last executing test programs: 1.846113311s ago: executing program 3 (id=2981): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 1.829763113s ago: executing program 3 (id=2982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.471341992s ago: executing program 2 (id=2994): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 1.470571052s ago: executing program 2 (id=3004): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], 0x0, 0x0) 1.020015748s ago: executing program 2 (id=2996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0xd350, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x81, 0x0, 0x400000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0xffffffb3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9b, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 897.364968ms ago: executing program 3 (id=2998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) 850.910492ms ago: executing program 2 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) symlink(0x0, &(0x7f00000017c0)='./file0\x00') 850.360972ms ago: executing program 3 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 832.352563ms ago: executing program 3 (id=3003): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff, &(0x7f0000001a80)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@nodelalloc}, {@norecovery}, {@delalloc}, {@nojournal_checksum}, {@grpquota}, {@nodelalloc}, {@errors_remount}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x59a, &(0x7f0000001ac0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 792.456776ms ago: executing program 2 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 792.006856ms ago: executing program 3 (id=3006): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b8}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 579.372974ms ago: executing program 2 (id=3008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 417.976546ms ago: executing program 1 (id=3022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101101) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 357.897482ms ago: executing program 1 (id=3023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x83c2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 260.550119ms ago: executing program 1 (id=3025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x800}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@noquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 260.318629ms ago: executing program 0 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) 224.407043ms ago: executing program 1 (id=3027): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) unshare(0x4020400) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) 223.732073ms ago: executing program 0 (id=3038): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x14, 0x30, 0x829}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) 181.071676ms ago: executing program 0 (id=3028): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa39}, {0xa, 0xfffe, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1000, {[0x6, 0x0, 0xffffffff, 0xfffffefb, 0x0, 0x1, 0x2]}}, 0x5c) 180.561926ms ago: executing program 0 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 128.8057ms ago: executing program 0 (id=3032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 128.38749ms ago: executing program 4 (id=3033): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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"/328, @ANYRES64], 0x8, 0x2fd, &(0x7f0000000e80)="$eJzs3M9LI2ccx/GPSdQkovFQWlooPrSX9jJo2nNrKAqlgYo1pT+gMJpJGzJNJBMsKaW2p15L/4gexKM3ofUf8LK33cte9uZlYQ/rYdlZnGQ0idG4MSbu+n6BzGO+85mZJ5OR7wSco2/+/rlU8KyCXVMkbjQmScfSrCIKjTWXkWA8MakWf+jDqSf33/3q2+++yGSzS6vGLGfWPkobY2bm/vvlt0Rztf1JHc7+cPQ4/ejwzcO3j56v/VT0TNEz5UrN2Ga98rBmr7uOyRe9kmXMiuvYnmOKZc+pNuqVRr3gVjY368Yu56eTm1XH84xdrpuSUze1iqlV6yb6o10sG8uyzHRS6CW3s7pqZ/oMbwz4YHBDqtWMHZWUOFfJ7YzkgAAAwEh19v8RmV79f1u+R/+/+95BberrvZlm/78/0a3///hBY1tt/X9cUtf+P9x/1/7ffrn+/3xHdLdcq//H7TAXXhHnr1gpuFyrGTvZWv/z+935YED/DwAAAAAAAAAAAAAAAAAAAADAq+DY91O+76fCZfgzKSkuKfy9SzQq6dMRHDIG6BrnH6+Bs3/ci81I7l9bua1cY9lc4UCSK0fzSulZ8HlokvzTJ4GYE7P6391u5re3ctGgkimoGOQXlBpXR973/eXPs0sLpqE9P65kaz6tlN7onk8H6ZgauTA/oQ/eb8lbSunehipylVdMrfnfF4z57Mtsx/4Tyo/qpAAAAAAAMGCWOdX1/t2yLqo38qf3153fD0TP7q/nu97fx/RObLRzBwAAAADgrvDqv5Zs13WqlwwS6r1O/4PYDW05nOFVU+FTVG9uppcMwp23leLNFwf+toxd8W05vrgUUT97nzuZjbnuLMKvjS5aRyuLwz+DweCtf/59OrgNfrIX7zHT/gfRyz8A40P7AwQAAABgaM6a/vCVxdEeEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9Awno426jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8WLAAAA///NkgPg") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x20) lseek(r0, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 128.02193ms ago: executing program 0 (id=3035): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff, &(0x7f0000001a80)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@nodelalloc}, {@norecovery}, {@delalloc}, {@nojournal_checksum}, {@grpquota}, {@nodelalloc}, {@errors_remount}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x59a, &(0x7f0000001ac0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 127.74753ms ago: executing program 1 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x2) 109.180392ms ago: executing program 1 (id=3037): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 56.801736ms ago: executing program 4 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x1, 0x0) 56.634296ms ago: executing program 4 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 47.838536ms ago: executing program 4 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 30.156268ms ago: executing program 4 (id=3042): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 0s ago: executing program 4 (id=3043): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.315683][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.376208][ T3311] hsr_slave_0: entered promiscuous mode [ 36.382641][ T3311] hsr_slave_1: entered promiscuous mode [ 36.390130][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.395909][ T3311] Cannot create hsr debugfs directory [ 36.413779][ T3307] hsr_slave_0: entered promiscuous mode [ 36.419936][ T3307] hsr_slave_1: entered promiscuous mode [ 36.425850][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 36.431771][ T3307] Cannot create hsr debugfs directory [ 36.491197][ T3308] hsr_slave_0: entered promiscuous mode [ 36.497260][ T3308] hsr_slave_1: entered promiscuous mode [ 36.503115][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.508907][ T3308] Cannot create hsr debugfs directory [ 36.638567][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.649731][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.661492][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.673149][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.702874][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.711581][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.721072][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.732933][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.764238][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.773611][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.786046][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.804636][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.840055][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.853986][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.863120][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.873780][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.883041][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.906481][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.933355][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.940466][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.955866][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.966559][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.973716][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.989224][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.006963][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.017196][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.026274][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.056982][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.074417][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.081597][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.092142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.099339][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.132713][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.164482][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.179138][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.188564][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.205059][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.212217][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.226674][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.249389][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.259625][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.267327][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.290620][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.297865][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.315795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.323153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.336564][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.346751][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.415046][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.438650][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.459019][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.466140][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.475239][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.482408][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.503447][ T3301] veth0_vlan: entered promiscuous mode [ 37.521579][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.532548][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.543037][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.575827][ T3301] veth1_vlan: entered promiscuous mode [ 37.606471][ T3303] veth0_vlan: entered promiscuous mode [ 37.616274][ T3301] veth0_macvtap: entered promiscuous mode [ 37.631858][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.640048][ T3303] veth1_vlan: entered promiscuous mode [ 37.646778][ T3301] veth1_macvtap: entered promiscuous mode [ 37.684889][ T3303] veth0_macvtap: entered promiscuous mode [ 37.707753][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.720680][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.729547][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.752697][ T3303] veth1_macvtap: entered promiscuous mode [ 37.785908][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.803491][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.813571][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.831320][ T3311] veth0_vlan: entered promiscuous mode [ 37.844659][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.855237][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.872138][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.886977][ T3311] veth1_vlan: entered promiscuous mode [ 37.910419][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.928302][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.937659][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.958808][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.982735][ T3311] veth0_macvtap: entered promiscuous mode [ 38.000125][ T3308] veth0_vlan: entered promiscuous mode [ 38.013217][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.026942][ T3311] veth1_macvtap: entered promiscuous mode [ 38.063462][ T3308] veth1_vlan: entered promiscuous mode [ 38.081905][ T3478] capability: warning: `syz.0.7' uses deprecated v2 capabilities in a way that may be insecure [ 38.093014][ T3308] veth0_macvtap: entered promiscuous mode [ 38.105404][ T3307] veth0_vlan: entered promiscuous mode [ 38.113153][ T3307] veth1_vlan: entered promiscuous mode [ 38.127205][ T3308] veth1_macvtap: entered promiscuous mode [ 38.137435][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.160734][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.170817][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.184508][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.199926][ T298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.209382][ T298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.222216][ T298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.232627][ T298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.241686][ T298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.252824][ T3307] veth0_macvtap: entered promiscuous mode [ 38.261181][ T298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.274982][ T3307] veth1_macvtap: entered promiscuous mode [ 38.282804][ T298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.291781][ T298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321465][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.340687][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.365797][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.379714][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393745][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.416797][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.456383][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 38.456402][ T29] audit: type=1400 audit(1754333815.374:122): avc: denied { create } for pid=3490 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.494152][ T29] audit: type=1400 audit(1754333815.374:123): avc: denied { setopt } for pid=3490 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.536853][ T29] audit: type=1400 audit(1754333815.444:124): avc: denied { create } for pid=3499 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.540361][ T3500] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 38.557548][ T29] audit: type=1400 audit(1754333815.444:125): avc: denied { write } for pid=3499 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.585609][ T29] audit: type=1400 audit(1754333815.454:126): avc: denied { read } for pid=3499 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.607872][ T29] audit: type=1400 audit(1754333815.454:127): avc: denied { ioctl } for pid=3499 comm="syz.1.11" path="socket:[4062]" dev="sockfs" ino=4062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.656508][ T29] audit: type=1400 audit(1754333815.564:128): avc: denied { create } for pid=3506 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.663263][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 38.677267][ T29] audit: type=1400 audit(1754333815.564:129): avc: denied { write } for pid=3506 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.686516][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 38.823600][ T3517] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 38.892197][ T29] audit: type=1400 audit(1754333815.804:130): avc: denied { create } for pid=3524 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.927173][ T29] audit: type=1400 audit(1754333815.834:131): avc: denied { ioctl } for pid=3524 comm="syz.2.20" path="socket:[4749]" dev="sockfs" ino=4749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.048989][ T3537] netlink: 'syz.1.28': attribute type 2 has an invalid length. [ 39.072618][ T3390] kernel write not supported for file /sg0 (pid: 3390 comm: kworker/0:5) [ 39.212970][ T3551] loop1: detected capacity change from 0 to 1024 [ 39.267120][ T3551] journal_path: Non-blockdev passed as './file1' [ 39.273598][ T3551] EXT4-fs: error: could not find journal device path [ 39.358311][ T3558] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 39.595383][ T3582] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.676702][ T3594] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 39.713182][ T3594] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 39.760120][ T3604] process 'syz.0.59' launched '/dev/fd/5' with NULL argv: empty string added [ 39.833790][ T3610] syz.4.62 (3610) used greatest stack depth: 10560 bytes left [ 39.856543][ T3616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.210245][ T3661] netlink: 'syz.4.86': attribute type 13 has an invalid length. [ 40.254223][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 40.266280][ T3661] gretap0: refused to change device tx_queue_len [ 40.275982][ T3665] netlink: 312 bytes leftover after parsing attributes in process `syz.0.87'. [ 40.285011][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 40.295991][ T3661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.344074][ T3671] loop1: detected capacity change from 0 to 2048 [ 40.403671][ T3671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 40.419927][ T3671] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.492016][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 40.592915][ T3692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 40.636488][ T3692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 40.730505][ T3708] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000005 [ 40.758758][ T3714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3714 comm=syz.2.109 [ 40.771310][ T3714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3714 comm=syz.2.109 [ 40.945465][ T3734] loop1: detected capacity change from 0 to 512 [ 40.981978][ T3734] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.998575][ T3734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.006882][ T3734] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.051232][ T3734] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 41.066856][ T3734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.119: bg 0: block 40: padding at end of block bitmap is not set [ 41.087588][ T3734] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 41.111667][ T3734] EXT4-fs (loop1): 1 truncate cleaned up [ 41.126078][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.151302][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.190845][ T3761] loop1: detected capacity change from 0 to 1024 [ 41.197787][ T3761] ======================================================= [ 41.197787][ T3761] WARNING: The mand mount option has been deprecated and [ 41.197787][ T3761] and is ignored by this kernel. Remove the mand [ 41.197787][ T3761] option from the mount to silence this warning. [ 41.197787][ T3761] ======================================================= [ 41.272500][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.291541][ T3761] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.319418][ T3761] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 41.329864][ T3775] netlink: '+}[@': attribute type 13 has an invalid length. [ 41.332411][ T3761] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 41.358018][ T3761] EXT4-fs (loop1): Remounting filesystem read-only [ 41.379454][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.415414][ T3775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.455166][ T3783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 41.487487][ T3787] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 41.495347][ T3787] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.141'. [ 41.568819][ T3795] syzkaller1: entered promiscuous mode [ 41.574462][ T3795] syzkaller1: entered allmulticast mode [ 41.638441][ T3805] loop1: detected capacity change from 0 to 512 [ 41.645198][ T3805] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.653545][ T3805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.667000][ T3805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.685634][ T3805] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.699404][ T3805] EXT4-fs (loop1): 1 truncate cleaned up [ 41.705695][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.719554][ T3805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.894455][ T3829] netlink: 56 bytes leftover after parsing attributes in process `syz.2.159'. [ 41.967033][ T3835] syzkaller1: entered promiscuous mode [ 41.972555][ T3835] syzkaller1: entered allmulticast mode [ 42.086545][ T3849] bridge0: entered promiscuous mode [ 42.094037][ T3854] loop1: detected capacity change from 0 to 1024 [ 42.096219][ T3849] bridge0: port 3(macvlan2) entered blocking state [ 42.107232][ T3849] bridge0: port 3(macvlan2) entered disabled state [ 42.114480][ T3849] macvlan2: entered allmulticast mode [ 42.120073][ T3849] bridge0: entered allmulticast mode [ 42.129032][ T3854] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.140100][ T3854] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.151406][ T3849] macvlan2: left allmulticast mode [ 42.156760][ T3849] bridge0: left allmulticast mode [ 42.162533][ T3849] bridge0: left promiscuous mode [ 42.168947][ T3854] JBD2: no valid journal superblock found [ 42.174737][ T3854] EXT4-fs (loop1): Could not load journal inode [ 42.281053][ T3854] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.295921][ T3852] pimreg: entered allmulticast mode [ 42.503417][ T3887] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 42.509988][ T3887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.518063][ T3887] vhci_hcd vhci_hcd.0: Device attached [ 42.541185][ T3894] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 42.567080][ T3890] vhci_hcd: connection closed [ 42.567299][ T37] vhci_hcd: stop threads [ 42.576339][ T37] vhci_hcd: release socket [ 42.580785][ T37] vhci_hcd: disconnect device [ 42.609165][ T3896] loop1: detected capacity change from 0 to 1024 [ 42.623975][ T3896] EXT4-fs: Ignoring removed orlov option [ 42.638115][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.658284][ T3896] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.976023][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.013594][ T3922] syzkaller1: entered promiscuous mode [ 43.019174][ T3922] syzkaller1: entered allmulticast mode [ 43.467818][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 43.467855][ T29] audit: type=1326 audit(1754333820.384:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03ef515b27 code=0x7ffc0000 [ 43.512797][ T29] audit: type=1326 audit(1754333820.384:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.536360][ T29] audit: type=1326 audit(1754333820.384:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.560054][ T29] audit: type=1326 audit(1754333820.384:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.583676][ T29] audit: type=1326 audit(1754333820.384:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.607103][ T29] audit: type=1326 audit(1754333820.384:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.630704][ T29] audit: type=1326 audit(1754333820.384:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.654489][ T29] audit: type=1326 audit(1754333820.384:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.678030][ T29] audit: type=1326 audit(1754333820.384:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 43.678281][ T3957] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 43.678281][ T3957] program syz.0.212 not setting count and/or reply_len properly [ 43.701370][ T29] audit: type=1326 audit(1754333820.414:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03ef4bad69 code=0x7ffc0000 [ 43.947197][ T3981] loop3: detected capacity change from 0 to 512 [ 43.957968][ T3981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.006909][ T3981] EXT4-fs (loop3): 1 orphan inode deleted [ 44.012779][ T3981] EXT4-fs (loop3): 1 truncate cleaned up [ 44.045576][ T3981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.120234][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.196846][ T4001] bond1: entered promiscuous mode [ 44.202006][ T4001] bond1: entered allmulticast mode [ 44.214297][ T4001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.225659][ T3907] syz.2.189 (3907) used greatest stack depth: 7528 bytes left [ 44.244655][ T4001] bond1 (unregistering): Released all slaves [ 44.281264][ T4006] Invalid ELF header magic: != ELF [ 44.322614][ T4012] loop4: detected capacity change from 0 to 512 [ 44.382900][ T4012] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.419993][ T4012] EXT4-fs (loop4): mount failed [ 44.516417][ T4035] program syz.3.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.535625][ T4035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 44.548047][ T4038] loop4: detected capacity change from 0 to 256 [ 44.553502][ T4040] loop2: detected capacity change from 0 to 1024 [ 44.578891][ T4038] FAT-fs (loop4): Directory bread(block 64) failed [ 44.581101][ T4040] EXT4-fs: Ignoring removed nobh option [ 44.591142][ T4040] EXT4-fs: Ignoring removed bh option [ 44.609030][ T4038] FAT-fs (loop4): Directory bread(block 65) failed [ 44.617953][ T4038] FAT-fs (loop4): Directory bread(block 66) failed [ 44.640913][ T4038] FAT-fs (loop4): Directory bread(block 67) failed [ 44.648391][ T4044] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 44.660561][ T4038] FAT-fs (loop4): Directory bread(block 68) failed [ 44.661869][ T4040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.685441][ T4038] FAT-fs (loop4): Directory bread(block 69) failed [ 44.704874][ T4038] FAT-fs (loop4): Directory bread(block 70) failed [ 44.728976][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.729637][ T4038] FAT-fs (loop4): Directory bread(block 71) failed [ 44.746003][ T4038] FAT-fs (loop4): Directory bread(block 72) failed [ 44.752752][ T4038] FAT-fs (loop4): Directory bread(block 73) failed [ 44.790605][ T4056] __nla_validate_parse: 3 callbacks suppressed [ 44.790621][ T4056] netlink: 188 bytes leftover after parsing attributes in process `syz.1.255'. [ 44.868074][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 44.876958][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 44.922166][ T4068] loop1: detected capacity change from 0 to 512 [ 44.934238][ T4068] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.260: casefold flag without casefold feature [ 44.961351][ T4068] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.260: couldn't read orphan inode 15 (err -117) [ 44.990143][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.065098][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.109379][ T4089] loop4: detected capacity change from 0 to 128 [ 45.127805][ T4089] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.142632][ T4091] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 45.157238][ T4089] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.230522][ T4098] openvswitch: netlink: Message has 6 unknown bytes. [ 45.321222][ T4110] syzkaller1: entered promiscuous mode [ 45.326917][ T4110] syzkaller1: entered allmulticast mode [ 45.476838][ T4129] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 45.476838][ T4129] program syz.2.289 not setting count and/or reply_len properly [ 45.542280][ T4137] Zero length message leads to an empty skb [ 45.631593][ T4152] SELinux: Context system_u:object_r:system_dbusd_var_run_t: is not valid (left unmapped). [ 45.766943][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.776125][ T4174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.308'. [ 45.781688][ T4175] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 45.802877][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.813874][ T4172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.832797][ T4172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.847749][ T4166] netlink: 'syz.4.308': attribute type 13 has an invalid length. [ 45.855572][ T4166] netlink: 'syz.4.308': attribute type 17 has an invalid length. [ 45.874670][ T4178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.900611][ T4166] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.902389][ T4177] fido_id[4177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.024567][ T4192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4192 comm=syz.1.319 [ 46.053156][ T4194] sctp: [Deprecated]: syz.1.320 (pid 4194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.053156][ T4194] Use struct sctp_sack_info instead [ 46.188235][ T4207] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 46.281515][ T4219] loop1: detected capacity change from 0 to 512 [ 46.288742][ T4219] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.297061][ T4219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.307714][ T4219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 46.316733][ T4219] System zones: 1-12 [ 46.321401][ T4219] EXT4-fs (loop1): 1 truncate cleaned up [ 46.327651][ T4219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.353603][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.747203][ T4262] geneve2: entered promiscuous mode [ 46.752511][ T4262] geneve2: entered allmulticast mode [ 46.839472][ T4268] atomic_op ffff888119a8f528 conn xmit_atomic 0000000000000000 [ 46.878554][ T4271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.353'. [ 46.940832][ T4279] loop1: detected capacity change from 0 to 256 [ 46.988956][ T4282] loop4: detected capacity change from 0 to 512 [ 47.017713][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.049278][ T4282] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.064721][ T4282] veth2: entered allmulticast mode [ 47.089573][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.352950][ T4322] netlink: 400 bytes leftover after parsing attributes in process `syz.4.376'. [ 47.517587][ T4340] loop3: detected capacity change from 0 to 8192 [ 47.586630][ T4351] loop3: detected capacity change from 0 to 512 [ 47.622475][ T4351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.660524][ T4351] EXT4-fs (loop3): 1 truncate cleaned up [ 47.668272][ T4351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.711843][ T4366] netlink: 'syz.4.397': attribute type 21 has an invalid length. [ 47.721312][ T4366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.397'. [ 47.730485][ T4366] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 47.739225][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.853176][ T4378] netlink: 'syz.2.403': attribute type 17 has an invalid length. [ 48.217630][ T4426] loop4: detected capacity change from 0 to 512 [ 48.234452][ T4423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 48.529512][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 48.529528][ T29] audit: type=1326 audit(1754333825.444:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.602208][ T4460] tun0: tun_chr_ioctl cmd 1074025675 [ 48.607639][ T4460] tun0: persist enabled [ 48.613339][ T4460] tun0: tun_chr_ioctl cmd 1074025675 [ 48.618698][ T4460] tun0: persist enabled [ 48.623328][ T29] audit: type=1326 audit(1754333825.444:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.646681][ T29] audit: type=1326 audit(1754333825.444:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.669937][ T29] audit: type=1326 audit(1754333825.444:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.693199][ T29] audit: type=1326 audit(1754333825.444:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.716509][ T29] audit: type=1326 audit(1754333825.444:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.739861][ T29] audit: type=1326 audit(1754333825.444:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.763153][ T29] audit: type=1326 audit(1754333825.444:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.786747][ T29] audit: type=1326 audit(1754333825.444:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.810129][ T29] audit: type=1326 audit(1754333825.454:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 48.855448][ T4469] netem: incorrect gi model size [ 48.860464][ T4469] netem: change failed [ 48.949807][ T4479] loop1: detected capacity change from 0 to 512 [ 48.957464][ T4476] hub 6-0:1.0: USB hub found [ 48.962244][ T4476] hub 6-0:1.0: 8 ports detected [ 49.001179][ T4479] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 49.062363][ T4479] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.449: invalid indirect mapped block 2683928664 (level 1) [ 49.111848][ T4479] EXT4-fs (loop1): 1 truncate cleaned up [ 49.135761][ T4479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.185512][ T4479] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.449: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 49.274388][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.436385][ T4516] SELinux: failed to load policy [ 49.660293][ T4537] netlink: 48 bytes leftover after parsing attributes in process `syz.3.473'. [ 49.920585][ T4548] syz.3.478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.023344][ T4553] openvswitch: netlink: Message has 6 unknown bytes. [ 50.080380][ T4566] loop3: detected capacity change from 0 to 512 [ 50.087799][ T4566] journal_path: Non-blockdev passed as './bus' [ 50.094068][ T4566] EXT4-fs: error: could not find journal device path [ 50.166510][ T4570] loop0: detected capacity change from 0 to 764 [ 50.188041][ T4570] Symlink component flag not implemented [ 50.193780][ T4570] Symlink component flag not implemented [ 50.223950][ T4570] Symlink component flag not implemented (129) [ 50.230231][ T4570] Symlink component flag not implemented (6) [ 50.258472][ T4570] rock: directory entry would overflow storage [ 50.264797][ T4570] rock: sig=0x4f50, size=4, remaining=3 [ 50.270488][ T4570] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 50.609709][ T4618] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 50.764176][ T4624] SELinux: failed to load policy [ 51.065365][ T4657] io-wq is not configured for unbound workers [ 51.075102][ T4659] geneve2: entered promiscuous mode [ 51.086647][ T4659] geneve2: entered allmulticast mode [ 51.133170][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 51.174395][ T4664] netlink: 'syz.3.529': attribute type 2 has an invalid length. [ 51.333835][ T4677] syzkaller1: entered promiscuous mode [ 51.339471][ T4677] syzkaller1: entered allmulticast mode [ 51.393411][ T4682] macvtap1: entered allmulticast mode [ 51.398898][ T4682] veth0_macvtap: entered allmulticast mode [ 51.624551][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'. [ 51.739759][ T4710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.551'. [ 51.920714][ T4724] netlink: 'syz.1.557': attribute type 17 has an invalid length. [ 52.003885][ T4741] loop1: detected capacity change from 0 to 1024 [ 52.026657][ T4741] EXT4-fs: Ignoring removed nobh option [ 52.032370][ T4741] EXT4-fs: Ignoring removed bh option [ 52.047944][ T4743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4743 comm=syz.0.563 [ 52.102615][ T4741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.237707][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.455249][ T4768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.572'. [ 52.496989][ T4768] netlink: 'syz.1.572': attribute type 13 has an invalid length. [ 52.504920][ T4768] netlink: 'syz.1.572': attribute type 17 has an invalid length. [ 52.613296][ T4768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.932428][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 52.941610][ T4843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 52.950649][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 52.980773][ T4843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 53.322480][ T4871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.592'. [ 53.581692][ T4895] 9pnet: Could not find request transport: 0xffffffffffffffff [ 53.730877][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 53.730897][ T29] audit: type=1400 audit(1754333830.644:874): avc: denied { setopt } for pid=4905 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.777945][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 53.789541][ T4914] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 53.800182][ T4914] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 53.819432][ T4915] ALSA: seq fatal error: cannot create timer (-19) [ 53.866348][ T29] audit: type=1400 audit(1754333830.784:875): avc: denied { write } for pid=4920 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.886340][ T29] audit: type=1400 audit(1754333830.784:876): avc: denied { nlmsg_write } for pid=4920 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.910287][ T4923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 53.916853][ T4923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.924573][ T4923] vhci_hcd vhci_hcd.0: Device attached [ 53.942947][ T4926] vhci_hcd: connection closed [ 53.945361][ T4813] vhci_hcd: stop threads [ 53.954354][ T4813] vhci_hcd: release socket [ 53.958837][ T4813] vhci_hcd: disconnect device [ 53.977789][ T29] audit: type=1400 audit(1754333830.824:877): avc: denied { name_bind } for pid=4920 comm="syz.1.615" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 54.059951][ T4939] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 54.059951][ T4939] program syz.2.622 not setting count and/or reply_len properly [ 54.207007][ T4948] syzkaller1: entered promiscuous mode [ 54.212615][ T4948] syzkaller1: entered allmulticast mode [ 54.235739][ T4950] lo speed is unknown, defaulting to 1000 [ 54.241594][ T4950] lo speed is unknown, defaulting to 1000 [ 54.247630][ T4950] lo speed is unknown, defaulting to 1000 [ 54.253676][ T4950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.261393][ T4950] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 54.272124][ T4950] lo speed is unknown, defaulting to 1000 [ 54.278216][ T4950] lo speed is unknown, defaulting to 1000 [ 54.284461][ T4950] lo speed is unknown, defaulting to 1000 [ 54.291539][ T4950] lo speed is unknown, defaulting to 1000 [ 54.297759][ T4950] lo speed is unknown, defaulting to 1000 [ 54.337048][ T29] audit: type=1326 audit(1754333831.254:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.360382][ T29] audit: type=1326 audit(1754333831.254:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.385502][ T29] audit: type=1326 audit(1754333831.254:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.408938][ T29] audit: type=1326 audit(1754333831.254:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.432239][ T29] audit: type=1326 audit(1754333831.254:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.432289][ T29] audit: type=1326 audit(1754333831.254:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 54.723441][ T4988] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.515601][ T5058] lo speed is unknown, defaulting to 1000 [ 55.574012][ T5058] netlink: 'syz.0.675': attribute type 13 has an invalid length. [ 55.582847][ T5058] netlink: 'syz.0.675': attribute type 17 has an invalid length. [ 55.609077][ T5058] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.515601][ T5123] __nla_validate_parse: 3 callbacks suppressed [ 56.515619][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 56.560994][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 56.872801][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 56.915080][ T5156] raw_sendmsg: syz.2.719 forgot to set AF_INET. Fix it! [ 57.222697][ T5210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.738'. [ 57.240439][ T5212] loop3: detected capacity change from 0 to 512 [ 57.259577][ T5212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.273109][ T5212] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.344764][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.383915][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 57.383940][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 57.562718][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 57.644664][ T5241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 58.448631][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.470588][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.015151][ T5316] TCP: TCP_TX_DELAY enabled [ 59.072291][ T5321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.787'. [ 59.083864][ T5318] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 59.144313][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 59.144331][ T29] audit: type=1326 audit(1754333837.048:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.202855][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.210711][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.210743][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.210903][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.210928][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.210983][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.211009][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.211043][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.211096][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.211122][ T9] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 59.225255][ T9] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 59.229723][ T29] audit: type=1326 audit(1754333837.088:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.229900][ T29] audit: type=1326 audit(1754333837.098:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230006][ T29] audit: type=1326 audit(1754333837.098:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230049][ T29] audit: type=1326 audit(1754333837.098:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230083][ T29] audit: type=1326 audit(1754333837.098:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230187][ T29] audit: type=1326 audit(1754333837.098:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230227][ T29] audit: type=1326 audit(1754333837.098:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230265][ T29] audit: type=1326 audit(1754333837.098:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.230300][ T29] audit: type=1326 audit(1754333837.098:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 59.271946][ T5335] fido_id[5335]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.405793][ T5346] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 59.412917][ T5346] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.427324][ T5348] loop1: detected capacity change from 0 to 128 [ 59.456571][ T5348] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.713010][ T5352] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.713010][ T5352] program syz.0.800 not setting count and/or reply_len properly [ 59.750590][ T5348] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.817452][ T5360] cgroup: fork rejected by pids controller in /syz2 [ 59.904104][ T5368] lo speed is unknown, defaulting to 1000 [ 59.932094][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.216895][ T5386] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 60.225293][ T5386] netlink: 'syz.0.815': attribute type 19 has an invalid length. [ 60.233137][ T5386] netlink: 156 bytes leftover after parsing attributes in process `syz.0.815'. [ 60.292504][ T4796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.361528][ T4796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.429052][ T4796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.511012][ T4796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.675980][ T5426] bond1: entered promiscuous mode [ 60.681291][ T5426] bond1: entered allmulticast mode [ 60.686742][ T5426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.706643][ T5426] bond1 (unregistering): Released all slaves [ 60.741584][ T4796] bridge_slave_1: left allmulticast mode [ 60.747421][ T4796] bridge_slave_1: left promiscuous mode [ 60.753188][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.886406][ T4796] bridge_slave_0: left allmulticast mode [ 60.892098][ T4796] bridge_slave_0: left promiscuous mode [ 60.897800][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.099012][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.115458][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.137616][ T4796] bond0 (unregistering): Released all slaves [ 61.208645][ T4796] hsr_slave_0: left promiscuous mode [ 61.227817][ T4796] hsr_slave_1: left promiscuous mode [ 61.241206][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.248696][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.266846][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.274302][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.291025][ T4796] veth1_macvtap: left promiscuous mode [ 61.300017][ T4796] veth0_macvtap: left promiscuous mode [ 61.308957][ T4796] veth1_vlan: left promiscuous mode [ 61.310277][ T5475] loop4: detected capacity change from 0 to 512 [ 61.320797][ T4796] veth0_vlan: left promiscuous mode [ 61.343459][ T5475] EXT4-fs: Ignoring removed oldalloc option [ 61.370812][ T5475] ext4: Unknown parameter 'smackfsfloor' [ 61.440670][ T4796] pimreg (unregistering): left allmulticast mode [ 61.493854][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 61.528548][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 61.618143][ T9] Process accounting resumed [ 61.634453][ T5497] Process accounting resumed [ 61.674850][ T5508] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 61.682642][ T5508] netlink: 'syz.0.856': attribute type 4 has an invalid length. [ 61.690340][ T5508] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.856'. [ 61.753199][ T5466] lo speed is unknown, defaulting to 1000 [ 61.798920][ T5526] netlink: 64 bytes leftover after parsing attributes in process `syz.4.860'. [ 61.926756][ T5466] chnl_net:caif_netlink_parms(): no params data found [ 62.019083][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 62.069476][ T5552] veth1_vlan: left promiscuous mode [ 62.134962][ T5563] loop1: detected capacity change from 0 to 512 [ 62.238226][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.245419][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.260863][ T5563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.293984][ T5563] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.296738][ T5466] bridge_slave_0: entered allmulticast mode [ 62.322204][ T5466] bridge_slave_0: entered promiscuous mode [ 62.341972][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.349188][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.359526][ T5466] bridge_slave_1: entered allmulticast mode [ 62.367251][ T5466] bridge_slave_1: entered promiscuous mode [ 62.373780][ T5563] program syz.1.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.395675][ T5466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.406234][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.408526][ T5466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.452439][ T5466] team0: Port device team_slave_0 added [ 62.463822][ T5466] team0: Port device team_slave_1 added [ 62.479357][ T5584] SELinux: policydb version -1661192459 does not match my version range 15-35 [ 62.491379][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.498504][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.511132][ T5584] SELinux: failed to load policy [ 62.524819][ T5466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.549848][ T5587] Illegal XDP return value 4294967274 on prog (id 468) dev syz_tun, expect packet loss! [ 62.555675][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.566782][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.592861][ T5466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.712971][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 62.743740][ T5603] loop1: detected capacity change from 0 to 1024 [ 62.757358][ T5466] hsr_slave_0: entered promiscuous mode [ 62.766391][ T5603] EXT4-fs: Ignoring removed nobh option [ 62.796395][ T5466] hsr_slave_1: entered promiscuous mode [ 62.802351][ T5466] debugfs: 'hsr0' already exists in 'hsr' [ 62.802793][ T5603] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.808161][ T5466] Cannot create hsr debugfs directory [ 62.838554][ T5603] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.880: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 62.861136][ T5603] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.880: couldn't read orphan inode 11 (err -117) [ 62.873518][ T5603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.909645][ T5603] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.880: Invalid block bitmap block 0 in block_group 0 [ 62.923418][ T5603] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.880: Failed to acquire dquot type 0 [ 62.938465][ T5603] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.880: Invalid inode bitmap blk 137438953472 in block_group 0 [ 62.968053][ T4813] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:48: Invalid inode table block 8589934593 in block_group 0 [ 62.986109][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.117887][ T5634] batadv_slave_1: entered promiscuous mode [ 63.163104][ T5646] loop4: detected capacity change from 0 to 1024 [ 63.176651][ T5646] EXT4-fs: inline encryption not supported [ 63.183250][ T5646] EXT4-fs: Ignoring removed bh option [ 63.184654][ T5633] batadv_slave_1: left promiscuous mode [ 63.228162][ T5646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.264830][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.294713][ T5652] syzkaller1: entered promiscuous mode [ 63.300266][ T5652] syzkaller1: entered allmulticast mode [ 63.441963][ T5466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.463091][ T5466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.478575][ T5466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.511023][ T5466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.602082][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.643135][ T5466] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.668719][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.675893][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.707278][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.714615][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.112110][ T5466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.142668][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 64.151722][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 64.160714][ T5741] netlink: 50 bytes leftover after parsing attributes in process `syz.3.905'. [ 64.240391][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 64.240410][ T29] audit: type=1400 audit(1754333842.148:1133): avc: denied { read } for pid=5749 comm="syz.3.907" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.280316][ T29] audit: type=1400 audit(1754333842.148:1134): avc: denied { open } for pid=5749 comm="syz.3.907" path="net:[4026532493]" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.303652][ T29] audit: type=1400 audit(1754333842.148:1135): avc: denied { create } for pid=5749 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.323135][ T29] audit: type=1400 audit(1754333842.148:1136): avc: denied { ioctl } for pid=5749 comm="syz.3.907" path="socket:[11692]" dev="sockfs" ino=11692 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.347779][ T29] audit: type=1400 audit(1754333842.168:1137): avc: denied { create } for pid=5749 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.367302][ T29] audit: type=1400 audit(1754333842.168:1138): avc: denied { bind } for pid=5749 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.383988][ T5759] netlink: 332 bytes leftover after parsing attributes in process `syz.3.909'. [ 64.386471][ T29] audit: type=1400 audit(1754333842.168:1139): avc: denied { write } for pid=5749 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.452541][ T5466] veth0_vlan: entered promiscuous mode [ 64.476600][ T5466] veth1_vlan: entered promiscuous mode [ 64.524989][ T5466] veth0_macvtap: entered promiscuous mode [ 64.534453][ T29] audit: type=1400 audit(1754333842.418:1140): avc: denied { read } for pid=5768 comm="syz.0.912" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.580078][ T5466] veth1_macvtap: entered promiscuous mode [ 64.614024][ T29] audit: type=1400 audit(1754333842.518:1141): avc: denied { create } for pid=5779 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.635391][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.660272][ T29] audit: type=1400 audit(1754333842.548:1142): avc: denied { connect } for pid=5779 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.673579][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.693542][ T5783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 64.735320][ T4813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.754317][ T4813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.817627][ T4813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.872613][ T4813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.896328][ T5807] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 64.903021][ T5807] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.910598][ T5807] vhci_hcd vhci_hcd.0: Device attached [ 64.957400][ T5807] loop3: detected capacity change from 0 to 1024 [ 64.972409][ T5807] EXT4-fs: Ignoring removed nobh option [ 64.978134][ T5807] EXT4-fs: Ignoring removed bh option [ 65.007938][ T5807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.040156][ T5808] vhci_hcd: cannot find a urb of seqnum 7510 max seqnum 0 [ 65.050150][ T4819] vhci_hcd: stop threads [ 65.054450][ T4819] vhci_hcd: release socket [ 65.058977][ T4819] vhci_hcd: disconnect device [ 65.079037][ T5826] SELinux: failed to load policy [ 65.095161][ T23] vhci_hcd: vhci_device speed not set [ 65.109246][ T5834] loop4: detected capacity change from 0 to 512 [ 65.122520][ T5834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.155707][ T5834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.177269][ T5834] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.196930][ T5834] EXT4-fs (loop4): shut down requested (0) [ 65.217627][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.291338][ T5849] loop4: detected capacity change from 0 to 4096 [ 65.302439][ T5849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.333106][ T5849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.373532][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.539489][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 65.562964][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.582537][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.624198][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.077971][ T5938] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 66.109971][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.132319][ T5938] bridge_slave_1: left allmulticast mode [ 66.138083][ T5938] bridge_slave_1: left promiscuous mode [ 66.143807][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.199284][ T5938] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 67.145273][ T5971] Falling back ldisc for ttyS3. [ 67.162878][ T5975] loop1: detected capacity change from 0 to 128 [ 67.198169][ T5975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.214040][ T5975] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.268727][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.998314][ T6065] tmpfs: Bad value for 'mpol' [ 68.100248][ T6080] syzkaller1: entered promiscuous mode [ 68.105952][ T6080] syzkaller1: entered allmulticast mode [ 68.232983][ T6092] unsupported nla_type 52263 [ 68.340857][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 68.363364][ T6114] loop9: detected capacity change from 0 to 7 [ 68.370460][ T6114] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.380560][ T6114] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.388529][ T6114] loop9: unable to read partition table [ 68.394665][ T6114] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 68.394665][ T6114] ) failed (rc=-5) [ 68.462054][ T6128] IPVS: stopping master sync thread 6130 ... [ 68.462308][ T6130] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 68.494128][ T6133] rtc_cmos 00:00: Alarms can be up to one day in the future [ 68.630691][ T6155] SELinux: Context system_u:object_r:devicekit_var_run_t:s0 is not valid (left unmapped). [ 68.760673][ T6172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 68.906610][ T6191] netlink: 'syz.4.1066': attribute type 12 has an invalid length. [ 68.914569][ T6191] netlink: 'syz.4.1066': attribute type 29 has an invalid length. [ 68.922621][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1066'. [ 69.048588][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.056417][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.064111][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.071794][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.079158][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 69.117317][ T6220] openvswitch: netlink: Message has 6 unknown bytes. [ 69.143868][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'. [ 69.218958][ T6235] loop4: detected capacity change from 0 to 2048 [ 69.235791][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 69.255703][ T6235] loop4: p1 < > p4 [ 69.264763][ T6239] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1088'. [ 69.268459][ T6235] loop4: p4 size 8388608 extends beyond EOD, truncated [ 69.335315][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 69.335351][ T29] audit: type=1400 audit(1754333847.238:1298): avc: denied { read write } for pid=6234 comm="syz.4.1087" name="loop4p4" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.364895][ T29] audit: type=1400 audit(1754333847.248:1299): avc: denied { open } for pid=6234 comm="syz.4.1087" path="/dev/loop4p4" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.411289][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1095'. [ 69.420547][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1095'. [ 69.429734][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1095'. [ 69.451893][ T6248] loop3: detected capacity change from 0 to 8192 [ 69.474611][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 69.500868][ T29] audit: type=1326 audit(1754333847.378:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.524595][ T29] audit: type=1326 audit(1754333847.378:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.548778][ T29] audit: type=1326 audit(1754333847.378:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.573129][ T29] audit: type=1326 audit(1754333847.378:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.596595][ T29] audit: type=1326 audit(1754333847.378:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.620019][ T29] audit: type=1326 audit(1754333847.378:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.643488][ T29] audit: type=1326 audit(1754333847.398:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.666906][ T29] audit: type=1326 audit(1754333847.398:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ce8deb69 code=0x7ffc0000 [ 69.697549][ T6266] openvswitch: netlink: Message has 6 unknown bytes. [ 69.778389][ T6281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1109'. [ 69.926030][ T6302] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 70.183851][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.192972][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.202058][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.211356][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.221040][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.230186][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.239424][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.248499][ T6328] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 70.569135][ T6355] lo speed is unknown, defaulting to 1000 [ 71.979071][ T6548] syzkaller1: entered promiscuous mode [ 71.984657][ T6548] syzkaller1: entered allmulticast mode [ 71.999562][ T6544] loop3: detected capacity change from 0 to 2048 [ 72.158531][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.267306][ T6544] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 72.267658][ T6544] EXT4-fs (loop3): Remounting filesystem read-only [ 72.327268][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.565210][ T6582] SELinux: Context is not valid (left unmapped). [ 72.926497][ T6600] loop3: detected capacity change from 0 to 1024 [ 72.979741][ T6600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.021993][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.215267][ T6639] gtp0: entered promiscuous mode [ 73.220373][ T6639] gtp0: entered allmulticast mode [ 73.584889][ T6684] __nla_validate_parse: 10 callbacks suppressed [ 73.584905][ T6684] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1247'. [ 73.614809][ T6689] netlink: 'syz.2.1250': attribute type 6 has an invalid length. [ 73.638211][ T6693] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 73.785559][ T6722] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 73.793433][ T6722] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.1266'. [ 73.843120][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.851707][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.382645][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 74.382670][ T29] audit: type=1326 audit(1754333852.295:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03ef51eb69 code=0x7fc00000 [ 74.482648][ T6751] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 74.509221][ T6753] 9pnet_fd: Insufficient options for proto=fd [ 74.531430][ T29] audit: type=1400 audit(1754333852.445:1437): avc: denied { bind } for pid=6756 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.550882][ T29] audit: type=1400 audit(1754333852.445:1438): avc: denied { name_bind } for pid=6756 comm="syz.2.1282" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.572895][ T29] audit: type=1400 audit(1754333852.445:1439): avc: denied { node_bind } for pid=6756 comm="syz.2.1282" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 74.671055][ T29] audit: type=1400 audit(1754333852.585:1440): avc: denied { write } for pid=6768 comm="syz.2.1287" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.695448][ T6771] program syz.2.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.755233][ T29] audit: type=1326 audit(1754333852.665:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 74.779417][ T29] audit: type=1326 audit(1754333852.675:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 74.937715][ T29] audit: type=1326 audit(1754333852.715:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 74.961180][ T29] audit: type=1326 audit(1754333852.715:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 74.984958][ T29] audit: type=1326 audit(1754333852.715:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64551eb69 code=0x7ffc0000 [ 75.878149][ T6893] batadv_slave_1: entered promiscuous mode [ 75.884970][ T6892] batadv_slave_1: left promiscuous mode [ 75.946055][ T6896] vhci_hcd: invalid port number 224 [ 76.103265][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 76.219592][ T6940] loop3: detected capacity change from 0 to 128 [ 76.367263][ T6940] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.394753][ T6940] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.422881][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.473129][ T6955] bond1: entered promiscuous mode [ 76.478390][ T6955] bond1: entered allmulticast mode [ 76.483856][ T6955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.493663][ T6955] bond1 (unregistering): Released all slaves [ 76.531892][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 76.601761][ T6963] loop3: detected capacity change from 0 to 1764 [ 76.695949][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 76.704972][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 76.713978][ T6976] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1377'. [ 76.736187][ T6980] dummy0: entered promiscuous mode [ 76.742372][ T6980] bond0: entered promiscuous mode [ 76.747534][ T6980] bond_slave_0: entered promiscuous mode [ 76.753307][ T6980] bond_slave_1: entered promiscuous mode [ 76.761170][ T6980] hsr1: entered allmulticast mode [ 76.768129][ T6980] dummy0: entered allmulticast mode [ 76.773394][ T6980] bond0: entered allmulticast mode [ 76.778788][ T6980] bond_slave_0: entered allmulticast mode [ 76.784562][ T6980] bond_slave_1: entered allmulticast mode [ 76.815680][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 77.287446][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.315282][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.462655][ T7029] SELinux: failed to load policy [ 78.066803][ T7084] loop1: detected capacity change from 0 to 1024 [ 78.073821][ T7084] EXT4-fs: Ignoring removed orlov option [ 78.115847][ T7084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.157421][ T7084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1426: bg 0: block 88: padding at end of block bitmap is not set [ 78.233918][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.304946][ T7104] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1435'. [ 78.384590][ T7110] program syz.2.1438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.500240][ T7121] bridge0: port 3(vlan2) entered blocking state [ 78.506963][ T7121] bridge0: port 3(vlan2) entered disabled state [ 78.515609][ T7121] vlan2: entered allmulticast mode [ 78.520848][ T7121] bond0: entered allmulticast mode [ 78.526081][ T7121] bond_slave_0: entered allmulticast mode [ 78.531929][ T7121] bond_slave_1: entered allmulticast mode [ 78.539336][ T7121] vlan2: entered promiscuous mode [ 78.544419][ T7121] bond0: entered promiscuous mode [ 78.549514][ T7121] bond_slave_0: entered promiscuous mode [ 78.555377][ T7121] bond_slave_1: entered promiscuous mode [ 78.618657][ T7134] loop1: detected capacity change from 0 to 512 [ 78.640083][ T7134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.695362][ T7134] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.709516][ T7134] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.872193][ T7163] loop4: detected capacity change from 0 to 1024 [ 78.878951][ T7163] EXT4-fs: Ignoring removed bh option [ 78.885215][ T7163] EXT4-fs: inline encryption not supported [ 78.895785][ T7163] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.917177][ T7163] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1462: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.933220][ T7163] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1462: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.947970][ T7163] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1462: Failed to acquire dquot type 0 [ 78.959735][ T7163] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 78.969709][ T7163] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1462: mark_inode_dirty error [ 78.985663][ T7167] Falling back ldisc for ttyS3. [ 78.992322][ T7163] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.008859][ T7163] EXT4-fs (loop4): 1 orphan inode deleted [ 79.015998][ T7163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.024243][ T7178] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1466'. [ 79.037685][ T4798] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.055845][ T4798] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0 [ 79.110082][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.123567][ T3307] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 79.175198][ T3307] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 79.186245][ T3307] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 79.220459][ T7193] lo speed is unknown, defaulting to 1000 [ 79.424704][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 79.424720][ T29] audit: type=1400 audit(1754333857.335:1701): avc: denied { setopt } for pid=7212 comm="syz.0.1492" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.458768][ T29] audit: type=1400 audit(1754333857.335:1702): avc: denied { connect } for pid=7212 comm="syz.0.1492" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.559003][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 79.566736][ T29] audit: type=1400 audit(1754333857.475:1703): avc: denied { create } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.620798][ T29] audit: type=1400 audit(1754333857.505:1704): avc: denied { setopt } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.640353][ T29] audit: type=1400 audit(1754333857.505:1705): avc: denied { shutdown } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.660260][ T29] audit: type=1400 audit(1754333857.505:1706): avc: denied { getopt } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.679898][ T29] audit: type=1400 audit(1754333857.505:1707): avc: denied { connect } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.699728][ T29] audit: type=1400 audit(1754333857.505:1708): avc: denied { name_connect } for pid=7236 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.806632][ T7254] loop1: detected capacity change from 0 to 512 [ 79.836965][ T7254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.856152][ T7254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.869940][ T7254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1484: bg 0: block 248: padding at end of block bitmap is not set [ 79.925566][ T7254] Quota error (device loop1): write_blk: dquota write failed [ 79.933091][ T7254] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 79.943094][ T7254] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1484: Failed to acquire dquot type 1 [ 79.959558][ T7281] tmpfs: Bad value for 'mpol' [ 80.014591][ T7254] EXT4-fs (loop1): 1 truncate cleaned up [ 80.028876][ T7254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.074692][ T7308] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.089621][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.447488][ T7377] loop9: detected capacity change from 0 to 7 [ 80.464664][ T7377] Buffer I/O error on dev loop9, logical block 0, async page read [ 80.506882][ T7387] rtc_cmos 00:00: Alarms can be up to one day in the future [ 80.511556][ T7377] Buffer I/O error on dev loop9, logical block 0, async page read [ 80.522308][ T7377] loop9: unable to read partition table [ 80.529620][ T7377] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 80.529620][ T7377] ) failed (rc=-5) [ 80.706077][ T7425] dummy0: entered promiscuous mode [ 80.714807][ T7425] dummy0: left promiscuous mode [ 80.731236][ T7429] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 80.841307][ T7445] loop1: detected capacity change from 0 to 1024 [ 80.849102][ T7445] EXT4-fs: inline encryption not supported [ 80.855975][ T7445] EXT4-fs: Ignoring removed bh option [ 80.877950][ T7453] netlink: 'syz.2.1568': attribute type 12 has an invalid length. [ 80.885945][ T7453] netlink: 'syz.2.1568': attribute type 29 has an invalid length. [ 80.893794][ T7453] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1568'. [ 80.904107][ T7445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.950764][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.047057][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.054755][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.062405][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.070113][ T3385] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.077580][ T3385] rtc rtc0: __rtc_set_alarm: err=-22 [ 81.311751][ T7503] net_ratelimit: 3322 callbacks suppressed [ 81.311768][ T7503] openvswitch: netlink: Message has 6 unknown bytes. [ 81.468797][ T7521] loop4: detected capacity change from 0 to 2048 [ 81.501224][ T7521] EXT4-fs (loop4): failed to initialize system zone (-117) [ 81.518580][ T7521] EXT4-fs (loop4): mount failed [ 81.585395][ T7543] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1609'. [ 81.621345][ T7545] loop1: detected capacity change from 0 to 4096 [ 81.639001][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 81.649664][ T7545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.685679][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.724455][ T7558] openvswitch: netlink: Message has 6 unknown bytes. [ 81.766252][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.782529][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 81.828716][ T7576] sctp: [Deprecated]: syz.3.1616 (pid 7576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.828716][ T7576] Use struct sctp_sack_info instead [ 81.953963][ T7601] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1625'. [ 82.002735][ T7607] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 82.011429][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.044607][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.051827][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.058966][ T7612] loop1: detected capacity change from 0 to 4096 [ 82.079328][ T7607] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.090434][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 82.090512][ T7612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.137088][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.384609][ T7656] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 82.384609][ T7656] The task syz.2.1646 (7656) triggered the difference, watch for misbehavior. [ 82.500501][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.510921][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.630487][ T7675] loop0: detected capacity change from 0 to 1024 [ 82.637568][ T7675] EXT4-fs: inline encryption not supported [ 82.648988][ T7675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.724124][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.363525][ T7707] random: crng reseeded on system resumption [ 83.646355][ T7734] usb usb8: usbfs: process 7734 (syz.1.1687) did not claim interface 0 before use [ 84.425342][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 84.425359][ T29] audit: type=1400 audit(1754333862.305:1901): avc: denied { execmem } for pid=7789 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.450993][ T29] audit: type=1400 audit(1754333862.305:1902): avc: denied { getopt } for pid=7792 comm="syz.4.1717" lport=34280 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.474801][ T29] audit: type=1400 audit(1754333862.325:1903): avc: denied { create } for pid=7794 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.494333][ T29] audit: type=1400 audit(1754333862.325:1904): avc: denied { write } for pid=7794 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.524286][ T7788] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 84.525174][ T29] audit: type=1400 audit(1754333862.435:1905): avc: denied { create } for pid=7787 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.552862][ T29] audit: type=1400 audit(1754333862.435:1906): avc: denied { write } for pid=7787 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.588380][ T29] audit: type=1400 audit(1754333862.495:1907): avc: denied { create } for pid=7799 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.627695][ T7804] loop0: detected capacity change from 0 to 512 [ 84.639408][ T7808] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 84.669198][ T7808] team0: Device hsr_slave_0 failed to register rx_handler [ 84.676501][ T7804] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 84.688745][ T7804] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 84.699291][ T7804] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1730: Failed to acquire dquot type 1 [ 84.712692][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1730: corrupted inode contents [ 84.724766][ T7804] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1730: mark_inode_dirty error [ 84.737592][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1730: corrupted inode contents [ 84.749733][ T7804] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1730: mark_inode_dirty error [ 84.761472][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1730: corrupted inode contents [ 84.773836][ T7804] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 84.782986][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1730: corrupted inode contents [ 84.795068][ T29] audit: type=1400 audit(1754333862.695:1908): avc: denied { setopt } for pid=7814 comm="syz.2.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.801447][ T7804] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1730: mark_inode_dirty error [ 84.830655][ T7804] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 84.833737][ T7817] loop1: detected capacity change from 0 to 1024 [ 84.840281][ T7804] EXT4-fs (loop0): 1 truncate cleaned up [ 84.852253][ T7804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.864822][ T7804] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.876976][ T7817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.901910][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.911015][ T7819] lo speed is unknown, defaulting to 1000 [ 84.925821][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.049781][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 85.062528][ T7845] gtp1: entered promiscuous mode [ 85.067646][ T7845] gtp1: entered allmulticast mode [ 85.311691][ T7871] lo speed is unknown, defaulting to 1000 [ 86.627658][ T8036] lo speed is unknown, defaulting to 1000 [ 86.954825][ T8080] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 86.975616][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.984528][ T8080] batadv0: entered promiscuous mode [ 86.989971][ T8080] batadv0: entered allmulticast mode [ 87.013365][ T8080] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 87.252202][ T8124] lo speed is unknown, defaulting to 1000 [ 87.766820][ T8214] bond1: entered promiscuous mode [ 87.771993][ T8214] bond1: entered allmulticast mode [ 87.787390][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.804019][ T8214] bond1 (unregistering): Released all slaves [ 87.959001][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 87.974587][ T8252] dummy0: entered promiscuous mode [ 87.986621][ T8252] debugfs: 'hsr1' already exists in 'hsr' [ 87.992388][ T8252] Cannot create hsr debugfs directory [ 87.999755][ T8252] hsr1: entered allmulticast mode [ 88.004855][ T8252] dummy0: entered allmulticast mode [ 88.097105][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 88.403010][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 88.855014][ T8355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'. [ 89.046975][ T8389] netlink: 'syz.1.1996': attribute type 21 has an invalid length. [ 89.054847][ T8389] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 89.062725][ T8389] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1996'. [ 89.069699][ T8393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8393 comm=syz.4.1999 [ 89.193265][ T8412] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 89.199998][ T8412] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.208395][ T8412] vhci_hcd vhci_hcd.0: Device attached [ 89.237845][ T8416] vhci_hcd: cannot find a urb of seqnum 7510 max seqnum 0 [ 89.245413][ T4821] vhci_hcd: stop threads [ 89.249690][ T4821] vhci_hcd: release socket [ 89.254117][ T4821] vhci_hcd: disconnect device [ 89.439258][ T29] kauditd_printk_skb: 844 callbacks suppressed [ 89.439276][ T29] audit: type=1400 audit(1754333867.355:2753): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.479682][ T29] audit: type=1400 audit(1754333867.365:2754): avc: denied { prog_load } for pid=8464 comm="syz.4.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.498929][ T29] audit: type=1400 audit(1754333867.365:2755): avc: denied { create } for pid=8464 comm="syz.4.2034" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 89.519760][ T29] audit: type=1400 audit(1754333867.365:2756): avc: denied { prog_load } for pid=8464 comm="syz.4.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.538917][ T29] audit: type=1400 audit(1754333867.385:2757): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.563160][ T29] audit: type=1400 audit(1754333867.385:2758): avc: denied { map_create } for pid=8466 comm="syz.1.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.582349][ T29] audit: type=1400 audit(1754333867.395:2759): avc: denied { prog_load } for pid=8466 comm="syz.1.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.601430][ T29] audit: type=1400 audit(1754333867.395:2760): avc: denied { read write } for pid=8467 comm="syz.4.2035" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.627933][ T29] audit: type=1400 audit(1754333867.415:2761): avc: denied { map_create } for pid=8467 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.647139][ T29] audit: type=1400 audit(1754333867.415:2762): avc: denied { prog_load } for pid=8467 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.797297][ T8509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8509 comm=syz.1.2054 [ 89.854358][ T8517] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.124066][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2081'. [ 90.472165][ T8619] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.683954][ T8652] lo speed is unknown, defaulting to 1000 [ 90.805078][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 91.986770][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 94.539947][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 94.539962][ T29] audit: type=1400 audit(1754333872.457:3694): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.750853][ T29] audit: type=1400 audit(1754333872.667:3695): avc: denied { create } for pid=9153 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 94.806096][ T29] audit: type=1400 audit(1754333872.667:3696): avc: denied { prog_load } for pid=9153 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.806186][ T29] audit: type=1400 audit(1754333872.667:3697): avc: denied { create } for pid=9153 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 94.806217][ T29] audit: type=1400 audit(1754333872.697:3698): avc: denied { map_create } for pid=9157 comm="syz.2.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.806319][ T29] audit: type=1400 audit(1754333872.707:3699): avc: denied { prog_load } for pid=9157 comm="syz.2.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.806380][ T29] audit: type=1400 audit(1754333872.707:3700): avc: denied { prog_load } for pid=9157 comm="syz.2.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.806402][ T29] audit: type=1400 audit(1754333872.717:3701): avc: denied { execmem } for pid=9154 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 94.846797][ T29] audit: type=1400 audit(1754333872.747:3702): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.875193][ T29] audit: type=1400 audit(1754333872.787:3703): avc: denied { create } for pid=9161 comm="syz.3.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 95.051071][ T9181] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 95.127456][ T9191] lo speed is unknown, defaulting to 1000 [ 95.347211][ T9219] netlink: 'syz.1.2405': attribute type 10 has an invalid length. [ 95.393027][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.400268][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.413753][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.420935][ T9219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.428352][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.435477][ T9219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.448403][ T9219] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.521867][ T9237] lo speed is unknown, defaulting to 1000 [ 95.613961][ T9258] netlink: 'syz.4.2424': attribute type 10 has an invalid length. [ 95.626335][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.633503][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.666070][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.673261][ T9258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.680653][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.687794][ T9258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.715193][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.722331][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.767297][ T9326] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 96.986121][ T9354] netlink: 'syz.0.2459': attribute type 10 has an invalid length. [ 97.029077][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.053992][ T9354] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.097799][ T9371] netlink: 'syz.4.2468': attribute type 10 has an invalid length. [ 97.119686][ T9363] bond0: entered promiscuous mode [ 97.124802][ T9363] bond_slave_0: entered promiscuous mode [ 97.130640][ T9363] bond_slave_1: entered promiscuous mode [ 97.155255][ T9363] dummy0: entered promiscuous mode [ 97.160535][ T9363] bridge_slave_1: entered promiscuous mode [ 97.166644][ T9363] bridge0: entered promiscuous mode [ 97.172143][ T9363] batadv0: entered promiscuous mode [ 97.217067][ T9371] team0: Device hsr_slave_0 failed to register rx_handler [ 97.421141][ T9424] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 97.436341][ T9424] team0: Device hsr_slave_0 failed to register rx_handler [ 97.592398][ T9447] lo speed is unknown, defaulting to 1000 [ 97.631456][ T9457] lo speed is unknown, defaulting to 1000 [ 97.836759][ T9483] netlink: 'syz.3.2519': attribute type 10 has an invalid length. [ 97.848582][ T9483] team0: Device hsr_slave_0 failed to register rx_handler [ 98.056861][ T9515] lo speed is unknown, defaulting to 1000 [ 98.710746][ T9528] lo speed is unknown, defaulting to 1000 [ 98.725468][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 98.886984][ T9553] dummy0: entered promiscuous mode [ 98.893256][ T9553] bond0: entered promiscuous mode [ 98.898429][ T9553] bond_slave_0: entered promiscuous mode [ 98.904215][ T9553] bond_slave_1: entered promiscuous mode [ 98.917546][ T9553] debugfs: 'hsr1' already exists in 'hsr' [ 98.923352][ T9553] Cannot create hsr debugfs directory [ 98.949171][ T9553] hsr1: entered allmulticast mode [ 98.954309][ T9553] dummy0: entered allmulticast mode [ 98.959710][ T9553] bond0: entered allmulticast mode [ 98.964843][ T9553] bond_slave_0: entered allmulticast mode [ 98.970671][ T9553] bond_slave_1: entered allmulticast mode [ 99.114667][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 99.470104][ T9591] netlink: 'syz.2.2571': attribute type 10 has an invalid length. [ 99.508252][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.533025][ T9591] batadv0: entered promiscuous mode [ 99.538601][ T9591] batadv0: entered allmulticast mode [ 99.545454][ T9591] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.554614][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 99.554629][ T29] audit: type=1400 audit(1754333877.467:4256): avc: denied { create } for pid=9596 comm="syz.4.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 99.605699][ T29] audit: type=1400 audit(1754333877.517:4257): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.643652][ T29] audit: type=1400 audit(1754333877.557:4258): avc: denied { map_create } for pid=9605 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.662908][ T29] audit: type=1400 audit(1754333877.557:4259): avc: denied { prog_load } for pid=9605 comm="syz.3.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.684005][ T29] audit: type=1400 audit(1754333877.577:4260): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 99.757390][ T29] audit: type=1400 audit(1754333877.627:4261): avc: denied { map_create } for pid=9607 comm="syz.0.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.776679][ T29] audit: type=1400 audit(1754333877.627:4262): avc: denied { prog_load } for pid=9607 comm="syz.0.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.796021][ T29] audit: type=1400 audit(1754333877.637:4263): avc: denied { map_create } for pid=9609 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.815260][ T29] audit: type=1400 audit(1754333877.637:4264): avc: denied { prog_load } for pid=9609 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.834576][ T29] audit: type=1326 audit(1754333877.637:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b354eb69 code=0x7ffc0000 [ 99.914652][ T9637] netlink: 'syz.0.2590': attribute type 21 has an invalid length. [ 99.923876][ T9637] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 99.931797][ T9637] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2590'. [ 99.969539][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.996653][ T9641] batadv0: entered promiscuous mode [ 100.002093][ T9641] batadv0: entered allmulticast mode [ 100.022439][ T9641] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.764030][ T9671] validate_nla: 1 callbacks suppressed [ 100.764111][ T9671] netlink: 'syz.1.2614': attribute type 10 has an invalid length. [ 100.782505][ T9671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.791779][ T9671] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.808382][ T9671] bond0: entered promiscuous mode [ 100.813451][ T9671] bond_slave_0: entered promiscuous mode [ 100.819231][ T9671] bond_slave_1: entered promiscuous mode [ 100.825154][ T9671] bridge0: entered promiscuous mode [ 100.830589][ T9671] batadv0: entered promiscuous mode [ 100.838041][ T10] srz1: Port: 1 Link DOWN [ 101.011102][ T9696] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.044971][ T9703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9703 comm=syz.2.2621 [ 101.594077][ T9768] lo speed is unknown, defaulting to 1000 [ 102.668000][ T9902] lo speed is unknown, defaulting to 1000 [ 103.339625][ T9911] netlink: 'syz.3.2720': attribute type 21 has an invalid length. [ 103.357701][ T9911] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 103.365540][ T9911] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2720'. [ 103.470119][ T9924] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.862808][ T9961] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.973188][ T1036] lo speed is unknown, defaulting to 1000 [ 104.555181][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 104.555200][ T29] audit: type=1400 audit(1754333882.467:4819): avc: denied { prog_load } for pid=10036 comm="syz.2.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.615709][ T29] audit: type=1400 audit(1754333882.517:4820): avc: denied { prog_load } for pid=10041 comm="syz.1.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.635044][ T29] audit: type=1400 audit(1754333882.527:4821): avc: denied { read write } for pid=10041 comm="syz.1.2787" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 104.659552][ T29] audit: type=1400 audit(1754333882.527:4822): avc: denied { create } for pid=10044 comm="syz.2.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 104.679472][ T29] audit: type=1400 audit(1754333882.527:4823): avc: denied { create } for pid=10044 comm="syz.2.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 104.743993][ T29] audit: type=1400 audit(1754333882.537:4824): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.768626][ T29] audit: type=1400 audit(1754333882.557:4825): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.793012][ T29] audit: type=1400 audit(1754333882.557:4826): avc: denied { prog_load } for pid=10047 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.812320][ T29] audit: type=1400 audit(1754333882.577:4827): avc: denied { write } for pid=10046 comm="syz.4.2782" name="mcfilter" dev="proc" ino=4026532685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 104.835495][ T29] audit: type=1400 audit(1754333882.617:4828): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.832259][T10196] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2852'. [ 105.982143][T10210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2052 sclass=netlink_audit_socket pid=10210 comm=syz.1.2859 [ 106.088066][T10218] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2871'. [ 106.322096][T10240] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2870'. [ 106.334975][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2870'. [ 106.372689][T10245] macvlan1: entered promiscuous mode [ 106.379296][T10245] ipvlan0: entered promiscuous mode [ 106.385247][T10245] ipvlan0: left promiscuous mode [ 106.390446][T10245] macvlan1: left promiscuous mode [ 106.564270][T10269] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2895'. [ 106.573581][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2895'. [ 106.608683][T10274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2052 sclass=netlink_audit_socket pid=10274 comm=syz.3.2887 [ 106.711625][T10292] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 106.778445][T10299] macvlan1: entered promiscuous mode [ 106.784974][T10299] ipvlan0: entered promiscuous mode [ 106.790912][T10299] ipvlan0: left promiscuous mode [ 106.797424][T10299] macvlan1: left promiscuous mode [ 106.843230][T10305] loop2: detected capacity change from 0 to 512 [ 106.858078][T10305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.872466][T10305] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.888924][T10305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 106.921148][ T5466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.984946][T10320] netlink: 'syz.3.2906': attribute type 3 has an invalid length. [ 107.051673][T10326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.099856][T10332] macvlan1: entered promiscuous mode [ 107.108611][T10332] ipvlan0: entered promiscuous mode [ 107.114463][T10332] ipvlan0: left promiscuous mode [ 107.121950][T10332] macvlan1: left promiscuous mode [ 107.152315][T10326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.181337][T10316] loop4: detected capacity change from 0 to 32768 [ 107.233953][T10326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.282208][T10326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.337011][ T4829] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.337326][T10346] loop4: detected capacity change from 0 to 512 [ 107.353221][T10346] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.354968][ T4829] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.365714][T10346] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 107.369966][ T4829] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.401567][T10346] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 107.411978][ T4829] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.420482][T10346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.428874][T10346] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.2920: lblock 0 mapped to illegal pblock 4 (length 1) [ 107.453600][T10346] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 107.463663][T10346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.480794][T10346] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.2920: lblock 0 mapped to illegal pblock 4 (length 1) [ 107.495451][T10346] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.4.2920: error -117 reading directory block [ 107.520134][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.537404][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 107.612490][ C1] hrtimer: interrupt took 35620 ns [ 107.627467][T10375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.719200][T10389] loop0: detected capacity change from 0 to 512 [ 107.728503][T10389] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.737272][T10389] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 107.749479][T10389] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.757587][T10389] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.758923][T10391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.764070][T10389] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 4: comm syz.0.2939: lblock 0 mapped to illegal pblock 4 (length 1) [ 107.789826][T10389] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 107.798447][T10389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.817847][T10389] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 4: comm syz.0.2939: lblock 0 mapped to illegal pblock 4 (length 1) [ 107.833182][T10389] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.0.2939: error -117 reading directory block [ 107.851597][T10391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.878439][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.896153][T10391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.951612][T10391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.955698][T10409] netlink: 'syz.4.2948': attribute type 3 has an invalid length. [ 108.027930][ T4786] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.029055][T10419] loop4: detected capacity change from 0 to 512 [ 108.047351][ T4829] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.056327][ T4829] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.067662][ T4829] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.086946][T10419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.121480][T10419] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.152254][T10419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 108.240335][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.301305][T10441] netlink: 'syz.1.2962': attribute type 3 has an invalid length. [ 108.976883][T10468] netlink: 'syz.0.2974': attribute type 3 has an invalid length. [ 109.161566][T10470] loop0: detected capacity change from 0 to 32768 [ 109.284061][T10497] loop0: detected capacity change from 0 to 512 [ 109.291092][T10497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.302959][T10497] EXT4-fs (loop0): 1 truncate cleaned up [ 109.309023][T10497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.337655][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.377197][T10502] loop2: detected capacity change from 0 to 1024 [ 109.402211][T10502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.535784][ T5466] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.023263][T10521] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 110.033571][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 110.033589][ T29] audit: type=1400 audit(1754333887.947:5208): avc: denied { relabelto } for pid=10519 comm="syz.4.2997" name="cgroup" dev="tmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 110.067666][ T29] audit: type=1400 audit(1754333887.947:5209): avc: denied { associate } for pid=10519 comm="syz.4.2997" name="cgroup" dev="tmpfs" ino=3026 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 110.109260][ T29] audit: type=1400 audit(1754333888.027:5210): avc: denied { unlink } for pid=3307 comm="syz-executor" name="cgroup" dev="tmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0" [ 110.157221][ T29] audit: type=1400 audit(1754333888.067:5211): avc: denied { write } for pid=10526 comm="syz.4.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.253505][ T29] audit: type=1326 audit(1754333888.167:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ef51eb69 code=0x7ffc0000 [ 110.277161][ T29] audit: type=1326 audit(1754333888.167:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ef51eb69 code=0x7ffc0000 [ 110.300908][ T29] audit: type=1326 audit(1754333888.167:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f03ef51eb69 code=0x7ffc0000 [ 110.324808][ T29] audit: type=1400 audit(1754333888.167:5215): avc: denied { sqpoll } for pid=10540 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.344298][ T29] audit: type=1326 audit(1754333888.167:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ef51eb69 code=0x7ffc0000 [ 110.367979][ T29] audit: type=1326 audit(1754333888.167:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f03ef51eb69 code=0x7ffc0000 [ 110.571601][T10569] loop4: detected capacity change from 0 to 1024 [ 110.589043][T10569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.648147][T10578] hub 6-0:1.0: USB hub found [ 110.653131][T10578] hub 6-0:1.0: 8 ports detected [ 110.729654][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.745728][T10584] loop1: detected capacity change from 0 to 512 [ 110.752751][T10584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.767922][T10584] EXT4-fs (loop1): 1 truncate cleaned up [ 110.774218][T10584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.813871][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.861182][T10600] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 110.892931][T10605] loop4: detected capacity change from 0 to 128 [ 110.926125][T10608] loop0: detected capacity change from 0 to 1024 [ 110.957555][T10608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.051921][T10608] ================================================================== [ 111.060053][T10608] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 111.067446][T10608] [ 111.069764][T10608] read-write to 0xffff8881004a4b50 of 8 bytes by interrupt on cpu 0: [ 111.077828][T10608] __xa_clear_mark+0xf5/0x1e0 [ 111.082943][T10608] __folio_end_writeback+0x177/0x470 [ 111.088232][T10608] folio_end_writeback+0x71/0x3d0 [ 111.093276][T10608] ext4_finish_bio+0x459/0x8c0 [ 111.098068][T10608] ext4_end_bio+0x298/0x3b0 [ 111.102609][T10608] bio_endio+0x374/0x410 [ 111.106870][T10608] blk_update_request+0x336/0x730 [ 111.111916][T10608] blk_mq_end_request+0x26/0x50 [ 111.116791][T10608] lo_complete_rq+0x98/0x140 [ 111.121403][T10608] blk_done_softirq+0x74/0xb0 [ 111.126089][T10608] handle_softirqs+0xb7/0x290 [ 111.130846][T10608] run_ksoftirqd+0x1c/0x30 [ 111.135294][T10608] smpboot_thread_fn+0x328/0x530 [ 111.140253][T10608] kthread+0x486/0x510 [ 111.144322][T10608] ret_from_fork+0xdd/0x150 [ 111.148832][T10608] ret_from_fork_asm+0x1a/0x30 [ 111.153618][T10608] [ 111.155951][T10608] read to 0xffff8881004a4b50 of 8 bytes by task 10608 on cpu 1: [ 111.164020][T10608] xas_find_marked+0x218/0x620 [ 111.169055][T10608] find_get_entry+0x5d/0x380 [ 111.173692][T10608] filemap_get_folios_tag+0x13b/0x210 [ 111.179134][T10608] file_write_and_wait_range+0x1ea/0x2c0 [ 111.184807][T10608] generic_buffers_fsync_noflush+0x45/0x120 [ 111.190717][T10608] ext4_sync_file+0x1ab/0x690 [ 111.195411][T10608] vfs_fsync_range+0x10a/0x130 [ 111.200194][T10608] ext4_buffered_write_iter+0x34f/0x3c0 [ 111.205765][T10608] ext4_file_write_iter+0xdbf/0xf00 [ 111.210981][T10608] do_iter_readv_writev+0x41e/0x4c0 [ 111.216186][T10608] vfs_writev+0x2df/0x8b0 [ 111.220526][T10608] __se_sys_pwritev2+0xfc/0x1c0 [ 111.225389][T10608] __x64_sys_pwritev2+0x67/0x80 [ 111.230259][T10608] x64_sys_call+0x2c55/0x2ff0 [ 111.234949][T10608] do_syscall_64+0xd2/0x200 [ 111.239502][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.245440][T10608] [ 111.247769][T10608] value changed: 0x000000fffffe0000 -> 0x000000fffff00000 [ 111.254878][T10608] [ 111.257260][T10608] Reported by Kernel Concurrency Sanitizer on: [ 111.263431][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.0.3035 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 111.275592][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.285744][T10608] ================================================================== [ 111.348788][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.