last executing test programs: 3m2.100693936s ago: executing program 1 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 3m2.060456648s ago: executing program 1 (id=1148): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 3m2.033424829s ago: executing program 1 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24040884) 3m2.0137998s ago: executing program 1 (id=1153): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) 3m1.970385422s ago: executing program 1 (id=1157): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x100, 0x1) 3m1.943779983s ago: executing program 1 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r1, 0x905, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m46.436372317s ago: executing program 32 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r1, 0x905, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m45.587905339s ago: executing program 5 (id=4091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.510537043s ago: executing program 5 (id=4106): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x13, 0x803, 0x0) 1m45.457519626s ago: executing program 5 (id=4096): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1m45.304704424s ago: executing program 5 (id=4104): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400"], 0x18, 0x64001}}], 0x2, 0x0) 1m45.158785931s ago: executing program 5 (id=4115): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m45.090059185s ago: executing program 5 (id=4120): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) 1m29.849826154s ago: executing program 33 (id=4120): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) 1m6.872994219s ago: executing program 0 (id=5113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e02, 0x5, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 1m6.018341404s ago: executing program 0 (id=5150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x1}, 0x8) 1m5.935906638s ago: executing program 0 (id=5151): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) 1m5.746677057s ago: executing program 0 (id=5157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m5.723326319s ago: executing program 0 (id=5158): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m5.647966863s ago: executing program 0 (id=5160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000002c0)=r0}, 0x20) 50.298691038s ago: executing program 34 (id=5160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000002c0)=r0}, 0x20) 49.153105296s ago: executing program 6 (id=5470): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000400)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacvA}knh#\xcf)&\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\b\x00\xe1$\xff\x9f\x8f~\xb90a\xa9\xb2\x04K\x98\x9a=n\xa8\x0f\x99\x9e\xe7\xbc\x02@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x85\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x917\xfa8\xac\xd3q\xe4vPGU\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\x99\xa4\xd8pt\x1e+\xe4\x0f\"]\xc8O\x12\xdeR\xa0\xf4\t\xb1\x88\xeb\xabe\\\x1c\xb6\x17\a\x9cU\x17\xe48\xbc\xc6\xdb\xab\xed\x0f\xd7I\x8c\x84\xcbU\xc7j\x9d|\x97\x8el\x8dBL.\x95y\xa5`\x189\x96\xb0(\xc8P\xc0xo\xb3\xf5\xac~\xb8\xa6z\xec\xdc^\x88`\xa2@\x9a\x83\x99\xa8Y\xf1\xc3\xbb1\x13A\t\x0f\xdd\xd8Xt\x1a;\xe6g\xc3z\x92W\xc2%Vy\xfc-\xc8\xf8s\xf2\xa4\xee\x1706#\x98\xf4\xe8\xe5\v\x9a\xa0\xd4\a\x8a#\x11IF&\xb7i\xbbg\xc7\x00\x9b\b\xb1\x8b,\r\xfd\xbb\xc2m\xdb\x9f\x8b\xc0S\xe9\x9b\xc5[\xb0\xe3h\xfa\x11\x8bY\xd3d\xfdk\xd9*H\x90\x85\xe7\xcb\x1dD\xf6\x06\xd9\x11\x97\x11m\xef\x02\x81\xcf}\xa3\x9c\x81\xb1i\xd5', 0x2) splice(r0, 0x0, r2, 0x0, 0x7, 0x4) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) 49.015732933s ago: executing program 6 (id=5462): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000700)=0x7fffffff, 0x4) 48.944100467s ago: executing program 6 (id=5464): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000000000001400"}}}]}, 0x48}}, 0x0) 48.811252034s ago: executing program 6 (id=5473): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000000)={[{@delalloc}, {@jqfmt_vfsv1}, {@noquota}, {@usrjquota}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x19e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) fallocate(r0, 0x40, 0x7fff, 0x100) 48.48007387s ago: executing program 6 (id=5479): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 48.30544816s ago: executing program 6 (id=5480): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 44.076477986s ago: executing program 7 (id=5561): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) 43.743823273s ago: executing program 7 (id=5571): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) read(r0, 0x0, 0x0) 33.277442298s ago: executing program 35 (id=5480): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 33.270831219s ago: executing program 7 (id=5583): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xffff000000000000, 0x0, 0x4085}, 0x20000004) 33.161229594s ago: executing program 7 (id=5580): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) 33.05963033s ago: executing program 7 (id=5582): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 32.907617067s ago: executing program 7 (id=5586): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004084) 17.755233153s ago: executing program 36 (id=5586): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004084) 1.689502674s ago: executing program 4 (id=6007): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$eJzs3d9rFNceAPDvbDbGRL0qiNx7Hy4BH67FuvnVHxYK2sfSSoX23YZkDZKNK9mNmFRQHyqUvhQplFKh9A/oex+lf0D7VwitIEVC+9CXlNnM6prNZjdxdRf384FJzpmZ3XPOzDlnztnZYQMYWOPpn1zEfyLiqyTicMO2fGQbxzf3W398Yy5dktjY+PiPJJJsXX3/JPt/IIv8OyJ+/jziVK453crq2uJsqVRczuIT1aWrE5XVtdOXl2YXigvFK9MzM2fenJl+5+23ulbW1y789e1H998/8+WJ9W9+fHj0bhLn4mC2rbEcz+FWY2Q8xrNjMhzntuw41YXE+knS6wywJ0NZOx+OtA84HENZq0+N9jRnwIt2MyI2gAGVdNz+h/UU8EqpjwPqc/st8+BtZu6vlkfvbU6Amsuf3/xsJPbX5kZj60nDzGhzvnukC+mnafz0+7276RJtPoe4+UxsXxdSBwbZrdsRMZnPN/d/Sdb/7d1kB9ePrWl06XNYoAP30/HP6zGSRRvaf+7J+Ce2Gf90a/TRvv3nHnYpqW2l4793tx3/Pum6jgxlsUO1Md9wculyqTgZEf+KiJMxPJLGd7qfc2b9wUarbY3jv3RJ06+PBbN8PMyPPPua+dnq7POUudGj2xH/fTr+TaKp/99fG+uOjcYz5z89HhfSwC9ftE3jePHe/1pta1/+Rjd3Wbr2Nn6I+P+253/zjlYuC+1wf3KiVh8m6rWi2Z93jv/aKv3dlb/70vM/tkP50yqfNN6vrezu/dO50/f7/y622r7X+r8v+aQWrvdD12er1eWpiH3Jh83rp5++th6v75+W/+SJ7dt/vf6PbtP/pes+7fAY3Dl2p+Wu/XD+53d1/ncfePDBZ9+1Sr+z8/9GLXQyW9NJ/1cq1ivNzhnc63EDAAAAAACAfpTLnv8pZOGDkcsVCpvP8B6LsVypXKmeulReuTIftWdl63cFJ2PzWeH69yGmsu/D1uPTW+IzEXE0Ir4eGq3FC3Pl0nyPyw4AAAAAAAAAAAAAAAAAAAD94kDtmf8kt/X5/9RvQ73OHfDC5XudAaBn2rb/5/0lOKBvuf7D4NL+YXBtbf8jPcoH8FLlw/UfBlpj+x/uYT6Al8/1HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArrpw/ny6bKw/vjGXxuevra4slq+dni9WFgtLK3OFufLy1cJCubxQKhbmykvt3q9ULl+dmo6V6xPVYqU6UVldu7hUXrlSvXh5aXaheLHo50UAAAAAAAAAAAAAAAAAAACgWWV1bXG2VCouC7QMnI2+yMaeA0m7s3w2qwy7eufIAvneF7DfAoc6b1aj0Sd5bgr0uGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAb/BAAA//9okSnn") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) fallocate(r0, 0x10, 0x0, 0x7000000) 1.611599888s ago: executing program 4 (id=6012): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) 1.511483643s ago: executing program 4 (id=6017): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.504255724s ago: executing program 9 (id=6019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000007c0), &(0x7f00000000c0)=@udp=r1, 0x1}, 0x20) 1.403092519s ago: executing program 9 (id=6025): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.244013007s ago: executing program 4 (id=6028): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.18339863s ago: executing program 4 (id=6031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.079907815s ago: executing program 9 (id=6036): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x3}, 0x6025, 0x37e, 0xb, 0x3, 0x75, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="1f8b", 0x2}], 0x1) 809.440299ms ago: executing program 4 (id=6045): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") 628.315988ms ago: executing program 9 (id=6047): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c0001400000000000000101080004"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 579.730051ms ago: executing program 3 (id=6049): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 439.980838ms ago: executing program 3 (id=6052): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) 424.651009ms ago: executing program 3 (id=6053): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) 388.203591ms ago: executing program 9 (id=6054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 339.837794ms ago: executing program 8 (id=6055): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001900)="a10800000044", 0x0, 0x80000001, 0x1, 0x1, 0x0}) 339.673583ms ago: executing program 8 (id=6056): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 304.813275ms ago: executing program 9 (id=6057): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f00000012c0)=0xfffc, 0x6) set_mempolicy(0x8000, &(0x7f0000001280)=0x8, 0xe17) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 299.592065ms ago: executing program 2 (id=6058): syz_read_part_table(0x5af, &(0x7f0000000000)="$eJzs1L9LW3sUAPCvecbow0dEhDf4BsHg8vwBcWgHQykSQxaV0pYOzoKDHQQHB7FEaTe1/0DF1hZxETt3FCOILXGSjOI/0OKSyRJywSZ0KRih5fOB3B/fc76cezknN/Bbi4UPrbWr65aGULx6iBZf/Hz3k73sRL5vur2WORNCyP7XGWp3bXWZB9F5KlE75xPp0vbJ+Le9rtP+s2LqXSyKf4rVis1f7CRv5QX5o+1njpKrawu59aXM3Hlu+XJ0dijbu5F9/vre27GVp/+OPYsGqzpXL5tSvzr8N/VTpVcPapHheLFUSR9HeYMN/65YE56Fu9c4f1s9hXKhMjmwuzgy2F0+XNmM+n7V+HUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZfuZo+Tq2kKufSkzd55bvhydHcr2bmTbovDYl+oxFv2aWH89qp8q3X//+Xrq65t/huPFUiV9HOUNttTvaw0hfGzOI3GH/g/1/d/qKZQLlcmB3cWRv7rLhyubUd+vGvofGu8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACLZiXzf9MNHj0NoCTOdIYRY1051/Tpxk/N3COEgup6K1vOJdGn7ZDy+13Xaf1ZMdYRECD9sCfMXO8mO+lKxpr8Mv+x7AAAA///jA3Zm") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 266.068627ms ago: executing program 8 (id=6059): unshare(0x2040400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) 242.511908ms ago: executing program 3 (id=6060): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "79d52f0c71eeb59f46407d763398c06afedd262e858725472217df6434a1eee8039f09fa6c64ba69fb1cfb0b82966a852e6b8d0e93529d5b6d0cead6f180eff8", 0x16}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 171.720442ms ago: executing program 2 (id=6061): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2200004, &(0x7f0000000640), 0x1, 0x5ba, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setuid(0xee00) fallocate(r0, 0x0, 0x0, 0x8ffff) 171.551702ms ago: executing program 3 (id=6062): pipe(&(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 158.591083ms ago: executing program 8 (id=6063): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 156.467873ms ago: executing program 3 (id=6064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x9, 0x8, 0x5, 0x3}, 0x14) 133.354614ms ago: executing program 2 (id=6065): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x4, 0x7d, 0x3, 0x3e, 0xbffffffb, 0xf8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x3, 0x7c, 0x4, 0x9}, [{0x6, 0x8, 0x2, 0x5, 0x2, 0x8000, 0x8, 0x7fff}, {0x7, 0x6287, 0x5, 0xf94, 0x4, 0xb7c, 0x6, 0x4}, {0x3, 0x9, 0x1, 0x4, 0x5, 0x7, 0x2, 0x6}]}, 0xe8) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 43.932689ms ago: executing program 2 (id=6066): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') 43.534118ms ago: executing program 8 (id=6067): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r2, 0x62, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 43.369389ms ago: executing program 2 (id=6068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f00000000c0)) 30.591119ms ago: executing program 8 (id=6069): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 0s ago: executing program 2 (id=6070): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 398] team0: entered allmulticast mode [ 129.716172][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 129.717723][T11398] team_slave_0: entered allmulticast mode [ 129.717743][T11398] team_slave_1: entered allmulticast mode [ 130.043821][T11424] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3507'. [ 130.206140][ T6726] tipc: Subscription rejected, illegal request [ 130.412876][T11472] vhci_hcd vhci_hcd.3: invalid port number 231 [ 130.491059][T11489] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3525'. [ 131.036284][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 131.638607][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3560'. [ 131.850916][T11570] tmpfs: Bad value for 'nr_inodes' [ 132.046283][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 132.046299][ T28] audit: type=1400 audit(1776748377.055:1047): avc: denied { connect } for pid=11591 comm="syz.5.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.246549][ T28] audit: type=1400 audit(1776748377.245:1048): avc: denied { create } for pid=11605 comm="syz.4.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.319558][ T28] audit: type=1400 audit(1776748377.275:1049): avc: denied { write } for pid=11605 comm="syz.4.3584" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.393402][ T28] audit: type=1400 audit(1776748377.395:1050): avc: denied { create } for pid=11612 comm="syz.5.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.419813][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.434242][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.444872][ T28] audit: type=1400 audit(1776748377.405:1051): avc: denied { setopt } for pid=11612 comm="syz.5.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.471768][ T28] audit: type=1400 audit(1776748377.434:1052): avc: denied { read } for pid=11622 comm="syz.3.3592" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.496694][ T28] audit: type=1400 audit(1776748377.434:1053): avc: denied { ioctl } for pid=11622 comm="syz.3.3592" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.561901][T11619] ------------[ cut here ]------------ [ 132.567508][T11619] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.0.3590/11619 [ 132.577400][T11619] Modules linked in: [ 132.581316][T11619] CPU: 0 UID: 0 PID: 11619 Comm: syz.0.3590 Not tainted syzkaller #0 PREEMPT(full) [ 132.590704][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.600924][T11619] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 132.606573][T11619] Code: 8b 05 f1 4b 19 08 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 c9 64 04 cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 132.626319][T11619] RSP: 0018:ffffc90002f8fdd8 EFLAGS: 00010093 [ 132.632450][T11619] RAX: ffffffff813b3452 RBX: ffff8881048c9100 RCX: ffff8881048c9100 [ 132.640523][T11619] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 132.648511][T11619] RBP: 0000000000000080 R08: ffff8881048c9bf8 R09: 0000000000000000 [ 132.656608][T11619] R10: ffffc90002f8fdf0 R11: 0001c90002f8fdf0 R12: ffff8881048c9100 [ 132.664707][T11619] R13: ffff8881048c9928 R14: ffff888104ea8010 R15: 0000000000000080 [ 132.673102][T11619] FS: 0000000000000000(0000) GS:ffff8882ae6cc000(0000) knlGS:0000000000000000 [ 132.684484][T11619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.691089][T11619] CR2: 00007ffdc06af0f8 CR3: 0000000104118000 CR4: 00000000003506f0 [ 132.699180][T11619] DR0: 0000000000007ffb DR1: 0000000000000000 DR2: 0000000000000000 [ 132.707170][T11619] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 132.715185][T11619] Call Trace: [ 132.718504][T11619] [ 132.721528][T11619] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 132.726956][T11619] ? __list_add_valid_or_report+0x38/0xe0 [ 132.732796][T11619] do_exit+0xc13/0x1530 [ 132.736995][T11619] ? switch_fpu_return+0xe7/0x1b0 [ 132.742090][T11619] __x64_sys_exit+0x1f/0x20 [ 132.746685][T11619] x64_sys_call+0x301d/0x3020 [ 132.751425][T11619] do_syscall_64+0x12c/0x3b0 [ 132.756046][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.761969][T11619] RIP: 0033:0x7f51d64ec819 [ 132.766431][T11619] Code: Unable to access opcode bytes at 0x7f51d64ec7ef. [ 132.773460][T11619] RSP: 002b:00007f51d4f3efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 132.781938][T11619] RAX: ffffffffffffffda RBX: 00007f51d6765fa0 RCX: 00007f51d64ec819 [ 132.789928][T11619] RDX: 00007f51d4f3f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.797984][T11619] RBP: 00007f51d6582c91 R08: 0000000000000000 R09: 0000000000000000 [ 132.805980][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.814140][T11619] R13: 00007f51d6766038 R14: 00007f51d6765fa0 R15: 00007ffda4161538 [ 132.822139][T11619] [ 132.825228][T11619] ---[ end trace 0000000000000000 ]--- [ 132.877490][ T28] audit: type=1400 audit(1776748377.874:1054): avc: denied { create } for pid=11631 comm="syz.4.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.919332][ T28] audit: type=1400 audit(1776748377.874:1055): avc: denied { setopt } for pid=11631 comm="syz.4.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.074540][ T28] audit: type=1326 audit(1776748378.083:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.5.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a25c819 code=0x7ffc0000 [ 133.162034][ T3418] kernel read not supported for file /vga_arbiter (pid: 3418 comm: kworker/0:5) [ 133.319080][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 133.352755][T11691] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 133.579930][T11725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3640'. [ 133.650907][T11728] netlink: 'syz.4.3644': attribute type 3 has an invalid length. [ 133.915806][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3654'. [ 133.984312][T11762] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3659'. [ 134.093378][T11780] tipc: Invalid UDP bearer configuration [ 134.093394][T11780] tipc: Enabling of bearer rejected, failed to enable media [ 134.450908][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.472019][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.495104][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.520156][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.534963][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.554828][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.572380][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.580412][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.588199][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.601364][ T3418] hid-generic 0100:0000:0000.0004: unknown main item tag 0x0 [ 134.618558][ T3418] hid-generic 0100:0000:0000.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 134.628773][T11839] udevd[11839]: open /dev/null failed: No such file or directory [ 134.692971][T11839] fido_id[11839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.724284][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 134.764028][T11853] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 134.770614][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.781602][T11853] vhci_hcd vhci_hcd.0: Device attached [ 134.793376][T11853] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 134.799917][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.819769][T11853] vhci_hcd vhci_hcd.0: Device attached [ 134.832592][T11854] usbip_core: unknown command [ 134.832758][T11856] vhci_hcd: connection closed [ 134.841858][ T6726] vhci_hcd vhci_hcd.5: stop threads [ 134.843399][T11854] vhci_hcd: unknown pdu 125819603 [ 134.847212][ T6726] vhci_hcd vhci_hcd.5: release socket [ 134.865277][T11854] usbip_core: unknown command [ 134.880567][ T6726] vhci_hcd vhci_hcd.5: disconnect device [ 134.888604][ T6726] vhci_hcd vhci_hcd.5: stop threads [ 134.898421][ T6726] vhci_hcd vhci_hcd.5: release socket [ 134.909578][ T6726] vhci_hcd vhci_hcd.5: disconnect device [ 134.931081][T11868] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3708'. [ 134.958118][T11872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3710'. [ 134.967345][T10232] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 135.188761][T10231] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.202354][T11898] udevd[11898]: open /dev/null failed: No such file or directory [ 135.243977][T11898] fido_id[11898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.418757][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3735'. [ 135.465310][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'. [ 135.490362][T11935] loop5: detected capacity change from 0 to 1024 [ 135.536848][T11935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.586326][ T6243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.651500][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 135.656346][T11960] loop5: detected capacity change from 0 to 512 [ 135.667526][T11960] EXT4-fs: test_dummy_encryption option not supported [ 135.678852][T11960] SELinux: security_context_str_to_sid (`'suA^:=) failed with errno=-22 [ 135.726776][T11965] netlink: 'syz.4.3752': attribute type 25 has an invalid length. [ 135.785269][T11975] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 136.448266][T12057] macsec2: entered promiscuous mode [ 136.473946][T12057] geneve1: entered promiscuous mode [ 136.490136][T12057] macsec2: entered allmulticast mode [ 136.502425][T12057] geneve1: entered allmulticast mode [ 137.015233][T12141] wireguard0: left promiscuous mode [ 137.015329][T12141] wireguard0: left allmulticast mode [ 137.093812][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 137.093830][ T28] audit: type=1400 audit(1776748382.097:1184): avc: denied { bind } for pid=12149 comm="syz.0.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.223259][ T28] audit: type=1400 audit(1776748382.216:1185): avc: denied { create } for pid=12165 comm="syz.2.3836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 137.255147][ T28] audit: type=1400 audit(1776748382.246:1186): avc: denied { module_request } for pid=12165 comm="syz.2.3836" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 137.467268][ T28] audit: type=1400 audit(1776748382.456:1187): avc: denied { create } for pid=12175 comm="syz.5.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.495970][ T28] audit: type=1400 audit(1776748382.466:1188): avc: denied { setopt } for pid=12175 comm="syz.5.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.529831][ T28] audit: type=1400 audit(1776748382.526:1189): avc: denied { ioctl } for pid=12181 comm="syz.5.3841" path="socket:[32869]" dev="sockfs" ino=32869 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.609914][ T28] audit: type=1400 audit(1776748382.606:1190): avc: denied { setcheckreqprot } for pid=12191 comm="syz.0.3855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.689354][ T28] audit: type=1400 audit(1776748382.686:1191): avc: denied { create } for pid=12198 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.715819][ T28] audit: type=1400 audit(1776748382.716:1192): avc: denied { setopt } for pid=12198 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.752084][ T28] audit: type=1400 audit(1776748382.746:1193): avc: denied { create } for pid=12201 comm="syz.0.3850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1 [ 138.303400][T12220] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 138.377176][T12230] IPVS: Scheduler module ip_vs_sip not found [ 138.391047][T12236] 9p: Unknown Cache mode or invalid value l [ 138.428649][T12240] syz_tun: refused to change device tx_queue_len [ 138.563400][T12263] loop5: detected capacity change from 0 to 512 [ 138.600736][T12263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.621813][T12263] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.665123][T12263] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.699257][ T6243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.823154][T12299] __nla_validate_parse: 5 callbacks suppressed [ 138.823172][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 138.856259][T12303] netlink: 'syz.5.3898': attribute type 13 has an invalid length. [ 138.876822][T12303] gretap0: refused to change device tx_queue_len [ 138.891504][T12303] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 138.934152][T10231] IPVS: starting estimator thread 0... [ 138.961818][T12320] Invalid ELF header magic: != ELF [ 139.047546][T12316] IPVS: using max 1680 ests per chain, 84000 per kthread [ 139.781649][T12387] loop5: detected capacity change from 0 to 512 [ 139.801807][T12387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.831502][T12387] EXT4-fs (loop5): 1 truncate cleaned up [ 139.842861][T12387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.890089][T12397] tipc: Enabling of bearer rejected, failed to enable media [ 139.979166][ T6243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.191296][T12429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.207775][T12429] team0: Port device bond1 added [ 140.349280][T12445] netlink: 'syz.3.3963': attribute type 8 has an invalid length. [ 140.840464][T12457] netlink: 'syz.4.3971': attribute type 3 has an invalid length. [ 140.905724][T12469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3977'. [ 140.921961][T12466] vhci_hcd vhci_hcd.3: invalid port number 231 [ 140.922322][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3978'. [ 140.940178][T12469] netlink: 'syz.4.3977': attribute type 8 has an invalid length. [ 140.947966][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3977'. [ 140.958744][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 140.972877][T12474] vlan2: entered promiscuous mode [ 140.979760][T12474] gretap0: entered promiscuous mode [ 141.004670][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3991'. [ 141.011915][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3982'. [ 141.059845][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 141.163593][T12501] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 141.170162][T12501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.211066][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3996'. [ 141.220732][T12501] vhci_hcd vhci_hcd.0: Device attached [ 141.229302][T12501] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 141.235878][T12501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.275233][T12501] vhci_hcd vhci_hcd.0: Device attached [ 141.279603][T12502] usbip_core: unknown command [ 141.294139][T12502] vhci_hcd: unknown pdu 125819603 [ 141.310990][T12502] usbip_core: unknown command [ 141.316418][T12511] vhci_hcd: connection closed [ 141.317803][ T6726] vhci_hcd vhci_hcd.3: stop threads [ 141.332416][ T6726] vhci_hcd vhci_hcd.3: release socket [ 141.353540][ T6726] vhci_hcd vhci_hcd.3: disconnect device [ 141.365581][ T6726] vhci_hcd vhci_hcd.3: stop threads [ 141.373565][ T6726] vhci_hcd vhci_hcd.3: release socket [ 141.380992][ T6726] vhci_hcd vhci_hcd.3: disconnect device [ 141.398784][ T3418] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 141.424952][T12533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4006'. [ 141.702966][T12562] tmpfs: Bad value for 'nr_inodes' [ 141.837294][T12572] netlink: 'syz.3.4025': attribute type 3 has an invalid length. [ 142.334283][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 142.334373][ T28] audit: type=1400 audit(1776748387.330:1251): avc: denied { create } for pid=12595 comm="syz.0.4034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 142.549371][ T28] audit: type=1400 audit(1776748387.540:1252): avc: denied { create } for pid=12609 comm="syz.2.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.602748][ T28] audit: type=1400 audit(1776748387.570:1253): avc: denied { setopt } for pid=12609 comm="syz.2.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.865689][ T28] audit: type=1400 audit(1776748387.860:1254): avc: denied { append } for pid=12632 comm="syz.4.4050" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.621319][ T28] audit: type=1400 audit(1776748388.619:1255): avc: denied { node_bind } for pid=12643 comm="syz.4.4057" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 143.681015][ T28] audit: type=1400 audit(1776748388.639:1256): avc: denied { bind } for pid=12645 comm="syz.5.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.721050][ T28] audit: type=1400 audit(1776748388.639:1257): avc: denied { write } for pid=12645 comm="syz.5.4056" path="socket:[34298]" dev="sockfs" ino=34298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.791079][ T28] audit: type=1400 audit(1776748388.709:1258): avc: denied { listen } for pid=12649 comm="syz.5.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.833892][ T28] audit: type=1400 audit(1776748388.709:1259): avc: denied { ioctl } for pid=12649 comm="syz.5.4059" path="socket:[34311]" dev="sockfs" ino=34311 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.892311][ T28] audit: type=1400 audit(1776748388.879:1260): avc: denied { write } for pid=12657 comm="syz.0.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.125192][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 144.244730][T12689] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4078'. [ 144.657870][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'. [ 144.676774][T12716] netlink: 'syz.3.4089': attribute type 8 has an invalid length. [ 144.695760][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4089'. [ 145.069016][T12729] tipc: Invalid UDP bearer configuration [ 145.069102][T12729] tipc: Enabling of bearer rejected, failed to enable media [ 145.127359][T12736] loop5: detected capacity change from 0 to 512 [ 145.150192][T12736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.165008][T12736] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.187333][T12736] EXT4-fs error (device loop5): ext4_get_first_dir_block:3537: inode #12: comm syz.5.4096: Directory hole found for htree leaf block 0 [ 145.210336][T12736] EXT4-fs (loop5): Remounting filesystem read-only [ 145.263215][ T6243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.273160][T12752] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4105'. [ 145.289817][ T6728] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.004922][T12815] macvtap1: entered promiscuous mode [ 146.022611][T12815] macvtap1: entered allmulticast mode [ 146.033046][T12815] veth1_vlan: entered allmulticast mode [ 146.497783][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 146.559465][T12848] netlink: 296 bytes leftover after parsing attributes in process `syz.0.4152'. [ 146.655295][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 147.451609][T12924] futex_wake_op: syz.0.4188 tries to shift op by -1; fix this program [ 147.776727][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 147.776764][ T28] audit: type=1400 audit(1776748392.765:1307): avc: denied { recv } for pid=6243 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.181 dest=40246 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 147.863616][ T28] audit: type=1400 audit(1776748392.815:1308): avc: denied { create } for pid=12966 comm="syz.0.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.907420][ T28] audit: type=1400 audit(1776748392.815:1309): avc: denied { map_create } for pid=12967 comm="syz.3.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.964560][ T28] audit: type=1400 audit(1776748392.815:1310): avc: denied { bpf } for pid=12967 comm="syz.3.4205" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.997548][T12981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.014537][ T28] audit: type=1400 audit(1776748392.815:1311): avc: denied { map_read map_write } for pid=12967 comm="syz.3.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.054585][ T28] audit: type=1400 audit(1776748392.815:1312): avc: denied { create } for pid=12968 comm="syz.2.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.089000][ T28] audit: type=1400 audit(1776748392.825:1313): avc: denied { write } for pid=12968 comm="syz.2.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.136073][ T28] audit: type=1400 audit(1776748392.825:1314): avc: denied { connect } for pid=12966 comm="syz.0.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.188947][ T28] audit: type=1400 audit(1776748392.825:1315): avc: denied { ioctl } for pid=12966 comm="syz.0.4220" path="socket:[34740]" dev="sockfs" ino=34740 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.242920][ T28] audit: type=1400 audit(1776748392.875:1316): avc: denied { setopt } for pid=12972 comm="syz.2.4207" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.273792][T12992] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 148.713067][T13005] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4228'. [ 148.735595][T13005] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4228'. [ 149.463975][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4244'. [ 160.782122][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 160.782139][ T28] audit: type=1400 audit(1776748405.769:1358): avc: denied { mounton } for pid=13102 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.859077][ T28] audit: type=1400 audit(1776748405.769:1359): avc: denied { module_request } for pid=13102 comm="syz-executor" kmod="netdev-nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 160.895176][ T28] audit: type=1400 audit(1776748405.799:1360): avc: denied { sys_module } for pid=13102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 160.918110][ T28] audit: type=1400 audit(1776748405.839:1361): avc: denied { create } for pid=13109 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.959574][ T28] audit: type=1400 audit(1776748405.869:1362): avc: denied { write } for pid=13109 comm="syz.4.4274" path="socket:[35960]" dev="sockfs" ino=35960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.100383][T13132] tipc: Started in network mode [ 161.106250][T13132] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 161.117151][T13132] tipc: Enabling of bearer rejected, failed to enable media [ 161.132607][T13102] chnl_net:caif_netlink_parms(): no params data found [ 161.194846][T13142] geneve2: left promiscuous mode [ 161.204966][T13142] wireguard0: left promiscuous mode [ 161.211002][T13142] wireguard0: left allmulticast mode [ 161.222243][T13142] veth1_vlan: left allmulticast mode [ 161.229034][T13142] macvtap1: left promiscuous mode [ 161.235657][T13142] macvtap1: left allmulticast mode [ 161.269884][T13102] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.278469][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.288839][T13102] bridge_slave_0: entered allmulticast mode [ 161.296792][T13102] bridge_slave_0: entered promiscuous mode [ 161.305384][T13102] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.309245][ T28] audit: type=1400 audit(1776748406.289:1363): avc: denied { ioctl } for pid=13154 comm="syz.3.4299" path="socket:[35718]" dev="sockfs" ino=35718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.315989][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.347993][T13102] bridge_slave_1: entered allmulticast mode [ 161.355853][T13102] bridge_slave_1: entered promiscuous mode [ 161.377361][T13102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.389494][T13102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.422718][T13102] team0: Port device team_slave_0 added [ 161.429937][T13102] team0: Port device team_slave_1 added [ 161.459022][ T28] audit: type=1400 audit(1776748406.439:1364): avc: denied { read } for pid=3051 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 161.488622][T13102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.500210][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.528702][T13102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.554059][T13102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.562615][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.590122][T13102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.615384][ T28] audit: type=1400 audit(1776748406.599:1365): avc: denied { search } for pid=3051 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.662384][ T28] audit: type=1400 audit(1776748406.629:1366): avc: denied { search } for pid=3051 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.692947][ T6728] bridge_slave_1: left allmulticast mode [ 161.698708][ T6728] bridge_slave_1: left promiscuous mode [ 161.704509][ T28] audit: type=1400 audit(1776748406.629:1367): avc: denied { search } for pid=3051 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.730213][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.740284][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'. [ 161.751236][ T6728] bridge_slave_0: left allmulticast mode [ 161.757108][ T6728] bridge_slave_0: left promiscuous mode [ 161.768247][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.823623][ T6728] geneve1 (unregistering): left allmulticast mode [ 161.830175][ T6728] geneve1 (unregistering): left promiscuous mode [ 161.904306][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.914580][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.924177][ T6728] bond0 (unregistering): Released all slaves [ 161.940114][T13102] hsr_slave_0: entered promiscuous mode [ 161.947597][T13102] hsr_slave_1: entered promiscuous mode [ 161.954889][T13102] debugfs: 'hsr0' already exists in 'hsr' [ 161.960685][T13102] Cannot create hsr debugfs directory [ 161.971043][T13181] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 162.006955][ T6728] hsr_slave_0: left promiscuous mode [ 162.018863][ T6728] hsr_slave_1: left promiscuous mode [ 162.033880][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.043593][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.109290][ T6728] team_slave_1 (unregistering): left allmulticast mode [ 162.134166][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 162.158739][ T6728] team_slave_0 (unregistering): left allmulticast mode [ 162.176763][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 162.343026][ T3051] 8021q: adding VLAN 0 to HW filter on device eth5 [ 162.485630][T13102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.508037][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.529754][T13102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.559970][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.574671][T13102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.605693][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.624408][T13102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.645515][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.664686][ T6728] IPVS: stop unused estimator thread 0... [ 162.796243][T13303] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 162.816503][ T3051] 8021q: adding VLAN 0 to HW filter on device eth6 [ 162.894966][T13102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.923976][T13102] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.946970][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.954293][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.986967][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.994101][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.149460][T13102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.227446][ T3051] 8021q: adding VLAN 0 to HW filter on device eth7 [ 163.414747][T13102] veth0_vlan: entered promiscuous mode [ 163.439024][T13102] veth1_vlan: entered promiscuous mode [ 163.479472][T13102] veth0_macvtap: entered promiscuous mode [ 163.497599][T13102] veth1_macvtap: entered promiscuous mode [ 163.534207][T13102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.557338][T13102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.576285][ T1758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.595358][ T1758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.621836][ T1758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.640434][ T1758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.659279][ T3051] 8021q: adding VLAN 0 to HW filter on device eth8 [ 163.775233][T13363] tipc: Invalid UDP bearer configuration [ 163.775246][T13363] tipc: Enabling of bearer rejected, failed to enable media [ 164.135852][T13397] tipc: Invalid UDP bearer configuration [ 164.135865][T13397] tipc: Enabling of bearer rejected, failed to enable media [ 164.799734][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 164.958932][T13445] loop6: detected capacity change from 0 to 764 [ 165.118764][T13455] can0: slcan on ttyS3. [ 165.193599][T13455] can0 (unregistered): slcan off ttyS3. [ 165.461018][T13491] tipc: Enabling of bearer rejected, media not registered [ 165.997197][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 165.997211][ T28] audit: type=1400 audit(1776748410.978:1475): avc: denied { bind } for pid=13544 comm="syz.0.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.026495][T13545] rdma_op ffff88811b343980 conn xmit_rdma 0000000000000000 [ 166.070960][ T28] audit: type=1400 audit(1776748411.008:1476): avc: denied { write } for pid=13544 comm="syz.0.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.554091][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4453'. [ 166.571819][ T28] audit: type=1400 audit(1776748411.547:1477): avc: denied { getopt } for pid=13586 comm="syz.2.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.631520][T13591] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4467'. [ 166.636870][T13589] loop6: detected capacity change from 0 to 512 [ 166.719244][T13589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.734796][T13589] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.735282][ T28] audit: type=1400 audit(1776748411.717:1478): avc: denied { mount } for pid=13588 comm="syz.6.4455" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.776600][T13589] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.4455: corrupted inode contents [ 166.797751][T13589] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.4455: mark_inode_dirty error [ 166.802514][ T28] audit: type=1400 audit(1776748411.737:1479): avc: denied { add_name } for pid=13588 comm="syz.6.4455" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.815583][T13589] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.4455: corrupted inode contents [ 166.868232][T13589] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.4455: mark_inode_dirty error [ 166.885015][T13604] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.4455: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 166.885015][T13604] [ 166.902420][ T28] audit: type=1400 audit(1776748411.737:1480): avc: denied { create } for pid=13588 comm="syz.6.4455" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 166.909493][T13604] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.4455: corrupted inode contents [ 166.963214][T13604] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.4455: mark_inode_dirty error [ 166.977005][T13604] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 166.992449][ T28] audit: type=1400 audit(1776748411.867:1481): avc: denied { create } for pid=13588 comm="syz.6.4455" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.035816][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.048716][ T28] audit: type=1400 audit(1776748412.027:1482): avc: denied { setopt } for pid=13608 comm="syz.2.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.176394][ T28] audit: type=1326 audit(1776748412.157:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13613 comm="syz.3.4464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98a967c819 code=0x0 [ 167.288867][ T28] audit: type=1400 audit(1776748412.267:1484): avc: denied { ioctl } for pid=13625 comm="syz.6.4469" path="socket:[38028]" dev="sockfs" ino=38028 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.222816][T13622] syz.2.4466 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 168.237083][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.2.4466 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.237126][T13622] Tainted: [W]=WARN [ 168.237145][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.237157][T13622] Call Trace: [ 168.237164][T13622] [ 168.237172][T13622] __dump_stack+0x1d/0x30 [ 168.237208][T13622] dump_stack_lvl+0x95/0xd0 [ 168.237269][T13622] dump_stack+0x15/0x1b [ 168.237300][T13622] dump_header+0x80/0x240 [ 168.237367][T13622] oom_kill_process+0x295/0x350 [ 168.237392][T13622] out_of_memory+0x97d/0xb80 [ 168.237413][T13622] try_charge_memcg+0x62f/0xa10 [ 168.237455][T13622] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 168.237570][T13622] __alloc_frozen_pages_noprof+0x18a/0x350 [ 168.237616][T13622] alloc_pages_mpol+0xb3/0x260 [ 168.237647][T13622] ? mod_lruvec_state+0xe0/0xf0 [ 168.237668][T13622] alloc_pages_noprof+0x8f/0x140 [ 168.237692][T13622] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 168.237731][T13622] __kvmalloc_node_noprof+0x3d4/0x640 [ 168.237779][T13622] ? futex_hash_allocate+0x190/0x9a0 [ 168.237801][T13622] ? futex_hash_allocate+0x190/0x9a0 [ 168.237822][T13622] futex_hash_allocate+0x190/0x9a0 [ 168.237923][T13622] ? cap_task_prctl+0x13f/0x6b0 [ 168.237951][T13622] futex_hash_prctl+0xd8/0xf0 [ 168.238024][T13622] __se_sys_prctl+0x4f4/0x1400 [ 168.238056][T13622] __x64_sys_prctl+0x67/0x80 [ 168.238085][T13622] x64_sys_call+0x2533/0x3020 [ 168.238189][T13622] do_syscall_64+0x12c/0x3b0 [ 168.238270][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.238297][T13622] RIP: 0033:0x7f951c8ec819 [ 168.238316][T13622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.238333][T13622] RSP: 002b:00007f951b347028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 168.238435][T13622] RAX: ffffffffffffffda RBX: 00007f951cb65fa0 RCX: 00007f951c8ec819 [ 168.238453][T13622] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 168.238468][T13622] RBP: 00007f951c982c91 R08: 0000000000000000 R09: 0000000000000000 [ 168.238484][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.238527][T13622] R13: 00007f951cb66038 R14: 00007f951cb65fa0 R15: 00007ffdc06aed98 [ 168.238544][T13622] [ 168.238559][T13622] memory: usage 307200kB, limit 307200kB, failcnt 494 [ 168.472052][T13622] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 168.481126][T13622] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 168.489458][T13622] Memory cgroup stats for /syz2: [ 168.489736][T13622] cache 0 [ 168.497733][T13622] rss 0 [ 168.500608][T13622] shmem 0 [ 168.503627][T13622] mapped_file 0 [ 168.507210][T13622] dirty 0 [ 168.510159][T13622] writeback 0 [ 168.514682][T13622] workingset_refault_anon 210 [ 168.519371][T13622] workingset_refault_file 2941 [ 168.525464][T13622] swap 798720 [ 168.528949][T13622] swapcached 23969792 [ 168.534230][T13622] pgpgin 128682 [ 168.537702][T13622] pgpgout 128682 [ 168.541274][T13622] pgfault 217695 [ 168.546013][T13622] pgmajfault 131 [ 168.549563][T13622] inactive_anon 0 [ 168.554866][T13622] active_anon 0 [ 168.558398][T13622] inactive_file 0 [ 168.562022][T13622] active_file 0 [ 168.566827][T13622] unevictable 0 [ 168.570354][T13622] hierarchical_memory_limit 314572800 [ 168.576955][T13622] hierarchical_memsw_limit 9223372036854771712 [ 168.584422][T13622] total_cache 0 [ 168.587878][T13622] total_rss 0 [ 168.591249][T13622] total_shmem 0 [ 168.595897][T13622] total_mapped_file 0 [ 168.599912][T13622] total_dirty 0 [ 168.604553][T13622] total_writeback 0 [ 168.608435][T13622] total_workingset_refault_anon 210 [ 168.614915][T13622] total_workingset_refault_file 2941 [ 168.620195][T13622] total_swap 798720 [ 168.625320][T13622] total_swapcached 23969792 [ 168.629821][T13622] total_pgpgin 128682 [ 168.635182][T13622] total_pgpgout 128682 [ 168.639423][T13622] total_pgfault 217695 [ 168.644921][T13622] total_pgmajfault 131 [ 168.649045][T13622] total_inactive_anon 0 [ 168.654380][T13622] total_active_anon 0 [ 168.658455][T13622] total_inactive_file 0 [ 168.662600][T13622] total_active_file 0 [ 168.667770][T13622] total_unevictable 0 [ 168.671756][T13622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4466,pid=13621,uid=0 [ 168.688218][T13622] Memory cgroup out of memory: Killed process 13621 (syz.2.4466) total-vm:96080kB, anon-rss:1228kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 169.031705][T13695] netlink: 'syz.4.4503': attribute type 29 has an invalid length. [ 169.363656][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4515'. [ 169.785838][T13757] gretap0: entered promiscuous mode [ 169.806633][T13757] vlan2: entered promiscuous mode [ 169.818598][T13760] netlink: 'syz.4.4532': attribute type 3 has an invalid length. [ 169.851017][T13760] netlink: 'syz.4.4532': attribute type 1 has an invalid length. [ 169.860590][T13760] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.4532'. [ 169.876210][T13763] macvtap1: entered promiscuous mode [ 169.882396][T13763] macvtap1: entered allmulticast mode [ 169.887977][T13763] veth1_vlan: entered allmulticast mode [ 170.175521][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4544'. [ 170.368864][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4550'. [ 170.421173][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4550'. [ 170.440634][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4550'. [ 170.489650][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4553'. [ 170.686772][T13822] loop6: detected capacity change from 0 to 512 [ 170.699279][T13822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 170.723178][T13822] System zones: 1-12 [ 170.731447][T13822] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.4568: missing EA_INODE flag [ 170.748356][T13822] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.748516][T13822] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4568: error while reading EA inode 12 err=-117 [ 170.757721][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 170.757739][ C0] EXT4-fs (loop6): initial error at time 1776748415: ext4_xattr_inode_iget:441: inode 12 [ 170.757768][ C0] EXT4-fs (loop6): last error at time 1776748415: ext4_xattr_inode_iget:441: inode 12 [ 170.815218][T13822] loop6: lost filesystem error report for type 5 error -117 [ 170.815497][T13822] EXT4-fs (loop6): 1 orphan inode deleted [ 170.830334][T13822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.849413][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4568'. [ 170.881427][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.981722][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4567'. [ 171.038010][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 171.038029][ T28] audit: type=1400 audit(1776748416.017:1535): avc: denied { allowed } for pid=13846 comm="syz.2.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.098089][ T28] audit: type=1400 audit(1776748416.047:1536): avc: denied { create } for pid=13846 comm="syz.2.4572" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.120196][ T28] audit: type=1400 audit(1776748416.047:1537): avc: denied { map } for pid=13846 comm="syz.2.4572" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.182204][ T28] audit: type=1400 audit(1776748416.047:1538): avc: denied { read write } for pid=13846 comm="syz.2.4572" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 171.242565][ T28] audit: type=1400 audit(1776748416.137:1539): avc: denied { create } for pid=13858 comm="syz.6.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 171.286442][ T28] audit: type=1400 audit(1776748416.147:1540): avc: denied { create } for pid=13858 comm="syz.6.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.307002][ T28] audit: type=1400 audit(1776748416.147:1541): avc: denied { write } for pid=13858 comm="syz.6.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.329162][ T28] audit: type=1400 audit(1776748416.147:1542): avc: denied { nlmsg_write } for pid=13858 comm="syz.6.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.353170][ T28] audit: type=1400 audit(1776748416.147:1543): avc: denied { create } for pid=13859 comm="syz.2.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.392158][ T28] audit: type=1400 audit(1776748416.147:1544): avc: denied { module_request } for pid=13858 comm="syz.6.4578" kmod="crypto-rfc4106(gcm(aes))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.602702][T13887] loop6: detected capacity change from 0 to 1024 [ 171.611535][T13887] EXT4-fs: Ignoring removed i_version option [ 171.620172][T13887] EXT4-fs: Ignoring removed bh option [ 171.628135][T13887] EXT4-fs (loop6): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 171.672660][T13887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.706702][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.796235][T13909] RDS: rds_bind could not find a transport for 800:0:400:0:900:0:fcff:ffff, load rds_tcp or rds_rdma? [ 171.979640][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4606'. [ 173.192680][T13983] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 173.230781][T10231] hid_parser_main: 102 callbacks suppressed [ 173.230802][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.247197][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.260515][T13921] loop6: detected capacity change from 0 to 512 [ 173.301274][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.310176][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.310275][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.310321][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.310341][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.310364][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.388990][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.389052][T10231] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 173.430561][T10231] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz1] on syz0 [ 173.502348][T14002] fido_id[14002]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.550263][T13921] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 173.578377][T13921] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: comm syz.6.4599: inode #1792: comm syz.6.4599: iget: illegal inode # [ 173.597980][T13921] loop6: lost filesystem error report for type 5 error -117 [ 173.601289][T13921] EXT4-fs (loop6): Remounting filesystem read-only [ 173.609801][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 173.610220][ C0] EXT4-fs (loop6): initial error at time 1776748418: ext4_get_journal_inode:5896 [ 173.610291][ C0] EXT4-fs (loop6): last error at time 1776748418: ext4_get_journal_inode:5896 [ 173.684961][T13921] EXT4-fs (loop6): no journal found [ 173.691060][T13921] EXT4-fs (loop6): can't get journal size [ 173.793320][T13921] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 173.856413][T13921] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 173.971529][T13921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.240881][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.359145][ T23] IPVS: starting estimator thread 0... [ 174.422433][T14058] __nla_validate_parse: 4 callbacks suppressed [ 174.422454][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4666'. [ 174.475604][T14063] IPVS: using max 2352 ests per chain, 117600 per kthread [ 175.418115][T14141] netlink: 'syz.6.4688': attribute type 3 has an invalid length. [ 176.066850][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 176.066868][ T28] audit: type=1400 audit(1776748421.046:1638): avc: denied { name_bind } for pid=14202 comm="syz.4.4717" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 176.106422][T14197] loop6: detected capacity change from 0 to 4096 [ 176.146763][ T28] audit: type=1400 audit(1776748421.076:1639): avc: denied { node_bind } for pid=14202 comm="syz.4.4717" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 176.180516][T14197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.198848][T14197] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4714: corrupted inode contents [ 176.292648][ T28] audit: type=1400 audit(1776748421.266:1640): avc: denied { egress } for pid=14125 comm="syz.2.4674" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 176.322842][T14197] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #15: comm syz.6.4714: mark_inode_dirty error [ 176.373131][T14197] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4714: corrupted inode contents [ 176.409300][T14197] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4714: mark_inode_dirty error [ 176.432564][ T28] audit: type=1400 audit(1776748421.266:1641): avc: denied { sendto } for pid=14125 comm="syz.2.4674" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 176.465913][T14197] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4714: corrupted inode contents [ 176.481265][T14197] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4714: mark_inode_dirty error [ 176.495337][T14197] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4714: corrupted inode contents [ 176.519359][T14197] EXT4-fs error (device loop6): ext4_truncate:4690: inode #15: comm syz.6.4714: mark_inode_dirty error [ 176.532251][T14197] EXT4-fs error (device loop6) in ext4_setattr:6120: Corrupt filesystem [ 176.546637][ T28] audit: type=1400 audit(1776748421.526:1642): avc: denied { setattr } for pid=14196 comm="syz.6.4714" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.572155][T14214] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4714: corrupted inode contents [ 176.648433][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.703336][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4731'. [ 176.730250][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4733'. [ 176.777499][ T28] audit: type=1400 audit(1776748421.756:1643): avc: denied { create } for pid=14265 comm="syz.6.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.818945][ T28] audit: type=1400 audit(1776748421.786:1644): avc: denied { bind } for pid=14265 comm="syz.6.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.881522][ T28] audit: type=1400 audit(1776748421.856:1645): avc: denied { ioctl } for pid=14276 comm="syz.0.4754" path="socket:[38816]" dev="sockfs" ino=38816 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.939825][ T28] audit: type=1400 audit(1776748421.916:1646): avc: denied { write } for pid=14280 comm="syz.0.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.982947][ T28] audit: type=1400 audit(1776748421.946:1647): avc: denied { write } for pid=14281 comm="syz.3.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.161338][T14311] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 177.180923][T14314] IPVS: Scheduler module ip_vs_sip not found [ 177.318338][T14335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.321847][T14335] team0: Port device bond1 added [ 177.389551][T14342] netlink: 'syz.0.4775': attribute type 8 has an invalid length. [ 179.276822][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 179.323822][T14494] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 179.554097][T14514] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 179.600192][T14517] can0: slcan on ttyS3. [ 179.665706][T14517] can0 (unregistered): slcan off ttyS3. [ 179.734037][T14529] netlink: 'syz.2.4862': attribute type 1 has an invalid length. [ 179.859526][T14544] netem: change failed [ 180.145932][T14578] vlan3: entered promiscuous mode [ 180.175004][T14578] gretap0: entered promiscuous mode [ 180.772710][T14661] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4913'. [ 180.782110][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4914'. [ 181.101546][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 181.101561][ T28] audit: type=1400 audit(1776748426.075:1689): avc: denied { create } for pid=14702 comm="syz.0.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.136604][ T28] audit: type=1400 audit(1776748426.115:1690): avc: denied { connect } for pid=14702 comm="syz.0.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.137093][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4934'. [ 181.281903][ T28] audit: type=1400 audit(1776748426.255:1691): avc: denied { remount } for pid=14721 comm="syz.3.4942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.315109][ T28] audit: type=1400 audit(1776748426.285:1692): avc: denied { connect } for pid=14725 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.350562][ T28] audit: type=1400 audit(1776748426.285:1693): avc: denied { write } for pid=14725 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.373544][T14732] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 181.406832][ T28] audit: type=1400 audit(1776748426.385:1694): avc: denied { setopt } for pid=14735 comm="syz.6.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.430707][ T28] audit: type=1400 audit(1776748426.405:1695): avc: denied { lock } for pid=14737 comm="syz.2.4951" path="socket:[42018]" dev="sockfs" ino=42018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 181.626497][T14770] netlink: 748 bytes leftover after parsing attributes in process `syz.4.4967'. [ 181.673356][T14776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4970'. [ 181.811891][T14799] loop6: detected capacity change from 0 to 512 [ 181.841499][T14799] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 181.855385][T14799] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.4981: corrupted in-inode xattr: e_value size too large [ 181.869951][T14799] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.870220][T14799] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4981: couldn't read orphan inode 15 (err -117) [ 181.879415][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 181.879432][ C0] EXT4-fs (loop6): initial error at time 1776748426: ext4_iget_extra_inode:5128: inode 15 [ 181.879456][ C0] EXT4-fs (loop6): last error at time 1776748426: ext4_iget_extra_inode:5128: inode 15 [ 181.917916][T14799] loop6: lost filesystem error report for type 5 error -117 [ 181.918667][T14799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.963815][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.984977][ T28] audit: type=1400 audit(1776748426.955:1696): avc: denied { relabelfrom } for pid=14812 comm="syz.3.4986" name="NETLINK" dev="sockfs" ino=41533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.013943][ T28] audit: type=1400 audit(1776748426.955:1697): avc: denied { relabelto } for pid=14812 comm="syz.3.4986" name="NETLINK" dev="sockfs" ino=41533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 182.067537][T14821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4991'. [ 182.098951][T14826] netlink: 'syz.0.4993': attribute type 3 has an invalid length. [ 182.124336][ T28] audit: type=1326 audit(1776748427.095:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz.0.4996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d64ec819 code=0x0 [ 182.527312][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5019'. [ 182.801446][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5045'. [ 183.003046][T14972] Cannot find add_set index 46338 as target [ 183.013736][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'. [ 183.085562][T14987] syz_tun: refused to change device tx_queue_len [ 183.100625][T14987] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.224154][T15008] SELinux: failed to load policy [ 183.347118][T15029] loop6: detected capacity change from 0 to 256 [ 183.453405][T15049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.469706][T15049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.480935][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.490377][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.726222][T15078] netlink: 'syz.6.5126': attribute type 3 has an invalid length. [ 183.734186][T15078] netlink: 'syz.6.5126': attribute type 1 has an invalid length. [ 183.743732][T15078] netlink: 191376 bytes leftover after parsing attributes in process `syz.6.5126'. [ 184.150971][T15111] netlink: 'syz.3.5131': attribute type 29 has an invalid length. [ 184.276823][T15128] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.287841][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.295127][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.669847][T15157] loop6: detected capacity change from 0 to 512 [ 184.695639][T15157] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5152: bg 0: block 393: padding at end of block bitmap is not set [ 184.713323][T15157] loop6: lost filesystem error report for type 5 error -117 [ 184.714577][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 184.728381][ C1] EXT4-fs (loop6): initial error at time 1776748429: ext4_validate_block_bitmap:441 [ 184.738528][ C1] EXT4-fs (loop6): last error at time 1776748429: ext4_validate_block_bitmap:441 [ 184.776281][T15157] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 184.809131][T15157] loop6: lost filesystem error report for type 5 error -117 [ 184.809705][T15157] EXT4-fs (loop6): 2 truncates cleaned up [ 184.837522][T15157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.985570][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.276701][T15193] loop6: detected capacity change from 0 to 512 [ 185.530643][T15213] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 185.743171][T15237] RDS: rds_bind could not find a transport for 800:0:400:0:900:0:fcff:ffff, load rds_tcp or rds_rdma? [ 185.939272][T15254] __nla_validate_parse: 1 callbacks suppressed [ 185.939375][T15254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5198'. [ 186.152976][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 186.153035][ T28] audit: type=1400 audit(1776748431.125:1798): avc: denied { mount } for pid=15267 comm="syz.3.5204" name="/" dev="ramfs" ino=43270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.208126][ T28] audit: type=1400 audit(1776748431.165:1799): avc: denied { remount } for pid=15267 comm="syz.3.5204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.249311][ T28] audit: type=1400 audit(1776748431.215:1800): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.597082][ T28] audit: type=1400 audit(1776748431.575:1801): avc: denied { create } for pid=15275 comm="syz.6.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.622965][ T28] audit: type=1400 audit(1776748431.575:1802): avc: denied { ioctl } for pid=15275 comm="syz.6.5206" path="socket:[42946]" dev="sockfs" ino=42946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.676383][ T28] audit: type=1400 audit(1776748431.575:1803): avc: denied { write } for pid=15275 comm="syz.6.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.711602][T15280] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5212'. [ 186.732021][ T28] audit: type=1400 audit(1776748431.705:1804): avc: denied { bind } for pid=15283 comm="syz.2.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.761142][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 186.843523][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5217'. [ 186.951094][ T28] audit: type=1400 audit(1776748431.925:1805): avc: denied { setopt } for pid=15301 comm="syz.2.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.013045][ T28] audit: type=1400 audit(1776748431.955:1806): avc: denied { write } for pid=15301 comm="syz.2.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.068574][ T28] audit: type=1400 audit(1776748431.985:1807): avc: denied { name_connect } for pid=15306 comm="syz.2.5226" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.153257][T15305] can0: slcan on ttyS3. [ 187.206071][T15303] can0 (unregistered): slcan off ttyS3. [ 187.561549][T15359] loop6: detected capacity change from 0 to 512 [ 187.584506][T15359] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 187.622840][T15359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 187.669948][T15359] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.700932][T15359] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.5241: bad orphan inode 3 [ 187.731749][T15359] loop6: lost filesystem error report for type 5 error -117 [ 187.732510][T15359] EXT4-fs (loop6): Remounting filesystem read-only [ 187.740704][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 187.740752][ C1] EXT4-fs (loop6): initial error at time 1776748432: ext4_orphan_get:1423 [ 187.740777][ C1] EXT4-fs (loop6): last error at time 1776748432: ext4_orphan_get:1423 [ 187.806653][T15359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 187.837932][T15359] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.5241: dx entry: limit 0 != root limit 125 [ 187.888873][T15359] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5241: Corrupt directory, running e2fsck is recommended [ 187.973671][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 188.115460][T15382] loop6: detected capacity change from 0 to 128 [ 188.962998][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5274'. [ 189.028960][T15438] netlink: 'syz.3.5275': attribute type 83 has an invalid length. [ 190.104827][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5295'. [ 190.135046][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5295'. [ 190.378606][T15497] loop6: detected capacity change from 0 to 256 [ 190.882757][T15534] loop6: detected capacity change from 0 to 512 [ 190.927013][T15534] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.022647][T15544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5322'. [ 191.193561][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 191.193579][ T28] audit: type=1326 audit(1776748436.165:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.255417][ T28] audit: type=1326 audit(1776748436.165:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.289152][ T28] audit: type=1326 audit(1776748436.215:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.347638][ T28] audit: type=1326 audit(1776748436.215:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.396202][ T3418] IPVS: starting estimator thread 0... [ 191.421765][ T28] audit: type=1326 audit(1776748436.215:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.473898][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5354'. [ 191.484668][ T28] audit: type=1326 audit(1776748436.215:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.508320][T15578] IPVS: using max 1920 ests per chain, 96000 per kthread [ 191.508342][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 191.533825][ T28] audit: type=1326 audit(1776748436.215:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.588757][ T28] audit: type=1326 audit(1776748436.235:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.650983][ T28] audit: type=1326 audit(1776748436.235:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 191.706421][ T28] audit: type=1326 audit(1776748436.255:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f951c8ec819 code=0x7ffc0000 [ 193.278278][T15664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5380'. [ 193.472964][T15686] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 193.690479][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5396'. [ 195.230185][T15733] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 195.491915][T15761] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.602973][T15776] loop6: detected capacity change from 0 to 128 [ 195.935473][T15790] loop6: detected capacity change from 0 to 256 [ 200.352215][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 200.352234][ T28] audit: type=1400 audit(1776748445.325:1900): avc: denied { mounton } for pid=15815 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 200.431981][ T28] audit: type=1400 audit(1776748445.385:1901): avc: denied { sys_module } for pid=15815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 201.337080][T15815] chnl_net:caif_netlink_parms(): no params data found [ 201.377793][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.384972][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.392284][T15815] bridge_slave_0: entered allmulticast mode [ 201.398757][T15815] bridge_slave_0: entered promiscuous mode [ 201.414318][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.422539][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.429705][T15815] bridge_slave_1: entered allmulticast mode [ 201.436474][T15815] bridge_slave_1: entered promiscuous mode [ 201.454044][ T28] audit: type=1400 audit(1776748446.424:1902): avc: denied { sqpoll } for pid=15852 comm="syz.3.5472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.499555][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.510171][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.537004][T15815] team0: Port device team_slave_0 added [ 201.551174][T15815] team0: Port device team_slave_1 added [ 201.569889][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.576919][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.603461][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.615674][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.622717][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.662263][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.769582][T15884] loop6: detected capacity change from 0 to 512 [ 201.791879][T15815] hsr_slave_0: entered promiscuous mode [ 201.801228][T15884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.809757][T15815] hsr_slave_1: entered promiscuous mode [ 201.812106][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 201.848244][T15815] Cannot create hsr debugfs directory [ 201.868994][ T1758] bridge_slave_1: left allmulticast mode [ 201.878769][T15884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.881638][ T1758] bridge_slave_1: left promiscuous mode [ 201.916787][ T1758] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.932754][ T1758] bridge_slave_0: left allmulticast mode [ 201.938200][T15884] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.951749][ T1758] bridge_slave_0: left promiscuous mode [ 201.961421][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.981234][ T28] audit: type=1400 audit(1776748446.964:1903): avc: denied { read } for pid=15899 comm="syz.4.5478" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.013877][ T28] audit: type=1400 audit(1776748446.994:1904): avc: denied { open } for pid=15899 comm="syz.4.5478" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.043176][ T28] audit: type=1400 audit(1776748446.994:1905): avc: denied { create } for pid=15883 comm="syz.6.5473" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.085091][ T28] audit: type=1400 audit(1776748446.994:1906): avc: denied { write open } for pid=15883 comm="syz.6.5473" path="/250/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.109213][ T1758] geneve1 (unregistering): left allmulticast mode [ 202.116109][ T1758] geneve1 (unregistering): left promiscuous mode [ 202.123020][T13102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137931][ T28] audit: type=1400 audit(1776748446.994:1907): avc: denied { setattr } for pid=15883 comm="syz.6.5473" path="/250/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.161930][ T28] audit: type=1400 audit(1776748447.024:1908): avc: denied { ioctl } for pid=15899 comm="syz.4.5478" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.204216][ T1758] team0: Port device bridge1 removed [ 202.288363][ T1758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.299754][ T1758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.317043][ T1758] bond0 (unregistering): Released all slaves [ 202.328554][ T3051] 8021q: adding VLAN 0 to HW filter on device eth9 [ 202.357127][ T1758] tipc: Left network mode [ 202.367365][ T1758] hsr_slave_0: left promiscuous mode [ 202.373819][ T1758] hsr_slave_1: left promiscuous mode [ 202.396898][ T1758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.404345][ T1758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.503339][ T1758] team0 (unregistering): Port device 72 removed [ 202.530198][ T1758] team0 (unregistering): Port device team_slave_0 removed [ 202.546783][ T28] audit: type=1400 audit(1776748447.534:1909): avc: denied { ioctl } for pid=15926 comm="syz.2.5488" path="socket:[46209]" dev="sockfs" ino=46209 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.717709][T15815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.730862][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.741238][T15815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.758742][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.771802][T15815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.787298][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.807459][T15815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.827256][T15815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.883237][ T1758] IPVS: stop unused estimator thread 0... [ 202.921912][ T3051] 8021q: adding VLAN 0 to HW filter on device eth10 [ 202.962403][T15815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.987442][T15815] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.007261][ T1758] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.014439][ T1758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.030822][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.037955][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.248847][T15815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.271640][ T3051] 8021q: adding VLAN 0 to HW filter on device eth11 [ 203.321914][T16003] C: renamed from team_slave_0 [ 203.340489][T16003] netlink: 'syz.2.5513': attribute type 4 has an invalid length. [ 203.353482][T16003] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5513'. [ 203.374943][T16003] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.572516][ T3051] 8021q: adding VLAN 0 to HW filter on device eth12 [ 203.588403][T15815] veth0_vlan: entered promiscuous mode [ 203.602305][T15815] veth1_vlan: entered promiscuous mode [ 203.634105][T15815] veth0_macvtap: entered promiscuous mode [ 203.648928][T15815] veth1_macvtap: entered promiscuous mode [ 203.678988][T15815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.712135][T15815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.749750][T16012] program syz.4.5505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.759440][ T6726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.785087][ T6726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.818819][ T6726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.843988][ T6726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.084003][T16054] loop7: detected capacity change from 0 to 512 [ 204.133686][T16054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.161006][T16054] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.234910][T15815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.381966][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5518'. [ 204.441995][T16068] n: the hash_elasticity option has been deprecated and is always 16 [ 204.449173][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5518'. [ 204.484890][T16068] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 204.542734][T16069] n: the hash_elasticity option has been deprecated and is always 16 [ 204.553381][T16069] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 204.687731][T16081] loop7: detected capacity change from 0 to 128 [ 204.694509][T16081] vfat: Unknown parameter '' [ 205.103434][T16116] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 205.332644][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5544'. [ 205.399732][T16137] program syz.7.5548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.412072][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 205.412087][ T28] audit: type=1400 audit(1776748450.394:1930): avc: denied { read append } for pid=16135 comm="syz.3.5547" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.461616][ T28] audit: type=1400 audit(1776748450.394:1931): avc: denied { open } for pid=16135 comm="syz.3.5547" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.486809][ T28] audit: type=1400 audit(1776748450.434:1932): avc: denied { ioctl } for pid=16135 comm="syz.3.5547" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.859822][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5553'. [ 205.879365][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5553'. [ 205.992613][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5555'. [ 206.082340][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5557'. [ 206.598359][ T28] audit: type=1400 audit(1776748451.584:1933): avc: denied { cpu } for pid=16177 comm="syz.2.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 206.714044][T16185] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5568'. [ 206.733015][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5568'. [ 206.862374][ T28] audit: type=1400 audit(1776748451.844:1934): avc: denied { watch watch_reads } for pid=16194 comm="syz.3.5572" path="/proc/2440" dev="proc" ino=46624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 217.294942][ T28] audit: type=1400 audit(1776748462.274:1935): avc: denied { setopt } for pid=16257 comm="syz.2.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.327046][T16264] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5583'. [ 217.370091][ T28] audit: type=1400 audit(1776748462.274:1936): avc: denied { connect } for pid=16257 comm="syz.2.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.410230][T16272] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5580'. [ 217.452234][ T28] audit: type=1400 audit(1776748462.274:1937): avc: denied { shutdown } for pid=16257 comm="syz.2.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.480706][ T28] audit: type=1400 audit(1776748462.464:1938): avc: denied { write } for pid=16281 comm="syz.3.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.561024][ T28] audit: type=1400 audit(1776748462.544:1939): avc: denied { ioctl } for pid=16288 comm="syz.3.5584" path="socket:[46707]" dev="sockfs" ino=46707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.641418][ T28] audit: type=1400 audit(1776748462.594:1940): avc: denied { read } for pid=16294 comm="syz.4.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.672615][ T6726] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.702879][ T28] audit: type=1400 audit(1776748462.654:1941): avc: denied { setopt } for pid=16294 comm="syz.4.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.747486][T16303] batman_adv: batadv0: Adding interface: vlan2 [ 217.763596][T16303] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.817609][T16303] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 217.843379][ T6726] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.920743][ T6726] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.972482][ T6726] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.052957][T16314] tap0: tun_chr_ioctl cmd 2147767520 [ 218.140576][ T28] audit: type=1400 audit(1776748463.124:1942): avc: denied { write } for pid=16319 comm="syz.4.5595" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 218.169630][ T28] audit: type=1400 audit(1776748463.154:1943): avc: denied { append } for pid=16320 comm="syz.2.5596" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 218.194821][T16273] chnl_net:caif_netlink_parms(): no params data found [ 218.203770][ T28] audit: type=1400 audit(1776748463.154:1944): avc: denied { write } for pid=16320 comm="syz.2.5596" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 218.318210][ T6726] bridge_slave_1: left allmulticast mode [ 218.336333][ T6726] bridge_slave_1: left promiscuous mode [ 218.343152][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.360419][ T6726] bridge_slave_0: left allmulticast mode [ 218.375490][ T6726] bridge_slave_0: left promiscuous mode [ 218.390864][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.730478][ T6726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.741749][ T6726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.752933][ T6726] bond0 (unregistering): Released all slaves [ 218.768166][T16335] netlink: 'syz.4.5603': attribute type 1 has an invalid length. [ 218.776384][T16339] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5604'. [ 218.839341][ T6726] hsr_slave_0: left promiscuous mode [ 218.849387][ T6726] hsr_slave_1: left promiscuous mode [ 218.865892][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.874823][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.891423][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.914021][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.939892][ T6726] veth1_macvtap: left promiscuous mode [ 218.954042][ T6726] veth0_macvtap: left promiscuous mode [ 218.965876][ T6726] veth1_vlan: left promiscuous mode [ 218.973878][ T6726] veth0_vlan: left promiscuous mode [ 219.183553][ T6726] team0 (unregistering): Port device team_slave_1 removed [ 219.201594][ T6726] team0 (unregistering): Port device team_slave_0 removed [ 219.297355][T16273] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.308946][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.323890][T16273] bridge_slave_0: entered allmulticast mode [ 219.332364][T16273] bridge_slave_0: entered promiscuous mode [ 219.340693][ T3051] 8021q: adding VLAN 0 to HW filter on device eth13 [ 219.349806][T16273] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.359317][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.368938][T16273] bridge_slave_1: entered allmulticast mode [ 219.377365][T16273] bridge_slave_1: entered promiscuous mode [ 219.403879][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.415118][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.445574][T16273] team0: Port device team_slave_0 added [ 219.453759][T16273] team0: Port device team_slave_1 added [ 219.490397][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.505527][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.565536][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.586310][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.594714][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.628273][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.641066][ T3051] 8021q: adding VLAN 0 to HW filter on device eth14 [ 219.653909][ T6726] IPVS: stop unused estimator thread 0... [ 219.692027][T16273] hsr_slave_0: entered promiscuous mode [ 219.707603][T16273] hsr_slave_1: entered promiscuous mode [ 219.717237][T16273] debugfs: 'hsr0' already exists in 'hsr' [ 219.728386][T16273] Cannot create hsr debugfs directory [ 219.829136][ T3051] 8021q: adding VLAN 0 to HW filter on device eth15 [ 219.879939][T16273] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 219.890624][T16273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.898613][T16273] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 219.912163][T16273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.921623][T16273] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.940734][T16273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.957526][T16273] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.978890][T16273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.058575][T16273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.071346][T16273] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.081726][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.088843][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.110951][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.118090][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.140702][ T3051] 8021q: adding VLAN 0 to HW filter on device eth16 [ 220.221898][T16273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.392298][T16273] veth0_vlan: entered promiscuous mode [ 220.402141][T16273] veth1_vlan: entered promiscuous mode [ 220.448262][T16273] veth0_macvtap: entered promiscuous mode [ 220.456442][T16273] veth1_macvtap: entered promiscuous mode [ 220.468223][T16273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.480350][T16273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.491988][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.502665][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.519460][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.528569][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.880551][T16479] netlink: 'syz.2.5625': attribute type 21 has an invalid length. [ 221.908112][T16479] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.081611][T16492] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5630'. [ 222.352553][T16500] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5635'. [ 222.461926][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.474778][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.932322][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 222.932340][ T28] audit: type=1400 audit(1776748467.914:1952): avc: denied { write } for pid=16508 comm="syz.4.5640" name="tcp6" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 223.047738][ T28] audit: type=1326 audit(1776748468.034:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.118330][ T28] audit: type=1326 audit(1776748468.034:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.197606][ T28] audit: type=1326 audit(1776748468.034:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.246893][ T28] audit: type=1326 audit(1776748468.034:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.298299][ T28] audit: type=1326 audit(1776748468.034:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.366978][ T28] audit: type=1326 audit(1776748468.034:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.416796][ T28] audit: type=1326 audit(1776748468.034:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.510164][ T28] audit: type=1326 audit(1776748468.034:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.537743][ T28] audit: type=1326 audit(1776748468.034:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f98a967c819 code=0x7ffc0000 [ 223.656601][T16540] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5653'. [ 224.084093][T16556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.095099][T16556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.911733][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 232.911749][ T28] audit: type=1400 audit(1776748477.894:1968): avc: denied { write } for pid=16634 comm="syz.3.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 232.990352][T16641] loop8: detected capacity change from 0 to 1024 [ 233.002733][T16641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.018676][T16641] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.029808][T16641] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 233.038366][T16641] EXT4-fs (loop8): orphan cleanup on readonly fs [ 233.045021][T16641] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.5670: Freeing blocks not in datazone - block = 0, count = 4096 [ 233.048043][ T6728] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.061774][T16641] loop8: lost filesystem error report for type 5 error -117 [ 233.070345][T16641] EXT4-fs (loop8): 1 orphan inode deleted [ 233.077697][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 233.077733][ C0] EXT4-fs (loop8): initial error at time 1776748478: ext4_free_blocks:6718 [ 233.077756][ C0] EXT4-fs (loop8): last error at time 1776748478: ext4_free_blocks:6718 [ 233.108401][T16641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.181532][ T6728] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.194654][T16652] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5674'. [ 233.209535][T16273] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.250138][ T6728] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.284657][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5677'. [ 233.336032][ T6728] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.382365][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5681'. [ 233.397723][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5681'. [ 233.447938][T16675] program syz.2.5683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.489915][ T6728] bridge_slave_1: left allmulticast mode [ 233.497918][T16683] sctp: [Deprecated]: syz.2.5685 (pid 16683) Use of int in max_burst socket option. [ 233.497918][T16683] Use struct sctp_assoc_value instead [ 233.504617][ T6728] bridge_slave_1: left promiscuous mode [ 233.533245][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.542748][ T6728] bridge_slave_0: left allmulticast mode [ 233.549963][ T6728] bridge_slave_0: left promiscuous mode [ 233.557858][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.749140][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.760471][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.771564][ T6728] bond0 (unregistering): Released all slaves [ 233.783863][T16630] chnl_net:caif_netlink_parms(): no params data found [ 233.811235][ T6728] hsr_slave_0: left promiscuous mode [ 233.818626][ T6728] hsr_slave_1: left promiscuous mode [ 233.824381][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.831934][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.839471][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.847817][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.859643][ T6728] veth1_macvtap: left promiscuous mode [ 233.865234][ T6728] veth0_macvtap: left promiscuous mode [ 233.871956][ T6728] veth1_vlan: left promiscuous mode [ 233.878450][ T6728] veth0_vlan: left promiscuous mode [ 233.959013][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 233.970189][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 234.031303][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.040022][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.049181][T16630] bridge_slave_0: entered allmulticast mode [ 234.062071][T16630] bridge_slave_0: entered promiscuous mode [ 234.070433][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.080173][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.089168][T16630] bridge_slave_1: entered allmulticast mode [ 234.099369][T16630] bridge_slave_1: entered promiscuous mode [ 234.143836][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.158561][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.183136][T16630] team0: Port device team_slave_0 added [ 234.191372][T16630] team0: Port device team_slave_1 added [ 234.204407][ T3051] 8021q: adding VLAN 0 to HW filter on device eth17 [ 234.220739][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.227912][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.254128][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.266563][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.273553][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.301395][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.340209][T16630] hsr_slave_0: entered promiscuous mode [ 234.347436][T16630] hsr_slave_1: entered promiscuous mode [ 234.353388][T16630] debugfs: 'hsr0' already exists in 'hsr' [ 234.360303][T16630] Cannot create hsr debugfs directory [ 234.452222][T16630] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 234.462230][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.470262][T16630] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.479578][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.489355][T16630] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.498775][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.508245][T16630] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 234.518407][T16630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 234.533383][ T3051] 8021q: adding VLAN 0 to HW filter on device eth18 [ 234.544123][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.551298][T16630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.558640][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.565826][T16630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.599016][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.609558][ T1797] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.617812][ T1797] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.632317][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.643745][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.650877][ T1797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.668815][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.675937][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.750499][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.763957][ T3051] 8021q: adding VLAN 0 to HW filter on device eth19 [ 234.890901][T16630] veth0_vlan: entered promiscuous mode [ 234.899567][T16630] veth1_vlan: entered promiscuous mode [ 234.917192][T16630] veth0_macvtap: entered promiscuous mode [ 234.924529][T16630] veth1_macvtap: entered promiscuous mode [ 234.933298][ T3051] 8021q: adding VLAN 0 to HW filter on device eth20 [ 234.945620][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.959693][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.971671][ T6726] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.983046][ T6726] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.992103][ T6726] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.006294][ T6726] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.070034][T16787] SELinux: failed to load policy [ 235.858725][ T28] audit: type=1400 audit(1776748480.844:1969): avc: denied { ioctl } for pid=16832 comm="syz.3.5712" path="socket:[49152]" dev="sockfs" ino=49152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.973002][T16840] netlink: 'syz.4.5716': attribute type 21 has an invalid length. [ 235.988216][ T28] audit: type=1400 audit(1776748480.964:1970): avc: denied { read } for pid=16838 comm="syz.9.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.058456][ T28] audit: type=1326 audit(1776748481.024:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.135227][ T28] audit: type=1326 audit(1776748481.024:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.186991][ T28] audit: type=1326 audit(1776748481.024:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.238017][ T28] audit: type=1326 audit(1776748481.024:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.288670][ T28] audit: type=1326 audit(1776748481.024:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.327788][ T28] audit: type=1326 audit(1776748481.024:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.358495][ T28] audit: type=1326 audit(1776748481.024:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.9.5717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3562bdc819 code=0x7ffc0000 [ 236.443335][T16856] program syz.4.5723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.793311][T16875] netlink: 'syz.9.5730': attribute type 21 has an invalid length. [ 236.833546][T16875] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.997842][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.016980][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.085408][T16900] 9p: Bad value for 'wfdno' [ 237.332158][T16918] program syz.2.5748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.607107][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 237.629389][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5754'. [ 238.092769][T16973] loop8: detected capacity change from 0 to 128 [ 238.120562][T16973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 238.155662][T16973] System zones: 1-3, 19-19, 35-36 [ 238.161764][T16959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.183975][T16973] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 238.198214][T16959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.213115][T16973] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.138465][T16273] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.519914][T17008] loop9: detected capacity change from 0 to 256 [ 242.037508][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.053129][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5801'. [ 242.054733][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.078616][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 242.078629][ T28] audit: type=1400 audit(1776748487.064:1985): avc: denied { read write } for pid=17052 comm="syz.3.5802" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 242.134717][ T28] audit: type=1400 audit(1776748487.094:1986): avc: denied { open } for pid=17052 comm="syz.3.5802" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 242.319374][T17070] loop8: detected capacity change from 0 to 512 [ 242.330166][T17070] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 242.349199][T17070] EXT4-fs (loop8): 1 truncate cleaned up [ 242.356875][T17070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.374407][ T28] audit: type=1400 audit(1776748487.354:1987): avc: denied { remove_name } for pid=17069 comm="syz.8.5810" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.397249][T17070] EXT4-fs error (device loop8): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.8.5810: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 242.417603][ T28] audit: type=1400 audit(1776748487.384:1988): avc: denied { rmdir } for pid=17069 comm="syz.8.5810" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 242.430057][T17070] EXT4-fs error (device loop8) in ext4_delete_entry:2744: Corrupt filesystem [ 242.476875][T16273] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.511217][T17077] IPv6: Can't replace route, no match found [ 242.578857][ T28] audit: type=1400 audit(1776748487.564:1989): avc: denied { watch watch_reads } for pid=17084 comm="syz.8.5815" path="/27/file1" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.660916][ T28] audit: type=1400 audit(1776748487.644:1990): avc: denied { create } for pid=17092 comm="syz.8.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.701388][ T28] audit: type=1400 audit(1776748487.664:1991): avc: denied { getopt } for pid=17092 comm="syz.8.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.784260][T17107] loop9: detected capacity change from 0 to 512 [ 242.803740][T17107] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 242.828236][T17107] EXT4-fs (loop9): 1 truncate cleaned up [ 242.834528][T17107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.864664][T17107] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.9.5823: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 242.893319][T17107] EXT4-fs error (device loop9) in ext4_delete_entry:2744: Corrupt filesystem [ 242.905098][T17111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5825'. [ 242.939420][T16630] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.998540][ T28] audit: type=1400 audit(1776748487.984:1992): avc: denied { write } for pid=17121 comm="syz.4.5830" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.034824][T17124] loop9: detected capacity change from 0 to 512 [ 243.072825][T17124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.102645][T17124] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.119652][ T28] audit: type=1400 audit(1776748488.104:1993): avc: denied { write } for pid=17123 comm="syz.9.5831" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.143045][ T28] audit: type=1400 audit(1776748488.104:1994): avc: denied { open } for pid=17123 comm="syz.9.5831" path="/22/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.180026][T16630] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.251809][T17143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17143 comm=syz.2.5840 [ 243.483108][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5846'. [ 243.769372][T17194] program syz.3.5862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.833992][T17202] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5865'. [ 243.843572][T17204] netlink: 'syz.3.5866': attribute type 5 has an invalid length. [ 244.246759][T17241] loop8: detected capacity change from 0 to 8192 [ 244.382004][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5886'. [ 244.509037][T17252] loop8: detected capacity change from 0 to 8192 [ 244.681525][T17263] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5893'. [ 244.772211][T17271] Cannot find add_set index 46338 as target [ 245.007411][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5909'. [ 245.319643][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5926'. [ 245.387683][T17337] netlink: 'syz.3.5929': attribute type 13 has an invalid length. [ 245.407036][T17337] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.5929'. [ 245.483022][T17342] loop8: detected capacity change from 0 to 128 [ 245.502559][ T3411] kernel write not supported for file bpf-map (pid: 3411 comm: kworker/0:4) [ 245.642000][T17356] loop8: detected capacity change from 0 to 256 [ 245.667592][T17356] vfat: Bad value for 'utf8' [ 245.742704][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5946'. [ 246.670239][T17431] netlink: 'syz.4.5967': attribute type 5 has an invalid length. [ 246.893549][T17466] loop8: detected capacity change from 0 to 1024 [ 246.917362][T17466] EXT4-fs: inline encryption not supported [ 246.962330][T17466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.020261][T17466] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.145481][T17488] __nla_validate_parse: 1 callbacks suppressed [ 247.145496][T17488] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5982'. [ 247.227271][T16273] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 247.617487][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5996'. [ 247.734613][T17547] loop9: detected capacity change from 0 to 512 [ 247.751797][T17547] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 247.778514][T17547] EXT4-fs (loop9): 1 truncate cleaned up [ 247.791789][T17547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.805205][T17549] batman_adv: batadv0: Adding interface: ipvlan2 [ 247.823821][T17549] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.858217][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 247.858234][ T28] audit: type=1400 audit(1776748492.844:2075): avc: denied { rename } for pid=17546 comm="syz.9.5997" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.891163][T17547] EXT4-fs error (device loop9): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.9.5997: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 247.941166][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.953633][T17547] EXT4-fs error (device loop9) in ext4_delete_entry:2744: Corrupt filesystem [ 247.967331][T17547] EXT4-fs warning (device loop9): ext4_rename_delete:3739: inode #2: comm syz.9.5997: Deleting old file: nlink 4, error=-117 [ 247.968034][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.994612][ T28] audit: type=1400 audit(1776748492.974:2076): avc: denied { create } for pid=17553 comm="syz.2.6000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.018467][T17549] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 248.037655][T17547] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 248.060680][ T28] audit: type=1400 audit(1776748493.014:2077): avc: denied { write } for pid=17553 comm="syz.2.6000" path="socket:[51354]" dev="sockfs" ino=51354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.100909][ T28] audit: type=1400 audit(1776748493.024:2078): avc: denied { mac_admin } for pid=17546 comm="syz.9.5997" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.131949][ T28] audit: type=1400 audit(1776748493.074:2079): avc: denied { relabelto } for pid=17546 comm="syz.9.5997" name="bus" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 248.747177][T16630] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.983484][ T28] audit: type=1400 audit(1776748493.964:2080): avc: denied { write } for pid=17584 comm="syz.9.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.139916][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6025'. [ 249.142417][T17603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.161474][T17607] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6025'. [ 249.212784][T17607] vlan2: entered promiscuous mode [ 249.218070][T17609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6026'. [ 249.260271][T17607] gretap0: entered promiscuous mode [ 249.267427][T17607] vlan2: entered allmulticast mode [ 249.293152][T17607] gretap0: entered allmulticast mode [ 249.355251][ T28] audit: type=1400 audit(1776748494.334:2081): avc: denied { connect } for pid=17620 comm="syz.2.6032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.402066][ T28] audit: type=1400 audit(1776748494.384:2082): avc: denied { bind } for pid=17622 comm="syz.8.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.478709][T17632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6037'. [ 249.491236][T17634] loop8: detected capacity change from 0 to 512 [ 249.510134][T17634] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 249.604224][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6041'. [ 249.672310][T17646] loop6: detected capacity change from 0 to 7 [ 249.688144][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.697438][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.707508][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.716722][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.728260][T17646] loop6: unable to read partition table [ 249.750559][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.759826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.767684][T17646] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 249.783062][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.792278][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.800608][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.809877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.819201][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.828393][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.837965][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.847223][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.857118][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.866333][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 249.941462][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6049'. [ 249.971798][T17660] netlink: 'syz.3.6049': attribute type 7 has an invalid length. [ 249.995280][T17660] netlink: 'syz.3.6049': attribute type 8 has an invalid length. [ 250.018956][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6049'. [ 250.317473][ T28] audit: type=1400 audit(1776748495.294:2083): avc: denied { write } for pid=17683 comm="syz.3.6060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 250.361491][ T28] audit: type=1400 audit(1776748495.304:2084): avc: denied { read } for pid=17682 comm="syz.8.6059" name="file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.554042][T17654] ================================================================== [ 250.562209][T17654] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 250.569538][T17654] [ 250.571896][T17654] write to 0xffffc9000cd27e20 of 8 bytes by task 17650 on cpu 1: [ 250.579712][T17654] shmem_fallocate+0x724/0x920 [ 250.584491][T17654] vfs_fallocate+0x3b6/0x400 [ 250.589096][T17654] __x64_sys_fallocate+0x7a/0xd0 [ 250.594088][T17654] x64_sys_call+0x298e/0x3020 [ 250.598810][T17654] do_syscall_64+0x12c/0x3b0 [ 250.603452][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.609358][T17654] [ 250.611698][T17654] read to 0xffffc9000cd27e20 of 8 bytes by task 17654 on cpu 0: [ 250.619778][T17654] shmem_writeout+0x2c1/0x920 [ 250.624466][T17654] shrink_folio_list+0x1f52/0x2840 [ 250.629616][T17654] evict_folios+0x285f/0x3370 [ 250.634317][T17654] try_to_shrink_lruvec+0x858/0xc20 [ 250.639537][T17654] shrink_lruvec+0x256/0x1bc0 [ 250.644316][T17654] shrink_node+0x697/0x20a0 [ 250.648826][T17654] do_try_to_free_pages+0x408/0xc90 [ 250.654064][T17654] try_to_free_mem_cgroup_pages+0x201/0x420 [ 250.659988][T17654] try_charge_memcg+0x373/0xa10 [ 250.664851][T17654] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 250.670412][T17654] __alloc_frozen_pages_noprof+0x18a/0x350 [ 250.676262][T17654] alloc_pages_mpol+0xb3/0x260 [ 250.681098][T17654] alloc_pages_noprof+0x8f/0x140 [ 250.686052][T17654] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 250.692076][T17654] __kvmalloc_node_noprof+0x3d4/0x640 [ 250.697478][T17654] futex_hash_allocate+0x190/0x9a0 [ 250.702612][T17654] futex_hash_prctl+0xd8/0xf0 [ 250.707297][T17654] __se_sys_prctl+0x4f4/0x1400 [ 250.712106][T17654] __x64_sys_prctl+0x67/0x80 [ 250.716725][T17654] x64_sys_call+0x2533/0x3020 [ 250.721448][T17654] do_syscall_64+0x12c/0x3b0 [ 250.726077][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.731998][T17654] [ 250.734356][T17654] value changed: 0x0000000000002dd5 -> 0x0000000000002dd6 [ 250.741471][T17654] [ 250.743821][T17654] Reported by Kernel Concurrency Sanitizer on: [ 250.749998][T17654] CPU: 0 UID: 0 PID: 17654 Comm: syz.4.6045 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.760952][T17654] Tainted: [W]=WARN [ 250.764771][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 250.774840][T17654] ==================================================================