last executing test programs: 50.363371541s ago: executing program 0 (id=274): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x103}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000140)="404e8269db", 0x5}], 0x1}}], 0x2, 0x480e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 50.339015394s ago: executing program 0 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 50.266903381s ago: executing program 0 (id=276): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 50.167041471s ago: executing program 0 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 50.142070673s ago: executing program 0 (id=280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages_start\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 48.518290906s ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 48.500879927s ago: executing program 1 (id=333): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) 48.441311433s ago: executing program 1 (id=334): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003040)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 48.423238526s ago: executing program 1 (id=336): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1022}], 0x2, 0x0, 0x0, 0x0) 48.325360915s ago: executing program 0 (id=339): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x435d, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="bbbbbb"], 0x0) 48.294048538s ago: executing program 32 (id=339): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x435d, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="bbbbbb"], 0x0) 48.251595513s ago: executing program 1 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4000) 48.030715614s ago: executing program 1 (id=345): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 48.030426714s ago: executing program 33 (id=345): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.113602999s ago: executing program 6 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x2}, 0x50) 1.930290518s ago: executing program 6 (id=2355): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 1.123672559s ago: executing program 6 (id=2374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="a6", 0x1, 0x20004811, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 1.077466023s ago: executing program 6 (id=2375): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.041497147s ago: executing program 6 (id=2380): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x8, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.00827415s ago: executing program 3 (id=2383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 990.698242ms ago: executing program 3 (id=2384): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0xffff}]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x8, 0xdd6}, 0x28) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 956.103245ms ago: executing program 3 (id=2387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 912.07531ms ago: executing program 3 (id=2390): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380)) 787.503082ms ago: executing program 4 (id=2395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 738.140007ms ago: executing program 4 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 698.740641ms ago: executing program 4 (id=2399): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000200000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9005}, 0x4) 644.421566ms ago: executing program 3 (id=2402): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}, 0x24008004) 616.463989ms ago: executing program 3 (id=2404): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 405.48687ms ago: executing program 5 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 382.903652ms ago: executing program 5 (id=2410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01800000000000000000010000000000000002"], 0x28}}, 0x40000) 360.218205ms ago: executing program 5 (id=2411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c0019"], 0x5c}}, 0x0) 327.276108ms ago: executing program 5 (id=2412): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xc5) fcntl$notify(r0, 0x402, 0x31) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 323.184878ms ago: executing program 4 (id=2413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r2, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 304.416271ms ago: executing program 5 (id=2415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r1) 267.262994ms ago: executing program 4 (id=2416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x9, 0x0, 0x0) 224.878298ms ago: executing program 4 (id=2417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 224.193848ms ago: executing program 5 (id=2427): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 155.126355ms ago: executing program 6 (id=2418): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 130.043418ms ago: executing program 2 (id=2419): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 96.812401ms ago: executing program 2 (id=2420): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/196, 0xc4}, 0x7}], 0x1, 0x12141, 0x0) 75.602893ms ago: executing program 2 (id=2421): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000400000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x800) 45.251566ms ago: executing program 2 (id=2422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 29.731158ms ago: executing program 2 (id=2423): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') 0s ago: executing program 2 (id=2424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="2833b1656532", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x2f, 0x0, 0x0, 0x6}]}}}}}}, 0x42) kernel console output (not intermixed with test programs): :sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.037585][ T3312] veth0_macvtap: entered promiscuous mode [ 32.054163][ T29] audit: type=1400 audit(1763310720.421:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.IfOppq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.061950][ T3312] veth1_macvtap: entered promiscuous mode [ 32.093013][ T29] audit: type=1400 audit(1763310720.451:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.097405][ T3315] veth1_vlan: entered promiscuous mode [ 32.119145][ T29] audit: type=1400 audit(1763310720.581:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.138501][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.141938][ T29] audit: type=1400 audit(1763310720.581:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.158433][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.186970][ T3317] veth0_vlan: entered promiscuous mode [ 32.194057][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.195851][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.216744][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.226046][ T1612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.235821][ T3317] veth1_vlan: entered promiscuous mode [ 32.247701][ T1612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.259994][ T1612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.269026][ T1612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.284691][ T29] audit: type=1400 audit(1763310720.761:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.310766][ T1612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.337936][ T1612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.352814][ T1612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.373599][ T3317] veth0_macvtap: entered promiscuous mode [ 32.387914][ T3317] veth1_macvtap: entered promiscuous mode [ 32.394861][ T3315] veth0_macvtap: entered promiscuous mode [ 32.401146][ T1612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.423891][ T3315] veth1_macvtap: entered promiscuous mode [ 32.444210][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.459188][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.496889][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.507520][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.528044][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.544374][ T1612] nci: nci_rx_work: unknown MT 0x4 [ 32.554712][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.575220][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.590544][ T1612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.626314][ T1612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648156][ T1612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.658384][ T1612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.667959][ T1612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.741854][ T3510] loop0: detected capacity change from 0 to 1024 [ 32.748702][ T3510] ======================================================= [ 32.748702][ T3510] WARNING: The mand mount option has been deprecated and [ 32.748702][ T3510] and is ignored by this kernel. Remove the mand [ 32.748702][ T3510] option from the mount to silence this warning. [ 32.748702][ T3510] ======================================================= [ 32.794680][ T3510] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 32.804496][ T3510] System zones: 0-1, 3-12 [ 32.810117][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.859304][ T3505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.872531][ T3505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.061581][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 33.345428][ T3531] serio: Serial port ttyS3 [ 33.555779][ T3555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.29'. [ 33.565164][ T3555] unsupported nlmsg_type 40 [ 33.627651][ T3561] process 'syz.4.31' launched './file1' with NULL argv: empty string added [ 33.667572][ T3565] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 33.689442][ T3563] vhci_hcd: invalid port number 9 [ 33.694717][ T3563] vhci_hcd: invalid port number 9 [ 34.073742][ T3585] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 34.309367][ T3602] SELinux: failed to load policy [ 34.478199][ T3621] loop4: detected capacity change from 0 to 512 [ 34.495634][ T3621] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 34.511399][ T3623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.587247][ T3629] rdma_op ffff8881011e5580 conn xmit_rdma 0000000000000000 [ 34.604953][ T3633] loop4: detected capacity change from 0 to 1024 [ 34.619207][ T3633] EXT4-fs: Ignoring removed orlov option [ 34.670424][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.709771][ T3633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.945316][ T3666] netlink: 'syz.4.80': attribute type 13 has an invalid length. [ 34.957191][ T52] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.957203][ T3666] netlink: 'syz.4.80': attribute type 13 has an invalid length. [ 34.957228][ T52] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.957259][ T52] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.991579][ T3666] Zero length message leads to an empty skb [ 34.993636][ T52] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.078315][ T3671] IPv6: Can't replace route, no match found [ 35.183116][ T3683] bridge0: entered promiscuous mode [ 35.188363][ T3683] macsec1: entered promiscuous mode [ 35.194979][ T3683] bridge0: port 3(macsec1) entered blocking state [ 35.201460][ T3683] bridge0: port 3(macsec1) entered disabled state [ 35.208349][ T3683] macsec1: entered allmulticast mode [ 35.213875][ T3683] bridge0: entered allmulticast mode [ 35.219727][ T3683] macsec1: left allmulticast mode [ 35.224771][ T3683] bridge0: left allmulticast mode [ 35.230212][ T3683] bridge0: left promiscuous mode [ 35.361622][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 35.446139][ T3698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.511547][ T3703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.97'. [ 35.560054][ T3704] SELinux: failed to load policy [ 35.569351][ T3708] FAT-fs (loop9): unable to read boot sector [ 35.642366][ T3312] syz-executor (3312) used greatest stack depth: 10544 bytes left [ 35.657775][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.736071][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.800200][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.848013][ T3731] loop1: detected capacity change from 0 to 8192 [ 35.885722][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.007541][ T3725] chnl_net:caif_netlink_parms(): no params data found [ 36.017029][ T12] bridge_slave_1: left allmulticast mode [ 36.023266][ T12] bridge_slave_1: left promiscuous mode [ 36.028966][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.037153][ T12] bridge_slave_0: left allmulticast mode [ 36.042868][ T12] bridge_slave_0: left promiscuous mode [ 36.048628][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.092277][ T3744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 36.117660][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 36.160257][ T3750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.114'. [ 36.192383][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.203600][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.216934][ T12] bond0 (unregistering): Released all slaves [ 36.283306][ T12] hsr_slave_0: left promiscuous mode [ 36.298844][ T12] hsr_slave_1: left promiscuous mode [ 36.304940][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.312462][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.323003][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.330514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.341884][ T12] veth1_macvtap: left promiscuous mode [ 36.347464][ T12] veth0_macvtap: left promiscuous mode [ 36.353169][ T12] veth1_vlan: left promiscuous mode [ 36.358391][ T12] veth0_vlan: left promiscuous mode [ 36.458110][ T3776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 36.499200][ T12] team0 (unregistering): Port device team_slave_1 removed [ 36.526593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 36.630808][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.638080][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.646401][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 36.657141][ T3725] bridge_slave_0: entered allmulticast mode [ 36.682437][ T3725] bridge_slave_0: entered promiscuous mode [ 36.690701][ T3800] netlink: 312 bytes leftover after parsing attributes in process `syz.4.136'. [ 36.700609][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 36.719694][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.726855][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.750756][ T3725] bridge_slave_1: entered allmulticast mode [ 36.760227][ T3819] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 36.760227][ T3819] program syz.1.141 not setting count and/or reply_len properly [ 36.773174][ T3725] bridge_slave_1: entered promiscuous mode [ 36.833390][ T3725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.862785][ T3725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.876823][ T3834] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.889956][ T3834] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 36.923060][ T3725] team0: Port device team_slave_0 added [ 36.954178][ T3725] team0: Port device team_slave_1 added [ 36.969780][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 36.969793][ T29] audit: type=1400 audit(1763310725.451:356): avc: denied { read write } for pid=3847 comm="syz.2.152" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.979762][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.999595][ T29] audit: type=1400 audit(1763310725.451:357): avc: denied { open } for pid=3847 comm="syz.2.152" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.006939][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.007013][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.007058][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.088680][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.096467][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.104037][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.110795][ T29] audit: type=1326 audit(1763310725.591:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.111462][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.142038][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.148993][ T29] audit: type=1326 audit(1763310725.621:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.149455][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.172861][ T29] audit: type=1326 audit(1763310725.631:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.181068][ T3402] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.203586][ T29] audit: type=1326 audit(1763310725.631:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.238182][ T29] audit: type=1326 audit(1763310725.661:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7197511f85 code=0x7ffc0000 [ 37.239451][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.269279][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.295319][ T3725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.315477][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.322468][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.349054][ T3725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.371723][ T29] audit: type=1326 audit(1763310725.841:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.411403][ T3865] fido_id[3865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.430984][ T29] audit: type=1326 audit(1763310725.911:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f719747b789 code=0x7ffc0000 [ 37.454145][ T29] audit: type=1326 audit(1763310725.911:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 37.490194][ T3725] hsr_slave_0: entered promiscuous mode [ 37.519220][ T3725] hsr_slave_1: entered promiscuous mode [ 37.542741][ T3725] debugfs: 'hsr0' already exists in 'hsr' [ 37.548496][ T3725] Cannot create hsr debugfs directory [ 37.585118][ T3881] loop3: detected capacity change from 0 to 128 [ 37.682548][ T3881] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 37.716716][ T3889] loop1: detected capacity change from 0 to 8192 [ 37.726165][ T3881] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.875464][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.955998][ T3927] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 38.004178][ T3935] loop1: detected capacity change from 0 to 164 [ 38.230280][ T3975] loop2: detected capacity change from 0 to 2048 [ 38.257199][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 38.744935][ T3725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.760400][ T3725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.781065][ T3725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.803036][ T3725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.857667][ T3725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.869270][ T3725] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.879747][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.886864][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.899277][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.906372][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.984018][ T3725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.049013][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 39.088427][ T3725] veth0_vlan: entered promiscuous mode [ 39.105355][ T3725] veth1_vlan: entered promiscuous mode [ 39.122682][ T3725] veth0_macvtap: entered promiscuous mode [ 39.135750][ T3725] veth1_macvtap: entered promiscuous mode [ 39.180198][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.214963][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.235732][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.259855][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.282673][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.313930][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.623825][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 39.633196][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 39.719715][ T4112] random: crng reseeded on system resumption [ 40.028302][ T4141] loop1: detected capacity change from 0 to 256 [ 40.067794][ T4141] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 40.075223][ T4141] FAT-fs (loop1): Filesystem has been set read-only [ 40.082594][ T4141] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 40.116239][ T4145] netlink: 'syz.2.227': attribute type 7 has an invalid length. [ 40.128095][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.128134][ T4145] netlink: 'syz.2.227': attribute type 7 has an invalid length. [ 40.142115][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.153969][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.168695][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.340494][ T4161] loop2: detected capacity change from 0 to 2048 [ 40.354644][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.378037][ T4161] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.496584][ T4171] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 40.504329][ T4171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.239'. [ 40.575731][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 40.648333][ T31] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 40.664128][ T31] EXT4-fs (loop2): Remounting filesystem read-only [ 40.738799][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.776486][ T4191] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 40.802474][ T4187] loop1: detected capacity change from 0 to 8192 [ 40.828618][ T4193] syz.3.250 (4193) used greatest stack depth: 10160 bytes left [ 40.866716][ T4197] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 40.937320][ T4204] vlan2: entered allmulticast mode [ 41.221101][ T4242] loop2: detected capacity change from 0 to 4096 [ 41.229960][ T4242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.243284][ T4242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.469456][ T4257] loop4: detected capacity change from 0 to 128 [ 41.473548][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.485586][ T4257] EXT4-fs: Ignoring removed nobh option [ 41.495265][ T4257] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.551193][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.608758][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 41.629225][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 41.639583][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 41.852533][ T4280] loop1: detected capacity change from 0 to 512 [ 41.864179][ T4280] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.288: error while reading EA inode 32 err=-116 [ 41.877149][ T4280] EXT4-fs (loop1): Remounting filesystem read-only [ 41.884008][ T4280] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.897044][ T4280] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.907827][ T4280] EXT4-fs (loop1): 1 orphan inode deleted [ 41.914063][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.940333][ T4280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.958952][ T4283] netlink: 'syz.3.289': attribute type 3 has an invalid length. [ 42.032469][ T4291] SELinux: Context system_u:object is not valid (left unmapped). [ 42.040671][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 42.040684][ T29] audit: type=1400 audit(42.015:478): avc: denied { relabelto } for pid=4290 comm="syz.1.293" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 42.071568][ T29] audit: type=1400 audit(42.015:479): avc: denied { associate } for pid=4290 comm="syz.1.293" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 42.231114][ T29] audit: type=1400 audit(42.205:480): avc: denied { mounton } for pid=4299 comm="syz.2.297" path="/79/file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.268036][ T29] audit: type=1400 audit(42.245:481): avc: denied { create } for pid=4301 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.287080][ T29] audit: type=1400 audit(42.245:482): avc: denied { setopt } for pid=4301 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.316031][ T29] audit: type=1400 audit(42.295:483): avc: denied { wake_alarm } for pid=4304 comm="syz.3.299" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.358288][ T29] audit: type=1326 audit(42.335:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 42.381810][ T29] audit: type=1326 audit(42.335:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 42.404516][ T29] audit: type=1326 audit(42.335:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 42.427161][ T29] audit: type=1326 audit(42.335:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 42.496813][ T4317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 42.503357][ T4317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.510956][ T4317] vhci_hcd vhci_hcd.0: Device attached [ 42.519299][ T4318] vhci_hcd: connection closed [ 42.519567][ T148] vhci_hcd: stop threads [ 42.528558][ T148] vhci_hcd: release socket [ 42.532990][ T148] vhci_hcd: disconnect device [ 42.771634][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 42.785817][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 42.794322][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 43.214617][ T4382] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.222025][ T4382] vhci_hcd: invalid port number 96 [ 43.227184][ T4382] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 43.267194][ T4389] loop1: detected capacity change from 0 to 512 [ 43.277464][ T4389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.290680][ T4389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.304144][ T4389] EXT4-fs (loop1): 1 truncate cleaned up [ 43.314808][ T4389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.323663][ T4391] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 43.347025][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.366851][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /88/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.390028][ T3314] EXT4-fs (loop1): Remounting filesystem read-only [ 43.405968][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.465640][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.546546][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.594912][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.652674][ T148] bridge_slave_1: left allmulticast mode [ 43.658378][ T148] bridge_slave_1: left promiscuous mode [ 43.664318][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.681911][ T148] bridge_slave_0: left allmulticast mode [ 43.687702][ T148] bridge_slave_0: left promiscuous mode [ 43.694085][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.703386][ T4420] mmap: syz.4.347 (4420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.874409][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.884526][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.895768][ T148] bond0 (unregistering): Released all slaves [ 43.914596][ T4438] macvlan1: entered promiscuous mode [ 43.928318][ T4438] ipvlan0: entered promiscuous mode [ 43.936359][ T4438] ipvlan0: left promiscuous mode [ 43.941590][ T4438] macvlan1: left promiscuous mode [ 43.980570][ T148] hsr_slave_0: left promiscuous mode [ 43.988223][ T148] hsr_slave_1: left promiscuous mode [ 43.994316][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.001726][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.009683][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.017508][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.028053][ T148] veth1_macvtap: left promiscuous mode [ 44.033917][ T148] veth0_macvtap: left promiscuous mode [ 44.040512][ T148] veth1_vlan: left promiscuous mode [ 44.051219][ T148] veth0_vlan: left promiscuous mode [ 44.151758][ T4470] netlink: 104 bytes leftover after parsing attributes in process `syz.3.360'. [ 44.235936][ T148] team0 (unregistering): Port device team_slave_1 removed [ 44.253452][ T148] team0 (unregistering): Port device team_slave_0 removed [ 44.280898][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 44.291607][ T4488] netlink: 312 bytes leftover after parsing attributes in process `syz.4.368'. [ 44.315769][ T4396] chnl_net:caif_netlink_parms(): no params data found [ 44.409981][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.417232][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.429095][ T4396] bridge_slave_0: entered allmulticast mode [ 44.435988][ T4396] bridge_slave_0: entered promiscuous mode [ 44.457060][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.465913][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.476140][ T4396] bridge_slave_1: entered allmulticast mode [ 44.482937][ T4396] bridge_slave_1: entered promiscuous mode [ 44.535694][ T4396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.554701][ T4396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.633370][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.668118][ T4396] team0: Port device team_slave_0 added [ 44.686231][ T4396] team0: Port device team_slave_1 added [ 44.698218][ T4543] Driver unsupported XDP return value 0 on prog (id 254) dev N/A, expect packet loss! [ 44.714268][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.807981][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.821682][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.828782][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.854826][ T4396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.875093][ T4423] chnl_net:caif_netlink_parms(): no params data found [ 44.894477][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.901880][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.927944][ T4396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.976480][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.042598][ T4396] hsr_slave_0: entered promiscuous mode [ 45.069916][ T4396] hsr_slave_1: entered promiscuous mode [ 45.078786][ T4396] debugfs: 'hsr0' already exists in 'hsr' [ 45.084565][ T4396] Cannot create hsr debugfs directory [ 45.105027][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.112412][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.119855][ T4423] bridge_slave_0: entered allmulticast mode [ 45.126470][ T4423] bridge_slave_0: entered promiscuous mode [ 45.152214][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.159358][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.168787][ T4423] bridge_slave_1: entered allmulticast mode [ 45.175399][ T4423] bridge_slave_1: entered promiscuous mode [ 45.193465][ T4423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.226245][ T4423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.273129][ T4423] team0: Port device team_slave_0 added [ 45.285328][ T148] bridge_slave_1: left allmulticast mode [ 45.291121][ T148] bridge_slave_1: left promiscuous mode [ 45.296814][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.306862][ T148] bridge_slave_0: left allmulticast mode [ 45.312684][ T148] bridge_slave_0: left promiscuous mode [ 45.318428][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.464015][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.473621][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.488268][ T148] bond0 (unregistering): Released all slaves [ 45.503075][ T4614] syz.3.400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.516683][ T4423] team0: Port device team_slave_1 added [ 45.528862][ T4616] loop3: detected capacity change from 0 to 256 [ 45.545153][ T148] hsr_slave_0: left promiscuous mode [ 45.550845][ T148] hsr_slave_1: left promiscuous mode [ 45.556207][ T4616] FAT-fs (loop3): codepage cp950 not found [ 45.556829][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.569732][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.579316][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.586753][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.599731][ T148] veth1_macvtap: left promiscuous mode [ 45.605434][ T148] veth0_macvtap: left promiscuous mode [ 45.611061][ T148] veth1_vlan: left promiscuous mode [ 45.616892][ T148] veth0_vlan: left promiscuous mode [ 45.719747][ T148] team0 (unregistering): Port device team_slave_1 removed [ 45.733518][ T148] team0 (unregistering): Port device team_slave_0 removed [ 45.774420][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.781445][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.807394][ T4423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.821154][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.828132][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.854143][ T4423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.894546][ T4630] loop4: detected capacity change from 0 to 512 [ 45.920359][ T4630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.936241][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.961462][ T4423] hsr_slave_0: entered promiscuous mode [ 45.970027][ T4423] hsr_slave_1: entered promiscuous mode [ 45.983816][ T4630] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #19: comm syz.4.406: corrupted inode contents [ 46.018712][ T4630] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #19: comm syz.4.406: mark_inode_dirty error [ 46.055819][ T4396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.064300][ T4630] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #19: comm syz.4.406: corrupted inode contents [ 46.085317][ T4396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.122364][ T4396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.136121][ T4630] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #19: comm syz.4.406: mark_inode_dirty error [ 46.160325][ T4630] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #19: comm syz.4.406: mark inode dirty (error -117) [ 46.173982][ T4630] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 46.184761][ T4396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.215737][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.299634][ T4423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.328844][ T4423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.343404][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.351310][ T4423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.361973][ T4423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.369471][ T4677] __nla_validate_parse: 1 callbacks suppressed [ 46.369484][ T4677] netlink: 388 bytes leftover after parsing attributes in process `syz.3.415'. [ 46.401884][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.420358][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.427527][ T1612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.448208][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.455461][ T1612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.498589][ T4396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.509346][ T4396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.533439][ T4704] loop4: detected capacity change from 0 to 512 [ 46.559478][ T4704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.420: error while reading EA inode 32 err=-116 [ 46.568763][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.584521][ T4423] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.593203][ T4704] EXT4-fs (loop4): Remounting filesystem read-only [ 46.599749][ T4704] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 46.618804][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.626034][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.627643][ T4704] EXT4-fs (loop4): 1 orphan inode deleted [ 46.640374][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.656197][ T4704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.666993][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.674136][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.735617][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.826595][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.987064][ T4757] loop2: detected capacity change from 0 to 4096 [ 47.058046][ T4757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.100469][ T4396] veth0_vlan: entered promiscuous mode [ 47.128696][ T4396] veth1_vlan: entered promiscuous mode [ 47.139502][ T4423] veth0_vlan: entered promiscuous mode [ 47.162967][ T4423] veth1_vlan: entered promiscuous mode [ 47.170878][ T4396] veth0_macvtap: entered promiscuous mode [ 47.177546][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 47.177559][ T29] audit: type=1400 audit(47.155:619): avc: denied { read } for pid=4782 comm="syz.4.433" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.178581][ T4396] veth1_macvtap: entered promiscuous mode [ 47.183859][ T29] audit: type=1400 audit(47.155:620): avc: denied { open } for pid=4782 comm="syz.4.433" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.210539][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.242806][ T29] audit: type=1400 audit(47.205:621): avc: denied { ioctl } for pid=4782 comm="syz.4.433" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.278679][ T4423] veth0_macvtap: entered promiscuous mode [ 47.291200][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.296708][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.310045][ T4423] veth1_macvtap: entered promiscuous mode [ 47.327976][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.347910][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.355250][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.375764][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.389088][ T4789] loop2: detected capacity change from 0 to 256 [ 47.400828][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.435159][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.466770][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 47.475748][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 47.493719][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.507855][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 47.516952][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 47.561685][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.579408][ T29] audit: type=1400 audit(47.555:622): avc: denied { view } for pid=4813 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.612633][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.639524][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.719624][ T4828] loop4: detected capacity change from 0 to 2048 [ 47.755591][ T4828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.773354][ T29] audit: type=1326 audit(47.755:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.6.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a3844f6c9 code=0x0 [ 47.812561][ T29] audit: type=1400 audit(47.785:624): avc: denied { kexec_image_load } for pid=4827 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 47.867150][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.867220][ T29] audit: type=1400 audit(47.825:625): avc: denied { listen } for pid=4839 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.914491][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4844 comm=syz.5.447 [ 47.941421][ T29] audit: type=1400 audit(47.915:626): avc: denied { mount } for pid=4845 comm="syz.4.446" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 47.987870][ T29] audit: type=1400 audit(47.945:627): avc: denied { unmount } for pid=4845 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 48.007207][ T29] audit: type=1400 audit(47.955:628): avc: denied { relabelfrom } for pid=4847 comm="syz.5.448" name="NETLINK" dev="sockfs" ino=10572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.072252][ T4852] netlink: 168 bytes leftover after parsing attributes in process `syz.4.449'. [ 48.277550][ T4876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.460'. [ 48.486922][ T4904] loop4: detected capacity change from 0 to 128 [ 48.508445][ T4904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.577818][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.687111][ T4916] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 48.892820][ T4948] sch_fq: defrate 4294967295 ignored. [ 48.902607][ T4950] sd 0:0:1:0: device reset [ 48.983595][ T4954] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.498'. [ 48.995852][ T4954] netlink: zone id is out of range [ 49.000996][ T4954] netlink: zone id is out of range [ 49.007026][ T4954] netlink: zone id is out of range [ 49.015188][ T4954] netlink: zone id is out of range [ 49.055622][ T4962] bridge1: entered promiscuous mode [ 49.074812][ T4954] netlink: set zone limit has 8 unknown bytes [ 49.237072][ T4985] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 49.306299][ T4994] loop4: detected capacity change from 0 to 2048 [ 49.336617][ T4994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.353792][ T5001] tls_set_device_offload: netdev not found [ 49.361549][ T5000] ALSA: seq fatal error: cannot create timer (-22) [ 49.411548][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.350122][ T5094] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.361558][ T5094] IPv6: Can't replace route, no match found [ 50.538654][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.563'. [ 50.625444][ T5116] bridge0: entered promiscuous mode [ 50.631868][ T5116] bridge0: port 3(macsec1) entered blocking state [ 50.638369][ T5116] bridge0: port 3(macsec1) entered disabled state [ 50.658358][ T3402] hid_parser_main: 17 callbacks suppressed [ 50.658376][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 50.672459][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 50.691337][ T3402] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 50.699523][ T5116] macsec1: entered allmulticast mode [ 50.704959][ T5116] bridge0: entered allmulticast mode [ 50.711293][ T3402] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 50.731849][ T5116] macsec1: left allmulticast mode [ 50.736982][ T5116] bridge0: left allmulticast mode [ 50.747639][ T5116] bridge0: left promiscuous mode [ 50.749329][ T5121] fido_id[5121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.816858][ T5127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'. [ 50.888809][ T5140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.922508][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119f92400: rx timeout, send abort [ 50.930782][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119f92400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 50.945095][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119f92000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.552894][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.562280][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.689041][ T5227] loop3: detected capacity change from 0 to 2048 [ 51.705671][ T5227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.761968][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.861912][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 52.065696][ T5266] loop3: detected capacity change from 0 to 512 [ 52.074202][ T5266] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.633: error while reading EA inode 32 err=-116 [ 52.092519][ T5266] EXT4-fs (loop3): Remounting filesystem read-only [ 52.099088][ T5266] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.109456][ T5266] EXT4-fs (loop3): 1 orphan inode deleted [ 52.115902][ T5266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.129675][ T5266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.319884][ T5286] netdevsim netdevsim3: Direct firmware load for r failed with error -2 [ 52.416595][ T5296] capability: warning: `syz.5.647' uses 32-bit capabilities (legacy support in use) [ 53.174371][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 53.174385][ T29] audit: type=1400 audit(53.155:751): avc: denied { read } for pid=5342 comm="syz.6.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.200446][ T5347] unsupported nla_type 52263 [ 53.227007][ T29] audit: type=1400 audit(53.205:752): avc: denied { mount } for pid=5348 comm="syz.6.663" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.301181][ T29] audit: type=1326 audit(53.275:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.326128][ T29] audit: type=1326 audit(53.295:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.348909][ T29] audit: type=1326 audit(53.295:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.371656][ T29] audit: type=1326 audit(53.295:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.395290][ T29] audit: type=1326 audit(53.295:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.418541][ T29] audit: type=1326 audit(53.295:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 53.447285][ T29] audit: type=1400 audit(53.375:759): avc: denied { create } for pid=5363 comm="syz.3.670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.467478][ T29] audit: type=1400 audit(53.375:760): avc: denied { mounton } for pid=5363 comm="syz.3.670" path="/161/file0" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.701280][ T5394] rdma_op ffff88811c0d6180 conn xmit_rdma 0000000000000000 [ 53.798092][ T5403] syz.2.686 (5403) used greatest stack depth: 9744 bytes left [ 53.936914][ T5431] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.698'. [ 54.241351][ T5467] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 54.311112][ T5483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5483 comm=syz.3.723 [ 54.363533][ T5493] loop5: detected capacity change from 0 to 256 [ 54.396969][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.728'. [ 54.406009][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.728'. [ 54.438704][ T5501] SELinux: policydb version 0 does not match my version range 15-35 [ 54.447361][ T5501] SELinux: failed to load policy [ 54.515285][ T5510] sch_tbf: burst 22 is lower than device lo mtu (1550) ! [ 54.596394][ T5526] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 54.651032][ T5532] loop6: detected capacity change from 0 to 256 [ 54.674581][ T5525] loop5: detected capacity change from 0 to 8192 [ 54.696316][ T5536] netlink: 'syz.6.749': attribute type 1 has an invalid length. [ 54.704372][ T5536] netlink: 224 bytes leftover after parsing attributes in process `syz.6.749'. [ 54.754620][ T5542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 54.773232][ T5542] netem: change failed [ 54.839324][ T5552] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 54.857855][ T5554] loop6: detected capacity change from 0 to 1024 [ 54.885613][ T5554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.921313][ T5554] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.756: inode #3979804100: comm syz.6.756: iget: illegal inode # [ 54.935421][ T5554] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.756: error while reading EA inode 3979804100 err=-117 [ 54.966395][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.048996][ T5590] netlink: 'syz.5.773': attribute type 1 has an invalid length. [ 55.101490][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 55.126423][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 55.157709][ T5610] syz.5.782 (5610) used greatest stack depth: 9432 bytes left [ 55.177171][ T5613] SELinux: failed to load policy [ 55.226790][ T5621] loop6: detected capacity change from 0 to 1024 [ 55.236792][ T5621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.267107][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.351812][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.799'. [ 55.398191][ T5652] ip6gretap0: entered promiscuous mode [ 55.413381][ T5652] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 55.479277][ T5648] loop5: detected capacity change from 0 to 8192 [ 55.520637][ T5655] netlink: 'syz.3.803': attribute type 6 has an invalid length. [ 55.538331][ T5648] SELinux: Context Ü is not valid (left unmapped). [ 55.621054][ T5679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 55.668621][ T5689] netlink: zone id is out of range [ 55.673924][ T5689] netlink: zone id is out of range [ 55.680320][ T5689] netlink: zone id is out of range [ 55.685985][ T5689] netlink: del zone limit has 8 unknown bytes [ 55.723677][ T5696] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 55.858301][ T5706] loop5: detected capacity change from 0 to 1024 [ 55.866893][ T5706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.893692][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.611167][ T5730] loop6: detected capacity change from 0 to 512 [ 56.624153][ T5730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.638321][ T5730] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.833: corrupted inode contents [ 56.650358][ T5730] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.833: mark_inode_dirty error [ 56.662225][ T5730] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.833: corrupted inode contents [ 56.687307][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.809780][ T5738] netlink: 'syz.4.836': attribute type 3 has an invalid length. [ 56.858374][ T5742] loop5: detected capacity change from 0 to 512 [ 56.885412][ T5742] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.838: bg 0: block 248: padding at end of block bitmap is not set [ 56.905162][ T5742] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.838: Failed to acquire dquot type 1 [ 56.927312][ T5742] EXT4-fs (loop5): 1 truncate cleaned up [ 56.938981][ T5742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.963347][ T5742] syz.5.838 (5742) used greatest stack depth: 9120 bytes left [ 56.973162][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.016728][ T5750] loop5: detected capacity change from 0 to 128 [ 57.036873][ T5750] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.054174][ T5750] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.164682][ T5768] __nla_validate_parse: 4 callbacks suppressed [ 57.164700][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.850'. [ 57.179963][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.850'. [ 57.252569][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 57.348379][ T5786] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 57.470558][ T5810] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 57.603650][ T5835] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 57.648004][ T5837] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 57.656278][ T5837] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 57.719054][ C0] hrtimer: interrupt took 26849 ns [ 58.243303][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 58.243317][ T29] audit: type=1400 audit(58.225:1213): avc: denied { write } for pid=5921 comm="syz.4.920" name="file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.271184][ T29] audit: type=1400 audit(58.225:1214): avc: denied { open } for pid=5921 comm="syz.4.920" path="/182/file0" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.302352][ T29] audit: type=1400 audit(58.275:1215): avc: denied { ioctl } for pid=5921 comm="syz.4.920" path="/182/file0" dev="tmpfs" ino=954 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.393994][ T5936] loop5: detected capacity change from 0 to 512 [ 58.405054][ T5936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.411631][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 58.420847][ T5936] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.926: corrupted inode contents [ 58.427388][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 58.440377][ T5936] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.926: mark_inode_dirty error [ 58.448085][ T5943] netlink: 'syz.4.928': attribute type 20 has an invalid length. [ 58.461566][ T5936] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.926: corrupted inode contents [ 58.502440][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.522322][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 58.531112][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 58.540435][ T5943] netlink: 'syz.4.928': attribute type 20 has an invalid length. [ 58.649296][ T5950] netlink: 'syz.5.931': attribute type 10 has an invalid length. [ 58.665480][ T5950] team0: Port device dummy0 added [ 58.935749][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.5.938'. [ 58.951169][ T29] audit: type=1400 audit(58.925:1216): avc: denied { create } for pid=5970 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.972562][ T29] audit: type=1400 audit(58.955:1217): avc: denied { ioctl } for pid=5970 comm="syz.4.939" path="socket:[14395]" dev="sockfs" ino=14395 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 59.007636][ T29] audit: type=1326 audit(58.985:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 59.031284][ T29] audit: type=1326 audit(58.985:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 59.054072][ T29] audit: type=1326 audit(58.985:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 59.145636][ T29] audit: type=1326 audit(59.125:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 59.168716][ T29] audit: type=1326 audit(59.125:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.6.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 59.272697][ T6000] netlink: 'syz.6.954': attribute type 10 has an invalid length. [ 59.284817][ T6000] team0: Port device dummy0 added [ 59.378519][ T6009] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 59.391019][ T6009] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 59.461483][ T6009] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 59.487829][ T6017] IPVS: stopping master sync thread 6025 ... [ 59.496492][ T6025] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 59.587858][ T6037] ALSA: seq fatal error: cannot create timer (-19) [ 59.926884][ T6097] SELinux: failed to load policy [ 59.942880][ T6099] loop5: detected capacity change from 0 to 764 [ 59.961347][ T6101] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1001'. [ 59.970583][ T6099] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 60.003740][ T6099] Symlink component flag not implemented [ 60.012005][ T6099] Symlink component flag not implemented (7) [ 60.048198][ T6107] netlink: 'syz.4.1004': attribute type 3 has an invalid length. [ 60.114695][ T6121] loop6: detected capacity change from 0 to 512 [ 60.204232][ T6138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6138 comm=syz.5.1018 [ 60.287529][ T6145] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1021'. [ 60.403682][ T6164] capability: warning: `syz.4.1031' uses deprecated v2 capabilities in a way that may be insecure [ 61.092204][ T6216] €Â: renamed from vlan1 (while UP) [ 61.151378][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.160121][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.310214][ T6209] Set syz1 is full, maxelem 65536 reached [ 61.489997][ T6241] block device autoloading is deprecated and will be removed. [ 61.799347][ T6275] random: crng reseeded on system resumption [ 61.813416][ T6275] Restarting kernel threads ... [ 61.833746][ T6275] Done restarting kernel threads. [ 61.952899][ T6289] SELinux: ebitmap: truncated map [ 61.965790][ T6289] SELinux: failed to load policy [ 61.989076][ T6307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.996491][ T6307] IPv6: NLM_F_CREATE should be set when creating new route [ 62.021215][ T6308] loop5: detected capacity change from 0 to 8192 [ 62.393500][ T6357] loop4: detected capacity change from 0 to 8192 [ 62.433923][ T6357] loop4: p1 p2 p4 < > [ 62.438016][ T6357] loop4: partition table partially beyond EOD, truncated [ 62.452378][ T6357] loop4: p1 start 16777216 is beyond EOD, truncated [ 62.459263][ T6357] loop4: p2 size 515840 extends beyond EOD, truncated [ 62.476759][ T6357] loop4: p4 start 16777216 is beyond EOD, truncated [ 62.496497][ T6357] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.554033][ T6367] loop6: detected capacity change from 0 to 8192 [ 62.791740][ T6400] loop4: detected capacity change from 0 to 1024 [ 62.814472][ T6400] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.845442][ T6400] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.856448][ T6400] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.906116][ T6400] JBD2: no valid journal superblock found [ 62.911876][ T6400] EXT4-fs (loop4): Could not load journal inode [ 63.269136][ T6396] Set syz1 is full, maxelem 65536 reached [ 63.276513][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 63.276527][ T29] audit: type=1326 audit(63.255:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.305761][ T29] audit: type=1326 audit(63.255:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.328596][ T29] audit: type=1326 audit(63.255:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb35e13df10 code=0x7ffc0000 [ 63.351334][ T29] audit: type=1326 audit(63.255:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb35e13df10 code=0x7ffc0000 [ 63.374311][ T29] audit: type=1326 audit(63.255:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.397227][ T29] audit: type=1326 audit(63.255:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.420167][ T29] audit: type=1326 audit(63.255:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.443077][ T29] audit: type=1326 audit(63.255:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.465854][ T29] audit: type=1326 audit(63.255:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.504249][ T29] audit: type=1326 audit(63.335:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 63.587280][ T6444] __nla_validate_parse: 7 callbacks suppressed [ 63.587296][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1165'. [ 63.603909][ T6444] netem: unknown loss type 13 [ 63.609243][ T6444] netem: change failed [ 63.644192][ T6452] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1158'. [ 63.720905][ T6434] futex_wake_op: syz.2.1151 tries to shift op by -1; fix this program [ 63.981303][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1174'. [ 64.002710][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 64.017879][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 64.081104][ T6497] netlink: 'syz.3.1179': attribute type 21 has an invalid length. [ 64.088996][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 64.155479][ T6497] netlink: 'syz.3.1179': attribute type 21 has an invalid length. [ 64.163358][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 64.172811][ T1612] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.192149][ T1612] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.201096][ T1612] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.291414][ T1612] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.461172][ T6531] loop6: detected capacity change from 0 to 256 [ 64.733938][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 64.743075][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 64.752189][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 64.761660][ T6568] netlink: 'syz.4.1211': attribute type 6 has an invalid length. [ 64.840489][ T6581] tipc: Started in network mode [ 64.845499][ T6581] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 64.854654][ T6581] tipc: Enabling of bearer rejected, failed to enable media [ 65.619909][ T6652] futex_wake_op: syz.3.1248 tries to shift op by -1; fix this program [ 65.721672][ T6669] pim6reg1: entered promiscuous mode [ 65.727015][ T6669] pim6reg1: entered allmulticast mode [ 65.903490][ T6688] tipc: Started in network mode [ 65.908486][ T6688] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 65.917368][ T6688] tipc: Enabling of bearer rejected, failed to enable media [ 65.953617][ T6696] pim6reg1: entered promiscuous mode [ 65.958957][ T6696] pim6reg1: entered allmulticast mode [ 66.156369][ T6720] tipc: Started in network mode [ 66.162018][ T6720] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 66.170934][ T6720] tipc: Enabling of bearer rejected, failed to enable media [ 66.265604][ T6730] pim6reg1: entered promiscuous mode [ 66.270954][ T6730] pim6reg1: entered allmulticast mode [ 66.819473][ T6767] GUP no longer grows the stack in syz.6.1300 (6767): 200000004000-20000000a000 (200000002000) [ 66.830053][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.6.1300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.830085][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.830099][ T6767] Call Trace: [ 66.830106][ T6767] [ 66.830113][ T6767] __dump_stack+0x1d/0x30 [ 66.830215][ T6767] dump_stack_lvl+0xe8/0x140 [ 66.830238][ T6767] dump_stack+0x15/0x1b [ 66.830258][ T6767] __get_user_pages+0x1968/0x1ed0 [ 66.830295][ T6767] get_user_pages_remote+0x1d5/0x6c0 [ 66.830327][ T6767] __access_remote_vm+0x15c/0x590 [ 66.830388][ T6767] access_remote_vm+0x32/0x40 [ 66.830413][ T6767] proc_pid_cmdline_read+0x32b/0x6c0 [ 66.830522][ T6767] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 66.830552][ T6767] vfs_readv+0x3fb/0x690 [ 66.830658][ T6767] __x64_sys_preadv+0xfd/0x1c0 [ 66.830685][ T6767] x64_sys_call+0x282e/0x3000 [ 66.830705][ T6767] do_syscall_64+0xd2/0x200 [ 66.830724][ T6767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.830774][ T6767] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.830819][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.830844][ T6767] RIP: 0033:0x7f9a3844f6c9 [ 66.830919][ T6767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.830939][ T6767] RSP: 002b:00007f9a36eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 66.830961][ T6767] RAX: ffffffffffffffda RBX: 00007f9a386a5fa0 RCX: 00007f9a3844f6c9 [ 66.830976][ T6767] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 66.831055][ T6767] RBP: 00007f9a384d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.831067][ T6767] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 66.831079][ T6767] R13: 00007f9a386a6038 R14: 00007f9a386a5fa0 R15: 00007fff57102ed8 [ 66.831096][ T6767] [ 67.157496][ T6783] bond1: Unable to set down delay as MII monitoring is disabled [ 67.172416][ T6783] bond1 (unregistering): Released all slaves [ 67.407004][ T6825] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6825 comm=syz.6.1327 [ 67.486160][ T6836] netlink: 'syz.6.1330': attribute type 1 has an invalid length. [ 67.504769][ T6836] bond1: entered promiscuous mode [ 67.510124][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.583188][ T6844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.592959][ T6844] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.603343][ T6844] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 67.604031][ T6853] netlink: 'syz.5.1337': attribute type 3 has an invalid length. [ 67.620461][ T6844] bond1: (slave vxcan3): making interface the new active one [ 67.627973][ T6844] vxcan3: entered promiscuous mode [ 67.634401][ T6855] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.634511][ T6844] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 67.693309][ T6861] SELinux: failed to load policy [ 67.719462][ T6865] bond1: Unable to set down delay as MII monitoring is disabled [ 67.729405][ T6865] bond1 (unregistering): Released all slaves [ 67.830176][ T6885] loop5: detected capacity change from 0 to 128 [ 67.874430][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.874430][ T6885] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 67.899087][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.899087][ T6885] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 67.912644][ T6885] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 67.922493][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.922493][ T6885] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 67.935924][ T6885] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 67.945671][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.945671][ T6885] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 67.959576][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.959576][ T6885] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 67.973032][ T6885] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 67.989762][ T6885] syz.5.1352: attempt to access beyond end of device [ 67.989762][ T6885] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 68.003297][ T6885] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 68.012288][ T6885] syz.5.1352: attempt to access beyond end of device [ 68.012288][ T6885] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 68.038645][ T6885] syz.5.1352: attempt to access beyond end of device [ 68.038645][ T6885] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 68.052098][ T6885] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 68.060745][ T6885] syz.5.1352: attempt to access beyond end of device [ 68.060745][ T6885] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 68.074236][ T6885] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 68.085642][ T6885] syz.5.1352: attempt to access beyond end of device [ 68.085642][ T6885] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 68.099980][ T6885] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 68.142277][ T6885] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 68.156095][ T6885] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 68.175002][ T6885] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 68.556834][ T6931] netlink: 'syz.4.1372': attribute type 13 has an invalid length. [ 68.679912][ T6896] Set syz1 is full, maxelem 65536 reached [ 68.747046][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.754311][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.788222][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 68.788237][ T29] audit: type=1400 audit(68.765:1954): avc: denied { read } for pid=6937 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.827738][ T29] audit: type=1400 audit(68.795:1955): avc: denied { write } for pid=6942 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.868218][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.882968][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.951409][ T1430] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.960336][ T1430] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.995741][ T1430] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.004846][ T1430] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.036446][ T1430] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.045387][ T1430] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.057965][ T6966] netlink: 'syz.5.1389': attribute type 2 has an invalid length. [ 69.065905][ T6966] __nla_validate_parse: 13 callbacks suppressed [ 69.065919][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1389'. [ 69.085156][ T1430] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.094169][ T1430] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.140796][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 69.149767][ T6975] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.173324][ T6975] IPv6: Can't replace route, no match found [ 69.268949][ T6995] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.288337][ T6995] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.411608][ T29] audit: type=1326 audit(69.385:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.435069][ T29] audit: type=1326 audit(69.385:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.458051][ T29] audit: type=1326 audit(69.385:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.6.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.560768][ T29] audit: type=1326 audit(69.535:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.626983][ T29] audit: type=1326 audit(69.535:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.649866][ T29] audit: type=1326 audit(69.535:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.672674][ T29] audit: type=1326 audit(69.565:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.696184][ T29] audit: type=1326 audit(69.575:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.6.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3844f6c9 code=0x7ffc0000 [ 69.742109][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 69.806489][ T7035] loop5: detected capacity change from 0 to 512 [ 69.840232][ T7039] netlink: 'syz.4.1423': attribute type 3 has an invalid length. [ 69.843325][ T7037] SELinux: failed to load policy [ 69.848102][ T7039] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 69.860693][ T7039] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1423'. [ 69.892626][ T7035] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.900908][ T7035] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 69.918816][ T7047] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 69.957098][ T7035] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.963281][ T7035] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.981148][ T7035] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.995765][ T7035] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 70.007281][ T7035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1421: bg 0: block 40: padding at end of block bitmap is not set [ 70.021951][ T7035] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 70.036589][ T7035] EXT4-fs (loop5): 1 truncate cleaned up [ 70.055336][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.109679][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.122182][ T7059] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 70.130125][ T7059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1431'. [ 70.162620][ T7067] IPVS: Error connecting to the multicast addr [ 70.189195][ T7065] SELinux: failed to load policy [ 70.230536][ T7075] SELinux: failed to load policy [ 70.267247][ T7082] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 70.525658][ T7101] SELinux: failed to load policy [ 70.602898][ T7111] netlink: 'syz.6.1466': attribute type 1 has an invalid length. [ 70.612895][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 70.623978][ T7113] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1457'. [ 70.633090][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 70.856518][ T7125] netlink: 'syz.4.1462': attribute type 10 has an invalid length. [ 70.866902][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.877444][ T7125] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 70.892214][ T7125] netlink: 'syz.4.1462': attribute type 10 has an invalid length. [ 70.900059][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1462'. [ 70.910658][ T7125] batadv0: entered promiscuous mode [ 70.915889][ T7125] batadv0: entered allmulticast mode [ 70.922398][ T7125] bond0: (slave batadv0): Releasing backup interface [ 70.938541][ T7125] bridge0: port 3(batadv0) entered blocking state [ 70.945155][ T7125] bridge0: port 3(batadv0) entered disabled state [ 71.215133][ T7155] SELinux: failed to load policy [ 71.267797][ T7160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7160 comm=syz.4.1480 [ 71.333457][ T148] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 71.342913][ T148] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 71.480808][ T7175] loop4: detected capacity change from 0 to 512 [ 71.488193][ T7175] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.682603][ T7201] ALSA: seq fatal error: cannot create timer (-19) [ 71.709384][ T7208] loop6: detected capacity change from 0 to 128 [ 71.718399][ T7208] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.757474][ T4423] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.987832][ T7247] C: renamed from team_slave_0 (while UP) [ 72.090048][ T7256] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.358073][ T7271] ipvlan0: entered allmulticast mode [ 72.363481][ T7271] veth0_vlan: entered allmulticast mode [ 72.382507][ T7271] team0: Device ipvlan0 failed to register rx_handler [ 72.438551][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.465411][ T7274] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.497862][ T7279] validate_nla: 3 callbacks suppressed [ 72.497878][ T7279] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 72.515712][ T7279] batadv0: entered promiscuous mode [ 72.521382][ T7279] batadv0: entered allmulticast mode [ 72.779895][ T7252] Set syz1 is full, maxelem 65536 reached [ 72.785974][ T7279] bond0: (slave batadv0): Releasing backup interface [ 72.795246][ T7279] bridge0: port 3(batadv0) entered blocking state [ 72.801819][ T7279] bridge0: port 3(batadv0) entered disabled state [ 72.815192][ T7283] vlan1: entered allmulticast mode [ 73.003972][ T7310] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 73.028625][ T7315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7315 comm=syz.2.1547 [ 73.041328][ T7315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7315 comm=syz.2.1547 [ 73.089447][ T7320] netlink: 'syz.5.1549': attribute type 10 has an invalid length. [ 73.104941][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.126810][ T7320] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 73.155590][ T7320] netlink: 'syz.5.1549': attribute type 10 has an invalid length. [ 73.164894][ T7320] batadv0: entered promiscuous mode [ 73.170123][ T7320] batadv0: entered allmulticast mode [ 73.176886][ T7320] bond0: (slave batadv0): Releasing backup interface [ 73.189609][ T7320] bridge0: port 3(batadv0) entered blocking state [ 73.196306][ T7320] bridge0: port 3(batadv0) entered disabled state [ 73.223888][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 73.233214][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 73.272157][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 73.281613][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 73.827437][ T7322] Set syz1 is full, maxelem 65536 reached [ 73.861016][ T7342] macvtap0: entered promiscuous mode [ 73.870720][ T7342] macvtap0: left promiscuous mode [ 73.991781][ T7358] SELinux: ebitmap: map size 1024 does not match my size 64 (high bit was 229376) [ 74.001604][ T7358] SELinux: failed to load policy [ 74.041482][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 74.041497][ T29] audit: type=1326 audit(74.015:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.104498][ T7368] __nla_validate_parse: 11 callbacks suppressed [ 74.104515][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 74.115629][ T29] audit: type=1326 audit(74.055:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.142517][ T29] audit: type=1326 audit(74.055:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.152491][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 74.165335][ T29] audit: type=1326 audit(74.055:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.197754][ T29] audit: type=1326 audit(74.055:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 74.221422][ T29] audit: type=1326 audit(74.055:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 74.244207][ T29] audit: type=1326 audit(74.055:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 74.266907][ T29] audit: type=1326 audit(74.055:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.289619][ T29] audit: type=1326 audit(74.055:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 74.313232][ T29] audit: type=1326 audit(74.055:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.5.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 74.386054][ T7379] io-wq is not configured for unbound workers [ 74.444105][ T7387] loop5: detected capacity change from 0 to 512 [ 74.477178][ T7387] EXT4-fs: Ignoring removed i_version option [ 74.483300][ T7387] EXT4-fs: Ignoring removed bh option [ 74.507474][ T7387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.569994][ T7387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.799032][ T7449] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 74.840881][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.849149][ T7449] bond1: (slave batadv1): making interface the new active one [ 74.858360][ T7449] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 75.083604][ T7479] loop4: detected capacity change from 0 to 512 [ 75.107111][ T7479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.129795][ T7479] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1622: corrupted inode contents [ 75.141771][ T7479] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1622: mark_inode_dirty error [ 75.154054][ T7479] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1622: corrupted inode contents [ 75.184304][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.377397][ T7501] IPv6: Can't replace route, no match found [ 75.456906][ T7513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7513 comm=syz.5.1637 [ 75.838538][ T7560] netlink: 'syz.3.1659': attribute type 5 has an invalid length. [ 75.886706][ T7566] netlink: 'syz.6.1662': attribute type 12 has an invalid length. [ 75.961459][ T7578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7578 comm=syz.6.1668 [ 75.999997][ T7584] hub 9-0:1.0: USB hub found [ 76.005117][ T7584] hub 9-0:1.0: 8 ports detected [ 76.033926][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1673'. [ 76.160743][ T7613] hub 9-0:1.0: USB hub found [ 76.165510][ T7613] hub 9-0:1.0: 8 ports detected [ 76.182660][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 76.225544][ T7615] bond_slave_0: entered promiscuous mode [ 76.231283][ T7615] bond_slave_1: entered promiscuous mode [ 76.248979][ T7615] macvlan2: entered promiscuous mode [ 76.254320][ T7615] bond0: entered promiscuous mode [ 76.260970][ T7615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.423514][ T7641] atomic_op ffff88812b443928 conn xmit_atomic 0000000000000000 [ 76.792101][ T3388] IPVS: starting estimator thread 0... [ 76.882239][ T7685] IPVS: using max 3216 ests per chain, 160800 per kthread [ 76.903334][ T7699] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.910923][ T7699] vhci_hcd: invalid port number 96 [ 76.916135][ T7699] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 77.083499][ T7728] netlink: 'syz.5.1736': attribute type 1 has an invalid length. [ 77.098400][ T7728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.114389][ T7728] bond1: (slave geneve2): making interface the new active one [ 77.123426][ T7728] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 77.241610][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 77.347558][ T7760] binfmt_misc: register: failed to install interpreter file ./file2 [ 77.466033][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1765'. [ 77.482614][ T31] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.482807][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1765'. [ 77.498927][ T31] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.516888][ T31] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.526588][ T31] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.562597][ T7798] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1769'. [ 77.571679][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 77.616734][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1773'. [ 77.782007][ T7824] bridge0: entered promiscuous mode [ 77.787840][ T7824] macsec1: entered promiscuous mode [ 77.796809][ T7824] bridge0: port 3(macsec1) entered blocking state [ 77.803369][ T7824] bridge0: port 3(macsec1) entered disabled state [ 77.810826][ T7824] macsec1: entered allmulticast mode [ 77.816187][ T7824] bridge0: entered allmulticast mode [ 77.827513][ T7824] macsec1: left allmulticast mode [ 77.832655][ T7824] bridge0: left allmulticast mode [ 77.839020][ T7824] bridge0: left promiscuous mode [ 78.020673][ T7858] netlink: 'syz.6.1799': attribute type 1 has an invalid length. [ 78.033622][ T7858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.048974][ T7858] bond2: (slave geneve2): making interface the new active one [ 78.061998][ T7858] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 78.078031][ T7863] sch_fq: defrate 1025 ignored. [ 78.153320][ T7878] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.160926][ T7878] vhci_hcd: invalid port number 96 [ 78.166169][ T7878] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 78.200903][ T7882] loop5: detected capacity change from 0 to 128 [ 78.243369][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 78.251053][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 78.272901][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 78.298282][ T10] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.424332][ T7924] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.433334][ T7924] vhci_hcd: invalid port number 96 [ 78.438492][ T7924] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 78.471224][ T7932] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 78.534903][ T7947] loop6: detected capacity change from 0 to 512 [ 78.541455][ T7947] EXT4-fs: inline encryption not supported [ 78.548540][ T7947] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 78.561366][ T7947] EXT4-fs (loop6): 1 truncate cleaned up [ 78.569464][ T7947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.665392][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.064327][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 79.064342][ T29] audit: type=1326 audit(79.045:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.093556][ T29] audit: type=1326 audit(79.045:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.116482][ T29] audit: type=1326 audit(79.045:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.139154][ T29] audit: type=1326 audit(79.045:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.161951][ T29] audit: type=1326 audit(79.045:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.184988][ T29] audit: type=1326 audit(79.045:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.208863][ T29] audit: type=1326 audit(79.045:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7197511f85 code=0x7ffc0000 [ 79.233313][ T29] audit: type=1326 audit(79.215:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.287218][ T8034] __nla_validate_parse: 11 callbacks suppressed [ 79.287234][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 79.364117][ T29] audit: type=1326 audit(79.345:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.400495][ T29] audit: type=1326 audit(79.365:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f71974df6c9 code=0x7ffc0000 [ 79.460190][ T8053] loop4: detected capacity change from 0 to 512 [ 79.470265][ T8049] bridge0: entered promiscuous mode [ 79.475778][ T8049] macsec1: entered promiscuous mode [ 79.476096][ T8053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.482362][ T8049] bridge0: port 4(macsec1) entered blocking state [ 79.500283][ T8049] bridge0: port 4(macsec1) entered disabled state [ 79.507580][ T8049] macsec1: entered allmulticast mode [ 79.512994][ T8049] bridge0: entered allmulticast mode [ 79.519100][ T8049] macsec1: left allmulticast mode [ 79.524216][ T8049] bridge0: left allmulticast mode [ 79.536693][ T8049] bridge0: left promiscuous mode [ 79.555582][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.629996][ T8065] sd 0:0:1:0: device reset [ 79.896525][ T8093] loop6: detected capacity change from 0 to 32768 [ 79.942864][ T8093] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 79.948325][ T8093] loop6: p1 start 460800 is beyond EOD, truncated [ 79.954819][ T8093] loop6: p2 size 83886080 extends beyond EOD, truncated [ 79.963350][ T8093] loop6: p5 start 460800 is beyond EOD, truncated [ 79.969790][ T8093] loop6: p6 size 83886080 extends beyond EOD, truncated [ 80.036790][ T8114] ip6t_srh: unknown srh match flags 4000 [ 80.177568][ T8129] SELinux: policydb version 0 does not match my version range 15-35 [ 80.185881][ T8129] SELinux: failed to load policy [ 80.366879][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1932'. [ 80.376486][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1932'. [ 80.386024][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1932'. [ 80.395325][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1932'. [ 80.440399][ T8147] loop6: detected capacity change from 0 to 512 [ 80.447251][ T8147] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.458433][ T8147] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1934: Invalid block bitmap block 0 in block_group 0 [ 80.472375][ T8147] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 80.487723][ T8147] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.1934: attempt to clear invalid blocks 983261 len 1 [ 80.501665][ T8147] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1934: Invalid inode table block 0 in block_group 0 [ 80.515411][ T8147] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.525489][ T8147] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 80.534297][ T8147] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1934: Invalid inode table block 0 in block_group 0 [ 80.547914][ T8147] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.557566][ T8147] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.1934: mark_inode_dirty error [ 80.569233][ T8147] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 80.578331][ T8147] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1934: Invalid inode table block 0 in block_group 0 [ 80.593754][ T8147] EXT4-fs (loop6): 1 truncate cleaned up [ 80.601535][ T8147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.616638][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'. [ 80.648174][ T8147] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.673077][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.689320][ T8165] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 80.704888][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1941'. [ 80.833284][ T8190] loop4: detected capacity change from 0 to 256 [ 80.842243][ T8190] FAT-fs (loop4): bogus number of FAT sectors [ 80.848418][ T8190] FAT-fs (loop4): Can't find a valid FAT filesystem [ 81.026568][ T8210] syzkaller1: entered promiscuous mode [ 81.032115][ T8210] syzkaller1: entered allmulticast mode [ 81.723686][ T148] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.730525][ T8289] Bluetooth: hci0: unexpected event 0x0f length: 0 < 4 [ 81.749914][ T8291] pimreg: entered allmulticast mode [ 81.756340][ T8291] pimreg: left allmulticast mode [ 81.770476][ T8293] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2002'. [ 81.793981][ T8295] random: crng reseeded on system resumption [ 81.838231][ T8299] netlink: 'syz.3.2005': attribute type 12 has an invalid length. [ 81.850768][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 81.947775][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'. [ 82.124431][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.149962][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.324535][ T8357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 82.331180][ T8357] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.338937][ T8357] vhci_hcd vhci_hcd.0: Device attached [ 82.345125][ T8358] vhci_hcd: connection closed [ 82.345266][ T1430] vhci_hcd: stop threads [ 82.354246][ T1430] vhci_hcd: release socket [ 82.358679][ T1430] vhci_hcd: disconnect device [ 82.387723][ T8366] syzkaller1: entered promiscuous mode [ 82.393245][ T8366] syzkaller1: entered allmulticast mode [ 82.922891][ T8407] vhci_hcd: invalid port number 0 [ 82.959908][ T8409] SELinux: policydb version 65535 does not match my version range 15-35 [ 82.982279][ T8409] SELinux: failed to load policy [ 83.023332][ T8414] loop4: detected capacity change from 0 to 512 [ 83.066241][ T8414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.095965][ T8414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2057: bg 0: block 18: invalid block bitmap [ 83.131847][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.301276][ T8446] FAT-fs (loop5): unable to read boot sector [ 83.732264][ T8289] Bluetooth: hci0: command 0x1003 tx timeout [ 83.738340][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.924718][ T8516] vlan2: entered allmulticast mode [ 83.929925][ T8516] dummy0: entered allmulticast mode [ 83.942845][ T8517] smc: net device bond0 applied user defined pnetid S [ 83.952252][ T8517] smc: net device bond0 erased user defined pnetid S [ 84.096078][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 84.096092][ T29] audit: type=1400 audit(340.074:2485): avc: denied { write } for pid=8546 comm="syz.3.2118" name="file0" dev="tmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.146299][ T29] audit: type=1326 audit(340.124:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.4.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 84.169259][ T29] audit: type=1326 audit(340.124:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.4.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 84.192589][ T29] audit: type=1326 audit(340.124:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.4.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 84.216201][ T29] audit: type=1326 audit(340.124:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.4.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35e13f6c9 code=0x7ffc0000 [ 84.265781][ T29] audit: type=1400 audit(340.244:2490): avc: denied { create } for pid=8556 comm="syz.6.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.292850][ T29] audit: type=1400 audit(340.244:2491): avc: denied { bind } for pid=8556 comm="syz.6.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.311608][ T29] audit: type=1400 audit(340.244:2492): avc: denied { write } for pid=8556 comm="syz.6.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.388710][ T8570] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.510611][ T29] audit: type=1107 audit(340.474:2493): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 84.548509][ T29] audit: type=1400 audit(340.514:2494): avc: denied { ioctl } for pid=8591 comm="syz.3.2138" path="socket:[22143]" dev="sockfs" ino=22143 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.683628][ T8607] ALSA: seq fatal error: cannot create timer (-22) [ 84.818817][ T8618] __nla_validate_parse: 10 callbacks suppressed [ 84.818834][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 85.099286][ T8646] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 85.215229][ T8669] loop6: detected capacity change from 0 to 512 [ 85.245274][ T8669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.376078][ T8699] program syz.2.2180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.411301][ T8652] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz.6.2165: lblock 23 mapped to illegal pblock 18 (length 1) [ 85.430925][ T8652] EXT4-fs (loop6): Remounting filesystem read-only [ 85.454521][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.524050][ T8722] loop6: detected capacity change from 0 to 512 [ 85.550812][ T8722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.571089][ T8722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.581539][ T8722] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 85.607548][ T4423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.833172][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 85.995506][ T8775] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.010299][ T8765] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 86.016828][ T8765] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.024700][ T8765] vhci_hcd vhci_hcd.0: Device attached [ 86.032193][ T8776] vhci_hcd: connection closed [ 86.032388][ T148] vhci_hcd: stop threads [ 86.041311][ T148] vhci_hcd: release socket [ 86.045852][ T148] vhci_hcd: disconnect device [ 86.269579][ T8803] SELinux: security_context_str_to_sid (i²ËÓ˜sÌ.P5Q5"ç'FMïL9]‹óèß_^ïÖs‰rÝ5@qoåÓ^Éa­òbgÿF‡™n“Ü+´Tû­w³*½À\;&[Ù2Œ;´5›MTf¢å8zà :1åvMY! ô¡òhs’ãú…Ú²##s«hŒy’)UB‚£C³‹r:œo6¶?µÑÏ[24(Þñi0J•r5¸äñu͆Cm·5bJwÍ€{—ëÚk¾Xx× ɇ»Ã1€üxèó|Í)öáß?xp¨œR<øÂÅ|>ý¶À›ÚP0€ea¹)±¦’_¡vÁ ëÏ¿. ,fÛ•²nÇ‚N‚ÖU¬) failed with errno=-22 [ 86.343456][ T8810] netlink: 'syz.6.2231': attribute type 3 has an invalid length. [ 86.494805][ T8821] xt_hashlimit: max too large, truncated to 1048576 [ 86.502494][ T8821] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.847448][ T8849] x_tables: duplicate underflow at hook 1 [ 86.966705][ T8862] loop4: detected capacity change from 0 to 512 [ 86.986112][ T8862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.088544][ T8854] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.2252: lblock 23 mapped to illegal pblock 18 (length 1) [ 87.109646][ T8854] EXT4-fs (loop4): Remounting filesystem read-only [ 87.132582][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.814415][ T8890] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.970783][ T8918] loop2: detected capacity change from 0 to 512 [ 87.987515][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2274'. [ 88.002622][ T8918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.030783][ T8931] syzkaller1: entered promiscuous mode [ 88.036371][ T8931] syzkaller1: entered allmulticast mode [ 88.177739][ T8900] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.2265: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.196541][ T8900] EXT4-fs (loop2): Remounting filesystem read-only [ 88.228293][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.279777][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2291'. [ 88.320481][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2296'. [ 88.349206][ T8991] loop4: detected capacity change from 0 to 1024 [ 88.361969][ T8991] EXT4-fs: inline encryption not supported [ 88.371160][ T8991] journal_path: Lookup failure for './file1/file0' [ 88.377801][ T8991] EXT4-fs: error: could not find journal device path [ 88.411505][ T9003] netlink: 'syz.2.2303': attribute type 19 has an invalid length. [ 88.419501][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 88.434305][ T9003] netlink: 'syz.2.2303': attribute type 19 has an invalid length. [ 88.442213][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 88.504894][ T9018] loop5: detected capacity change from 0 to 512 [ 88.547203][ T9018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.566218][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2314'. [ 88.595546][ T9033] loop2: detected capacity change from 0 to 1024 [ 88.602290][ T9036] Dead loop on virtual device ipvlan1, fix it urgently! [ 88.607280][ T9033] EXT4-fs: inline encryption not supported [ 88.618820][ T9033] journal_path: Lookup failure for './file1/file0' [ 88.625443][ T9033] EXT4-fs: error: could not find journal device path [ 88.679893][ T9050] loop2: detected capacity change from 0 to 512 [ 88.696672][ T9050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.718922][ T9002] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.2302: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.733697][ T9002] EXT4-fs (loop5): Remounting filesystem read-only [ 88.734189][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.758161][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.801686][ T9068] veth0_to_team: entered promiscuous mode [ 88.828333][ T9071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2326'. [ 88.837742][ T9071] veth1_macvtap: left promiscuous mode [ 88.888461][ T9077] pimreg: entered allmulticast mode [ 88.895338][ T9077] pimreg: left allmulticast mode [ 88.936816][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 88.961586][ T9081] loop2: detected capacity change from 0 to 512 [ 88.973647][ T9081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.989412][ T9081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2329: bg 0: block 18: invalid block bitmap [ 89.019353][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.125676][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 89.125689][ T29] audit: type=1107 audit(345.104:2664): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 89.219219][ T9157] loop5: detected capacity change from 0 to 1024 [ 89.226191][ T9157] EXT4-fs: inline encryption not supported [ 89.232189][ T9157] journal_path: Lookup failure for './file1/file0' [ 89.238755][ T9157] EXT4-fs: error: could not find journal device path [ 89.280772][ T9166] loop5: detected capacity change from 0 to 512 [ 89.289690][ T9166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.307052][ T9166] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2344: bg 0: block 18: invalid block bitmap [ 89.331263][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.355029][ T9170] loop5: detected capacity change from 0 to 128 [ 89.429722][ T9036] syz.3.2316 (9036) used greatest stack depth: 1960 bytes left [ 89.504841][ T9178] netlink: 'syz.6.2347': attribute type 16 has an invalid length. [ 89.833786][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.841038][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.919144][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.931324][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.941399][ T9171] bio_check_eod: 32 callbacks suppressed [ 89.941414][ T9171] syz.5.2345: attempt to access beyond end of device [ 89.941414][ T9171] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.960886][ T9171] buffer_io_error: 18 callbacks suppressed [ 89.960903][ T9171] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 89.977808][ T9170] syz.5.2345: attempt to access beyond end of device [ 89.977808][ T9170] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.991551][ T9170] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 90.009406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811403f800: rx timeout, send abort [ 90.016227][ T9170] syz.5.2345: attempt to access beyond end of device [ 90.016227][ T9170] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 90.031178][ T9170] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 90.094364][ T9132] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.103493][ T9132] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.114336][ T9132] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.123529][ T9132] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.149430][ T9132] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.158492][ T9132] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.168230][ T9132] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.177174][ T9132] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.219780][ T9208] loop5: detected capacity change from 0 to 1024 [ 90.243315][ T9208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.257348][ T29] audit: type=1400 audit(346.234:2665): avc: denied { read } for pid=9207 comm="+}[K" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 90.287582][ T4396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.312613][ T9218] __nla_validate_parse: 2 callbacks suppressed [ 90.312627][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2365'. [ 90.337465][ T29] audit: type=1400 audit(346.314:2666): avc: denied { read } for pid=9219 comm="syz.3.2366" path="socket:[24005]" dev="sockfs" ino=24005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.367656][ T9222] netlink: 'syz.5.2367': attribute type 3 has an invalid length. [ 90.400307][ T29] audit: type=1400 audit(346.374:2667): avc: denied { unmount } for pid=4396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.418115][ T9226] loop3: detected capacity change from 0 to 512 [ 90.444412][ T9226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.463387][ T9226] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2370: corrupted inode contents [ 90.464020][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.475548][ T9226] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.2370: mark_inode_dirty error [ 90.485399][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.499082][ T9226] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.2370: corrupted inode contents [ 90.509361][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811403e000: rx timeout, send abort [ 90.523015][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811403f800: abort rx timeout. Force session deactivation [ 90.550631][ T9234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.557912][ T9234] IPv6: NLM_F_CREATE should be set when creating new route [ 90.566395][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.840870][ T9277] netlink: 'syz.4.2392': attribute type 12 has an invalid length. [ 91.023964][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811403e000: abort rx timeout. Force session deactivation [ 91.042392][ T9299] 9pnet_fd: Insufficient options for proto=fd [ 91.072639][ T29] audit: type=1326 audit(347.044:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 91.095687][ T29] audit: type=1326 audit(347.044:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 91.118431][ T29] audit: type=1326 audit(347.044:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 91.141245][ T29] audit: type=1326 audit(347.044:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 91.164560][ T29] audit: type=1326 audit(347.044:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5694cbf6c9 code=0x7ffc0000 [ 91.382617][ T29] audit: type=1326 audit(347.354:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115dadf6c9 code=0x7ffc0000 [ 91.463089][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.471539][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.529564][ T9338] loop6: detected capacity change from 0 to 128 [ 91.566921][ T9340] ALSA: seq fatal error: cannot create timer (-19) [ 91.611721][ T9346] $Hÿ: renamed from bond0 (while UP) [ 91.714359][ T9338] ================================================================== [ 91.722470][ T9338] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 91.730441][ T9338] [ 91.732754][ T9338] write to 0xffff88810ba82014 of 4 bytes by task 9344 on cpu 0: [ 91.740379][ T9338] xas_set_mark+0x12b/0x140 [ 91.744911][ T9338] __folio_start_writeback+0x155/0x390 [ 91.750368][ T9338] __block_write_full_folio+0x53a/0x8f0 [ 91.756212][ T9338] block_write_full_folio+0x2c2/0x2e0 [ 91.761597][ T9338] mpage_writepages+0x6cf/0x1250 [ 91.766551][ T9338] fat_writepages+0x24/0x30 [ 91.771183][ T9338] do_writepages+0x1c6/0x310 [ 91.775848][ T9338] file_write_and_wait_range+0x156/0x2c0 [ 91.781480][ T9338] __generic_file_fsync+0x46/0x140 [ 91.786585][ T9338] fat_file_fsync+0x49/0x100 [ 91.791197][ T9338] vfs_fsync_range+0x10d/0x130 [ 91.795996][ T9338] generic_file_write_iter+0x1b8/0x2f0 [ 91.801620][ T9338] iter_file_splice_write+0x666/0xa60 [ 91.807502][ T9338] direct_splice_actor+0x156/0x2a0 [ 91.812603][ T9338] splice_direct_to_actor+0x312/0x680 [ 91.817965][ T9338] do_splice_direct+0xda/0x150 [ 91.822724][ T9338] do_sendfile+0x380/0x650 [ 91.827134][ T9338] __x64_sys_sendfile64+0x105/0x150 [ 91.832333][ T9338] x64_sys_call+0x2bb4/0x3000 [ 91.837015][ T9338] do_syscall_64+0xd2/0x200 [ 91.841516][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.847408][ T9338] [ 91.849715][ T9338] read to 0xffff88810ba82014 of 4 bytes by task 9338 on cpu 1: [ 91.857251][ T9338] __writeback_single_inode+0x1f9/0x7c0 [ 91.863058][ T9338] writeback_single_inode+0x16d/0x3f0 [ 91.868434][ T9338] sync_inode_metadata+0x5b/0x90 [ 91.873373][ T9338] __generic_file_fsync+0xf8/0x140 [ 91.878497][ T9338] fat_file_fsync+0x49/0x100 [ 91.883087][ T9338] vfs_fsync_range+0x10d/0x130 [ 91.887944][ T9338] generic_file_write_iter+0x1b8/0x2f0 [ 91.893502][ T9338] iter_file_splice_write+0x666/0xa60 [ 91.899138][ T9338] direct_splice_actor+0x156/0x2a0 [ 91.904249][ T9338] splice_direct_to_actor+0x312/0x680 [ 91.909960][ T9338] do_splice_direct+0xda/0x150 [ 91.914727][ T9338] do_sendfile+0x380/0x650 [ 91.919161][ T9338] __x64_sys_sendfile64+0x105/0x150 [ 91.924354][ T9338] x64_sys_call+0x2bb4/0x3000 [ 91.929035][ T9338] do_syscall_64+0xd2/0x200 [ 91.933541][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.939435][ T9338] [ 91.941746][ T9338] value changed: 0x0a000021 -> 0x00000021 [ 91.947444][ T9338] [ 91.949751][ T9338] Reported by Kernel Concurrency Sanitizer on: [ 91.955898][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.6.2418 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.965614][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.975759][ T9338] ================================================================== [ 92.022269][ T9344] syz.6.2418: attempt to access beyond end of device [ 92.022269][ T9344] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 92.035774][ T9344] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 92.044608][ T9338] syz.6.2418: attempt to access beyond end of device [ 92.044608][ T9338] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 92.058447][ T9338] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 92.067665][ T9338] syz.6.2418: attempt to access beyond end of device [ 92.067665][ T9338] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 92.081079][ T9338] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 93.252177][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110