last executing test programs: 4m9.452283135s ago: executing program 4 (id=573): syslog(0x0, 0x0, 0x0) 4m9.426988165s ago: executing program 1 (id=574): rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)) 4m9.424562145s ago: executing program 4 (id=577): syz_init_net_socket$ax25(0x3, 0x2, 0x0) 4m9.423895295s ago: executing program 1 (id=579): fstatfs(0xffffffffffffffff, &(0x7f0000000000)) 4m9.422389835s ago: executing program 1 (id=582): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 4m9.386147096s ago: executing program 4 (id=585): removexattr(&(0x7f0000000000), &(0x7f0000000000)) 4m9.385768266s ago: executing program 1 (id=586): restart_syscall() 4m9.385602996s ago: executing program 1 (id=587): eventfd(0x0) 4m9.384959226s ago: executing program 4 (id=589): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36', 0x2, 0x0) 4m9.322851217s ago: executing program 4 (id=592): getegid() 4m9.321345957s ago: executing program 1 (id=591): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m9.187414299s ago: executing program 4 (id=593): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.22455364s ago: executing program 6 (id=13931): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) 1.000710434s ago: executing program 0 (id=13937): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x6, 0x18, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast2={0xff, 0x3}, 0x0, 0x700, 0xfffffffe, 0xffffffff}}) 945.965325ms ago: executing program 3 (id=13940): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 935.436285ms ago: executing program 6 (id=13941): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 876.694176ms ago: executing program 3 (id=13942): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000200)={0x4, 0x80000000, 0x100, 0x5, 0xfffff68a, 0xfff}) 851.657497ms ago: executing program 0 (id=13944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 814.526427ms ago: executing program 3 (id=13946): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0xfffffffc, 0x0) 764.901698ms ago: executing program 5 (id=13947): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 752.115668ms ago: executing program 6 (id=13949): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7, 0x40, 0x1, 0x100, 0x14, 0x200280}) 709.214508ms ago: executing program 2 (id=13950): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4) 617.6126ms ago: executing program 0 (id=13951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 617.17169ms ago: executing program 3 (id=13952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) 601.74507ms ago: executing program 6 (id=13953): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x541b, &(0x7f00000001c0)) 594.859261ms ago: executing program 2 (id=13954): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000003c0), &(0x7f0000000480)=0x4) 579.278571ms ago: executing program 5 (id=13955): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r0) 476.603892ms ago: executing program 0 (id=13956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x44}}, 0x8810) 448.997283ms ago: executing program 2 (id=13957): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setfsuid(0x0) 448.379663ms ago: executing program 3 (id=13958): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x9) 419.388563ms ago: executing program 5 (id=13959): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2000, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 379.175374ms ago: executing program 0 (id=13960): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00'], 0x20) 378.881824ms ago: executing program 6 (id=13961): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v'], 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) 273.927235ms ago: executing program 2 (id=13962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 273.569775ms ago: executing program 6 (id=13963): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 209.286256ms ago: executing program 5 (id=13964): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2c, 0x10000003, 0x9, 0xc0000}) 208.742147ms ago: executing program 2 (id=13965): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 178.859197ms ago: executing program 0 (id=13966): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x414, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT], 0x22, 0x23d, &(0x7f00000004c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x5c) 164.419108ms ago: executing program 2 (id=13967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 151.371168ms ago: executing program 5 (id=13968): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x0, 0xc8, 0x8, 0x920, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x3, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x1000, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x5, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x4, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x1}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x800001ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x4, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x1, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8008}, {0x5, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) 3.47523ms ago: executing program 3 (id=13969): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="0890", 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x24000885) 0s ago: executing program 5 (id=13970): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) kernel console output (not intermixed with test programs): 38][T22536] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 207.343142][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.470669][T22571] loop0: detected capacity change from 0 to 8192 [ 207.721993][T22618] netlink: 'syz.6.9451': attribute type 3 has an invalid length. [ 207.730134][T22618] netlink: 'syz.6.9451': attribute type 3 has an invalid length. [ 207.984189][T22648] netlink: 'syz.0.9467': attribute type 6 has an invalid length. [ 207.995656][T22650] wireguard0: entered promiscuous mode [ 208.005917][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 208.005975][ T29] audit: type=1326 audit(2796.373:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22653 comm="syz.3.9471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ae5e969 code=0x7ffc0000 [ 208.037413][ T29] audit: type=1326 audit(2796.373:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22653 comm="syz.3.9471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ae5e969 code=0x7ffc0000 [ 208.060760][ T29] audit: type=1326 audit(2796.373:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22653 comm="syz.3.9471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f963ae5e969 code=0x7ffc0000 [ 208.125630][ T29] audit: type=1326 audit(2796.510:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22653 comm="syz.3.9471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ae5e969 code=0x7ffc0000 [ 208.180173][ T29] audit: type=1326 audit(2796.510:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22653 comm="syz.3.9471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ae5e969 code=0x7ffc0000 [ 208.203282][ T29] audit: type=1400 audit(2796.510:691): avc: denied { getopt } for pid=22658 comm="syz.2.9472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.271329][ T29] audit: type=1400 audit(2796.615:692): avc: denied { write } for pid=22668 comm="syz.6.9478" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 208.375217][T22684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.387265][T22679] xt_l2tp: missing protocol rule (udp|l2tpip) [ 208.505932][ T29] audit: type=1400 audit(2796.898:693): avc: denied { ioctl } for pid=22698 comm="syz.2.9494" path="socket:[64616]" dev="sockfs" ino=64616 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.553761][ T29] audit: type=1400 audit(2796.940:694): avc: denied { setopt } for pid=22702 comm="syz.6.9495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.619658][ T29] audit: type=1400 audit(2797.013:695): avc: denied { name_bind } for pid=22712 comm="syz.0.9502" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 208.953901][T22761] sctp: [Deprecated]: syz.6.9523 (pid 22761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.953901][T22761] Use struct sctp_sack_info instead [ 209.071821][T22772] bridge2: entered promiscuous mode [ 209.077268][T22772] bridge2: entered allmulticast mode [ 209.216238][T22784] loop6: detected capacity change from 0 to 4096 [ 209.252698][T22784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.414357][T22800] netlink: 'syz.2.9541': attribute type 1 has an invalid length. [ 209.422262][T22800] __nla_validate_parse: 12 callbacks suppressed [ 209.422278][T22800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9541'. [ 209.445349][ T4147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.550756][T22813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9546'. [ 209.838520][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9563'. [ 209.866785][T22853] SELinux: failed to load policy [ 209.876410][T22855] netlink: 'syz.5.9564': attribute type 2 has an invalid length. [ 209.884293][T22855] netlink: 'syz.5.9564': attribute type 1 has an invalid length. [ 209.909668][T22857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 210.101489][T22879] loop3: detected capacity change from 0 to 1024 [ 210.136737][T22879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.167582][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9582'. [ 210.187918][T22879] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.238052][T22879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 210.261492][T22879] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.9579: lblock 2 mapped to illegal pblock 2 (length 1) [ 210.294893][T22879] EXT4-fs (loop3): Remounting filesystem read-only [ 210.301898][T22879] EXT4-fs (loop3): 1 orphan inode deleted [ 210.321727][T22879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.379503][T22900] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22900 comm=syz.6.9589 [ 210.400806][ T4123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.532925][T22915] netlink: 'syz.5.9594': attribute type 6 has an invalid length. [ 210.912125][T22962] netlink: 'syz.3.9620': attribute type 6 has an invalid length. [ 211.188955][T23006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9641'. [ 211.224431][T23014] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 211.264490][T23020] netlink: 'syz.2.9649': attribute type 21 has an invalid length. [ 211.301474][T23020] netlink: 'syz.2.9649': attribute type 6 has an invalid length. [ 211.309297][T23020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9649'. [ 211.327660][T23025] delete_channel: no stack [ 211.386356][T23035] loop5: detected capacity change from 0 to 512 [ 211.446331][T23035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.514236][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.569551][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9669'. [ 211.624556][T23073] netlink: 'syz.2.9672': attribute type 21 has an invalid length. [ 211.650449][T23077] netlink: 'syz.3.9674': attribute type 10 has an invalid length. [ 211.660791][T23075] loop5: detected capacity change from 0 to 512 [ 211.675793][T23073] netlink: 'syz.2.9672': attribute type 1 has an invalid length. [ 211.684164][T23073] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9672'. [ 211.705411][T23075] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.734378][T23075] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9673: Failed to acquire dquot type 0 [ 211.772831][T23075] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.789048][T23075] EXT4-fs (loop5): 1 truncate cleaned up [ 211.797248][T23075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.825977][T23075] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.9673: Failed to acquire dquot type 0 [ 211.888622][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.918791][T23110] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9687'. [ 211.964791][T23117] SET target dimension over the limit! [ 212.057022][T23129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9697'. [ 212.304718][T23167] netlink: 'syz.5.9716': attribute type 21 has an invalid length. [ 212.754717][T23242] loop5: detected capacity change from 0 to 1024 [ 212.773025][T23242] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.791989][T23242] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 212.838369][T23242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 212.869002][T23242] EXT4-fs error (device loop5): __ext4_get_inode_loc:4450: comm syz.5.9752: Invalid inode table block 0 in block_group 0 [ 212.887489][T23242] EXT4-fs (loop5): Remounting filesystem read-only [ 212.894145][T23242] __quota_error: 51 callbacks suppressed [ 212.894162][T23242] Quota error (device loop5): write_blk: dquota write failed [ 212.907469][T23242] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 212.919581][T23242] EXT4-fs (loop5): 1 truncate cleaned up [ 212.925835][T23242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.012461][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.034665][T23275] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.9770' sets config #1 [ 213.082165][T23281] loop5: detected capacity change from 0 to 256 [ 213.108555][T23281] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.120860][T23287] xt_hashlimit: size too large, truncated to 1048576 [ 213.127671][T23287] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 213.135097][T23281] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.305595][T23307] xt_TCPMSS: Only works on TCP SYN packets [ 213.347386][T23315] sock: sock_timestamping_bind_phc: sock not bind to device [ 213.357504][ T29] audit: type=1400 audit(2802.000:741): avc: denied { validate_trans } for pid=23316 comm="syz.6.9790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.409338][ T29] audit: type=1400 audit(2802.042:742): avc: denied { read } for pid=23319 comm="syz.3.9792" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.432266][ T29] audit: type=1400 audit(2802.042:743): avc: denied { open } for pid=23319 comm="syz.3.9792" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.470206][T23327] Unsupported ieee802154 address type: 0 [ 213.477228][ T29] audit: type=1400 audit(2802.053:744): avc: denied { ioctl } for pid=23319 comm="syz.3.9792" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.571234][ T29] audit: type=1400 audit(2802.168:745): avc: denied { bind } for pid=23329 comm="syz.2.9797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.590336][ T29] audit: type=1400 audit(2802.168:746): avc: denied { node_bind } for pid=23329 comm="syz.2.9797" saddr=0:0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 213.704066][T23354] loop0: detected capacity change from 0 to 1024 [ 213.752714][ T29] audit: type=1400 audit(2802.399:747): avc: denied { lock } for pid=23364 comm="syz.5.9813" path="socket:[65827]" dev="sockfs" ino=65827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 213.753501][T23354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.867263][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.979037][ T29] audit: type=1400 audit(2802.651:748): avc: denied { getopt } for pid=23396 comm="syz.2.9827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.055259][T23407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.401653][T23459] syz.2.9858 (23459): /proc/23458/oom_adj is deprecated, please use /proc/23458/oom_score_adj instead. [ 214.604480][T23491] __nla_validate_parse: 11 callbacks suppressed [ 214.604502][T23491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9874'. [ 214.768103][T23521] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9888'. [ 214.948162][T23547] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9901'. [ 215.342308][T23602] loop6: detected capacity change from 0 to 512 [ 215.361862][T23602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.383359][T23602] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.408850][T23602] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 215.446017][T23602] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 215.491574][T23602] EXT4-fs (loop6): 1 truncate cleaned up [ 215.498002][T23602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.514188][T23602] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #2: block 4: comm syz.6.9927: lblock 0 mapped to illegal pblock 4 (length 1) [ 215.536591][T23602] EXT4-fs (loop6): Remounting filesystem read-only [ 215.584259][ T4147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.620290][T23632] loop5: detected capacity change from 0 to 512 [ 215.644483][T23638] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9944'. [ 215.665828][T23632] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.9941: casefold flag without casefold feature [ 215.735447][T23632] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9941: couldn't read orphan inode 15 (err -117) [ 215.736689][T23649] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.762629][T23649] bond0: (slave lo): Error: Device type is different from other slaves [ 215.777408][T23632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.846280][T23662] validate_nla: 1 callbacks suppressed [ 215.846298][T23662] netlink: 'syz.3.9956': attribute type 4 has an invalid length. [ 215.859764][T23662] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9956'. [ 215.904711][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.922988][T23667] netlink: 'syz.6.9960': attribute type 3 has an invalid length. [ 215.944484][T23669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.100600][T23694] netlink: 'syz.3.9971': attribute type 13 has an invalid length. [ 216.258262][T23717] tc_dump_action: action bad kind [ 216.446355][T23748] netlink: 'syz.6.9998': attribute type 7 has an invalid length. [ 216.454238][T23748] netlink: 'syz.6.9998': attribute type 8 has an invalid length. [ 216.462499][T23748] netlink: 'syz.6.9998': attribute type 13 has an invalid length. [ 216.551100][T23761] tc_dump_action: action bad kind [ 216.657939][T23772] loop5: detected capacity change from 0 to 512 [ 216.704189][T23772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.756768][T23772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.826879][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.966817][T23809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10026'. [ 216.995670][T23812] netlink: 'syz.0.10029': attribute type 1 has an invalid length. [ 217.112434][T23829] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10035'. [ 217.121629][T23829] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10035'. [ 217.256681][T23847] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10044'. [ 217.258875][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10045'. [ 217.499362][T23875] netlink: 'syz.0.10059': attribute type 49 has an invalid length. [ 217.545158][T23879] loop0: detected capacity change from 0 to 128 [ 217.551664][T23881] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 217.569649][T23879] FAT-fs (loop0): Directory bread(block 162) failed [ 217.576718][T23879] FAT-fs (loop0): Directory bread(block 163) failed [ 217.594125][T23879] FAT-fs (loop0): Directory bread(block 164) failed [ 217.611667][T23879] FAT-fs (loop0): Directory bread(block 165) failed [ 217.625851][T23879] FAT-fs (loop0): Directory bread(block 166) failed [ 217.642786][T23879] FAT-fs (loop0): Directory bread(block 167) failed [ 217.658048][T23879] FAT-fs (loop0): Directory bread(block 168) failed [ 217.674478][T23879] FAT-fs (loop0): Directory bread(block 169) failed [ 217.698979][T23879] FAT-fs (loop0): Directory bread(block 162) failed [ 217.707073][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 217.707089][ T29] audit: type=1400 audit(2806.567:791): avc: denied { setopt } for pid=23898 comm="syz.3.10071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 217.711544][T23879] FAT-fs (loop0): Directory bread(block 163) failed [ 217.741179][T23879] syz.0.10062: attempt to access beyond end of device [ 217.741179][T23879] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 217.776282][T23905] xt_connbytes: Forcing CT accounting to be enabled [ 217.789442][T23879] syz.0.10062: attempt to access beyond end of device [ 217.789442][T23879] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 217.889996][T23919] loop6: detected capacity change from 0 to 1764 [ 217.916254][ T29] audit: type=1400 audit(2806.787:792): avc: denied { mount } for pid=23918 comm="syz.6.10082" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 217.976290][ T29] audit: type=1326 audit(2806.787:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.5.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 217.999598][ T29] audit: type=1326 audit(2806.787:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.5.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 218.022726][ T29] audit: type=1326 audit(2806.787:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.5.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 218.046058][ T29] audit: type=1326 audit(2806.787:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.5.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 218.070454][ T29] audit: type=1326 audit(2806.787:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.5.10083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 218.093578][ T29] audit: type=1400 audit(2806.819:798): avc: denied { unmount } for pid=4147 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 218.113437][ T29] audit: type=1400 audit(2806.840:799): avc: denied { nlmsg_read } for pid=23924 comm="syz.0.10084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 218.229417][ T29] audit: type=1400 audit(2807.092:800): avc: denied { accept } for pid=23946 comm="syz.3.10094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 218.997219][T24070] x_tables: unsorted underflow at hook 3 [ 219.267893][T24116] netlink: 'syz.5.10178': attribute type 1 has an invalid length. [ 219.541041][T24165] __nla_validate_parse: 7 callbacks suppressed [ 219.541062][T24165] netlink: 296 bytes leftover after parsing attributes in process `syz.2.10202'. [ 219.582868][T24169] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 219.642991][T24178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10210'. [ 219.656489][T24179] ipt_ECN: cannot use operation on non-tcp rule [ 219.831641][T24203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10222'. [ 219.860841][T24206] loop0: detected capacity change from 0 to 512 [ 219.880764][T24206] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 219.896339][T24206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e11c, mo2=0102] [ 219.936743][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10228'. [ 219.951521][T24206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.972902][T24206] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.10223: attempt to clear invalid blocks 1024 len 1 [ 220.023768][T24206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10223: bg 0: block 361: padding at end of block bitmap is not set [ 220.068818][T24206] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 220.078358][T24236] Q6\bY4: entered promiscuous mode [ 220.084357][T24236] Q6\bY4: entered allmulticast mode [ 220.094130][T24236] tunl0: entered promiscuous mode [ 220.099426][T24236] tunl0: entered allmulticast mode [ 220.105216][T24206] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10223: invalid indirect mapped block 1811939328 (level 0) [ 220.106242][T24236] gre0: entered promiscuous mode [ 220.124402][T24236] gre0: entered allmulticast mode [ 220.133341][T24236] 0XD: entered promiscuous mode [ 220.138660][T24236] 0XD: entered allmulticast mode [ 220.145427][T24236] erspan0: entered promiscuous mode [ 220.151336][T24236] erspan0: entered allmulticast mode [ 220.158508][T24206] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10223: invalid indirect mapped block 2185560079 (level 1) [ 220.159533][T24236] ip_vti0: entered promiscuous mode [ 220.178189][T24236] ip_vti0: entered allmulticast mode [ 220.186232][T24236] ip6_vti0: entered promiscuous mode [ 220.191681][T24236] ip6_vti0: entered allmulticast mode [ 220.198864][T24236] sit0: entered allmulticast mode [ 220.208900][T24236] ip6tnl0: entered promiscuous mode [ 220.214356][T24236] ip6tnl0: entered allmulticast mode [ 220.218169][T24206] EXT4-fs (loop0): 1 truncate cleaned up [ 220.221198][T24236] ip6gre0: entered promiscuous mode [ 220.226036][T24206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 220.230735][T24236] ip6gre0: entered allmulticast mode [ 220.249288][T24236] syz_tun: entered promiscuous mode [ 220.254594][T24236] syz_tun: entered allmulticast mode [ 220.255096][T24206] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.10223: dx entry: limit 0 != root limit 125 [ 220.261199][T24236] ip6gretap0: entered promiscuous mode [ 220.271919][T24206] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.10223: Corrupt directory, running e2fsck is recommended [ 220.277392][T24236] ip6gretap0: entered allmulticast mode [ 220.298394][T24236] bridge0: entered promiscuous mode [ 220.303725][T24236] bridge0: entered allmulticast mode [ 220.310035][T24236] vcan0: entered promiscuous mode [ 220.315189][T24236] vcan0: entered allmulticast mode [ 220.320993][T24236] bond0: entered promiscuous mode [ 220.321123][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 220.326199][T24236] bond_slave_0: entered promiscuous mode [ 220.326274][T24236] bond_slave_1: entered promiscuous mode [ 220.347739][T24236] bond0: entered allmulticast mode [ 220.352956][T24236] bond_slave_0: entered allmulticast mode [ 220.358728][T24236] bond_slave_1: entered allmulticast mode [ 220.365101][T24236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.376716][T24236] team0: entered promiscuous mode [ 220.383478][T24236] team_slave_0: entered promiscuous mode [ 220.389322][T24236] team_slave_1: entered promiscuous mode [ 220.395286][T24236] team0: entered allmulticast mode [ 220.405898][T24236] team_slave_0: entered allmulticast mode [ 220.412025][T24236] team_slave_1: entered allmulticast mode [ 220.418310][T24236] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.427485][T24236] dummy0: entered promiscuous mode [ 220.432715][T24236] dummy0: entered allmulticast mode [ 220.439083][T24236] nlmon0: entered promiscuous mode [ 220.444319][T24236] nlmon0: entered allmulticast mode [ 220.450716][T24236] caif0: entered promiscuous mode [ 220.455969][T24236] caif0: entered allmulticast mode [ 220.461247][T24236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.476750][T24234] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10237'. [ 220.550395][T24257] netlink: 'syz.3.10250': attribute type 3 has an invalid length. [ 220.806817][T24302] netlink: 'syz.3.10271': attribute type 3 has an invalid length. [ 220.814848][T24302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10271'. [ 220.815571][T24296] loop0: detected capacity change from 0 to 2048 [ 220.847781][T24296] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 220.868794][T24306] xt_connbytes: Forcing CT accounting to be enabled [ 220.877534][T24308] netlink: 'syz.3.10274': attribute type 1 has an invalid length. [ 220.886780][T24296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.927329][T24296] EXT4-fs error (device loop0): ext4_find_extent:902: inode #2: comm syz.0.10269: inode has invalid extent depth: 6 [ 221.082152][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.376034][T24349] xt_l2tp: invalid flags combination: 8 [ 221.481724][T24362] program syz.2.10299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.927925][T24403] xt_NFQUEUE: number of total queues is 0 [ 222.176374][T24435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.520528][T24488] loop5: detected capacity change from 0 to 512 [ 222.558388][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 222.558418][ T29] audit: type=1400 audit(2811.658:825): avc: denied { ioctl } for pid=24490 comm="syz.0.10361" path="socket:[69541]" dev="sockfs" ino=69541 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.568355][T24488] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10358: bg 0: block 248: padding at end of block bitmap is not set [ 222.679564][T24488] Quota error (device loop5): write_blk: dquota write failed [ 222.687250][T24488] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 222.747213][T24488] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10358: Failed to acquire dquot type 1 [ 222.784369][T24488] EXT4-fs (loop5): 1 truncate cleaned up [ 222.793498][T24488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.965266][ T4120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.063673][T24559] raw_sendmsg: syz.0.10394 forgot to set AF_INET. Fix it! [ 223.173568][T24577] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 223.382087][T24600] loop0: detected capacity change from 0 to 512 [ 223.391469][T24600] EXT4-fs: inline encryption not supported [ 223.426597][T24600] EXT4-fs (loop0): 1 orphan inode deleted [ 223.439425][T24600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.458096][ T110] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 223.468207][ T110] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 223.535045][ T4126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.650581][T24633] netlink: 'syz.5.10429': attribute type 7 has an invalid length. [ 223.761210][T24648] loop3: detected capacity change from 0 to 128 [ 223.785294][T24648] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.828607][T24655] set match dimension is over the limit! [ 223.894754][T24648] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 223.996423][ T4123] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.144605][T24697] netlink: 'syz.6.10461': attribute type 39 has an invalid length. [ 224.218080][ T29] audit: type=1326 audit(2813.390:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24706 comm="syz.5.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 224.241497][ T29] audit: type=1326 audit(2813.390:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24706 comm="syz.5.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 224.264871][ T29] audit: type=1326 audit(2813.390:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24706 comm="syz.5.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 224.288239][ T29] audit: type=1326 audit(2813.390:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24706 comm="syz.5.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ae21e969 code=0x7ffc0000 [ 224.364948][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10472'. [ 224.374286][T24724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10472'. [ 224.446484][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10476'. [ 224.486728][ T29] audit: type=1400 audit(2813.674:830): avc: denied { bind } for pid=24735 comm="syz.6.10478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.505743][ T29] audit: type=1400 audit(2813.674:831): avc: denied { name_bind } for pid=24735 comm="syz.6.10478" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 224.600856][T24746] gre0: left promiscuous mode [ 224.605639][T24746] gre0: left allmulticast mode [ 224.629257][T24751] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 224.640868][T24746] netlink: 160 bytes leftover after parsing attributes in process `syz.5.10484'. [ 224.650118][T24746] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 224.821219][T24768] netlink: 'syz.6.10495': attribute type 21 has an invalid length. [ 224.910846][T24782] netlink: 'syz.6.10500': attribute type 1 has an invalid length. [ 225.105760][T24798] netlink: 'syz.5.10508': attribute type 13 has an invalid length. [ 225.339444][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10522'. [ 225.348720][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10522'. [ 225.364459][T24831] xt_ecn: cannot match TCP bits for non-tcp packets [ 225.519557][T24853] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 225.554388][T24860] Cannot find set identified by id 0 to match [ 225.600064][T24864] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 225.727025][T24883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.937395][T24917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10567'. [ 225.952314][T24917] xfrm2: entered promiscuous mode [ 225.957472][T24917] xfrm2: entered allmulticast mode [ 225.969072][T24922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10569'. [ 226.000528][T24926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10571'. [ 226.084982][T24936] xt_TCPMSS: Only works on TCP SYN packets [ 226.293154][T24969] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10592'. [ 226.428289][T24990] lo: entered allmulticast mode [ 226.453747][T24990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.203815][T25098] SELinux: syz.6.10656 (25098) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 227.295931][T25108] loop3: detected capacity change from 0 to 512 [ 227.310631][T25108] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 227.331853][T25108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e11c, mo2=0102] [ 227.356439][T25108] EXT4-fs (loop3): orphan cleanup on readonly fs [ 227.381603][T25108] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.10661: attempt to clear invalid blocks 1024 len 1 [ 227.442208][T25108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10661: bg 0: block 361: padding at end of block bitmap is not set [ 227.486428][T25108] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 227.515129][T25108] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.10661: invalid indirect mapped block 1811939328 (level 0) [ 227.557359][T25108] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.10661: invalid indirect mapped block 2185560079 (level 1) [ 227.577640][T25108] EXT4-fs (loop3): 1 truncate cleaned up [ 227.588660][T25108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 227.628991][T25108] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.10661: dx entry: limit 0 != root limit 125 [ 227.641139][T25108] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.10661: Corrupt directory, running e2fsck is recommended [ 227.679339][ T4123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 227.783924][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 227.783946][ T29] audit: type=1400 audit(2817.138:853): avc: denied { block_suspend } for pid=25141 comm="syz.6.10677" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.126642][T25183] vti0: entered promiscuous mode [ 228.144313][T25189] loop3: detected capacity change from 0 to 736 [ 228.212406][T25189] rock: directory entry would overflow storage [ 228.218732][T25189] rock: sig=0x3b10, size=4, remaining=3 [ 228.317148][T25211] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 228.325667][ T29] audit: type=1400 audit(2817.705:854): avc: denied { relabelto } for pid=25209 comm="syz.6.10711" name="file0" dev="tmpfs" ino=10463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:" [ 228.351095][ T29] audit: type=1400 audit(2817.705:855): avc: denied { associate } for pid=25209 comm="syz.6.10711" name="file0" dev="tmpfs" ino=10463 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 228.450838][ T29] audit: type=1400 audit(2817.789:856): avc: denied { unlink } for pid=4147 comm="syz-executor" name="file0" dev="tmpfs" ino=10463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:" [ 228.531066][T25234] loop3: detected capacity change from 0 to 512 [ 228.566842][T25234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.601770][T25234] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.623994][T25234] EXT4-fs (loop3): 1 truncate cleaned up [ 228.638366][T25234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.664335][ T29] audit: type=1400 audit(2818.062:857): avc: denied { quotaon } for pid=25231 comm="syz.3.10721" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.717181][ T4123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.898107][ T29] audit: type=1400 audit(2818.293:858): avc: denied { setopt } for pid=25275 comm="syz.3.10744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.001897][T25294] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.007005][T25298] netlink: 'syz.3.10752': attribute type 15 has an invalid length. [ 229.031863][T25297] netlink: 'syz.6.10753': attribute type 30 has an invalid length. [ 229.141813][T25313] loop2: detected capacity change from 0 to 256 [ 229.164034][T25314] __nla_validate_parse: 6 callbacks suppressed [ 229.164069][T25314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10760'. [ 229.319250][ T29] audit: type=1326 audit(2818.755:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25338 comm="syz.2.10774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dc10e969 code=0x50000 [ 229.360442][ T29] audit: type=1326 audit(2818.786:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25338 comm="syz.2.10774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f60dc10e969 code=0x50000 [ 229.383627][ T29] audit: type=1326 audit(2818.786:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25338 comm="syz.2.10774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dc10e969 code=0x50000 [ 229.406673][ T29] audit: type=1326 audit(2818.786:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25338 comm="syz.2.10774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dc10e969 code=0x50000 [ 229.509195][T25355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.543537][T25351] loop5: detected capacity change from 0 to 8192 [ 229.553544][T25357] ipt_REJECT: TCP_RESET invalid for non-tcp [ 229.651073][T25366] netlink: 'syz.6.10788': attribute type 8 has an invalid length. [ 229.812382][T25392] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10799'. [ 229.820929][T25391] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 229.821754][T25392] unsupported nla_type 65024 [ 230.037210][T25420] netlink: 'syz.2.10812': attribute type 10 has an invalid length. [ 230.045308][T25420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10812'. [ 230.070472][T25420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.079359][T25420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.088241][T25420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.097229][T25420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.119703][T25429] xt_hashlimit: max too large, truncated to 1048576 [ 230.130827][T25420] team0: Port device geneve1 added [ 230.404591][T25472] netlink: 766 bytes leftover after parsing attributes in process `syz.3.10839'. [ 230.603424][T25493] netlink: 'syz.2.10849': attribute type 1 has an invalid length. [ 230.694016][T25502] bridge3: entered promiscuous mode [ 230.699461][T25502] bridge3: entered allmulticast mode [ 230.729839][T25508] netlink: 'syz.2.10855': attribute type 3 has an invalid length. [ 230.737866][T25508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10855'. [ 230.890284][T25528] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10867'. [ 230.929485][T25531] netlink: 'syz.6.10868': attribute type 21 has an invalid length. [ 230.933332][T25532] netlink: 'syz.2.10869': attribute type 1 has an invalid length. [ 230.937670][T25531] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10868'. [ 230.955708][T25531] netlink: 'syz.6.10868': attribute type 5 has an invalid length. [ 230.963738][T25531] netlink: 'syz.6.10868': attribute type 6 has an invalid length. [ 230.971825][T25531] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10868'. [ 231.103267][T25544] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 231.180602][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10884'. [ 231.223461][T25568] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10887'. [ 231.323050][T25581] vti0: entered promiscuous mode [ 231.376148][T25584] usb usb8: usbfs: process 25584 (syz.5.10895) did not claim interface 0 before use [ 231.529335][T25615] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 231.713603][T25644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.890441][T25670] geneve1: entered promiscuous mode [ 231.896022][T25670] geneve1: entered allmulticast mode [ 231.923317][T25670] team0: Port device geneve1 added [ 231.944993][T25675] bridge2: entered promiscuous mode [ 232.145282][T25709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.154208][T25709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.163149][T25709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.171968][T25709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.214656][T25709] team0: Port device geneve1 added [ 232.236348][T25720] loop2: detected capacity change from 0 to 256 [ 232.256470][T25720] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 232.363223][T25737] SELinux: Context ܅9F\Zo}ji;oE|vbݿt!Nn$TwIBqJ| 9j4,hz !;&GQ"` 0x25532dc8 [ 283.631048][ T37] [ 283.633384][ T37] Reported by Kernel Concurrency Sanitizer on: [ 283.639648][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(voluntary) [ 283.652170][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.662258][ T37] Workqueue: loop0 loop_workfn [ 283.667055][ T37] ================================================================== [ 283.675142][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 283.675163][ T29] audit: type=1400 audit(3643.626:9752): avc: denied { ioctl } for pid=4123 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.740139][ T29] audit: type=1400 audit(3643.888:9753): avc: denied { read write } for pid=4128 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.764021][ T29] audit: type=1400 audit(3643.888:9754): avc: denied { open } for pid=4128 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.788055][ T29] audit: type=1400 audit(3643.888:9755): avc: denied { ioctl } for pid=4128 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.821515][ T2012] netlink: 'syz.5.13970': attribute type 16 has an invalid length. [ 283.861840][ T29] audit: type=1400 audit(3644.014:9756): avc: denied { unmount } for pid=4126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 283.883520][ T29] audit: type=1400 audit(3644.035:9757): avc: denied { create } for pid=2013 comm="syz.3.13969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.906641][ T29] audit: type=1400 audit(3644.067:9758): avc: denied { write } for pid=2013 comm="syz.3.13969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.946795][ T2012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.970081][ T29] audit: type=1400 audit(3644.098:9759): avc: denied { read write } for pid=4147 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.994119][ T29] audit: type=1400 audit(3644.098:9760): avc: denied { open } for pid=4147 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.017718][ T29] audit: type=1400 audit(3644.098:9761): avc: denied { ioctl } for pid=4147 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1