyond EOD, truncated [ 83.777336][ T8958] loop3: p5 size 100663296 extends beyond EOD, truncated [ 83.893111][ T8967] can0: slcan on ttyS3. [ 83.966057][ T8967] can0 (unregistered): slcan off ttyS3. [ 83.971830][ T8967] Falling back ldisc for ttyS3. [ 84.001088][ T8975] loop3: detected capacity change from 0 to 764 [ 84.008851][ T8975] Symlink component flag not implemented [ 84.014562][ T8975] Symlink component flag not implemented [ 84.022020][ T8975] Symlink component flag not implemented (129) [ 84.028272][ T8975] Symlink component flag not implemented (6) [ 84.053754][ T8978] loop3: detected capacity change from 0 to 128 [ 84.060512][ T8978] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.081421][ T3598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.150179][ T3598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.163779][ T8985] loop3: detected capacity change from 0 to 1024 [ 84.179152][ T8985] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 84.208231][ T3598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.260119][ T3598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.346354][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 84.385581][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.392687][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.401709][ T8986] bridge_slave_0: entered allmulticast mode [ 84.408247][ T8986] bridge_slave_0: entered promiscuous mode [ 84.428556][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435644][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.468609][ T8986] bridge_slave_1: entered allmulticast mode [ 84.480053][ T8986] bridge_slave_1: entered promiscuous mode [ 84.520462][ T3598] bridge_slave_1: left allmulticast mode [ 84.526161][ T3598] bridge_slave_1: left promiscuous mode [ 84.531855][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.542134][ T3598] bridge_slave_0: left allmulticast mode [ 84.547953][ T3598] bridge_slave_0: left promiscuous mode [ 84.553702][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.769355][ T3598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.779520][ T3598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.791974][ T3598] bond0 (unregistering): Released all slaves [ 84.803551][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.849428][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.899076][ T3598] hsr_slave_0: left promiscuous mode [ 84.904875][ T3598] hsr_slave_1: left promiscuous mode [ 84.910414][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.917985][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.925480][ T3598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.932918][ T3598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.955013][ T3598] veth1_macvtap: left promiscuous mode [ 84.965385][ T3598] veth0_macvtap: left promiscuous mode [ 84.979982][ T3598] veth1_vlan: left promiscuous mode [ 84.985264][ T3598] veth0_vlan: left promiscuous mode [ 85.014451][ T9018] loop4: detected capacity change from 0 to 1024 [ 85.076319][ T9018] EXT4-fs: Ignoring removed orlov option [ 85.082031][ T9018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.121017][ T9018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.133652][ T3598] team0 (unregistering): Port device team_slave_1 removed [ 85.151775][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.166128][ T3598] team0 (unregistering): Port device team_slave_0 removed [ 85.221215][ T9025] bond1: entered promiscuous mode [ 85.226375][ T9025] bond1: entered allmulticast mode [ 85.232251][ T9025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.250666][ T9025] bond1 (unregistering): Released all slaves [ 85.264130][ T8986] team0: Port device team_slave_0 added [ 85.273556][ T8986] team0: Port device team_slave_1 added [ 85.291490][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.298501][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.324620][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.358159][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.365107][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.391187][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.430617][ T8986] hsr_slave_0: entered promiscuous mode [ 85.438042][ T8986] hsr_slave_1: entered promiscuous mode [ 85.443854][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.451487][ T8986] Cannot create hsr debugfs directory [ 85.528594][ T8986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.537855][ T8986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.546363][ T8986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.554808][ T8986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.603646][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.616071][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.625023][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.632084][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.651689][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.658826][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.717427][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.819386][ T8986] veth0_vlan: entered promiscuous mode [ 85.827199][ T8986] veth1_vlan: entered promiscuous mode [ 85.841754][ T8986] veth0_macvtap: entered promiscuous mode [ 85.849171][ T8986] veth1_macvtap: entered promiscuous mode [ 85.860165][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.869969][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.880744][ T8986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.889468][ T8986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898193][ T8986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.907063][ T8986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.920499][ T9109] loop4: detected capacity change from 0 to 128 [ 86.942772][ T9109] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.958786][ T9109] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.982144][ T3598] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.007076][ T9112] loop3: detected capacity change from 0 to 2048 [ 87.035916][ T9112] loop3: p1 < > p4 [ 87.040117][ T9112] loop3: p4 size 8388608 extends beyond EOD, truncated [ 87.050654][ T9117] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 87.058544][ T9117] __nla_validate_parse: 3 callbacks suppressed [ 87.058555][ T9117] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2454'. [ 95.888531][ T9128] loop8: detected capacity change from 0 to 5 [ 96.064405][ T9163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9163 comm=syz.5.2472 [ 96.102858][ T3597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.138351][ T9171] loop5: detected capacity change from 0 to 1024 [ 96.145804][ T9171] EXT4-fs: Ignoring removed nobh option [ 96.151381][ T9171] EXT4-fs: inline encryption not supported [ 96.171541][ T3597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.184262][ T9171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.227348][ T9171] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2477: Allocating blocks 385-513 which overlap fs metadata [ 96.244487][ T9185] IPVS: stopping master sync thread 9186 ... [ 96.246516][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 96.255066][ T9186] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 96.269541][ T9171] EXT4-fs (loop5): pa ffff888106987690: logic 16, phys. 129, len 24 [ 96.277562][ T9171] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 96.292531][ T3597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.309802][ T9171] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 96.322067][ T9171] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.322067][ T9171] [ 96.331735][ T9171] EXT4-fs (loop5): Total free blocks count 0 [ 96.337752][ T9171] EXT4-fs (loop5): Free/Dirty block details [ 96.343645][ T9171] EXT4-fs (loop5): free_blocks=128 [ 96.348805][ T9171] EXT4-fs (loop5): dirty_blocks=0 [ 96.353829][ T9171] EXT4-fs (loop5): Block reservation details [ 96.359946][ T9171] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 96.386530][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 96.386544][ T29] audit: type=1326 audit(1752715708.838:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 96.416125][ T29] audit: type=1326 audit(1752715708.838:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 96.439583][ T29] audit: type=1326 audit(1752715708.838:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 96.480033][ T29] audit: type=1326 audit(1752715708.838:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 96.503538][ T29] audit: type=1326 audit(1752715708.868:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9196 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 96.531860][ T3597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.534714][ T9204] hub 9-0:1.0: USB hub found [ 96.547078][ T9204] hub 9-0:1.0: 8 ports detected [ 96.605872][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.613012][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.648088][ T9219] loop5: detected capacity change from 0 to 1024 [ 96.654574][ T9133] bridge_slave_0: entered allmulticast mode [ 96.664522][ T9133] bridge_slave_0: entered promiscuous mode [ 96.681442][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.688709][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.696016][ T9133] bridge_slave_1: entered allmulticast mode [ 96.702465][ T9133] bridge_slave_1: entered promiscuous mode [ 96.719533][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.789434][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.803527][ T3597] bridge_slave_1: left allmulticast mode [ 96.809232][ T3597] bridge_slave_1: left promiscuous mode [ 96.814862][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.840341][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 96.862695][ T3597] bridge_slave_0: left allmulticast mode [ 96.868499][ T3597] bridge_slave_0: left promiscuous mode [ 96.874117][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.987246][ T29] audit: type=1400 audit(1752715709.428:2429): avc: denied { name_bind } for pid=9238 comm="syz.4.2502" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.088045][ T3597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.100010][ T3597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.123130][ T3597] bond0 (unregistering): Released all slaves [ 97.133610][ T29] audit: type=1326 audit(1752715709.578:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.1.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 97.157212][ T29] audit: type=1326 audit(1752715709.578:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.1.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 97.180704][ T29] audit: type=1326 audit(1752715709.578:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.1.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 97.204098][ T29] audit: type=1326 audit(1752715709.578:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.1.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 97.229255][ T9133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.268436][ T9267] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2517'. [ 97.299402][ T9133] team0: Port device team_slave_0 added [ 97.309142][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2519'. [ 97.309194][ T3597] hsr_slave_0: left promiscuous mode [ 97.324136][ T3597] hsr_slave_1: left promiscuous mode [ 97.330226][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.337994][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.346326][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.353803][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.363937][ T3597] veth1_macvtap: left promiscuous mode [ 97.369555][ T3597] veth0_macvtap: left promiscuous mode [ 97.375301][ T3597] veth1_vlan: left promiscuous mode [ 97.380508][ T3597] veth0_vlan: left promiscuous mode [ 97.451478][ T3597] team0 (unregistering): Port device team_slave_1 removed [ 97.461172][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 97.470085][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 97.482855][ T3597] team0 (unregistering): Port device team_slave_0 removed [ 97.526248][ T9133] team0: Port device team_slave_1 added [ 97.534249][ T9273] netlink: 'syz.5.2519': attribute type 1 has an invalid length. [ 97.542291][ T9273] netlink: 'syz.5.2519': attribute type 2 has an invalid length. [ 97.573995][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.581069][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.607338][ T9133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.665103][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.672071][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.698090][ T9133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.750443][ T9133] hsr_slave_0: entered promiscuous mode [ 97.772597][ T9133] hsr_slave_1: entered promiscuous mode [ 97.782687][ T9133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.800530][ T9133] Cannot create hsr debugfs directory [ 97.882693][ T9133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.891336][ T9133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.894702][ T9315] loop3: detected capacity change from 0 to 8192 [ 97.909788][ T9133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.921356][ T9133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.038105][ T9338] loop4: detected capacity change from 0 to 512 [ 98.057693][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.065126][ T9338] ext4: Bad value for 'journal_ioprio' [ 98.083140][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.096750][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.103841][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.114096][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.121295][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.140674][ T9344] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.145709][ T9133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.155006][ T9344] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 98.158435][ T9133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.228776][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.254177][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 98.263184][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 98.379110][ T9133] veth0_vlan: entered promiscuous mode [ 98.397534][ T9133] veth1_vlan: entered promiscuous mode [ 98.410949][ T9377] loop4: detected capacity change from 0 to 1024 [ 98.428091][ T9133] veth0_macvtap: entered promiscuous mode [ 98.435872][ T9133] veth1_macvtap: entered promiscuous mode [ 98.446424][ T9377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.467526][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.488157][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.522624][ T9133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.531422][ T9133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540244][ T9133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549020][ T9133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.616145][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.850635][ T9432] gretap0: entered promiscuous mode [ 99.011335][ T9450] netlink: 'syz.6.2587': attribute type 2 has an invalid length. [ 99.019112][ T9450] netlink: 'syz.6.2587': attribute type 1 has an invalid length. [ 99.026939][ T9450] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.2587'. [ 99.202212][ T9468] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 99.204410][ T9466] loop6: detected capacity change from 0 to 2048 [ 99.209999][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2595'. [ 99.280753][ T9466] EXT4-fs (loop6): failed to initialize system zone (-117) [ 99.293448][ T9466] EXT4-fs (loop6): mount failed [ 99.469591][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 99.503542][ T9510] loop5: detected capacity change from 0 to 256 [ 99.576759][ T9520] loop4: detected capacity change from 0 to 512 [ 99.720217][ T9539] loop4: detected capacity change from 0 to 256 [ 99.864455][ T9553] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(0x0000000000000003 [ 101.048337][ T9659] team0 (unregistering): Port device team_slave_0 removed [ 101.066547][ T9659] team0 (unregistering): Port device team_slave_1 removed [ 101.431004][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 101.431032][ T29] audit: type=1400 audit(1752715713.878:2722): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.465402][ T29] audit: type=1400 audit(1752715713.918:2723): avc: denied { prog_load } for pid=9712 comm="syz.3.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.485528][ T29] audit: type=1400 audit(1752715713.928:2724): avc: denied { read write } for pid=9712 comm="syz.3.2711" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 101.509213][ T29] audit: type=1400 audit(1752715713.928:2725): avc: denied { read write } for pid=9712 comm="syz.3.2711" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 101.548555][ T29] audit: type=1400 audit(1752715713.998:2726): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.573560][ T29] audit: type=1400 audit(1752715714.008:2727): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.597801][ T29] audit: type=1326 audit(1752715714.018:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 101.621189][ T29] audit: type=1326 audit(1752715714.018:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 101.664189][ T29] audit: type=1326 audit(1752715714.018:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9714 comm="syz.4.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 101.687807][ T29] audit: type=1400 audit(1752715714.018:2731): avc: denied { map_create } for pid=9714 comm="syz.4.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.776393][ T9733] syz_tun: entered promiscuous mode [ 101.790473][ T9733] batadv_slave_0: entered promiscuous mode [ 101.798315][ T9733] hsr1: entered allmulticast mode [ 101.803353][ T9733] syz_tun: entered allmulticast mode [ 101.808683][ T9733] batadv_slave_0: entered allmulticast mode [ 101.911137][ T9746] netlink: '+}[@': attribute type 13 has an invalid length. [ 101.961326][ T9746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.246258][ T9784] netlink: 'syz.1.2745': attribute type 10 has an invalid length. [ 102.266646][ T9784] team0: Device hsr_slave_0 failed to register rx_handler [ 102.419550][ T9824] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2765'. [ 102.432437][ T9824] batadv1: entered promiscuous mode [ 102.437723][ T9824] batadv1: entered allmulticast mode [ 102.991735][ T3371] IPVS: starting estimator thread 0... [ 103.084677][ T9887] IPVS: using max 2640 ests per chain, 132000 per kthread [ 103.426539][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 103.435706][ T9945] netlink: 'syz.5.2821': attribute type 30 has an invalid length. [ 103.445945][ T9945] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.454737][ T9945] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.463463][ T9945] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.472224][ T9945] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.486348][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 103.495294][ T9945] netlink: 'syz.5.2821': attribute type 30 has an invalid length. [ 103.622875][ T9972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9972 comm=syz.4.2843 [ 103.916540][T10038] netlink: 'syz.1.2865': attribute type 21 has an invalid length. [ 103.930620][T10038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2865'. [ 103.983287][T10046] netlink: 'syz.3.2869': attribute type 21 has an invalid length. [ 103.991298][T10039] netlink: 'syz.5.2863': attribute type 12 has an invalid length. [ 104.236143][T10096] netlink: 'syz.4.2893': attribute type 3 has an invalid length. [ 104.255487][T10096] netlink: 'syz.4.2893': attribute type 3 has an invalid length. [ 105.235335][T10301] xt_hashlimit: max too large, truncated to 1048576 [ 105.575901][T10361] dummy0: entered promiscuous mode [ 105.581940][T10361] macsec1: entered promiscuous mode [ 105.592716][T10361] macsec1: entered allmulticast mode [ 105.598152][T10361] dummy0: entered allmulticast mode [ 105.615870][T10361] dummy0: left allmulticast mode [ 105.621494][T10361] dummy0: left promiscuous mode [ 105.847758][T10413] can0: slcan on ttyS3. [ 105.892711][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3049'. [ 105.902170][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3049'. [ 105.919328][T10413] can0 (unregistered): slcan off ttyS3. [ 105.925099][T10413] Falling back ldisc for ttyS3. [ 105.996506][T10427] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 106.121891][T10456] syz_tun: entered promiscuous mode [ 106.128726][T10456] batadv_slave_0: entered promiscuous mode [ 106.145484][T10456] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 106.157922][T10456] Cannot create hsr debugfs directory [ 106.172853][T10456] hsr1: entered allmulticast mode [ 106.177960][T10456] syz_tun: entered allmulticast mode [ 106.183260][T10456] batadv_slave_0: entered allmulticast mode [ 106.558287][ T29] kauditd_printk_skb: 1220 callbacks suppressed [ 106.558302][ T29] audit: type=1400 audit(1752715718.965:3952): avc: denied { map_create } for pid=10498 comm="syz.5.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.583864][ T29] audit: type=1400 audit(1752715718.984:3953): avc: denied { prog_load } for pid=10498 comm="syz.5.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.603030][ T29] audit: type=1326 audit(1752715718.984:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 106.626633][ T29] audit: type=1326 audit(1752715718.984:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 106.650230][ T29] audit: type=1326 audit(1752715718.984:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 106.673728][ T29] audit: type=1326 audit(1752715718.984:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 106.697201][ T29] audit: type=1326 audit(1752715718.984:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.5.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 106.723312][ T29] audit: type=1400 audit(1752715719.133:3959): avc: denied { read write } for pid=8986 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.807084][ T29] audit: type=1400 audit(1752715719.208:3960): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.844010][ T29] audit: type=1400 audit(1752715719.236:3961): avc: denied { allowed } for pid=10504 comm="syz.5.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 107.491377][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3117'. [ 107.491405][T10564] netlink: 'syz.6.3117': attribute type 7 has an invalid length. [ 107.491419][T10564] netlink: 'syz.6.3117': attribute type 8 has an invalid length. [ 107.491430][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3117'. [ 107.493911][T10564] gretap0: entered promiscuous mode [ 107.531756][T10564] batadv_slave_1: entered promiscuous mode [ 107.532108][T10564] erspan0: entered promiscuous mode [ 107.533274][T10564] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 107.565024][T10564] Cannot create hsr debugfs directory [ 108.140731][T10636] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.664472][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3207'. [ 108.962940][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'. [ 109.880605][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 109.889688][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 110.279097][T11053] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 110.670638][T11117] ipvlan2: entered promiscuous mode [ 110.697109][T11117] bridge0: port 3(ipvlan2) entered blocking state [ 110.703635][T11117] bridge0: port 3(ipvlan2) entered disabled state [ 110.723448][T11117] ipvlan2: entered allmulticast mode [ 110.728817][T11117] bridge0: entered allmulticast mode [ 110.742135][T11117] ipvlan2: left allmulticast mode [ 110.747250][T11117] bridge0: left allmulticast mode [ 110.755080][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3390'. [ 110.958845][T11170] wireguard0: entered promiscuous mode [ 110.964340][T11170] wireguard0: entered allmulticast mode [ 111.169895][T11227] wireguard0: entered promiscuous mode [ 111.175448][T11227] wireguard0: entered allmulticast mode [ 111.292791][T11257] macvtap0: entered promiscuous mode [ 111.298543][T11257] macvtap0: left promiscuous mode [ 111.605413][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 111.906765][ T29] kauditd_printk_skb: 1413 callbacks suppressed [ 111.906781][ T29] audit: type=1326 audit(1752715723.988:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 111.949156][ T29] audit: type=1326 audit(1752715723.988:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 111.973389][ T29] audit: type=1400 audit(1752715723.988:5377): avc: denied { map_create } for pid=11359 comm="syz.4.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.992697][ T29] audit: type=1326 audit(1752715723.988:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.016871][ T29] audit: type=1326 audit(1752715723.988:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.040384][ T29] audit: type=1326 audit(1752715723.988:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.064947][ T29] audit: type=1400 audit(1752715723.988:5381): avc: denied { prog_load } for pid=11359 comm="syz.4.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.084313][ T29] audit: type=1326 audit(1752715723.988:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.107893][ T29] audit: type=1326 audit(1752715723.988:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.132145][ T29] audit: type=1326 audit(1752715723.988:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84938be929 code=0x7ffc0000 [ 112.180206][T11395] netlink: 'syz.4.3517': attribute type 29 has an invalid length. [ 112.189044][T11395] netlink: 'syz.4.3517': attribute type 29 has an invalid length. [ 112.321037][T11419] netem: change failed [ 113.832616][T11599] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.240200][T11672] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 115.135693][T11768] SELinux: syz.5.3691 (11768) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 115.205976][T11777] netlink: 'syz.5.3694': attribute type 9 has an invalid length. [ 115.214354][T11777] netlink: 'syz.5.3694': attribute type 6 has an invalid length. [ 115.222092][T11777] netlink: 'syz.5.3694': attribute type 7 has an invalid length. [ 115.222926][T11780] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 115.229872][T11777] netlink: 'syz.5.3694': attribute type 8 has an invalid length. [ 116.295637][T11896] dummy0: entered promiscuous mode [ 116.310267][T11896] dummy0: left promiscuous mode [ 116.524352][T11938] binfmt_misc: register: failed to install interpreter file ./file0 [ 116.616895][T11962] SELinux: syz.6.3785 (11962) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.263215][ T29] kauditd_printk_skb: 1168 callbacks suppressed [ 117.263228][ T29] audit: type=1400 audit(1752715729.002:6553): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.307754][ T29] audit: type=1326 audit(1752715729.002:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.331857][ T29] audit: type=1326 audit(1752715729.002:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.355388][ T29] audit: type=1326 audit(1752715729.002:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.379531][ T29] audit: type=1400 audit(1752715729.002:6557): avc: denied { prog_load } for pid=12081 comm="syz.5.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.398726][ T29] audit: type=1326 audit(1752715729.002:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.422897][ T29] audit: type=1326 audit(1752715729.002:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.446592][ T29] audit: type=1326 audit(1752715729.002:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.471058][ T29] audit: type=1326 audit(1752715729.002:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 117.494625][ T29] audit: type=1326 audit(1752715729.002:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.5.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60227ce929 code=0x7ffc0000 [ 118.295991][T12232] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 118.295991][T12232] The task syz.4.3904 (12232) triggered the difference, watch for misbehavior. [ 118.338672][T12236] xt_hashlimit: max too large, truncated to 1048576 [ 119.504591][T12354] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 119.765822][T12388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12388 comm=syz.5.3990 [ 120.658559][T12497] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4038'. [ 120.671330][T12486] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4038'. [ 120.720414][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4046'. [ 121.104532][T12560] sch_fq: defrate 4294967295 ignored. [ 121.116666][T12566] ip6tnl1: entered promiscuous mode [ 121.122104][T12566] ip6tnl1: entered allmulticast mode [ 121.649988][T12643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.740123][T12655] ip6tnl1: entered promiscuous mode [ 121.745464][T12655] ip6tnl1: entered allmulticast mode [ 121.795451][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4128'. [ 121.804565][T12670] netlink: 'syz.1.4128': attribute type 7 has an invalid length. [ 121.812274][T12670] netlink: 'syz.1.4128': attribute type 8 has an invalid length. [ 121.820657][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 122.130500][T12718] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4147'. [ 122.146992][T12711] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4147'. [ 122.612539][T12796] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4187'. [ 122.622573][ T29] kauditd_printk_skb: 1093 callbacks suppressed [ 122.622587][ T29] audit: type=1400 audit(1752715734.016:7656): avc: denied { create } for pid=12797 comm="syz.1.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 122.658891][ T29] audit: type=1400 audit(1752715734.044:7657): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.683108][ T29] audit: type=1400 audit(1752715734.044:7658): avc: denied { read write } for pid=12797 comm="syz.1.4188" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.711833][ T29] audit: type=1400 audit(1752715734.053:7659): avc: denied { map_create } for pid=12803 comm="syz.6.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.731207][ T29] audit: type=1400 audit(1752715734.053:7660): avc: denied { prog_load } for pid=12803 comm="syz.6.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.750419][ T29] audit: type=1400 audit(1752715734.053:7661): avc: denied { prog_load } for pid=12803 comm="syz.6.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.769731][ T29] audit: type=1400 audit(1752715734.053:7662): avc: denied { create } for pid=12803 comm="syz.6.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 122.790359][ T29] audit: type=1400 audit(1752715734.072:7663): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.814551][ T29] audit: type=1400 audit(1752715734.081:7664): avc: denied { read write } for pid=8986 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.839027][ T29] audit: type=1400 audit(1752715734.081:7665): avc: denied { prog_load } for pid=12797 comm="syz.1.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.888907][T12823] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 123.034396][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4218'. [ 123.043292][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4218'. [ 123.052445][T12860] netlink: 'syz.4.4218': attribute type 5 has an invalid length. [ 123.066018][T12860] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.074744][T12860] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.083665][T12860] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.092456][T12860] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.143188][T12874] IPv6: Can't replace route, no match found [ 123.236752][T12888] IPv6: Can't replace route, no match found [ 123.377338][T12912] netlink: 'syz.5.4244': attribute type 13 has an invalid length. [ 123.420206][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.427432][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.469500][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.480544][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.511524][T12912] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.520502][T12912] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.529655][T12912] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.538679][T12912] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.553224][T12912] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.562381][T12912] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.571456][T12912] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.580543][T12912] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.704438][T12948] vlan2: entered promiscuous mode [ 123.709654][T12948] team0: entered promiscuous mode [ 123.714965][T12948] team_slave_0: entered promiscuous mode [ 123.720807][T12948] team_slave_1: entered promiscuous mode [ 123.726938][T12948] vlan2: entered allmulticast mode [ 123.732092][T12948] team0: entered allmulticast mode [ 123.737301][T12954] netlink: 'syz.4.4263': attribute type 13 has an invalid length. [ 123.737580][T12948] team_slave_0: entered allmulticast mode [ 123.751200][T12948] team_slave_1: entered allmulticast mode [ 123.812051][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.819343][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.866734][T12954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.876630][T12954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.903889][T12954] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.912817][T12954] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.922220][T12954] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.931311][T12954] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.950464][T12954] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.959515][T12954] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.968509][T12954] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.977394][T12954] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.352110][T13063] netlink: 'syz.6.4312': attribute type 6 has an invalid length. [ 124.556056][T13090] PID 13090 killed due to inadequate hugepage pool [ 124.590460][T13106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=13106 comm=syz.1.4332 [ 124.651540][T13117] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.665311][T13121] futex_wake_op: syz.1.4340 tries to shift op by -1; fix this program [ 124.693641][T13126] xt_hashlimit: max too large, truncated to 1048576 [ 124.695430][T13127] 0ªX¹¦D: renamed from gretap0 [ 124.718949][T13127] 0ªX¹¦D: entered allmulticast mode [ 124.727117][T13127] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 124.799802][T13141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 124.806395][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.814089][T13141] vhci_hcd vhci_hcd.0: Device attached [ 124.823086][T13141] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 124.829671][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.837273][T13141] vhci_hcd vhci_hcd.0: Device attached [ 124.853188][T13141] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 124.859708][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.867404][T13141] vhci_hcd vhci_hcd.0: Device attached [ 124.882681][T13141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.891558][T13141] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 124.898280][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.905907][T13141] vhci_hcd vhci_hcd.0: Device attached [ 124.914696][T13159] vhci_hcd: connection closed [ 124.914875][T13152] vhci_hcd: connection closed [ 124.914985][T13142] vhci_hcd: connection closed [ 124.919961][T13146] vhci_hcd: connection closed [ 124.939178][ T3597] vhci_hcd: stop threads [ 124.948177][ T3597] vhci_hcd: release socket [ 124.949281][T13168] bridge0: entered promiscuous mode [ 124.952616][ T3597] vhci_hcd: disconnect device [ 124.959943][T13168] bond0: entered promiscuous mode [ 124.967622][T13168] bond_slave_0: entered promiscuous mode [ 124.973458][T13168] bond_slave_1: entered promiscuous mode [ 124.979307][ T3597] vhci_hcd: stop threads [ 124.983594][ T3597] vhci_hcd: release socket [ 124.988036][ T3597] vhci_hcd: disconnect device [ 124.997352][ T3597] vhci_hcd: stop threads [ 124.997614][T13168] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 125.001642][ T3597] vhci_hcd: release socket [ 125.009278][T13168] Cannot create hsr debugfs directory [ 125.013632][ T3597] vhci_hcd: disconnect device [ 125.013707][ T23] vhci_hcd: vhci_device speed not set [ 125.019393][T13168] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 125.039175][T13168] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 125.050339][ T3597] vhci_hcd: stop threads [ 125.055383][ T3597] vhci_hcd: release socket [ 125.059831][ T3597] vhci_hcd: disconnect device [ 125.060126][T13168] hsr1: entered allmulticast mode [ 125.069651][T13168] bridge0: entered allmulticast mode [ 125.074939][T13168] bond0: entered allmulticast mode [ 125.080079][T13168] bond_slave_0: entered allmulticast mode [ 125.085808][T13168] bond_slave_1: entered allmulticast mode [ 126.159473][T13371] netlink: 'syz.4.4458': attribute type 13 has an invalid length. [ 126.170705][T13371] 0ªX¹¦D: left allmulticast mode [ 126.176382][T13371] 0ªX¹¦D: refused to change device tx_queue_len [ 126.183868][T13371] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 126.201458][T13377] netlink: 'syz.1.4461': attribute type 13 has an invalid length. [ 126.322719][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.329908][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.503186][T13377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.513491][T13377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.573350][T13377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.582240][T13377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.591201][T13377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.600158][T13377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.787724][T13431] __nla_validate_parse: 2 callbacks suppressed [ 126.787741][T13431] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4481'. [ 127.205530][T13490] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4509'. [ 127.889864][T13540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4533'. [ 127.950801][T13550] No such timeout policy "syz1" [ 127.977405][ T29] kauditd_printk_skb: 1025 callbacks suppressed [ 127.977419][ T29] audit: type=1400 audit(1752715740.016:8691): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.008364][ T29] audit: type=1400 audit(1752715740.053:8692): avc: denied { create } for pid=13552 comm="syz.1.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 128.028231][ T29] audit: type=1400 audit(1752715740.072:8693): avc: denied { prog_load } for pid=13552 comm="syz.1.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.049534][ T29] audit: type=1400 audit(1752715740.091:8694): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.093477][ T29] audit: type=1400 audit(1752715740.109:8695): avc: denied { prog_load } for pid=13554 comm="syz.1.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.112615][ T29] audit: type=1400 audit(1752715740.109:8696): avc: denied { prog_load } for pid=13554 comm="syz.1.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.131778][ T29] audit: type=1400 audit(1752715740.109:8697): avc: denied { create } for pid=13554 comm="syz.1.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 128.152643][ T29] audit: type=1400 audit(1752715740.119:8698): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.166430][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 128.176863][ T29] audit: type=1400 audit(1752715740.119:8699): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.224582][ T29] audit: type=1400 audit(1752715740.147:8700): avc: denied { map_create } for pid=13558 comm="syz.4.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.558567][T13617] netlink: 'syz.4.4568': attribute type 2 has an invalid length. [ 128.846553][T13674] netlink: 'syz.1.4596': attribute type 21 has an invalid length. [ 129.379827][T13774] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.539835][T13803] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.540089][T13804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.717662][T13825] xt_hashlimit: max too large, truncated to 1048576 [ 129.769961][T13834] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.222564][T13920] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 130.306004][T13934] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.406688][T13957] team0: Device gre1 is of different type [ 130.546063][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 130.555369][T13986] chnl_net:caif_netlink_parms(): no params data found [ 130.733315][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 130.764417][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 130.773642][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 130.795412][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 130.977176][T14012] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 130.983781][T14012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.991949][T14012] vhci_hcd vhci_hcd.0: Device attached [ 131.020276][T14012] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 131.026794][T14012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.034315][T14012] vhci_hcd vhci_hcd.0: Device attached [ 131.053531][T14012] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 131.060122][T14012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.067742][T14012] vhci_hcd vhci_hcd.0: Device attached [ 131.098019][T14012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.113366][T14012] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 131.119962][T14012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.128235][T14012] vhci_hcd vhci_hcd.0: Device attached [ 131.140321][T14023] vhci_hcd: connection closed [ 131.140594][T14013] vhci_hcd: connection closed [ 131.145246][T14015] vhci_hcd: connection closed [ 131.150141][T14017] vhci_hcd: connection closed [ 131.159385][ T3614] vhci_hcd: stop threads [ 131.168320][ T3614] vhci_hcd: release socket [ 131.172805][ T3614] vhci_hcd: disconnect device [ 131.185117][ T3614] vhci_hcd: stop threads [ 131.189385][ T3614] vhci_hcd: release socket [ 131.194500][ T3614] vhci_hcd: disconnect device [ 131.201499][T13392] vhci_hcd: vhci_device speed not set [ 131.210031][ T3614] vhci_hcd: stop threads [ 131.213788][T14034] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 131.214380][ T3614] vhci_hcd: release socket [ 131.226559][ T3614] vhci_hcd: disconnect device [ 131.236866][T14033] bridge0: entered promiscuous mode [ 131.243021][T14033] bond0: entered promiscuous mode [ 131.248160][T14033] bond_slave_0: entered promiscuous mode [ 131.254018][T14033] bond_slave_1: entered promiscuous mode [ 131.261035][ T3614] vhci_hcd: stop threads [ 131.265300][ T3614] vhci_hcd: release socket [ 131.266002][T14033] hsr2: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 131.269721][ T3614] vhci_hcd: disconnect device [ 131.279708][T14033] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 131.325611][T14033] hsr2: entered allmulticast mode [ 131.330688][T14033] bridge0: entered allmulticast mode [ 131.335984][T14033] bond0: entered allmulticast mode [ 131.341186][T14033] bond_slave_0: entered allmulticast mode [ 131.347038][T14033] bond_slave_1: entered allmulticast mode [ 131.474608][T14062] binfmt_misc: register: failed to install interpreter file ./file0 [ 131.555704][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4786'. [ 131.564805][T14078] 8021q: VLANs not supported on lo [ 131.854116][T14125] bridge0: port 1(bridge_slave_0) entered listening state [ 131.880036][T14125] xt_TCPMSS: Only works on TCP SYN packets [ 132.005614][T14154] binfmt_misc: register: failed to install interpreter file ./file0 [ 132.133989][T14181] netlink: 'syz.4.4834': attribute type 6 has an invalid length. [ 132.193366][T14198] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 132.201594][T14198] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 132.212103][T14202] __nla_validate_parse: 5 callbacks suppressed [ 132.212169][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4844'. [ 132.227554][T14202] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4844'. [ 132.239486][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4844'. [ 132.248607][T14202] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4844'. [ 132.251574][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4847'. [ 132.257704][T14202] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4844'. [ 132.400580][T14222] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.504497][T14252] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.4867'. [ 132.621245][T14279] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4881'. [ 132.759509][T14303] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4892'. [ 132.845678][T14316] ALSA: seq fatal error: cannot create timer (-19) [ 133.128542][T14336] netlink: 'syz.6.4908': attribute type 21 has an invalid length. [ 133.136525][T14336] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4908'. [ 133.145558][T14336] netlink: 'syz.6.4908': attribute type 1 has an invalid length. [ 133.331323][ T29] kauditd_printk_skb: 1266 callbacks suppressed [ 133.331339][ T29] audit: type=1400 audit(1752715745.029:9967): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.362419][ T29] audit: type=1400 audit(1752715745.029:9968): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.405118][ T29] audit: type=1400 audit(1752715745.086:9969): avc: denied { create } for pid=14350 comm="syz.6.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 133.426553][ T29] audit: type=1400 audit(1752715745.086:9970): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.450740][ T29] audit: type=1400 audit(1752715745.086:9971): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.450842][ T29] audit: type=1400 audit(1752715745.095:9972): avc: denied { open } for pid=14355 comm="syz.6.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 133.450941][ T29] audit: type=1400 audit(1752715745.095:9973): avc: denied { map_create } for pid=14355 comm="syz.6.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.451013][ T29] audit: type=1400 audit(1752715745.095:9974): avc: denied { prog_load } for pid=14355 comm="syz.6.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.454705][ T29] audit: type=1400 audit(1752715745.095:9975): avc: denied { read write } for pid=9133 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.454756][ T29] audit: type=1400 audit(1752715745.123:9976): avc: denied { map_create } for pid=14359 comm="syz.6.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.795973][T14421] vlan2: entered allmulticast mode [ 133.801182][T14421] bond0: entered allmulticast mode [ 133.806319][T14421] bond_slave_0: entered allmulticast mode [ 133.812726][T14421] bond_slave_1: entered allmulticast mode [ 134.311420][T14513] vlan2: entered allmulticast mode [ 134.316623][T14513] erspan0: entered allmulticast mode [ 134.339239][T14517] SELinux: syz.5.4995 (14517) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.738694][T14566] gtp0: entered promiscuous mode [ 134.744412][T14566] gtp0: entered allmulticast mode [ 135.136122][T14619] gre0: Master is either lo or non-ether device [ 136.406120][T14880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 136.412655][T14880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.420806][T14880] vhci_hcd vhci_hcd.0: Device attached [ 136.440446][T14882] vhci_hcd: cannot find the pending unlink 6 [ 136.448769][T14882] vhci_hcd: connection closed [ 136.448879][ T3597] vhci_hcd: stop threads [ 136.458442][ T3597] vhci_hcd: release socket [ 136.462963][ T3597] vhci_hcd: disconnect device [ 136.598352][T14898] netlink: 'syz.6.5176': attribute type 1 has an invalid length. [ 136.652032][T14898] bond1: entered promiscuous mode [ 136.684822][T14898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.735980][T14901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.766418][T14901] bond1: (slave bond2): making interface the new active one [ 136.774404][T14901] bond2: entered promiscuous mode [ 136.801069][T14901] bond1: (slave bond2): Enslaving as an active interface with an up link [ 136.870072][T14935] binfmt_misc: register: failed to install interpreter file ./file0 [ 137.098288][T14971] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 137.585688][T15059] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15059 comm=syz.1.5253 [ 137.731002][T15086] netlink: 'syz.3.5263': attribute type 4 has an invalid length. [ 137.739371][T15086] __nla_validate_parse: 12 callbacks suppressed [ 137.739384][T15086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5263'. [ 137.943129][T15115] loop5: detected capacity change from 0 to 1024 [ 137.953244][T15115] EXT4-fs: Ignoring removed oldalloc option [ 137.959939][T15115] EXT4-fs: Ignoring removed orlov option [ 137.969493][T15115] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 138.008306][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.021055][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.047815][T15115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.063446][T15115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.090072][T15143] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5288'. [ 138.125368][T15150] loop3: detected capacity change from 0 to 512 [ 138.154631][T15150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.167634][T15150] ext4 filesystem being mounted at /1066/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.197509][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.227379][T15169] program syz.3.5297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.299347][T15179] loop5: detected capacity change from 0 to 256 [ 138.306117][T15179] FAT-fs (loop5): bogus sectors per cluster 30 [ 138.312877][T15179] FAT-fs (loop5): Can't find a valid FAT filesystem [ 138.459630][T15195] loop6: detected capacity change from 0 to 512 [ 138.472163][T15195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.485210][T15195] ext4 filesystem being mounted at /611/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.514901][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.557788][T15208] netlink: 'syz.6.5316': attribute type 4 has an invalid length. [ 138.611184][T15218] hub 9-0:1.0: USB hub found [ 138.619610][T15218] hub 9-0:1.0: 8 ports detected [ 138.677642][T13392] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 138.691910][T13392] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.743137][ T29] kauditd_printk_skb: 1229 callbacks suppressed [ 138.743150][ T29] audit: type=1400 audit(1752716006.087:11206): avc: denied { mounton } for pid=15232 comm="syz.4.5327" path="/syzcgroup/unified/syz4/cgroup.procs" dev="cgroup2" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 138.744066][T13392] kernel write not supported for file /2216/oom_adj (pid: 13392 comm: kworker/1:6) [ 138.774835][T15213] loop6: detected capacity change from 0 to 32768 [ 138.797425][ T29] audit: type=1400 audit(1752716006.143:11207): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.819224][ T29] audit: type=1400 audit(1752716006.162:11208): avc: denied { read } for pid=15234 comm="syz.4.5328" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.842606][ T29] audit: type=1400 audit(1752716006.162:11209): avc: denied { open } for pid=15234 comm="syz.4.5328" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.871897][ T29] audit: type=1400 audit(1752716006.209:11210): avc: denied { ioctl } for pid=15234 comm="syz.4.5328" path="/newroot/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.913882][T15238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15238 comm=syz.4.5329 [ 138.963787][T15242] netlink: 'syz.6.5330': attribute type 4 has an invalid length. [ 138.971598][T15242] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5330'. [ 139.017008][T15250] Invalid ELF header magic: != ELF [ 139.022261][ T29] audit: type=1400 audit(1752716006.349:11211): avc: denied { sys_module } for pid=15249 comm="syz.6.5336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.043501][ T29] audit: type=1400 audit(1752716006.349:11212): avc: denied { module_load } for pid=15249 comm="syz.6.5336" path="/sys/kernel/notes" dev="sysfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 139.170390][ T29] audit: type=1326 audit(1752716006.490:11213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.6.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03206e929 code=0x7ffc0000 [ 139.197231][ T29] audit: type=1326 audit(1752716006.490:11214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.6.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03206e929 code=0x7ffc0000 [ 139.221461][ T29] audit: type=1326 audit(1752716006.518:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.6.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc03206e929 code=0x7ffc0000 [ 139.348127][T15263] loop4: detected capacity change from 0 to 32768 [ 139.401119][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.408599][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.416093][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.423508][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.430933][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.438539][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.445986][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.453492][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.460940][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.468390][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.475870][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.483264][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.490680][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.498110][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.505712][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.513174][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.520576][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.528037][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.535421][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.542918][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.550367][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.557770][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.565255][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.572823][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.580427][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.587873][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.595264][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.600595][T15295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5354'. [ 139.602642][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602746][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602771][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602793][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602886][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602910][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.602975][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603013][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603037][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603058][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603082][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603145][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.603169][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.708275][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.715659][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.723075][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.730465][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.737840][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.745291][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.752693][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.760083][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.767546][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.774924][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.782286][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.789661][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.797048][ T3413] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 139.805956][ T3413] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 139.871555][T15312] loop5: detected capacity change from 0 to 512 [ 139.926833][T15312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.945749][T15312] ext4 filesystem being mounted at /657/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.960281][T15323] hub 9-0:1.0: USB hub found [ 139.965553][T15323] hub 9-0:1.0: 8 ports detected [ 140.024984][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.085050][T15342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15342 comm=syz.6.5372 [ 140.155427][T15358] hub 9-0:1.0: USB hub found [ 140.172441][T15358] hub 9-0:1.0: 8 ports detected [ 140.186479][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5393'. [ 140.328929][T15384] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 140.342468][T15381] IPVS: stopping master sync thread 15384 ... [ 140.367076][T15387] loop4: detected capacity change from 0 to 512 [ 140.392051][T15387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.459708][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.477803][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.489308][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.570030][T15413] loop6: detected capacity change from 0 to 1024 [ 140.586980][T15422] loop4: detected capacity change from 0 to 256 [ 140.607090][T15413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.651800][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.666061][T15430] loop5: detected capacity change from 0 to 512 [ 140.673114][T15430] journal_path: Lookup failure for './file0/../file0' [ 140.679914][T15430] EXT4-fs: error: could not find journal device path [ 141.083498][T15478] loop6: detected capacity change from 0 to 512 [ 141.112775][T15478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.157585][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.174490][T15495] program syz.3.5439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.201544][T15500] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.346201][T15521] loop1: detected capacity change from 0 to 512 [ 141.371074][T15521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.421577][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.597509][T15548] loop3: detected capacity change from 0 to 512 [ 141.604599][T15548] journal_path: Lookup failure for './file0/../file0' [ 141.611475][T15548] EXT4-fs: error: could not find journal device path [ 141.619670][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5463'. [ 142.061422][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 142.069543][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.323550][T15618] syzkaller1: entered promiscuous mode [ 142.329210][T15618] syzkaller1: entered allmulticast mode [ 142.469624][T15632] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5513'. [ 142.770756][T15699] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5534'. [ 142.849222][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5541'. [ 142.858342][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5541'. [ 143.044001][T15745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.052474][T15745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.080302][T15750] loop1: detected capacity change from 0 to 256 [ 143.089610][T15750] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.106818][T15750] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 143.115380][T15750] FAT-fs (loop1): Filesystem has been set read-only [ 143.252804][ T3413] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.260739][ T3413] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.318675][T15771] syzkaller1: entered promiscuous mode [ 143.324917][T15771] syzkaller1: entered allmulticast mode [ 143.526613][T15796] random: crng reseeded on system resumption [ 143.615299][T15810] loop4: detected capacity change from 0 to 256 [ 143.736086][T15834] __nla_validate_parse: 3 callbacks suppressed [ 143.736096][T15834] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.5599'. [ 144.026683][T15860] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.5611'. [ 144.118670][T15880] loop6: detected capacity change from 0 to 256 [ 144.171175][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 144.171190][ T29] audit: type=1400 audit(1752716011.174:11703): avc: denied { create } for pid=15887 comm="syz.6.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.201528][ T29] audit: type=1400 audit(1752716011.183:11704): avc: denied { bind } for pid=15887 comm="syz.6.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.221690][ T29] audit: type=1400 audit(1752716011.183:11705): avc: denied { setopt } for pid=15887 comm="syz.6.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.242223][ T29] audit: type=1400 audit(1752716011.183:11706): avc: denied { write } for pid=15887 comm="syz.6.5623" path="socket:[48172]" dev="sockfs" ino=48172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.286878][ T29] audit: type=1326 audit(1752716011.277:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.3.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 144.310669][ T29] audit: type=1400 audit(1752716011.286:11708): avc: denied { write } for pid=15895 comm="syz.1.5638" name="kcm" dev="proc" ino=4026532501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.334172][ T29] audit: type=1326 audit(1752716011.295:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.3.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 144.357766][ T29] audit: type=1326 audit(1752716011.295:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.3.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 144.382010][ T29] audit: type=1326 audit(1752716011.295:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.3.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 144.407828][ T29] audit: type=1326 audit(1752716011.295:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.3.5627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 144.481403][T15900] loop6: detected capacity change from 0 to 256 [ 144.489891][T15900] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.504003][T15900] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 144.512647][T15900] FAT-fs (loop6): Filesystem has been set read-only [ 144.521411][T15914] loop3: detected capacity change from 0 to 256 [ 144.747426][T15945] loop1: detected capacity change from 0 to 256 [ 144.794422][T15953] loop5: detected capacity change from 0 to 256 [ 144.804802][T15953] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.829062][T15953] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 144.837599][T15953] FAT-fs (loop5): Filesystem has been set read-only [ 144.838956][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5658'. [ 144.853889][T15958] netlink: 'syz.4.5658': attribute type 29 has an invalid length. [ 144.861720][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5658'. [ 144.926668][T13392] IPVS: starting estimator thread 0... [ 144.992095][T15977] loop5: detected capacity change from 0 to 256 [ 145.021160][T15966] IPVS: using max 2880 ests per chain, 144000 per kthread [ 145.058011][T15985] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 145.066936][T15985] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 145.107452][T15993] random: crng reseeded on system resumption [ 145.126737][T15995] random: crng reseeded on system resumption [ 145.141168][T15999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.378191][T16049] sctp: [Deprecated]: syz.1.5700 (pid 16049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.378191][T16049] Use struct sctp_sack_info instead [ 145.412577][T16055] netlink: 'syz.1.5703': attribute type 1 has an invalid length. [ 145.460478][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 145.469501][T16063] netlink: 'syz.1.5717': attribute type 29 has an invalid length. [ 145.477405][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 145.520580][T16068] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.927831][T16132] random: crng reseeded on system resumption [ 145.949588][T16131] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 145.957822][T16131] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 145.986753][T16140] random: crng reseeded on system resumption [ 146.131506][T16171] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 146.139842][T16171] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 146.173552][T16177] sctp: [Deprecated]: syz.4.5773 (pid 16177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.173552][T16177] Use struct sctp_sack_info instead [ 146.192103][T16179] loop1: detected capacity change from 0 to 256 [ 146.194405][T16181] loop6: detected capacity change from 0 to 164 [ 146.333303][T16204] loop4: detected capacity change from 0 to 128 [ 146.354241][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5777'. [ 146.363445][T16206] netlink: 'syz.1.5777': attribute type 2 has an invalid length. [ 146.371284][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5777'. [ 146.402422][T16208] netlink: 'syz.4.5778': attribute type 1 has an invalid length. [ 146.484027][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5796'. [ 146.645429][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5786'. [ 146.728621][T16248] loop4: detected capacity change from 0 to 128 [ 146.735385][T16248] EXT4-fs: Ignoring removed orlov option [ 146.746182][T16248] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.761021][T16248] ext4 filesystem being mounted at /1155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.894296][T16276] netlink: 'syz.3.5811': attribute type 29 has an invalid length. [ 146.942649][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.013460][T16303] loop1: detected capacity change from 0 to 128 [ 147.128158][T16315] loop5: detected capacity change from 0 to 164 [ 147.243885][T16338] netlink: 'syz.6.5847': attribute type 1 has an invalid length. [ 147.301020][T16343] netlink: 'syz.4.5851': attribute type 2 has an invalid length. [ 147.379325][T16350] loop5: detected capacity change from 0 to 128 [ 147.656242][T16359] netlink: 'syz.1.5848': attribute type 3 has an invalid length. [ 147.836477][T16379] loop1: detected capacity change from 0 to 128 [ 147.842978][T16379] EXT4-fs: Ignoring removed orlov option [ 147.849963][T16379] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.862252][T16379] ext4 filesystem being mounted at /1132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.928321][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.989575][T16388] sd 0:0:1:0: device reset [ 147.995632][T16386] netlink: 'syz.1.5860': attribute type 1 has an invalid length. [ 148.066717][T16405] loop3: detected capacity change from 0 to 128 [ 148.074675][T16405] EXT4-fs: Ignoring removed orlov option [ 148.082043][T16405] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.094388][T16405] ext4 filesystem being mounted at /1168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.171327][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.214187][T16427] SELinux: syz.1.5878 (16427) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.385644][T16462] veth0_to_bridge: entered promiscuous mode [ 148.393608][T16460] veth0_to_bridge: left promiscuous mode [ 148.574938][T16474] loop1: detected capacity change from 0 to 256 [ 148.668590][T16480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.710486][T16484] IPv6: Can't replace route, no match found [ 148.899267][T16510] loop6: detected capacity change from 0 to 1024 [ 148.939446][T16510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.985690][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.986470][T16528] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 149.161759][T16554] SELinux: Context system_u:object is not valid (left unmapped). [ 149.231510][T16566] loop5: detected capacity change from 0 to 2048 [ 149.250406][T16566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.272789][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.484263][T16612] loop5: detected capacity change from 0 to 256 [ 149.575133][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 149.575148][ T29] audit: type=1326 audit(1752716016.206:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.604968][ T29] audit: type=1326 audit(1752716016.206:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.628660][ T29] audit: type=1326 audit(1752716016.206:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.652426][ T29] audit: type=1326 audit(1752716016.206:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.676304][ T29] audit: type=1326 audit(1752716016.206:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.677415][T16629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.700020][ T29] audit: type=1326 audit(1752716016.206:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.700052][ T29] audit: type=1326 audit(1752716016.206:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.700079][ T29] audit: type=1326 audit(1752716016.206:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.700166][ T29] audit: type=1326 audit(1752716016.206:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.700201][ T29] audit: type=1326 audit(1752716016.206:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.1.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171967e929 code=0x7ffc0000 [ 149.780672][T16633] SELinux: syz.6.5983 (16633) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 150.125749][T16664] SELinux: syz.4.5987 (16664) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 150.211537][T16673] __nla_validate_parse: 5 callbacks suppressed [ 150.211553][T16673] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5992'. [ 150.377024][T16691] SELinux: syz.3.6002 (16691) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.045074][T16739] loop4: detected capacity change from 0 to 2048 [ 151.076355][T16739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.125909][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.180834][T16756] loop4: detected capacity change from 0 to 256 [ 151.256799][T16764] validate_nla: 4 callbacks suppressed [ 151.256812][T16764] netlink: 'syz.4.6034': attribute type 3 has an invalid length. [ 151.270800][T16764] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.6034'. [ 151.312297][T16772] loop5: detected capacity change from 0 to 512 [ 151.338801][T16776] loop6: detected capacity change from 0 to 2048 [ 151.369749][T16772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.385245][T16772] ext4 filesystem being mounted at /767/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.405005][T16776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.425644][T16797] loop3: detected capacity change from 0 to 256 [ 151.432681][T16795] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 151.440674][T16797] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.442243][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.453926][T16797] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 151.462318][T16795] SELinux: failed to load policy [ 151.468605][T16797] FAT-fs (loop3): Filesystem has been set read-only [ 151.481596][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.525237][T16806] netlink: 'syz.6.6052': attribute type 3 has an invalid length. [ 151.533113][T16806] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.6052'. [ 151.764414][T16830] loop3: detected capacity change from 0 to 2048 [ 151.779729][T16830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.801801][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.319866][T16844] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 152.430099][T16866] loop4: detected capacity change from 0 to 512 [ 152.453675][T16866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.466403][T16866] ext4 filesystem being mounted at /1217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.481996][T16872] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 152.490239][T16872] SELinux: failed to load policy [ 152.502743][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.572756][T16888] loop5: detected capacity change from 0 to 512 [ 152.585998][T16888] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.597059][T16888] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.605389][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6089'. [ 152.617530][T16888] EXT4-fs (loop5): 1 truncate cleaned up [ 152.624309][T16888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.668688][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.705037][T16902] loop1: detected capacity change from 0 to 512 [ 152.735400][T16904] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 152.744450][T16902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.760452][T16904] SELinux: failed to load policy [ 152.760586][T16902] ext4 filesystem being mounted at /1183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.799604][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.840158][T16920] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 152.865307][T16920] SELinux: failed to load policy [ 153.122930][T16946] loop6: detected capacity change from 0 to 512 [ 153.137453][T16946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.150265][T16946] ext4 filesystem being mounted at /775/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.177884][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.189463][T16950] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 153.308281][T16967] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.6130'. [ 153.388738][T16977] ALSA: seq fatal error: cannot create timer (-19) [ 153.471467][T16986] team0: Port device macvlan0 added [ 153.790625][T17031] netlink: 'syz.1.6151': attribute type 1 has an invalid length. [ 153.798485][T17031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6151'. [ 153.840639][T17039] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 153.849787][T17039] SELinux: failed to load policy [ 153.889259][T17046] loop1: detected capacity change from 0 to 128 [ 153.898333][T17046] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.911478][T17046] ext4 filesystem being mounted at /1191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.934449][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.962885][T17057] loop1: detected capacity change from 0 to 512 [ 153.969589][T17057] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.976273][T17057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.987570][T17057] EXT4-fs (loop1): 1 truncate cleaned up [ 153.993916][T17057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.023566][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.370160][T17074] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 154.379011][T17074] SELinux: failed to load policy [ 154.475373][T17094] loop4: detected capacity change from 0 to 1024 [ 154.505039][T17094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.517950][T17094] ext4 filesystem being mounted at /1239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.538669][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.554018][T17098] loop4: detected capacity change from 0 to 164 [ 154.561303][T17098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.571624][T17098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.580072][T17098] Symlink component flag not implemented [ 154.585726][T17098] Symlink component flag not implemented [ 154.592322][T17098] Symlink component flag not implemented (7) [ 154.598287][T17098] Symlink component flag not implemented (116) [ 154.691591][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b728e00: rx timeout, send abort [ 154.699849][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b728e00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.732929][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6182'. [ 154.844350][T17117] loop4: detected capacity change from 0 to 128 [ 154.857116][T17117] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 154.870891][T17117] ext4 filesystem being mounted at /1247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.897891][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.938579][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6191'. [ 154.948233][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6191'. [ 154.974195][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 154.974207][ T29] audit: type=1326 audit(1752716021.267:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 155.003982][ T29] audit: type=1326 audit(1752716021.267:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 155.027621][ T29] audit: type=1326 audit(1752716021.267:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163178e929 code=0x7ffc0000 [ 155.051451][ T29] audit: type=1400 audit(1752716021.304:12450): avc: denied { shutdown } for pid=17129 comm="syz.4.6194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.071345][ T29] audit: type=1400 audit(1752716021.304:12451): avc: denied { getopt } for pid=17129 comm="syz.4.6194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.091312][ T29] audit: type=1400 audit(1752716021.304:12452): avc: denied { connect } for pid=17129 comm="syz.4.6194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.111206][ T29] audit: type=1400 audit(1752716021.304:12453): avc: denied { name_connect } for pid=17129 comm="syz.4.6194" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 155.134263][ T29] audit: type=1400 audit(1752716021.426:12454): avc: denied { read } for pid=17134 comm="+}[@" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.157327][ T29] audit: type=1400 audit(1752716021.426:12455): avc: denied { open } for pid=17134 comm="+}[@" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.180593][ T29] audit: type=1400 audit(1752716021.426:12456): avc: denied { ioctl } for pid=17134 comm="+}[@" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.248633][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6199'. [ 155.492496][T17191] ref_ctr_offset mismatch. inode: 0x1829 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 155.576468][T17206] macsec1: entered allmulticast mode [ 155.615893][T17213] loop1: detected capacity change from 0 to 512 [ 155.629483][T17213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.684008][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.978879][T17262] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.986365][T17262] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.994325][T17262] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 156.019559][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6256'. [ 156.028584][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6256'. [ 156.107870][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6266'. [ 156.154740][T17293] loop4: detected capacity change from 0 to 512 [ 156.168069][T17295] ref_ctr_offset mismatch. inode: 0x18e6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 156.173290][T17293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.191812][T17293] ext4 filesystem being mounted at /1259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.225306][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.235929][T17301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6273'. [ 156.244894][T17301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6273'. [ 156.297853][T17313] loop3: detected capacity change from 0 to 512 [ 156.305611][T17313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.327612][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.402063][T17326] atomic_op ffff888103c3b528 conn xmit_atomic 0000000000000000 [ 156.646345][T17346] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6293'. [ 156.686634][T17356] loop6: detected capacity change from 0 to 512 [ 156.694576][T17356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.719569][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.734672][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6301'. [ 156.846232][T17378] atomic_op ffff88811d266128 conn xmit_atomic 0000000000000000 [ 156.932179][T17393] loop6: detected capacity change from 0 to 512 [ 156.954128][T17393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.968385][T17393] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.998825][ T9133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.050960][T17409] loop5: detected capacity change from 0 to 512 [ 157.088075][T17409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.109361][T17409] ext4 filesystem being mounted at /819/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.144074][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.200541][T17427] loop6: detected capacity change from 0 to 164 [ 157.210585][T17427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.223254][T17427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.233344][T17427] Symlink component flag not implemented [ 157.238986][T17427] Symlink component flag not implemented [ 157.244994][T17427] Symlink component flag not implemented (7) [ 157.250976][T17427] Symlink component flag not implemented (116) [ 157.294842][T17440] loop5: detected capacity change from 0 to 1024 [ 157.318018][T17440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.352688][T17454] netlink: 'syz.4.6341': attribute type 4 has an invalid length. [ 157.360543][T17454] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6341'. [ 157.401146][ T8986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.420448][T17463] loop4: detected capacity change from 0 to 2048 [ 157.445895][T17469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6348'. [ 157.446160][T17471] netlink: 'syz.5.6349': attribute type 1 has an invalid length. [ 157.463252][T17463] loop4: p1 < > p4 [ 157.468655][T17463] loop4: p4 size 8388608 extends beyond EOD, truncated [ 157.473472][T17471] bond1: entered promiscuous mode [ 157.483686][T17471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.492265][T17475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.500709][T17475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.519682][T17471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.534226][T17471] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 157.544630][T17471] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 157.564573][T17471] bond1: (slave ip6gre1): making interface the new active one [ 157.572162][T17471] ip6gre1: entered promiscuous mode [ 157.579262][T17471] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 157.669909][T17498] loop5: detected capacity change from 0 to 2048 [ 157.711923][T17498] loop5: p1 < > p4 [ 157.725808][T17498] loop5: p4 size 8388608 extends beyond EOD, truncated [ 157.831643][T17540] hub 9-0:1.0: USB hub found [ 157.836362][T17540] hub 9-0:1.0: 8 ports detected [ 157.839419][T17542] atomic_op ffff88811a67a928 conn xmit_atomic 0000000000000000 [ 157.871816][T17546] atomic_op ffff8881192f7d28 conn xmit_atomic 0000000000000000 [ 157.919045][T17556] vlan0: entered allmulticast mode [ 158.015847][T17561] loop3: detected capacity change from 0 to 164 [ 158.043075][T17561] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.089384][T17561] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.102350][T17561] Symlink component flag not implemented [ 158.108027][T17561] Symlink component flag not implemented [ 158.124619][T17561] Symlink component flag not implemented (7) [ 158.130682][T17561] Symlink component flag not implemented (116) [ 158.175287][T17576] openvswitch: netlink: Message has 6 unknown bytes. [ 158.244877][T17588] loop5: detected capacity change from 0 to 1024 [ 158.252403][T17588] EXT4-fs: Ignoring removed orlov option [ 158.261465][T17592] SELinux: GPL (17592) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.308710][T17600] loop3: detected capacity change from 0 to 512 [ 158.340660][T17602] netlink: 'syz.5.6409': attribute type 4 has an invalid length. [ 158.348544][T17602] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.6409'. [ 158.360392][T17600] ext4 filesystem being mounted at /1264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.469615][T17621] binfmt_misc: register: failed to install interpreter file ./file2 [ 158.589484][T17636] loop4: detected capacity change from 0 to 164 [ 158.596680][T17640] loop6: detected capacity change from 0 to 512 [ 158.609441][T17636] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.622900][T17643] hub 9-0:1.0: USB hub found [ 158.627612][T17643] hub 9-0:1.0: 8 ports detected [ 158.637903][T17636] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.648677][T17640] ext4 filesystem being mounted at /837/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.666337][T17636] Symlink component flag not implemented [ 158.672132][T17636] Symlink component flag not implemented [ 158.691075][T17636] Symlink component flag not implemented (7) [ 158.697173][T17636] Symlink component flag not implemented (116) [ 158.783683][T17665] loop5: detected capacity change from 0 to 2048 [ 158.834309][T17665] loop5: p1 < > p4 [ 158.838719][T17665] loop5: p4 size 8388608 extends beyond EOD, truncated [ 158.849939][T17676] hub 9-0:1.0: USB hub found [ 158.865526][T17676] hub 9-0:1.0: 8 ports detected [ 158.929118][T17684] loop4: detected capacity change from 0 to 512 [ 158.940253][T17687] loop5: detected capacity change from 0 to 164 [ 158.949083][T17684] ext4 filesystem being mounted at /1316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.960369][T17687] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.998547][T17687] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.012219][T17687] Symlink component flag not implemented [ 159.017885][T17687] Symlink component flag not implemented [ 159.023629][T17687] Symlink component flag not implemented (7) [ 159.029706][T17687] Symlink component flag not implemented (116) [ 159.048497][T17703] loop3: detected capacity change from 0 to 1024 [ 159.055082][T17703] EXT4-fs: Ignoring removed orlov option [ 159.098835][T17708] SELinux: security_context_str_to_sid () failed with errno=-22 [ 159.148785][T17716] loop3: detected capacity change from 0 to 2048 [ 159.201061][T17726] loop4: detected capacity change from 0 to 2048 [ 159.224356][T17716] loop3: p1 < > p4 [ 159.228683][T17726] loop4: p1 < > p4 [ 159.229363][T17716] loop3: p4 size 8388608 extends beyond EOD, truncated [ 159.239661][T17726] loop4: p4 size 8388608 extends beyond EOD, truncated [ 159.270033][T17737] loop1: detected capacity change from 0 to 1024 [ 159.290496][T17737] EXT4-fs: Ignoring removed orlov option [ 159.299718][T17739] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 159.335311][T17749] netlink: 'syz.1.6474': attribute type 1 has an invalid length. [ 159.369439][T17749] bond1: entered promiscuous mode [ 159.374784][T17749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.407172][T17763] netlink: 'syz.4.6479': attribute type 22 has an invalid length. [ 159.423526][T17749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.444713][T17749] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 159.455646][T17749] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 159.473430][T17772] SELinux: GPL (17772) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.488572][T17749] bond1: (slave ip6gre1): making interface the new active one [ 159.496083][T17749] ip6gre1: entered promiscuous mode [ 159.528057][T17749] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 159.673208][T17807] loop6: detected capacity change from 0 to 164 [ 159.688078][T17807] ISOFS: unable to read i-node block [ 159.693590][T17807] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 159.803531][T17824] SELinux: security_context_str_to_sid () failed with errno=-22 [ 159.814950][T17826] netlink: 'syz.1.6509': attribute type 22 has an invalid length. [ 159.823141][ C0] ================================================================== [ 159.831220][ C0] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 159.837632][ C0] [ 159.839942][ C0] read to 0xffffc9000748bbc0 of 4 bytes by task 17778 on cpu 1: [ 159.847551][ C0] do_sys_poll+0x99c/0xbd0 [ 159.851949][ C0] __se_sys_ppoll+0x1b9/0x200 [ 159.856611][ C0] __x64_sys_ppoll+0x67/0x80 [ 159.861188][ C0] x64_sys_call+0x2de5/0x2fb0 [ 159.865843][ C0] do_syscall_64+0xd2/0x200 [ 159.870323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.876195][ C0] [ 159.878496][ C0] write to 0xffffc9000748bbc0 of 4 bytes by interrupt on cpu 0: [ 159.886099][ C0] pollwake+0xb6/0x100 [ 159.890144][ C0] __wake_up+0x66/0xb0 [ 159.894210][ C0] bpf_ringbuf_notify+0x22/0x30 [ 159.899047][ C0] irq_work_run+0xe2/0x2d0 [ 159.903444][ C0] __sysvec_irq_work+0x22/0x170 [ 159.908268][ C0] sysvec_irq_work+0x66/0x80 [ 159.912835][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 159.917746][ C0] native_apic_msr_write+0x3d/0x60 [ 159.922839][ C0] x2apic_send_IPI_self+0x10/0x20 [ 159.927842][ C0] arch_irq_work_raise+0x46/0x50 [ 159.932762][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 159.938115][ C0] irq_work_queue+0x70/0x100 [ 159.942688][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 159.947610][ C0] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 159.953044][ C0] bpf_trace_run3+0x10f/0x1d0 [ 159.957696][ C0] __traceiter_kmem_cache_free+0x35/0x60 [ 159.963306][ C0] kmem_cache_free+0x257/0x300 [ 159.968048][ C0] __kfree_skb+0x109/0x150 [ 159.972446][ C0] tcp_rcv_established+0x953/0xef0 [ 159.977535][ C0] tcp_v4_do_rcv+0x672/0x740 [ 159.982103][ C0] tcp_v4_rcv+0x1bd7/0x1f60 [ 159.986585][ C0] ip_protocol_deliver_rcu+0x397/0x780 [ 159.992026][ C0] ip_local_deliver_finish+0x184/0x220 [ 159.997466][ C0] ip_local_deliver+0xe8/0x1c0 [ 160.002212][ C0] ip_sublist_rcv+0x56b/0x650 [ 160.006877][ C0] ip_list_rcv+0x261/0x290 [ 160.011273][ C0] __netif_receive_skb_list_core+0x4dc/0x500 [ 160.017229][ C0] netif_receive_skb_list_internal+0x487/0x600 [ 160.023377][ C0] napi_complete_done+0x1a3/0x410 [ 160.028387][ C0] virtnet_poll+0x18c5/0x1d10 [ 160.033039][ C0] __napi_poll+0x63/0x3a0 [ 160.037350][ C0] net_rx_action+0x391/0x830 [ 160.041920][ C0] handle_softirqs+0xb7/0x290 [ 160.046579][ C0] run_ksoftirqd+0x1c/0x30 [ 160.050975][ C0] smpboot_thread_fn+0x328/0x530 [ 160.055896][ C0] kthread+0x489/0x510 [ 160.059944][ C0] ret_from_fork+0xda/0x150 [ 160.064425][ C0] ret_from_fork_asm+0x1a/0x30 [ 160.069236][ C0] [ 160.071537][ C0] value changed: 0x00000001 -> 0x00000000 [ 160.077229][ C0] [ 160.079529][ C0] Reported by Kernel Concurrency Sanitizer on: [ 160.085656][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 160.097954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.107983][ C0] ==================================================================