last executing test programs: 31.068913813s ago: executing program 3 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 31.005992569s ago: executing program 3 (id=1781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 31.005796939s ago: executing program 3 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) creat(&(0x7f0000000180)='./file0\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 30.963962262s ago: executing program 3 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 30.963736652s ago: executing program 3 (id=1784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) 30.601784953s ago: executing program 3 (id=1801): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 30.543940359s ago: executing program 32 (id=1801): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.15591104s ago: executing program 1 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1.100994883s ago: executing program 1 (id=3069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 1.084526044s ago: executing program 2 (id=3070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000fc0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.039193457s ago: executing program 2 (id=3072): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0xcc, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x40, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 985.577892ms ago: executing program 2 (id=3076): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 964.946563ms ago: executing program 2 (id=3077): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 904.056697ms ago: executing program 2 (id=3079): r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 830.965572ms ago: executing program 2 (id=3081): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000001c0)={[{@nodots}, {@fat=@discard}, {@nodots}, {@fat=@flush}, {@nodots}, {@fat=@discard}, {@nodots}, {@nodots}, {}]}, 0x1, 0x11f1, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 810.315864ms ago: executing program 5 (id=3082): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 644.035815ms ago: executing program 0 (id=3084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 643.813565ms ago: executing program 0 (id=3085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 521.286004ms ago: executing program 5 (id=3087): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 465.295518ms ago: executing program 4 (id=3089): unshare(0x2c020400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 444.57076ms ago: executing program 5 (id=3090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) close(0x3) 399.900912ms ago: executing program 4 (id=3091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = io_uring_setup(0x51d2, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x3, 0x3e0}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 336.082326ms ago: executing program 0 (id=3092): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 335.967097ms ago: executing program 5 (id=3093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 322.290388ms ago: executing program 4 (id=3094): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\xb8r~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x90\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8M$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xe1(\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xd5j*\xad\x18I\xcc\xe9\xaa{]\xef\xfb\xff\xff\xff\xff\xff\xff\xfft\xd0s\xc4\x04\xe0\xa1\xd2@\x06\xc2`H\xf7\xcc\xe3\xa0\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x00', 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x12081, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x3, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4089, 0xff9}], 0x1, 0xf0, 0xd215) 271.970781ms ago: executing program 5 (id=3095): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7492, 0x0, 0x2, 0x3b1}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @mcast1, 0x1}}, 0x0, 0x0, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe8090053", 0x41}], 0x1) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 253.124923ms ago: executing program 0 (id=3096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 230.057574ms ago: executing program 4 (id=3097): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) unshare(0x28020600) unshare(0x20020000) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 173.106798ms ago: executing program 0 (id=3098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) 172.623688ms ago: executing program 4 (id=3099): r0 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000010c0)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 145.20012ms ago: executing program 1 (id=3100): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffff7a, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0xffffff, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 142.92198ms ago: executing program 0 (id=3101): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x4000, 0x0) 96.040734ms ago: executing program 5 (id=3102): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendfile(r0, r1, 0x0, 0x20000023896) 95.589664ms ago: executing program 1 (id=3103): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 25.874638ms ago: executing program 4 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 21.324269ms ago: executing program 1 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x1ffff}, 0x1c) close(r2) 0s ago: executing program 1 (id=3106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1084}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x22, 0x30, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @broadcast}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x29, 0x780, 0x64, 0x7ff, 0xc1, 0x89, 0x0, @empty, @loopback}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ T4007] dump_stack_lvl+0xe8/0x140 [ 35.834634][ T4007] dump_stack+0x15/0x1b [ 35.834650][ T4007] __get_user_pages+0x199d/0x1fb0 [ 35.834673][ T4007] ? __rcu_read_unlock+0x4f/0x70 [ 35.834695][ T4007] get_user_pages_remote+0x1dc/0x7a0 [ 35.834791][ T4007] __access_remote_vm+0x156/0x560 [ 35.834811][ T4007] access_remote_vm+0x32/0x40 [ 35.834827][ T4007] proc_pid_cmdline_read+0x30f/0x6a0 [ 35.834872][ T4007] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 35.834897][ T4007] vfs_readv+0x3f8/0x690 [ 35.835000][ T4007] __x64_sys_preadv+0xfd/0x1c0 [ 35.835029][ T4007] x64_sys_call+0x282a/0x2ff0 [ 35.835045][ T4007] do_syscall_64+0xd2/0x200 [ 35.835064][ T4007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.835096][ T4007] ? clear_bhb_loop+0x40/0x90 [ 35.835112][ T4007] ? clear_bhb_loop+0x40/0x90 [ 35.835128][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.835154][ T4007] RIP: 0033:0x7f2c1099e9a9 [ 35.835171][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.835185][ T4007] RSP: 002b:00007f2c0efff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 35.835204][ T4007] RAX: ffffffffffffffda RBX: 00007f2c10bc5fa0 RCX: 00007f2c1099e9a9 [ 35.835214][ T4007] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 35.835224][ T4007] RBP: 00007f2c10a20d69 R08: 0000000000000000 R09: 0000000000000000 [ 35.835234][ T4007] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 35.835300][ T4007] R13: 0000000000000000 R14: 00007f2c10bc5fa0 R15: 00007ffe1935d898 [ 35.835315][ T4007] [ 36.068767][ T29] audit: type=1400 audit(1753821245.538:266): avc: denied { connect } for pid=4016 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.110475][ T4015] loop4: detected capacity change from 0 to 8192 [ 36.168861][ T4027] netlink: 'syz.1.245': attribute type 13 has an invalid length. [ 36.177127][ T4025] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 36.184849][ T4025] netlink: 224 bytes leftover after parsing attributes in process `syz.4.244'. [ 36.224317][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.231551][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.270661][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.280534][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.309858][ T4027] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.318992][ T4027] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.328103][ T4027] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.337164][ T4027] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.447267][ T4052] loop1: detected capacity change from 0 to 2048 [ 36.473487][ T4052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.570884][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.675628][ T4072] bond0: entered promiscuous mode [ 36.680800][ T4072] bond_slave_0: entered promiscuous mode [ 36.686662][ T4072] bond_slave_1: entered promiscuous mode [ 36.715769][ T4074] loop1: detected capacity change from 0 to 1024 [ 36.723292][ T4074] EXT4-fs: Ignoring removed oldalloc option [ 36.729459][ T4074] EXT4-fs: Ignoring removed orlov option [ 36.735621][ T4074] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 36.763271][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.802904][ T4074] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.263: Allocating blocks 497-513 which overlap fs metadata [ 36.827053][ T4082] loop2: detected capacity change from 0 to 512 [ 36.842559][ T4082] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.266: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 36.860709][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.861635][ T4082] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.266: Bad quota inode: 3, type: 0 [ 36.881052][ T4082] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 36.896034][ T4082] EXT4-fs (loop2): mount failed [ 37.077863][ T4099] capability: warning: `syz.0.273' uses deprecated v2 capabilities in a way that may be insecure [ 37.143132][ T4105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.176476][ T4107] loop0: detected capacity change from 0 to 128 [ 37.185651][ T4107] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.198098][ T4107] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.272533][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.364577][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 37.377838][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.386632][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.398329][ T4119] IPVS: Error joining to the multicast group [ 37.471749][ T4132] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.289'. [ 37.486254][ T4132] Zero length message leads to an empty skb [ 37.538601][ T4144] loop2: detected capacity change from 0 to 1024 [ 37.546849][ T4144] EXT4-fs: Ignoring removed orlov option [ 37.567627][ T4144] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 37.579029][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'. [ 37.599116][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.634162][ T4144] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.294: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 37.663184][ T4144] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 37.708253][ T4163] netlink: 256 bytes leftover after parsing attributes in process `syz.0.302'. [ 37.717982][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.753437][ T4165] sd 0:0:1:0: device reset [ 37.767978][ T4173] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 37.909745][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 37.925866][ T4208] sd 0:0:1:0: device reset [ 37.936167][ T4210] loop3: detected capacity change from 0 to 1024 [ 37.943470][ T4210] EXT4-fs: Ignoring removed oldalloc option [ 37.949592][ T4210] EXT4-fs: Ignoring removed orlov option [ 37.960545][ T4210] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.993137][ T4210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.032867][ T4210] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.324: Allocating blocks 497-513 which overlap fs metadata [ 38.126303][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.366300][ T4284] sch_tbf: peakrate 512 is lower than or equals to rate 3221225473 ! [ 38.963161][ T4329] vhci_hcd: invalid port number 96 [ 38.963173][ T4329] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 38.997958][ T4331] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.014213][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 39.027795][ T4331] SELinux: failed to load policy [ 39.041762][ T4335] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 39.041777][ T4335] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 39.059659][ T4334] infiniband syz!: set active [ 39.059677][ T4334] infiniband syz!: added team_slave_0 [ 39.080395][ T4334] RDS/IB: syz!: added [ 39.097389][ T4334] smc: adding ib device syz! with port count 1 [ 39.097402][ T4334] smc: ib device syz! port 1 has pnetid [ 39.628078][ T4385] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.635774][ T4385] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 39.675113][ T4389] SELinux: failed to load policy [ 39.933252][ T4431] loop0: detected capacity change from 0 to 128 [ 39.945361][ T4431] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 39.958757][ T4431] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.985504][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.056561][ T4449] loop0: detected capacity change from 0 to 512 [ 40.084871][ T4449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.103048][ T4449] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.134876][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.210598][ T4469] loop3: detected capacity change from 0 to 128 [ 40.219277][ T4469] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 40.233355][ T4469] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.258323][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.866151][ T4507] loop3: detected capacity change from 0 to 128 [ 40.880669][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 40.880682][ T29] audit: type=1400 audit(1753821250.348:451): avc: denied { read } for pid=4510 comm="syz.1.446" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.910421][ T29] audit: type=1400 audit(1753821250.348:452): avc: denied { open } for pid=4510 comm="syz.1.446" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.934745][ T29] audit: type=1400 audit(1753821250.388:453): avc: denied { ioctl } for pid=4510 comm="syz.1.446" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.975628][ T29] audit: type=1400 audit(1753821250.448:454): avc: denied { create } for pid=4512 comm="syz.1.447" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.996636][ T4507] bio_check_eod: 12786 callbacks suppressed [ 40.996723][ T4507] syz.3.445: attempt to access beyond end of device [ 40.996723][ T4507] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 41.019288][ T29] audit: type=1400 audit(1753821250.478:455): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file1" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.041873][ T29] audit: type=1400 audit(1753821250.488:456): avc: denied { mount } for pid=4514 comm="syz.1.448" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.074902][ T4517] loop1: detected capacity change from 0 to 128 [ 41.092901][ T51] kworker/u8:3: attempt to access beyond end of device [ 41.092901][ T51] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 41.115376][ T4519] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.451'. [ 41.116605][ T29] audit: type=1400 audit(1753821250.588:457): avc: denied { bind } for pid=4520 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.154926][ T29] audit: type=1400 audit(1753821250.618:458): avc: denied { setopt } for pid=4520 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.170872][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 41.174317][ T29] audit: type=1400 audit(1753821250.618:459): avc: denied { write } for pid=4520 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.206347][ T29] audit: type=1326 audit(1753821250.678:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d953e9a9 code=0x7ffc0000 [ 41.218100][ T4523] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 41.237961][ T4523] netlink: 'syz.3.452': attribute type 2 has an invalid length. [ 41.274011][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 41.282986][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 41.315770][ T4537] IPv6: Can't replace route, no match found [ 41.371922][ T4545] loop2: detected capacity change from 0 to 128 [ 41.535466][ T4572] loop3: detected capacity change from 0 to 512 [ 41.577312][ T4572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.591054][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.591054][ T136] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 41.611702][ T4572] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.625009][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.625009][ T136] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 41.641646][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.641646][ T136] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 41.655532][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.655532][ T136] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 41.669115][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.669115][ T136] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 41.683136][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.683136][ T136] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 41.696551][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.696551][ T136] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 41.710190][ T136] kworker/u8:4: attempt to access beyond end of device [ 41.710190][ T136] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 41.724529][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.765095][ T4588] loop2: detected capacity change from 0 to 512 [ 41.774373][ T4588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.784663][ T4588] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.791434][ T4588] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.478: bg 0: block 248: padding at end of block bitmap is not set [ 41.806913][ T4598] loop4: detected capacity change from 0 to 128 [ 41.807373][ T4588] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.478: Failed to acquire dquot type 1 [ 41.824947][ T4597] SELinux: failed to load policy [ 41.835599][ T4588] EXT4-fs (loop2): 1 truncate cleaned up [ 41.848176][ T4588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.880471][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.050528][ T4629] loop3: detected capacity change from 0 to 128 [ 42.100177][ T4635] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 42.115900][ T4637] xt_hashlimit: max too large, truncated to 1048576 [ 42.138033][ T4639] loop2: detected capacity change from 0 to 512 [ 42.153990][ T4641] loop4: detected capacity change from 0 to 512 [ 42.165336][ T4639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.190057][ T4645] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 42.200346][ T4641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.210866][ T4639] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.211042][ T4645] ipvlan0: entered allmulticast mode [ 42.226672][ T4645] veth0_vlan: entered allmulticast mode [ 42.233569][ T4645] team0: Device ipvlan0 failed to register rx_handler [ 42.260936][ T4641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.277289][ T4651] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 42.289163][ T4653] netlink: 'syz.3.511': attribute type 21 has an invalid length. [ 42.297212][ T4641] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.307841][ T4653] netlink: 156 bytes leftover after parsing attributes in process `syz.3.511'. [ 42.316889][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 42.338308][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.352309][ T4641] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 42.379869][ T4641] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 42.392344][ T4641] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.392344][ T4641] [ 42.402155][ T4641] EXT4-fs (loop4): Total free blocks count 0 [ 42.408212][ T4641] EXT4-fs (loop4): Free/Dirty block details [ 42.414640][ T4641] EXT4-fs (loop4): free_blocks=39626 [ 42.419931][ T4641] EXT4-fs (loop4): dirty_blocks=1 [ 42.425007][ T4641] EXT4-fs (loop4): Block reservation details [ 42.431144][ T4641] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 42.451108][ T4663] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 42.549991][ T4685] loop1: detected capacity change from 0 to 512 [ 42.588467][ T4695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 42.593356][ T4685] EXT4-fs (loop1): too many log groups per flexible block group [ 42.597698][ T4695] netlink: 'syz.3.529': attribute type 7 has an invalid length. [ 42.605305][ T4685] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 42.612981][ T4695] netlink: 'syz.3.529': attribute type 8 has an invalid length. [ 42.619892][ T4685] EXT4-fs (loop1): mount failed [ 42.627473][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 42.644387][ T4695] gretap0: entered promiscuous mode [ 42.650733][ T4695] batadv_slave_1: entered promiscuous mode [ 42.657713][ T4695] gretap0: left promiscuous mode [ 42.663247][ T4695] batadv_slave_1: left promiscuous mode [ 42.781645][ T4715] netlink: 452 bytes leftover after parsing attributes in process `syz.0.536'. [ 42.841566][ T4729] loop1: detected capacity change from 0 to 128 [ 42.852979][ T4729] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.873207][ T4731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.895011][ T4729] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.925105][ T4731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.942913][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.997015][ T4751] loop1: detected capacity change from 0 to 512 [ 43.009445][ T4731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.012335][ T4751] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.029188][ T4751] EXT4-fs (loop1): invalid journal inode [ 43.034950][ T4751] EXT4-fs (loop1): can't get journal size [ 43.049427][ T4751] EXT4-fs (loop1): 1 truncate cleaned up [ 43.055786][ T4751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.076303][ T4764] loop4: detected capacity change from 0 to 164 [ 43.085651][ T4731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.118967][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.169182][ T4731] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.171516][ T4776] netlink: 104 bytes leftover after parsing attributes in process `syz.0.564'. [ 43.182151][ T4731] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.199205][ T4731] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.211017][ T4731] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.284890][ T4789] capability: warning: `syz.4.569' uses 32-bit capabilities (legacy support in use) [ 43.298473][ T4789] program syz.4.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.392931][ T4803] SELinux: Context  is not valid (left unmapped). [ 43.486325][ T4810] netlink: 'syz.2.580': attribute type 142 has an invalid length. [ 43.493202][ T4811] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 43.527529][ T4816] loop2: detected capacity change from 0 to 512 [ 43.544003][ T4816] EXT4-fs (loop2): too many log groups per flexible block group [ 43.551809][ T4816] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 43.559723][ T4816] EXT4-fs (loop2): mount failed [ 43.662867][ T4837] loop4: detected capacity change from 0 to 128 [ 43.724094][ T4852] program syz.2.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.034084][ T3373] IPVS: starting estimator thread 0... [ 44.141677][ T4902] IPVS: using max 2592 ests per chain, 129600 per kthread [ 44.164642][ T4924] loop2: detected capacity change from 0 to 128 [ 44.214916][ T4932] loop4: detected capacity change from 0 to 128 [ 44.246963][ T4932] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.278212][ T4932] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.407557][ T4954] loop9: detected capacity change from 0 to 7 [ 44.434494][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.445042][ T4954] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.463013][ T4954] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.470879][ T4954] loop9: unable to read partition table [ 44.477591][ T4959] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 44.477591][ T4959] program syz.2.643 not setting count and/or reply_len properly [ 44.513763][ T4954] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.513763][ T4954] ) failed (rc=-5) [ 44.672089][ T4980] ALSA: seq fatal error: cannot create timer (-22) [ 44.843155][ T4993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.202503][ T5017] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 45.215339][ T5018] program syz.2.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.309225][ T5030] ALSA: seq fatal error: cannot create timer (-22) [ 45.336280][ T5032] Driver unsupported XDP return value 0 on prog (id 406) dev N/A, expect packet loss! [ 45.415059][ T5043] loop4: detected capacity change from 0 to 164 [ 45.442130][ T5043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.491833][ T5043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.518964][ T5043] rock: directory entry would overflow storage [ 45.525439][ T5043] rock: sig=0x4f50, size=4, remaining=3 [ 45.531157][ T5043] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.669348][ T5082] loop4: detected capacity change from 0 to 512 [ 45.707091][ T5082] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.737919][ T5092] netlink: 'wÞ£ÿ': attribute type 21 has an invalid length. [ 45.754914][ T5082] EXT4-fs (loop4): mount failed [ 45.889922][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 45.889933][ T29] audit: type=1400 audit(1753821255.358:616): avc: denied { listen } for pid=5104 comm="syz.2.711" lport=54827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.927742][ T29] audit: type=1400 audit(1753821255.398:617): avc: denied { accept } for pid=5104 comm="syz.2.711" lport=54827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.948266][ T29] audit: type=1400 audit(1753821255.398:618): avc: denied { getopt } for pid=5104 comm="syz.2.711" lport=54827 faddr=10.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 45.972156][ T29] audit: type=1400 audit(1753821255.448:619): avc: denied { cpu } for pid=5119 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.020157][ T29] audit: type=1400 audit(1753821255.488:620): avc: denied { getopt } for pid=5125 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.053762][ T29] audit: type=1400 audit(1753821255.528:621): avc: denied { create } for pid=5127 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.074352][ T29] audit: type=1400 audit(1753821255.528:622): avc: denied { bind } for pid=5127 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.095165][ T29] audit: type=1400 audit(1753821255.528:623): avc: denied { setopt } for pid=5127 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.115638][ T29] audit: type=1400 audit(1753821255.528:624): avc: denied { ioctl } for pid=5127 comm="syz.4.723" path="socket:[10319]" dev="sockfs" ino=10319 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.148443][ T29] audit: type=1400 audit(1753821255.618:625): avc: denied { write } for pid=5130 comm="syz.4.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.239433][ T5142] loop4: detected capacity change from 0 to 128 [ 46.246385][ T5142] EXT4-fs: Ignoring removed nobh option [ 46.253584][ T5142] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.266197][ T5142] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.295826][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.607772][ T5181] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 46.616066][ T5181] team0: Device dummy0 is up. Set it down before adding it as a team port [ 46.690997][ T5193] __nla_validate_parse: 7 callbacks suppressed [ 46.691011][ T5193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 46.713436][ T5196] program syz.4.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.747495][ T5199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.788564][ T5205] ALSA: seq fatal error: cannot create timer (-19) [ 46.853896][ T5215] loop3: detected capacity change from 0 to 512 [ 46.873552][ T5215] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.910993][ T5215] EXT4-fs (loop3): mount failed [ 46.923711][ T5223] netlink: 'syz.2.766': attribute type 29 has an invalid length. [ 46.931747][ T5223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 47.080968][ T5244] loop3: detected capacity change from 0 to 512 [ 47.089369][ T5244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.115257][ T5244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.133018][ T5244] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.146434][ T5244] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.774: corrupted xattr block 32: bad e_name length [ 47.160857][ T5244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 47.170158][ T5244] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.774: corrupted xattr block 32: bad e_name length [ 47.185231][ T5244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 47.197925][ T5244] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.774: failed to insert inode 16: doubly allocated? [ 47.221802][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.474476][ T5274] loop3: detected capacity change from 0 to 512 [ 47.502481][ T5274] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.509452][ T5274] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.787: bad orphan inode 13 [ 47.520885][ T5274] ext4_test_bit(bit=12, block=18) = 1 [ 47.526599][ T5274] is_bad_inode(inode)=0 [ 47.530823][ T5274] NEXT_ORPHAN(inode)=2130706432 [ 47.535908][ T5274] max_ino=32 [ 47.539228][ T5274] i_nlink=1 [ 47.545517][ T5274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.574644][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.601043][ T5281] loop1: detected capacity change from 0 to 1024 [ 47.623791][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.655521][ T5281] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 47.727063][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.838649][ T5320] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.808'. [ 48.058667][ T5359] loop1: detected capacity change from 0 to 512 [ 48.067129][ T5359] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.083927][ T5362] netem: change failed [ 48.104613][ T5367] loop1: detected capacity change from 0 to 128 [ 48.111273][ T5367] EXT4-fs: Ignoring removed nobh option [ 48.119152][ T5367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.143058][ T5370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'. [ 48.192477][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.226897][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 48.368358][ T5411] netlink: 'syz.1.850': attribute type 29 has an invalid length. [ 48.376229][ T5411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 48.459526][ T5421] loop2: detected capacity change from 0 to 512 [ 48.468204][ T5421] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.854: iget: bad extended attribute block 1 [ 48.482669][ T5421] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.854: couldn't read orphan inode 15 (err -117) [ 48.495583][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.537816][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.746701][ T5450] loop1: detected capacity change from 0 to 128 [ 48.848435][ T5466] loop4: detected capacity change from 0 to 512 [ 48.864266][ T5466] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.907948][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 48.968546][ T5476] netlink: 'syz.4.878': attribute type 298 has an invalid length. [ 49.085218][ T5497] loop1: detected capacity change from 0 to 128 [ 49.241083][ T5523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 49.250380][ T5523] netlink: 'syz.1.896': attribute type 7 has an invalid length. [ 49.258117][ T5523] netlink: 'syz.1.896': attribute type 8 has an invalid length. [ 49.266129][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 49.308074][ T5523] gretap0: entered promiscuous mode [ 49.321291][ T5523] batadv_slave_1: entered promiscuous mode [ 49.337794][ T5523] erspan0: entered promiscuous mode [ 49.352717][ T5523] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 49.362804][ T5523] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.373493][ T5523] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 49.813299][ T5598] loop2: detected capacity change from 0 to 512 [ 49.825303][ T5598] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.872486][ T5598] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.880783][ T5598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.888718][ T5598] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.928: corrupted inode contents [ 49.902972][ T5598] EXT4-fs (loop2): Remounting filesystem read-only [ 49.911512][ T5598] EXT4-fs (loop2): 1 truncate cleaned up [ 49.921645][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.932346][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.944142][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.955172][ T5598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.979875][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.995515][ T5613] loop2: detected capacity change from 0 to 128 [ 50.003915][ T5613] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.031085][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.046268][ T5619] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 50.086109][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 50.112228][ T5632] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 50.152433][ T5640] netlink: 'wÞ£ÿ': attribute type 21 has an invalid length. [ 50.160089][ T5640] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 50.185271][ T5643] loop4: detected capacity change from 0 to 512 [ 50.187695][ T5644] loop2: detected capacity change from 0 to 1024 [ 50.198379][ T5643] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.199724][ T5644] EXT4-fs: inline encryption not supported [ 50.213457][ T5644] EXT4-fs: Ignoring removed i_version option [ 50.222985][ T5643] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.947: iget: bad i_size value: -6917529027641081756 [ 50.222974][ T5644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.237293][ T5643] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.947: couldn't read orphan inode 17 (err -117) [ 50.262019][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.268623][ T5644] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 50.298538][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.317452][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.364045][ T5659] ALSA: seq fatal error: cannot create timer (-22) [ 50.425259][ T5664] tun0: tun_chr_ioctl cmd 1074025675 [ 50.430729][ T5664] tun0: persist enabled [ 50.436364][ T5664] tun0: tun_chr_ioctl cmd 1074025675 [ 50.441880][ T5664] tun0: persist enabled [ 50.464217][ T5670] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.649167][ T5706] loop1: detected capacity change from 0 to 8192 [ 50.701286][ T5713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.719888][ T5713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.740879][ T5711] loop2: detected capacity change from 0 to 2048 [ 50.762591][ T5711] EXT4-fs (loop2): failed to initialize system zone (-117) [ 50.769935][ T5711] EXT4-fs (loop2): mount failed [ 50.794387][ T5719] loop3: detected capacity change from 0 to 128 [ 50.873569][ T5734] loop3: detected capacity change from 0 to 512 [ 50.894558][ T5734] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 50.910940][ T5734] System zones: 0-2, 18-18, 34-35 [ 50.916983][ T5734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.929576][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 50.929589][ T29] audit: type=1400 audit(50.890:944): avc: denied { override_creds } for pid=5744 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.974278][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.068775][ T29] audit: type=1400 audit(51.040:945): avc: denied { write } for pid=5760 comm="syz.4.996" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.117645][ T29] audit: type=1400 audit(51.080:946): avc: denied { create } for pid=5759 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.136585][ T29] audit: type=1400 audit(51.080:947): avc: denied { ioctl } for pid=5759 comm="syz.2.1006" path="socket:[11233]" dev="sockfs" ino=11233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.260157][ T29] audit: type=1400 audit(51.230:948): avc: denied { relabelfrom } for pid=5780 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.279417][ T29] audit: type=1400 audit(51.230:949): avc: denied { relabelto } for pid=5780 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.302347][ T5783] loop3: detected capacity change from 0 to 128 [ 51.318383][ T5783] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.353323][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.387755][ T29] audit: type=1400 audit(51.360:950): avc: denied { read write } for pid=5787 comm="syz.1.1008" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.387847][ T5788] program syz.1.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.412821][ T29] audit: type=1400 audit(51.360:951): avc: denied { open } for pid=5787 comm="syz.1.1008" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.445921][ T5788] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 51.454451][ T29] audit: type=1400 audit(51.360:952): avc: denied { ioctl } for pid=5787 comm="syz.1.1008" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.569814][ T5796] loop1: detected capacity change from 0 to 1024 [ 51.576927][ T5796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.591535][ T5802] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 51.606154][ T29] audit: type=1400 audit(51.560:953): avc: denied { relabelfrom } for pid=5801 comm="syz.3.1014" name="NETLINK" dev="sockfs" ino=12319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.645143][ T5796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.684894][ T5812] loop4: detected capacity change from 0 to 512 [ 51.709569][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.752209][ T5812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.796639][ T5825] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.825298][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.836839][ T5825] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 51.883901][ T5835] loop2: detected capacity change from 0 to 512 [ 51.903658][ T5835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.926413][ T5835] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.945337][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.047422][ T5863] loop2: detected capacity change from 0 to 128 [ 52.048186][ T5865] syzkaller1: entered promiscuous mode [ 52.059406][ T5865] syzkaller1: entered allmulticast mode [ 52.070853][ T5863] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.096600][ T5867] ALSA: seq fatal error: cannot create timer (-19) [ 52.118977][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.223294][ T5893] netlink: 'syz.4.1054': attribute type 3 has an invalid length. [ 52.231073][ T5893] __nla_validate_parse: 2 callbacks suppressed [ 52.231106][ T5893] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1054'. [ 52.322711][ T5900] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.362181][ T5905] loop3: detected capacity change from 0 to 2048 [ 52.395492][ T5905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.428500][ T5923] binfmt_misc: register: failed to install interpreter file ./file0 [ 52.460602][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.472880][ T5925] loop2: detected capacity change from 0 to 512 [ 52.489625][ T5925] EXT4-fs (loop2): shut down requested (1) [ 52.510712][ T5928] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 52.537944][ T5930] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 52.608348][ T5944] 9pnet: Could not find request transport: 0xffffffffffffffff [ 52.714564][ T5958] loop2: detected capacity change from 0 to 2048 [ 52.815761][ T5967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.857681][ T5969] syzkaller1: entered promiscuous mode [ 52.863247][ T5969] syzkaller1: entered allmulticast mode [ 52.956113][ T5971] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 52.980857][ T5973] loop3: detected capacity change from 0 to 164 [ 52.994652][ T5973] Unable to read rock-ridge attributes [ 53.005762][ T5973] Unable to read rock-ridge attributes [ 53.466119][ T6027] rdma_op ffff88812bcb4980 conn xmit_rdma 0000000000000000 [ 53.571252][ T6035] syzkaller1: entered promiscuous mode [ 53.576795][ T6035] syzkaller1: entered allmulticast mode [ 53.711157][ T6055] ALSA: seq fatal error: cannot create timer (-19) [ 53.841960][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 54.006205][ T6097] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.126918][ T6113] hub 9-0:1.0: USB hub found [ 54.135957][ T6113] hub 9-0:1.0: 8 ports detected [ 54.432507][ T6146] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1168'. [ 54.452936][ T6148] netlink: 'syz.0.1169': attribute type 178 has an invalid length. [ 54.505679][ T6155] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.684880][ T6182] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1184'. [ 55.085298][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1208'. [ 55.186889][ T6186] Set syz1 is full, maxelem 65536 reached [ 55.282686][ T6244] netlink: 'syz.3.1213': attribute type 178 has an invalid length. [ 55.416880][ T6275] 9pnet: p9_errstr2errno: server reported unknown error @í0x0000000000000003 [ 55.448409][ T6278] netlink: 'syz.1.1230': attribute type 178 has an invalid length. [ 55.563974][ T6296] loop4: detected capacity change from 0 to 512 [ 55.581137][ T6296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.595004][ T6296] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1239: invalid block [ 55.608657][ T6296] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1239: invalid indirect mapped block 4294967295 (level 1) [ 55.623203][ T6296] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1239: invalid indirect mapped block 4294967295 (level 1) [ 55.638824][ T6296] EXT4-fs (loop4): 2 truncates cleaned up [ 55.703950][ T6310] team0 (unregistering): Port device team_slave_0 removed [ 55.723615][ T6310] team0 (unregistering): Port device team_slave_1 removed [ 55.825448][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 55.840076][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 55.943003][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 55.943015][ T29] audit: type=1326 audit(55.920:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.1.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f55d953e9a9 code=0x7ffc0000 [ 55.955323][ T6342] $Hÿ: renamed from bond0 (while UP) [ 55.994426][ T6342] $Hÿ: entered promiscuous mode [ 55.999511][ T6342] bond_slave_0: entered promiscuous mode [ 56.005394][ T6342] bond_slave_1: entered promiscuous mode [ 56.108633][ T29] audit: type=1400 audit(56.080:1246): avc: denied { connect } for pid=6356 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.127967][ T29] audit: type=1400 audit(56.080:1247): avc: denied { write } for pid=6356 comm="syz.3.1266" path="socket:[13293]" dev="sockfs" ino=13293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.165628][ T29] audit: type=1400 audit(56.140:1248): avc: denied { write } for pid=6360 comm="syz.3.1268" path="socket:[13300]" dev="sockfs" ino=13300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.221128][ T29] audit: type=1400 audit(56.180:1249): avc: denied { read } for pid=6362 comm="syz.3.1269" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.243632][ T29] audit: type=1400 audit(56.180:1250): avc: denied { open } for pid=6362 comm="syz.3.1269" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.298736][ T6369] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1272'. [ 56.333510][ T6375] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 56.334332][ T29] audit: type=1400 audit(56.310:1251): avc: denied { load_policy } for pid=6374 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.342405][ T6375] SELinux: failed to load policy [ 56.387016][ T6380] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1277'. [ 56.402520][ T29] audit: type=1400 audit(56.370:1252): avc: denied { create } for pid=6381 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 56.447920][ T6388] loop4: detected capacity change from 0 to 1024 [ 56.465976][ T29] audit: type=1400 audit(56.440:1253): avc: denied { write } for pid=6387 comm="syz.4.1281" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.670706][ T29] audit: type=1326 audit(56.620:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 56.856881][ T6440] loop4: detected capacity change from 0 to 128 [ 56.864309][ T6440] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 57.059475][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 57.068907][ T6480] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 57.077745][ T6480] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 57.481417][ T6523] loop3: detected capacity change from 0 to 1024 [ 57.510219][ T6529] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 57.716760][ T6550] loop3: detected capacity change from 0 to 1024 [ 57.735451][ T6550] EXT4-fs: Ignoring removed nobh option [ 57.741145][ T6550] EXT4-fs: Ignoring removed bh option [ 57.772548][ T6554] __nla_validate_parse: 2 callbacks suppressed [ 57.772564][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 57.926370][ T6574] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1363'. [ 58.023165][ T6582] SELinux: policydb version 700565848 does not match my version range 15-35 [ 58.053650][ T6582] SELinux: failed to load policy [ 58.078942][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.087359][ T3405] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.160166][ T6602] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1376'. [ 58.183134][ T6602] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1376'. [ 58.323485][ T6628] smc: net device bond0 applied user defined pnetid SYZ2 [ 58.342878][ T6628] smc: net device bond0 erased user defined pnetid SYZ2 [ 58.534807][ T6653] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1399'. [ 58.730632][ T6685] loop3: detected capacity change from 0 to 1024 [ 58.953680][ T6725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1431'. [ 58.998631][ T6732] netlink: zone id is out of range [ 59.220141][ T6768] sock: sock_set_timeout: `syz.0.1452' (pid 6768) tries to set negative timeout [ 59.402926][ T6786] syzkaller1: entered promiscuous mode [ 59.408439][ T6786] syzkaller1: entered allmulticast mode [ 59.578969][ T6807] netlink: 'syz.2.1470': attribute type 4 has an invalid length. [ 60.192824][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1502'. [ 60.294233][ T6894] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 60.436332][ T6914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 60.442883][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.450509][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 60.460094][ T6914] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 60.466623][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.474169][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 60.485892][ T6914] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 60.492467][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 60.500078][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 60.523334][ T6914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.532689][ T6914] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 60.539338][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.547039][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 60.583181][ T6923] vhci_hcd: connection closed [ 60.583318][ T6915] vhci_hcd: connection closed [ 60.588269][ T12] vhci_hcd: stop threads [ 60.597351][ T12] vhci_hcd: release socket [ 60.601973][ T12] vhci_hcd: disconnect device [ 60.608345][ T6919] vhci_hcd: connection closed [ 60.608424][ T6917] vhci_hcd: connection closed [ 60.613556][ T12] vhci_hcd: stop threads [ 60.622746][ T12] vhci_hcd: release socket [ 60.627170][ T12] vhci_hcd: disconnect device [ 60.632184][ T23] vhci_hcd: vhci_device speed not set [ 60.638816][ T12] vhci_hcd: stop threads [ 60.643180][ T12] vhci_hcd: release socket [ 60.647639][ T12] vhci_hcd: disconnect device [ 60.668407][ T12] vhci_hcd: stop threads [ 60.672756][ T12] vhci_hcd: release socket [ 60.677183][ T12] vhci_hcd: disconnect device [ 60.692017][ T6932] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 60.770970][ T6952] 9pnet_fd: Insufficient options for proto=fd [ 60.837134][ T6965] netlink: 'syz.2.1542': attribute type 4 has an invalid length. [ 60.844938][ T6965] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1542'. [ 60.857015][ T6965] : renamed from bond0 [ 61.108777][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 61.108789][ T29] audit: type=1400 audit(317.088:1588): avc: denied { create } for pid=7006 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.145653][ T29] audit: type=1400 audit(317.118:1589): avc: denied { compute_member } for pid=7010 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.167919][ T29] audit: type=1400 audit(317.148:1590): avc: denied { create } for pid=7011 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.190738][ T29] audit: type=1400 audit(317.148:1591): avc: denied { write } for pid=7011 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.267910][ T29] audit: type=1400 audit(317.248:1592): avc: denied { create } for pid=7029 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.290932][ T29] audit: type=1400 audit(317.268:1593): avc: denied { bind } for pid=7029 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.315142][ T7032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 61.321757][ T7032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.329471][ T7032] vhci_hcd vhci_hcd.0: Device attached [ 61.336954][ T29] audit: type=1400 audit(317.318:1594): avc: denied { create } for pid=7038 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.356420][ T29] audit: type=1400 audit(317.318:1595): avc: denied { setopt } for pid=7033 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.375437][ T29] audit: type=1400 audit(317.338:1596): avc: denied { getopt } for pid=7038 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.395167][ T7040] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 61.401698][ T7040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.409200][ T7040] vhci_hcd vhci_hcd.0: Device attached [ 61.424844][ T7032] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 61.431404][ T7032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.439165][ T7032] vhci_hcd vhci_hcd.0: Device attached [ 61.449791][ T7032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.464204][ T7032] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 61.470854][ T7032] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.478527][ T7032] vhci_hcd vhci_hcd.0: Device attached [ 61.505447][ T7050] vhci_hcd: connection closed [ 61.505545][ T31] vhci_hcd: stop threads [ 61.505571][ T7041] vhci_hcd: connection closed [ 61.505681][ T7035] vhci_hcd: connection closed [ 61.510284][ T31] vhci_hcd: release socket [ 61.510299][ T31] vhci_hcd: disconnect device [ 61.515043][ T7044] vhci_hcd: connection closed [ 61.532700][ T31] vhci_hcd: stop threads [ 61.542853][ T31] vhci_hcd: release socket [ 61.547351][ T31] vhci_hcd: disconnect device [ 61.552385][ T31] vhci_hcd: stop threads [ 61.556711][ T31] vhci_hcd: release socket [ 61.561395][ T31] vhci_hcd: disconnect device [ 61.563182][ T7057] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 61.566288][ T29] audit: type=1400 audit(317.538:1597): avc: denied { audit_write } for pid=7058 comm="syz.3.1581" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.573875][ T7057] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1579'. [ 61.603928][ T3380] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 61.620786][ T3380] usb 3-1: enqueue for inactive port 0 [ 61.626439][ T3380] usb 3-1: enqueue for inactive port 0 [ 61.632004][ T3380] usb 3-1: enqueue for inactive port 0 [ 61.637723][ T31] vhci_hcd: stop threads [ 61.642002][ T31] vhci_hcd: release socket [ 61.646623][ T31] vhci_hcd: disconnect device [ 61.670789][ T7066] SELinux: security_context_str_to_sid (ð) failed with errno=-22 [ 61.721847][ T3380] vhci_hcd: vhci_device speed not set [ 61.861295][ T7096] tipc: Started in network mode [ 61.866326][ T7096] tipc: Node identity 8, cluster identity 4711 [ 61.872626][ T7096] tipc: Node number set to 8 [ 61.877637][ T7096] tipc: Cannot configure node identity twice [ 61.972640][ C0] hrtimer: interrupt took 26948 ns [ 62.006048][ T7119] loop3: detected capacity change from 0 to 512 [ 62.018017][ T7119] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 62.085529][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 62.112106][ T7135] 9pnet_fd: Insufficient options for proto=fd [ 62.155015][ T7145] loop3: detected capacity change from 0 to 128 [ 62.220943][ T7155] netlink: 'syz.2.1629': attribute type 21 has an invalid length. [ 62.233186][ T7155] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 62.241050][ T7155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1629'. [ 62.608344][ T7240] xt_connbytes: Forcing CT accounting to be enabled [ 62.619585][ T7240] set match dimension is over the limit! [ 62.649290][ T7252] program syz.0.1672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.705591][ T7264] SELinux: policydb version -372095312 does not match my version range 15-35 [ 62.714879][ T7264] SELinux: failed to load policy [ 63.121308][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.129927][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.592494][ T7358] 9pnet_fd: Insufficient options for proto=fd [ 63.651394][ T7367] loop3: detected capacity change from 0 to 512 [ 63.658214][ T7367] EXT4-fs: Ignoring removed orlov option [ 63.660094][ T7369] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 63.664392][ T7367] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 63.678900][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.680713][ T7367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 63.695310][ T7367] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #15: comm syz.3.1719: corrupted in-inode xattr: e_value size too large [ 63.699586][ T7369] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 63.709815][ T7367] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1719: couldn't read orphan inode 15 (err -117) [ 63.760097][ T7377] loop3: detected capacity change from 0 to 1024 [ 63.767259][ T7377] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 63.777767][ T7379] __nla_validate_parse: 1 callbacks suppressed [ 63.777781][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 63.793776][ T7379] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1723'. [ 63.802951][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 63.827888][ T7383] xt_connbytes: Forcing CT accounting to be enabled [ 63.835143][ T7383] set match dimension is over the limit! [ 63.854562][ T7387] 9pnet_fd: Insufficient options for proto=fd [ 64.309703][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 64.355425][ T7437] loop4: detected capacity change from 0 to 1024 [ 64.370784][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 64.379810][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 64.387318][ T7437] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 64.389699][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 64.412529][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 64.576905][ T7473] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1760'. [ 64.586754][ T7473] netlink: zone id is out of range [ 64.592827][ T7473] netlink: zone id is out of range [ 64.598097][ T7473] netlink: del zone limit has 8 unknown bytes [ 64.623600][ T7477] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 64.774930][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.783770][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.863906][ T7515] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.093973][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1786'. [ 65.103279][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1786'. [ 65.317451][ T7544] Cannot find del_set index 4 as target [ 65.760482][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 65.807209][ T7602] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 65.824176][ T7602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.852549][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.859745][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.874726][ T7571] bridge_slave_0: entered allmulticast mode [ 65.886069][ T7571] bridge_slave_0: entered promiscuous mode [ 65.896364][ T7602] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 65.908384][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.915595][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.924288][ T7571] bridge_slave_1: entered allmulticast mode [ 65.930805][ T7571] bridge_slave_1: entered promiscuous mode [ 65.958437][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.971256][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.995449][ T7571] team0: Port device team_slave_0 added [ 66.007069][ T7571] team0: Port device team_slave_1 added [ 66.024242][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.031248][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.057401][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.069318][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.076444][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.102655][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.136743][ T7571] hsr_slave_0: entered promiscuous mode [ 66.147495][ T7571] hsr_slave_1: entered promiscuous mode [ 66.154064][ T7571] debugfs: 'hsr0' already exists in 'hsr' [ 66.159974][ T7571] Cannot create hsr debugfs directory [ 66.229634][ T7645] syzkaller0: entered promiscuous mode [ 66.235353][ T7645] syzkaller0: entered allmulticast mode [ 66.288305][ T7649] xt_hashlimit: max too large, truncated to 1048576 [ 66.350770][ T7653] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 66.372007][ T7653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.381175][ T7656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 66.387718][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.391287][ T7653] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 66.396034][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 66.419211][ T7571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.440239][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 66.440251][ T29] audit: type=1400 audit(322.418:1853): avc: denied { ioctl } for pid=7662 comm="syz.2.1832" path="socket:[17729]" dev="sockfs" ino=17729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.474281][ T7666] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 66.483160][ T7656] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 66.489728][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.497258][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 66.504830][ T7571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.513059][ T29] audit: type=1400 audit(322.458:1854): avc: denied { connect } for pid=7662 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.513259][ T7667] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 66.538919][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.546618][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 66.547250][ T29] audit: type=1400 audit(322.458:1855): avc: denied { write } for pid=7662 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.572824][ T7656] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.581266][ T7571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.596503][ T7571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.605095][ T7673] atomic_op ffff888119326128 conn xmit_atomic 0000000000000000 [ 66.614745][ T29] audit: type=1400 audit(322.588:1856): avc: denied { map } for pid=7672 comm="syz.4.1836" path="socket:[17746]" dev="sockfs" ino=17746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.638441][ T29] audit: type=1400 audit(322.588:1857): avc: denied { read } for pid=7672 comm="syz.4.1836" path="socket:[17746]" dev="sockfs" ino=17746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.662282][ T3373] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 66.669901][ T29] audit: type=1400 audit(322.598:1858): avc: denied { mount } for pid=7668 comm="syz.1.1834" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.691467][ T29] audit: type=1400 audit(322.648:1859): avc: denied { validate_trans } for pid=7674 comm="syz.2.1835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.693766][ T7656] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 66.717946][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.725619][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 66.748727][ T7685] xt_hashlimit: max too large, truncated to 1048576 [ 66.771293][ T7670] vhci_hcd: connection closed [ 66.771292][ T7677] vhci_hcd: connection closed [ 66.775998][ T7661] vhci_hcd: connection closed [ 66.780859][ T31] vhci_hcd: stop threads [ 66.780864][ T7657] vhci_hcd: connection reset by peer [ 66.795191][ T31] vhci_hcd: release socket [ 66.799725][ T31] vhci_hcd: disconnect device [ 66.813815][ T29] audit: type=1400 audit(322.718:1860): avc: denied { connect } for pid=7682 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.833960][ T31] vhci_hcd: stop threads [ 66.838216][ T31] vhci_hcd: release socket [ 66.842667][ T31] vhci_hcd: disconnect device [ 66.844571][ T7691] syzkaller0: entered promiscuous mode [ 66.852923][ T7691] syzkaller0: entered allmulticast mode [ 66.859006][ T31] vhci_hcd: stop threads [ 66.864075][ T31] vhci_hcd: release socket [ 66.868604][ T31] vhci_hcd: disconnect device [ 66.886375][ T31] vhci_hcd: stop threads [ 66.890759][ T31] vhci_hcd: release socket [ 66.895870][ T31] vhci_hcd: disconnect device [ 66.918679][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.931354][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.940938][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.948087][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.963354][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.970582][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.995369][ T7571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.005920][ T7571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.033586][ T7705] loop4: detected capacity change from 0 to 764 [ 67.040855][ T7705] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.051691][ T7705] Symlink component flag not implemented [ 67.051739][ T29] audit: type=1400 audit(323.028:1861): avc: denied { mount } for pid=7703 comm="syz.4.1845" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.057697][ T7705] Symlink component flag not implemented (7) [ 67.124486][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.131415][ T29] audit: type=1400 audit(323.108:1862): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.218132][ T7731] program syz.1.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.228079][ T7730] xt_hashlimit: max too large, truncated to 1048576 [ 67.230073][ T7731] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.311693][ T7738] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 67.322628][ T7742] Cannot find del_set index 4 as target [ 67.340683][ T7571] veth0_vlan: entered promiscuous mode [ 67.358007][ T7571] veth1_vlan: entered promiscuous mode [ 67.404207][ T7571] veth0_macvtap: entered promiscuous mode [ 67.404454][ T7751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.419987][ T7755] ALSA: seq fatal error: cannot create timer (-22) [ 67.427906][ T136] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.436893][ T7571] veth1_macvtap: entered promiscuous mode [ 67.464505][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.469362][ T7759] xt_hashlimit: max too large, truncated to 1048576 [ 67.535015][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.553453][ T7571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.562345][ T7571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571118][ T7571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.580248][ T7571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.620734][ T7769] Cannot find del_set index 4 as target [ 67.773698][ T7804] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 67.839187][ T7810] Cannot find del_set index 4 as target [ 67.866140][ T7818] netlink: 'syz.2.1898': attribute type 3 has an invalid length. [ 67.927247][ T7827] loop4: detected capacity change from 0 to 1024 [ 67.945428][ T7827] EXT4-fs mount: 18 callbacks suppressed [ 67.945481][ T7827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.979464][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.058616][ T7850] Cannot find del_set index 4 as target [ 68.101199][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.115279][ T7860] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.132756][ T7862] netlink: 'syz.1.1907': attribute type 298 has an invalid length. [ 68.229583][ T7878] IPVS: Error joining to the multicast group [ 68.369781][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.378379][ T7891] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.499530][ T7911] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 68.529988][ T7913] bond2: entered promiscuous mode [ 68.535763][ T7913] bond2: entered allmulticast mode [ 68.541276][ T7913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.599601][ T7922] netlink: '+}[@': attribute type 7 has an invalid length. [ 68.847780][ T7957] __nla_validate_parse: 8 callbacks suppressed [ 68.847794][ T7957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1945'. [ 68.878632][ T7961] program syz.1.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.999056][ T7975] ALSA: seq fatal error: cannot create timer (-22) [ 69.121219][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.140399][ T7985] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 69.190722][ T7970] Set syz1 is full, maxelem 65536 reached [ 69.206617][ T7991] geneve2: entered promiscuous mode [ 69.212108][ T7991] geneve2: entered allmulticast mode [ 69.259178][ T7998] loop5: detected capacity change from 0 to 764 [ 69.267651][ T7998] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.278607][ T7998] Symlink component flag not implemented [ 69.279661][ T8000] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1963'. [ 69.284411][ T7998] Symlink component flag not implemented (7) [ 69.757225][ T8029] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1977'. [ 69.779861][ T8031] veth0: entered promiscuous mode [ 69.785702][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 69.841009][ T8039] netlink: 'syz.5.1982': attribute type 3 has an invalid length. [ 70.087144][ T8059] loop4: detected capacity change from 0 to 1024 [ 70.136083][ T8059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.190640][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.359086][ T8086] program syz.2.2001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.439448][ T8091] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 70.450597][ T8090] IPVS: stopping master sync thread 8091 ... [ 70.596051][ T8098] SELinux: failed to load policy [ 70.886551][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2018'. [ 71.032588][ T8195] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 71.032588][ T8195] program syz.4.2024 not setting count and/or reply_len properly [ 71.503263][ T8232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8232 comm=syz.0.2041 [ 71.582289][ T8243] geneve2: entered promiscuous mode [ 71.587548][ T8243] geneve2: entered allmulticast mode [ 71.602719][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 71.602731][ T29] audit: type=1400 audit(327.588:1988): avc: denied { read } for pid=8236 comm="syz.2.2045" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.632073][ T29] audit: type=1400 audit(327.588:1989): avc: denied { open } for pid=8236 comm="syz.2.2045" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.711683][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 71.720471][ T3373] usb 1-1: enqueue for inactive port 0 [ 71.728484][ T3373] usb 1-1: enqueue for inactive port 0 [ 71.742628][ T29] audit: type=1400 audit(327.718:1990): avc: denied { accept } for pid=8253 comm="syz.5.2050" path="socket:[19410]" dev="sockfs" ino=19410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.797710][ T29] audit: type=1400 audit(327.778:1991): avc: denied { setopt } for pid=8263 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.802297][ T3373] vhci_hcd: vhci_device speed not set [ 71.830450][ T8262] netlink: 'syz.5.2054': attribute type 1 has an invalid length. [ 71.838601][ T8262] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2054'. [ 71.953295][ T29] audit: type=1400 audit(327.928:1992): avc: denied { connect } for pid=8281 comm="syz.1.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.986350][ T8285] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 71.997112][ T8285] SELinux: failed to load policy [ 72.031633][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 72.058350][ T8291] SELinux: failed to load policy [ 72.153513][ T8304] bond0: option mode: unable to set because the bond device has slaves [ 72.188061][ T8311] netlink: 'syz.1.2076': attribute type 3 has an invalid length. [ 72.196711][ T8311] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2076'. [ 72.261680][ T29] audit: type=1400 audit(328.238:1993): avc: denied { execute } for pid=8319 comm="syz.1.2080" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.414209][ T8339] loop5: detected capacity change from 0 to 1024 [ 72.440993][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2091'. [ 72.444362][ T8339] EXT4-fs: Ignoring removed orlov option [ 72.456647][ T8339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.491190][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.508163][ T29] audit: type=1400 audit(328.488:1994): avc: denied { read append open } for pid=8338 comm="syz.5.2089" path="/42/file1/cpu.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.539092][ T29] audit: type=1400 audit(328.518:1995): avc: denied { ioctl } for pid=8338 comm="syz.5.2089" path="/42/file1/cpu.stat" dev="loop5" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.568602][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.593955][ T29] audit: type=1400 audit(328.578:1996): avc: denied { write } for pid=8358 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.636681][ T29] audit: type=1400 audit(328.618:1997): avc: denied { write } for pid=8360 comm="syz.4.2098" path="socket:[19798]" dev="sockfs" ino=19798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.715065][ T8357] loop5: detected capacity change from 0 to 164 [ 72.722741][ T8357] Unable to read rock-ridge attributes [ 72.728699][ T8357] Unable to read rock-ridge attributes [ 73.311649][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 73.311663][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 73.353809][ T8377] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8377 comm=+}[@ [ 73.374552][ T8375] loop5: detected capacity change from 0 to 256 [ 73.439946][ T8393] bond0: option mode: unable to set because the bond device has slaves [ 73.466565][ T8397] tipc: Started in network mode [ 73.471833][ T8397] tipc: Node identity ac14140f, cluster identity 4711 [ 73.481306][ T8397] tipc: New replicast peer: 255.255.255.255 [ 73.487470][ T8397] tipc: Enabled bearer , priority 10 [ 73.958851][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2146'. [ 73.968082][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2146'. [ 74.254824][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.296853][ T3373] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.481711][ T36] tipc: Node number set to 2886997007 [ 74.648942][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 74.658642][ T8544] netlink: 'syz.1.2176': attribute type 15 has an invalid length. [ 74.666612][ T8544] netlink: 'syz.1.2176': attribute type 18 has an invalid length. [ 74.679168][ T8544] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.688112][ T8544] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.696485][ T8544] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.704784][ T8544] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.715131][ T8544] vxlan0: entered promiscuous mode [ 74.987162][ T8558] loop5: detected capacity change from 0 to 512 [ 75.000552][ T8558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.018661][ T8558] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #4: comm syz.5.2184: corrupted inode contents [ 75.037065][ T8558] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #4: comm syz.5.2184: mark_inode_dirty error [ 75.056206][ T8558] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #4: comm syz.5.2184: corrupted inode contents [ 75.077246][ T8558] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2184: mark_inode_dirty error [ 75.115471][ T8558] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2184: Failed to acquire dquot type 1 [ 75.153381][ T8562] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #4: comm syz.5.2184: corrupted inode contents [ 75.170034][ T8562] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #4: comm syz.5.2184: mark_inode_dirty error [ 75.183082][ T8562] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #4: comm syz.5.2184: corrupted inode contents [ 75.204846][ T8562] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2184: mark_inode_dirty error [ 75.216321][ T8562] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2184: Failed to acquire dquot type 1 [ 75.263413][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.478742][ T36] Process accounting resumed [ 75.659425][ T8622] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2211'. [ 75.681189][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.707954][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.726138][ T8628] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2214'. [ 75.917563][ T8643] netlink: 'syz.0.2222': attribute type 13 has an invalid length. [ 75.942883][ T8648] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 75.956201][ T8643] gretap0: refused to change device tx_queue_len [ 75.962835][ T8643] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.997750][ T8652] ipvlan2: entered promiscuous mode [ 76.005522][ T8652] bridge0: port 3(ipvlan2) entered blocking state [ 76.012183][ T8652] bridge0: port 3(ipvlan2) entered disabled state [ 76.019039][ T8652] ipvlan2: entered allmulticast mode [ 76.024453][ T8652] bridge0: entered allmulticast mode [ 76.030313][ T8652] ipvlan2: left allmulticast mode [ 76.036172][ T8652] bridge0: left allmulticast mode [ 76.553130][ T8708] Invalid ELF header magic: != ELF [ 76.585334][ T8714] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2251'. [ 76.622941][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 76.622957][ T29] audit: type=1400 audit(332.608:2217): avc: denied { relabelfrom } for pid=8717 comm="syz.2.2253" name="NETLINK" dev="sockfs" ino=21240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.653787][ T29] audit: type=1400 audit(332.608:2218): avc: denied { relabelto } for pid=8717 comm="syz.2.2253" name="NETLINK" dev="sockfs" ino=21240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 76.702726][ T29] audit: type=1400 audit(332.688:2219): avc: denied { kexec_image_load } for pid=8721 comm="syz.4.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 76.744935][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 76.756257][ T29] audit: type=1400 audit(332.728:2220): avc: denied { nlmsg_read } for pid=8727 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.814948][ T29] audit: type=1400 audit(332.798:2221): avc: denied { map } for pid=8738 comm="syz.4.2263" path="/406/file0" dev="tmpfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.853506][ T8741] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2264'. [ 76.997570][ T8760] team0 (unregistering): Port device team_slave_0 removed [ 77.007781][ T29] audit: type=1400 audit(332.988:2222): avc: denied { create } for pid=8763 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.023230][ T8760] team0 (unregistering): Port device team_slave_1 removed [ 77.028347][ T29] audit: type=1400 audit(332.988:2223): avc: denied { setopt } for pid=8763 comm="syz.2.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.073716][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 77.085968][ T29] audit: type=1400 audit(333.068:2224): avc: denied { tracepoint } for pid=8771 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.116916][ T8774] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2278'. [ 77.149027][ T8778] bond1: entered promiscuous mode [ 77.154151][ T8778] bond1: entered allmulticast mode [ 77.167023][ T8778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.176441][ T29] audit: type=1400 audit(333.148:2225): avc: denied { relabelto } for pid=8782 comm="syz.0.2285" name="NETLINK" dev="sockfs" ino=21342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 77.203751][ T8778] bond1 (unregistering): Released all slaves [ 77.235326][ T29] audit: type=1400 audit(333.218:2226): avc: denied { connect } for pid=8788 comm="syz.0.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.995734][ T8838] bond1: entered promiscuous mode [ 78.000832][ T8838] bond1: entered allmulticast mode [ 78.011960][ T8838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.021049][ T8838] bond1 (unregistering): Released all slaves [ 78.313425][ T8864] serio: Serial port ptm0 [ 78.504862][ T8888] SELinux: ebitmap: truncated map [ 78.511168][ T8888] SELinux: failed to load policy [ 78.551117][ T8898] loop5: detected capacity change from 0 to 256 [ 78.645006][ T8908] vhci_hcd: invalid port number 96 [ 78.650304][ T8908] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 78.830046][ T8926] netlink: 'syz.5.2348': attribute type 1 has an invalid length. [ 79.199680][ T8966] bond2: entered promiscuous mode [ 79.204825][ T8966] bond2: entered allmulticast mode [ 79.224900][ T8966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.250729][ T8966] bond2 (unregistering): Released all slaves [ 79.338025][ T8978] loop5: detected capacity change from 0 to 512 [ 79.346837][ T8978] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 79.379167][ T8978] EXT4-fs (loop5): invalid journal inode [ 79.389257][ T8978] EXT4-fs (loop5): can't get journal size [ 79.413745][ T8978] EXT4-fs (loop5): 1 truncate cleaned up [ 79.428190][ T8978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.509072][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.531013][ T8990] SELinux: ebitmap: truncated map [ 79.550319][ T8990] SELinux: failed to load policy [ 79.641629][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 79.756007][ T9022] bond1: entered promiscuous mode [ 79.761100][ T9022] bond1: entered allmulticast mode [ 79.770322][ T9022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.796676][ T8996] loop5: detected capacity change from 0 to 32768 [ 79.804539][ T9022] bond1 (unregistering): Released all slaves [ 79.849802][ T8996] loop5: p1 p3 < > [ 79.913214][ T9033] SELinux: failed to load policy [ 79.966294][ T9040] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.044870][ T9040] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.103004][ T9040] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.153251][ T9040] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.188031][ T9065] bond3: entered promiscuous mode [ 80.193238][ T9065] bond3: entered allmulticast mode [ 80.198695][ T9065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.211197][ T9065] bond3 (unregistering): Released all slaves [ 80.267236][ T9040] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.281269][ T9040] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.296707][ T9040] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.323451][ T9040] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.336572][ T9079] vhci_hcd: invalid port number 255 [ 80.414994][ T9087] vlan2: entered allmulticast mode [ 80.443909][ T9093] bond2: entered promiscuous mode [ 80.449038][ T9093] bond2: entered allmulticast mode [ 80.456386][ T9093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.467036][ T9093] bond2 (unregistering): Released all slaves [ 80.911790][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 80.919369][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.014906][ T9140] SELinux: failed to load policy [ 81.033794][ T9144] __nla_validate_parse: 5 callbacks suppressed [ 81.033805][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2446'. [ 81.049341][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 81.097560][ T9152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.181207][ T9159] team0 (unregistering): Port device team_slave_0 removed [ 81.190172][ T9159] team0 (unregistering): Port device team_slave_1 removed [ 81.200838][ T23] syz!: Port: 1 Link DOWN [ 81.206023][ T9162] hub 9-0:1.0: USB hub found [ 81.210821][ T9162] hub 9-0:1.0: 8 ports detected [ 81.244336][ T9166] netem: change failed [ 81.305785][ T9181] xt_hashlimit: size too large, truncated to 1048576 [ 81.503870][ T9204] usb usb5: usbfs: process 9204 (syz.0.2473) did not claim interface 0 before use [ 81.551674][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.709373][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 81.709385][ T29] audit: type=1400 audit(337.688:2449): avc: denied { setcheckreqprot } for pid=9216 comm="syz.0.2479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.070865][ T29] audit: type=1326 audit(338.048:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f146ce9a9 code=0x0 [ 82.097977][ T29] audit: type=1400 audit(338.078:2451): avc: denied { create } for pid=9224 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.119125][ T9225] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 82.139924][ T29] audit: type=1400 audit(338.098:2452): avc: denied { accept } for pid=9224 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.158982][ T29] audit: type=1400 audit(338.098:2453): avc: denied { mac_admin } for pid=9224 comm="syz.4.2483" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.162039][ T9223] netem: change failed [ 82.179461][ T29] audit: type=1400 audit(338.108:2454): avc: denied { relabelto } for pid=9224 comm="syz.4.2483" name="450" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 82.210230][ T29] audit: type=1400 audit(338.108:2455): avc: denied { associate } for pid=9224 comm="syz.4.2483" name="450" dev="tmpfs" ino=2312 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 82.255525][ T29] audit: type=1400 audit(338.168:2456): avc: denied { remove_name } for pid=3297 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 82.283486][ T29] audit: type=1400 audit(338.168:2457): avc: denied { rmdir } for pid=3297 comm="syz-executor" name="450" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 82.310094][ T29] audit: type=1326 audit(338.228:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0f2ee9a9 code=0x7ffc0000 [ 82.337265][ T9233] hub 9-0:1.0: USB hub found [ 82.343374][ T9233] hub 9-0:1.0: 8 ports detected [ 82.416398][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 82.431048][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 82.559381][ T9266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.618470][ T9266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.674114][ T9266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.744685][ T9266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.789340][ T9266] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.800451][ T9266] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.812849][ T9266] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.824128][ T9266] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975041][ T9313] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.986162][ T9313] SELinux: failed to load policy [ 83.099703][ T9323] vlan2: entered allmulticast mode [ 83.136685][ T9330] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2531'. [ 83.209647][ T9339] netlink: 'syz.5.2535': attribute type 1 has an invalid length. [ 83.217569][ T9339] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2535'. [ 83.256127][ T9348] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.268354][ T9348] SELinux: failed to load policy [ 83.299090][ T9356] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 83.457565][ T9377] rdma_op ffff888127e47980 conn xmit_rdma 0000000000000000 [ 83.563005][ T9387] hub 9-0:1.0: USB hub found [ 83.587677][ T9387] hub 9-0:1.0: 8 ports detected [ 83.740573][ T9427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.794441][ T9427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.854289][ T9427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.925049][ T9458] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.934918][ T9427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.947553][ T9458] smc: net device bond0 erased user defined pnetid SYZ0 [ 83.978581][ T9427] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.998386][ T9427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.026533][ T9427] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.044823][ T9427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.099373][ T9472] hub 9-0:1.0: USB hub found [ 84.106573][ T9472] hub 9-0:1.0: 8 ports detected [ 84.175748][ T9481] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 84.215855][ T9485] hub 9-0:1.0: USB hub found [ 84.220664][ T9485] hub 9-0:1.0: 8 ports detected [ 84.306861][ T9501] netlink: 'syz.1.2608': attribute type 9 has an invalid length. [ 84.315332][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 84.324506][ T9501] netlink: 'syz.1.2608': attribute type 9 has an invalid length. [ 84.332296][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 84.373331][ T9506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.414393][ T9506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.505347][ T9506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.557212][ T9506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.618035][ T9506] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.652382][ T9506] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.673245][ T9506] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.697867][ T9506] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.888036][ T9565] loop5: detected capacity change from 0 to 1024 [ 84.904331][ T9565] EXT4-fs: Ignoring removed nobh option [ 84.910047][ T9565] EXT4-fs: inline encryption not supported [ 84.928685][ T9565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.951796][ T9565] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2637: Allocating blocks 385-513 which overlap fs metadata [ 84.969765][ T9565] EXT4-fs (loop5): pa ffff888106a35620: logic 16, phys. 129, len 24 [ 84.977987][ T9565] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 84.992573][ T9565] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 85.004860][ T9565] EXT4-fs (loop5): This should not happen!! Data will be lost [ 85.004860][ T9565] [ 85.014599][ T9565] EXT4-fs (loop5): Total free blocks count 0 [ 85.020612][ T9565] EXT4-fs (loop5): Free/Dirty block details [ 85.026621][ T9565] EXT4-fs (loop5): free_blocks=128 [ 85.031763][ T9565] EXT4-fs (loop5): dirty_blocks=0 [ 85.036850][ T9565] EXT4-fs (loop5): Block reservation details [ 85.042876][ T9565] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 85.053399][ T9584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.097770][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2642'. [ 85.106850][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2642'. [ 85.116288][ T9593] netlink: 'syz.4.2642': attribute type 6 has an invalid length. [ 85.188948][ T9584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.242819][ T9584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.254550][ T9615] xt_hashlimit: size too large, truncated to 1048576 [ 85.335870][ T9584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.412052][ T9584] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.427592][ T9584] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.441527][ T9584] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.466323][ T9584] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.486781][ T9633] loop5: detected capacity change from 0 to 1024 [ 85.494632][ T9633] EXT4-fs: Ignoring removed orlov option [ 85.504298][ T9633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.520342][ T9633] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 85.549100][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.929418][ T9699] block device autoloading is deprecated and will be removed. [ 85.935702][ T9701] loop4: detected capacity change from 0 to 1024 [ 85.944427][ T9701] EXT4-fs: Ignoring removed orlov option [ 86.012074][ T9701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.036455][ T9701] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.044995][ T9721] program syz.2.2702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.063558][ T9721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.073399][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.123834][ T9733] pim6reg: entered allmulticast mode [ 86.130917][ T9733] pim6reg: left allmulticast mode [ 86.138431][ T9735] __nla_validate_parse: 12 callbacks suppressed [ 86.138443][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.153901][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.163233][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.180512][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.189612][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.198845][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.245832][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.255218][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.265772][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 86.326535][ T9759] loop4: detected capacity change from 0 to 2048 [ 86.345387][ T9759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.378437][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.497169][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'. [ 86.580690][ T9795] loop4: detected capacity change from 0 to 764 [ 86.591030][ T9795] Symlink component flag not implemented [ 86.597353][ T9795] Symlink component flag not implemented (7) [ 86.667210][ T9809] vlan2: entered promiscuous mode [ 86.672466][ T9809] gretap0: entered promiscuous mode [ 86.707036][ T9813] sd 0:0:1:0: device reset [ 86.730096][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 86.730116][ T29] audit: type=1326 audit(342.708:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.759320][ T29] audit: type=1326 audit(342.708:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.783158][ T29] audit: type=1326 audit(342.708:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.806033][ T29] audit: type=1326 audit(342.708:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.829404][ T29] audit: type=1326 audit(342.708:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.852568][ T29] audit: type=1326 audit(342.708:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.875507][ T29] audit: type=1326 audit(342.718:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a78fe9a9 code=0x7ffc0000 [ 86.916583][ T9823] random: crng reseeded on system resumption [ 86.923048][ T29] audit: type=1400 audit(342.898:2650): avc: denied { read append } for pid=9821 comm="syz.2.2744" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.923066][ T9822] loop4: detected capacity change from 0 to 1024 [ 86.952436][ T29] audit: type=1400 audit(342.898:2651): avc: denied { ioctl open } for pid=9821 comm="syz.2.2744" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.977797][ T9822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.990447][ T29] audit: type=1400 audit(342.908:2652): avc: denied { firmware_load } for pid=8148 comm="kworker/u8:51" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 87.018641][ T9822] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2745: Abort forced by user [ 87.029514][ T9822] EXT4-fs (loop4): Remounting filesystem read-only [ 87.036178][ T9822] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.055101][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.082225][ T9834] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 87.140481][ T9844] xt_hashlimit: max too large, truncated to 1048576 [ 87.431026][ T9873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.440104][ T9873] team0: Port device macvlan2 added [ 87.495350][ T9885] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 87.665899][ T9913] block device autoloading is deprecated and will be removed. [ 87.772962][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.781683][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.803814][ T9921] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.815566][ T9921] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 87.837161][ T9923] netem: change failed [ 87.972405][ T9939] pim6reg: entered allmulticast mode [ 87.978472][ T9939] pim6reg: left allmulticast mode [ 88.387483][ T9957] vhci_hcd: invalid port number 96 [ 88.392675][ T9957] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 88.404450][ T9966] program syz.4.2811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.609499][ T9985] netlink: 'syz.0.2819': attribute type 298 has an invalid length. [ 88.802555][ T8503] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 89.877000][ T8124] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 90.115647][T10095] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.214026][T10102] pim6reg: entered allmulticast mode [ 90.223442][T10102] pim6reg: left allmulticast mode [ 90.630291][T10145] xt_hashlimit: max too large, truncated to 1048576 [ 90.780160][T10161] loop4: detected capacity change from 0 to 2048 [ 90.801535][T10161] EXT4-fs: Ignoring removed nobh option [ 90.836702][T10161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.906323][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.964088][T10181] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 91.208692][T10210] loop4: detected capacity change from 0 to 128 [ 91.221236][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.229381][T10210] FAT-fs (loop4): Filesystem has been set read-only [ 91.249587][T10210] bio_check_eod: 103 callbacks suppressed [ 91.249602][T10210] gtp: attempt to access beyond end of device [ 91.249602][T10210] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.271163][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.279409][T10210] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.288154][T10210] gtp: attempt to access beyond end of device [ 91.288154][T10210] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.302932][T10220] __nla_validate_parse: 33 callbacks suppressed [ 91.302947][T10220] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2917'. [ 91.376861][T10232] loop5: detected capacity change from 0 to 512 [ 91.400342][T10232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.451112][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.503930][T10247] xt_hashlimit: max too large, truncated to 1048576 [ 92.360088][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 92.360102][ T29] audit: type=1326 audit(348.338:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.429530][T10301] loop4: detected capacity change from 0 to 512 [ 92.437805][ T29] audit: type=1326 audit(348.388:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.444729][T10301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.461537][ T29] audit: type=1326 audit(348.388:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.468039][T10301] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 92.490318][ T29] audit: type=1326 audit(348.388:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.500740][T10301] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 92.500821][T10301] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2954: Failed to acquire dquot type 1 [ 92.503557][T10301] EXT4-fs (loop4): 1 truncate cleaned up [ 92.524348][ T29] audit: type=1326 audit(348.388:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.524383][ T29] audit: type=1326 audit(348.388:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.524417][ T29] audit: type=1326 audit(348.388:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.524438][ T29] audit: type=1326 audit(348.388:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c1099e9a9 code=0x7ffc0000 [ 92.643237][T10301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.695447][T10301] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 92.721970][T10301] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 92.749048][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.816975][T10326] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2966'. [ 92.851203][T10331] netlink: 'syz.5.2968': attribute type 1 has an invalid length. [ 92.962276][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2974'. [ 93.005263][T10354] loop4: detected capacity change from 0 to 1024 [ 93.022882][T10354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.045374][ T8503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 93.060582][ T8503] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.073001][ T8503] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.073001][ T8503] [ 93.076683][T10361] loop5: detected capacity change from 0 to 512 [ 93.082722][ T8503] EXT4-fs (loop4): Total free blocks count 0 [ 93.082739][ T8503] EXT4-fs (loop4): Free/Dirty block details [ 93.082749][ T8503] EXT4-fs (loop4): free_blocks=68451041280 [ 93.082761][ T8503] EXT4-fs (loop4): dirty_blocks=32 [ 93.082771][ T8503] EXT4-fs (loop4): Block reservation details [ 93.082780][ T8503] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 93.085145][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.097152][T10361] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.132944][ T9473] kernel write not supported for file bpf-prog (pid: 9473 comm: kworker/1:4) [ 93.136713][T10361] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.163222][T10361] EXT4-fs (loop5): 1 truncate cleaned up [ 93.169392][T10361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.212542][T10369] loop4: detected capacity change from 0 to 512 [ 93.221418][ T7571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.234075][T10369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.277974][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.290167][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 93.299332][T10379] IPVS: Error joining to the multicast group [ 93.299869][T10381] loop5: detected capacity change from 0 to 128 [ 93.316846][T10381] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.351053][ T7571] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.352885][T10391] loop4: detected capacity change from 0 to 128 [ 93.375168][T10391] syz.4.2990: attempt to access beyond end of device [ 93.375168][T10391] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 93.388870][T10391] syz.4.2990: attempt to access beyond end of device [ 93.388870][T10391] loop4: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 93.417122][T10391] syz.4.2990: attempt to access beyond end of device [ 93.417122][T10391] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 93.430903][T10391] syz.4.2990: attempt to access beyond end of device [ 93.430903][T10391] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 93.445432][T10391] syz.4.2990: attempt to access beyond end of device [ 93.445432][T10391] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.449659][T10398] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2993'. [ 93.469500][T10391] syz.4.2990: attempt to access beyond end of device [ 93.469500][T10391] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.509627][T10391] syz.4.2990: attempt to access beyond end of device [ 93.509627][T10391] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 93.523539][T10391] syz.4.2990: attempt to access beyond end of device [ 93.523539][T10391] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 93.644132][T10420] loop0: detected capacity change from 0 to 128 [ 93.654029][T10420] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.662143][T10420] FAT-fs (loop0): Filesystem has been set read-only [ 93.668827][T10420] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.676788][T10420] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.716128][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 93.736043][ T3380] kernel write not supported for file bpf-prog (pid: 3380 comm: kworker/0:4) [ 93.779939][T10439] loop5: detected capacity change from 0 to 256 [ 93.791464][T10439] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.814438][T10439] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 93.887754][T10448] loop5: detected capacity change from 0 to 128 [ 93.898434][T10448] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 93.906941][T10448] FAT-fs (loop5): Filesystem has been set read-only [ 93.914808][T10448] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 93.922809][T10448] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 93.968139][T10456] loop4: detected capacity change from 0 to 1024 [ 93.968467][T10456] EXT4-fs: Ignoring removed orlov option [ 93.992934][T10456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.997586][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 94.015183][ T3380] kernel write not supported for file bpf-prog (pid: 3380 comm: kworker/0:4) [ 94.047107][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.139385][T10476] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3030'. [ 94.157039][T10478] netlink: '+}[@': attribute type 3 has an invalid length. [ 94.203451][T10486] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3035'. [ 94.277741][T10493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.351614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.445748][T10518] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.495057][T10518] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.523225][T10518] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.583337][T10518] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.608123][T10543] netlink: 'syz.5.3056': attribute type 1 has an invalid length. [ 94.666011][T10518] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705859][T10518] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727630][T10518] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.739316][T10518] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.879684][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3066'. [ 94.894841][ T1035] kernel write not supported for file bpf-prog (pid: 1035 comm: kworker/1:2) [ 94.903008][T10572] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.954818][T10572] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.991303][T10583] IPVS: Error joining to the multicast group [ 94.999988][T10572] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.023825][T10572] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.068657][T10594] syzkaller1: entered promiscuous mode [ 95.068675][T10594] syzkaller1: entered allmulticast mode [ 95.095515][T10572] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.115338][T10572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118500][T10572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.121267][T10572] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164784][T10599] loop5: detected capacity change from 0 to 128 [ 95.195586][T10599] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 95.203630][T10599] FAT-fs (loop5): Filesystem has been set read-only [ 95.203799][T10599] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 95.203817][T10599] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 95.397124][T10611] loop0: detected capacity change from 0 to 512 [ 95.397390][T10611] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.398872][T10611] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.415455][T10614] IPVS: Error joining to the multicast group [ 95.464199][T10611] EXT4-fs (loop0): 1 truncate cleaned up [ 95.464515][T10611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.701222][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.901174][T10645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.025888][T10601] ================================================================== [ 96.042036][T10601] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 96.050642][T10601] [ 96.052969][T10601] write to 0xffff88813a39c768 of 8 bytes by task 10607 on cpu 1: [ 96.060687][T10601] shmem_file_splice_read+0x470/0x600 [ 96.066078][T10601] splice_direct_to_actor+0x26f/0x680 [ 96.071487][T10601] do_splice_direct+0xda/0x150 [ 96.076261][T10601] do_sendfile+0x380/0x650 [ 96.080693][T10601] __x64_sys_sendfile64+0x105/0x150 [ 96.085908][T10601] x64_sys_call+0x2bb0/0x2ff0 [ 96.090593][T10601] do_syscall_64+0xd2/0x200 [ 96.095110][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.101108][T10601] [ 96.103437][T10601] write to 0xffff88813a39c768 of 8 bytes by task 10601 on cpu 0: [ 96.111160][T10601] shmem_file_splice_read+0x470/0x600 [ 96.116548][T10601] splice_direct_to_actor+0x26f/0x680 [ 96.121950][T10601] do_splice_direct+0xda/0x150 [ 96.126731][T10601] do_sendfile+0x380/0x650 [ 96.131173][T10601] __x64_sys_sendfile64+0x105/0x150 [ 96.136486][T10601] x64_sys_call+0x2bb0/0x2ff0 [ 96.141265][T10601] do_syscall_64+0xd2/0x200 [ 96.145789][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.151874][T10601] [ 96.154229][T10601] value changed: 0x000000000000540a -> 0x000000000000540d [ 96.161343][T10601] [ 96.163766][T10601] Reported by Kernel Concurrency Sanitizer on: [ 96.170015][T10601] CPU: 0 UID: 0 PID: 10601 Comm: syz.2.3081 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 96.182437][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.192587][T10601] ================================================================== [ 97.552217][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 97.559834][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.471671][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!