last executing test programs: 5.552584483s ago: executing program 4 (id=521): syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x600) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000340)={0xa, 0x2, 0x1, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.785123356s ago: executing program 1 (id=553): unshare(0x20040600) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) flistxattr(r0, &(0x7f0000000280)=""/238, 0xee) 2.71954086s ago: executing program 1 (id=555): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = epoll_create(0x2) epoll_pwait(r1, &(0x7f00000050c0)=[{}], 0x1, 0x57, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012}) 2.641234375s ago: executing program 1 (id=559): mknodat(0xffffffffffffff9c, &(0x7f0000004a80)='./file0\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000540)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 2.37920162s ago: executing program 4 (id=564): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) bpf$PROG_LOAD(0x2, 0x0, 0x0) 2.238579658s ago: executing program 1 (id=568): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 2.237946878s ago: executing program 3 (id=569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)='K'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.159291883s ago: executing program 3 (id=570): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = syz_genetlink_get_family_id$team(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004740)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000004800)={'ip6gre0\x00', &(0x7f0000004780)={'syztnl1\x00', 0x0, 0x29, 0x4, 0xf5, 0x1709b548, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8000, 0x4, 0x1}}) getsockname$packet(r1, &(0x7f0000004840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000056c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005680)={&(0x7f0000004bc0)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}, 0x50) symlinkat(&(0x7f0000005a00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000005a40)='./file0\x00') recvmmsg(r0, 0x0, 0x0, 0xe0cfd99efea94881, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f00000094c0), 0x0, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) 2.159070203s ago: executing program 3 (id=571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0x30, 0x2b, {0x2b, 0x21, "0edc4452bc6a66d0dc510d12efd0b34361f957235b9a1355a6e46f70bc384b1941df0dc013c1dfbc2f"}}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x0, 0x0, 0x40, 0x47, 0xfffd}}}, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, 0x0, 0x0}) 2.158919363s ago: executing program 1 (id=572): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 2.03182182s ago: executing program 1 (id=574): syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x600) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000340)={0xa, 0x2, 0x1, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.803433014s ago: executing program 2 (id=580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendto(r1, &(0x7f0000004000)="6d375285601a6c8822f2268ce61b08eb808ff1fd01d5830cd1801a31f458e49e49b0701ceefb4d3c14f13b45b0e58fe44c7463b5854928b2", 0x38, 0x4008080, 0x0, 0x0) 1.789412515s ago: executing program 2 (id=581): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_mixed}, {@utf8no}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@uni_xlateno}, {@utf8no}]}, 0x1, 0x36e, &(0x7f0000000780)="$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") ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1.715006189s ago: executing program 2 (id=585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.566562208s ago: executing program 2 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)) 1.519883021s ago: executing program 4 (id=590): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x4c}}, 0x0) 1.498394722s ago: executing program 4 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x40010) 1.419325777s ago: executing program 3 (id=592): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2c6, &(0x7f0000000fc0)="$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") open(0x0, 0x800, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000180)={0x37, 0x100}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 1.419069267s ago: executing program 4 (id=593): prctl$PR_SCHED_CORE(0x38, 0x10000, 0x0, 0x81010000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000640)={[{@journal_checksum}, {@block_validity}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x44c}}]}, 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) 778.411994ms ago: executing program 0 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b703000000000000850000001a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 759.652346ms ago: executing program 0 (id=595): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1df, 0x2, 0x2, 0xc, 0x1, "038cc5dab923e114df00200000000400", 0x2, 0x8000201}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 703.505899ms ago: executing program 0 (id=596): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x38, @string={0x38, 0x3, "4e2cc8c214b970ce3f981fbc30e2efcbd546a7e21bc2032862946108f302d4a87c604137f5f455b2dfc00f77e43b3db6f259139c730f"}}}, 0x0) 684.69007ms ago: executing program 2 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 667.906971ms ago: executing program 2 (id=598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 543.208538ms ago: executing program 3 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 517.69914ms ago: executing program 4 (id=600): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2810000, &(0x7f0000000200)={[{@shortname_winnt}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_mixed}, {@fat=@tz_utc}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@fat=@quiet}, {@utf8no}]}, 0x1, 0x34a, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 487.260691ms ago: executing program 3 (id=601): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x4012, &(0x7f0000000180)=ANY=[], 0x3, 0x1b5, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f0172d3c16a7c6f70d02d5f3449c6745a000000000000ac4cf9f52696b7a9950000000000000052a3bdf19207d9d1a2734b4f887290f97ab5f9f4b2d66e6e690af7bdba405bbb7fcb6fdf7886a825ae4151639a1f0b9ad0ec43316b10fb9c734e972d9eea7f5e234148bdf043798cd1f12f0a472ada31b0d1c401a12b305130769530a02f0b733bebe163dce5299cd6a4f6908c908f5e2f1bb3dc5b193d16106e17"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x169542, 0x0) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) r5 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettfilter={0x4c, 0x2e, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0xffff, 0x4}, {0x10}}, [{0x8, 0xb, 0x9d746c8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7869}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x61ce3a68}]}, 0x4c}}, 0x40090) recvmmsg$unix(r5, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/145, 0x91}], 0x1}}], 0x1, 0x10022, 0x0) write$bt_hci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="01740c010838dd65bbad292a104c28cec6770d2905c52ce510cc6082629be7420cd71fe2ebb7fece9abffcb4998a9e940c5b44af9d207fc700b932527592cc112337b11619bd2044cba1965a2f5cf0b9503ed34b56c223b566865b9d"], 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x0, 0x300, 0x448, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 139.490912ms ago: executing program 0 (id=602): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 105.663713ms ago: executing program 0 (id=603): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x381, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0xfffd, 0x0, 0x8, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 0 (id=604): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000700)="049c255484f3a2130355d7e8ff4c380af3bbafa46fc75f3b0f1609645d762ae5105c12311db623c3d4176e0da09c2d1269e42f0e000d9a10db914c", 0x3b) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_clone(0x7142600, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x0, 0xffffffffffffffff, r2) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 21.660851][ T29] audit: type=1400 audit(1769164964.850:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.683916][ T29] audit: type=1400 audit(1769164964.850:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.707687][ T29] audit: type=1400 audit(1769164964.850:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.731086][ T29] audit: type=1400 audit(1769164964.850:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.754458][ T29] audit: type=1400 audit(1769164964.850:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 26.549523][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.549542][ T29] audit: type=1400 audit(1769164969.740:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.578799][ T29] audit: type=1400 audit(1769164969.770:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.579596][ T3305] cgroup: Unknown subsys name 'net' [ 26.608511][ T29] audit: type=1400 audit(1769164969.800:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.709336][ T3305] cgroup: Unknown subsys name 'cpuset' [ 26.715558][ T3305] cgroup: Unknown subsys name 'rlimit' [ 26.866600][ T29] audit: type=1400 audit(1769164970.050:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.890578][ T29] audit: type=1400 audit(1769164970.050:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.911638][ T29] audit: type=1400 audit(1769164970.050:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.932524][ T29] audit: type=1400 audit(1769164970.050:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.953299][ T29] audit: type=1400 audit(1769164970.070:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.961700][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.978685][ T29] audit: type=1400 audit(1769164970.070:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.011338][ T29] audit: type=1400 audit(1769164970.080:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.043933][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.150831][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.204234][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.256881][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 28.281623][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.289049][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.296460][ T3317] bridge_slave_0: entered allmulticast mode [ 28.303188][ T3317] bridge_slave_0: entered promiscuous mode [ 28.321281][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.328414][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.335641][ T3317] bridge_slave_1: entered allmulticast mode [ 28.342541][ T3317] bridge_slave_1: entered promiscuous mode [ 28.361963][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.369442][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.376789][ T3321] bridge_slave_0: entered allmulticast mode [ 28.383805][ T3321] bridge_slave_0: entered promiscuous mode [ 28.402006][ T3339] chnl_net:caif_netlink_parms(): no params data found [ 28.410787][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417876][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.425569][ T3321] bridge_slave_1: entered allmulticast mode [ 28.432048][ T3321] bridge_slave_1: entered promiscuous mode [ 28.443559][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.466193][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.502202][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.515844][ T3342] chnl_net:caif_netlink_parms(): no params data found [ 28.525521][ T3317] team0: Port device team_slave_0 added [ 28.532318][ T3317] team0: Port device team_slave_1 added [ 28.541265][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.568313][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.575806][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.582995][ T3322] bridge_slave_0: entered allmulticast mode [ 28.589632][ T3322] bridge_slave_0: entered promiscuous mode [ 28.611668][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.619066][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.626353][ T3322] bridge_slave_1: entered allmulticast mode [ 28.632850][ T3322] bridge_slave_1: entered promiscuous mode [ 28.648293][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.655508][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.682439][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.694812][ T3321] team0: Port device team_slave_0 added [ 28.711425][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.718877][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.745003][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.756523][ T3321] team0: Port device team_slave_1 added [ 28.778618][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.787833][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.794970][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.802192][ T3339] bridge_slave_0: entered allmulticast mode [ 28.808692][ T3339] bridge_slave_0: entered promiscuous mode [ 28.817732][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.824751][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.851201][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.865300][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.874869][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.881948][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.889412][ T3339] bridge_slave_1: entered allmulticast mode [ 28.895843][ T3339] bridge_slave_1: entered promiscuous mode [ 28.907999][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.915101][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.941256][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.976013][ T3339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.996460][ T3317] hsr_slave_0: entered promiscuous mode [ 29.002461][ T3317] hsr_slave_1: entered promiscuous mode [ 29.008477][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.015912][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.023195][ T3342] bridge_slave_0: entered allmulticast mode [ 29.029585][ T3342] bridge_slave_0: entered promiscuous mode [ 29.036660][ T3322] team0: Port device team_slave_0 added [ 29.043704][ T3322] team0: Port device team_slave_1 added [ 29.055483][ T3339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.065104][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.072455][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.080062][ T3342] bridge_slave_1: entered allmulticast mode [ 29.086722][ T3342] bridge_slave_1: entered promiscuous mode [ 29.118694][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.125933][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.152232][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.173181][ T3321] hsr_slave_0: entered promiscuous mode [ 29.179359][ T3321] hsr_slave_1: entered promiscuous mode [ 29.185065][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.191165][ T3321] Cannot create hsr debugfs directory [ 29.203335][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.210591][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.237372][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.250211][ T3339] team0: Port device team_slave_0 added [ 29.256982][ T3342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.274131][ T3339] team0: Port device team_slave_1 added [ 29.280698][ T3342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.330661][ T3339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.337744][ T3339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.364654][ T3339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.377013][ T3342] team0: Port device team_slave_0 added [ 29.393833][ T3339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.401263][ T3339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.428388][ T3339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.440473][ T3342] team0: Port device team_slave_1 added [ 29.448286][ T3322] hsr_slave_0: entered promiscuous mode [ 29.454685][ T3322] hsr_slave_1: entered promiscuous mode [ 29.460844][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 29.467190][ T3322] Cannot create hsr debugfs directory [ 29.506895][ T3342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.514087][ T3342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.540625][ T3342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.561237][ T3342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.568474][ T3342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.595235][ T3342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.631674][ T3339] hsr_slave_0: entered promiscuous mode [ 29.637657][ T3339] hsr_slave_1: entered promiscuous mode [ 29.643674][ T3339] debugfs: 'hsr0' already exists in 'hsr' [ 29.649621][ T3339] Cannot create hsr debugfs directory [ 29.697643][ T3342] hsr_slave_0: entered promiscuous mode [ 29.704273][ T3342] hsr_slave_1: entered promiscuous mode [ 29.710271][ T3342] debugfs: 'hsr0' already exists in 'hsr' [ 29.715996][ T3342] Cannot create hsr debugfs directory [ 29.781018][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.789662][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.804101][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.820895][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.864903][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.874193][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.887774][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.905464][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.930152][ T3339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.940045][ T3339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.949043][ T3339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.957795][ T3339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.001323][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.020182][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.030562][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.043091][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.063441][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.079238][ T3342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.092081][ T3342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.101545][ T3342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.110851][ T3342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.129605][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.151098][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.166399][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.182162][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.189361][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.198434][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.205929][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.215062][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.222172][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.237155][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.244308][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.290463][ T3339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.307644][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.336860][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.347137][ T3339] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.357462][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.364602][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.379585][ T2832] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.386715][ T2832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.399330][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.406633][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.425199][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.432515][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.450348][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.479606][ T3342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.530194][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.541046][ T3342] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.554005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.561236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.586952][ T3339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.596922][ T2832] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.604138][ T2832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.636367][ T3342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.647025][ T3342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.683990][ T3317] veth0_vlan: entered promiscuous mode [ 30.696083][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.715976][ T3317] veth1_vlan: entered promiscuous mode [ 30.778760][ T3321] veth0_vlan: entered promiscuous mode [ 30.794576][ T3321] veth1_vlan: entered promiscuous mode [ 30.817966][ T3317] veth0_macvtap: entered promiscuous mode [ 30.830990][ T3317] veth1_macvtap: entered promiscuous mode [ 30.840025][ T3342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.855008][ T3339] veth0_vlan: entered promiscuous mode [ 30.873918][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.890336][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.898168][ T3321] veth0_macvtap: entered promiscuous mode [ 30.910993][ T3322] veth0_vlan: entered promiscuous mode [ 30.921886][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.932185][ T3339] veth1_vlan: entered promiscuous mode [ 30.939569][ T3321] veth1_macvtap: entered promiscuous mode [ 30.948048][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.958079][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.970940][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.980338][ T3322] veth1_vlan: entered promiscuous mode [ 31.017139][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.026964][ T3339] veth0_macvtap: entered promiscuous mode [ 31.034972][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.053552][ T3322] veth0_macvtap: entered promiscuous mode [ 31.062300][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.076553][ T3339] veth1_macvtap: entered promiscuous mode [ 31.089185][ T3322] veth1_macvtap: entered promiscuous mode [ 31.109520][ T2773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.125421][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.135899][ T2773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.147962][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.155869][ T2773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.168020][ T3339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.176912][ T2773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.211842][ T3339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.226100][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.234908][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.245537][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257546][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290585][ T3342] veth0_vlan: entered promiscuous mode [ 31.304373][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325874][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.340073][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.367294][ T3342] veth1_vlan: entered promiscuous mode [ 31.398465][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407357][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.440295][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455517][ T3342] veth0_macvtap: entered promiscuous mode [ 31.477122][ T3342] veth1_macvtap: entered promiscuous mode [ 31.502669][ T3342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.522174][ T3508] vhci_hcd vhci_hcd.3: invalid port number 9 [ 31.552622][ T3342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.572575][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.604658][ T3504] loop1: detected capacity change from 0 to 8192 [ 31.611963][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.642435][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.651911][ T3309] loop1: p1 p2 p4 [ 31.655719][ T3309] loop1: p1 size 262144 extends beyond EOD, truncated [ 31.699292][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.711459][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 31.711477][ T29] audit: type=1400 audit(1769164974.900:142): avc: denied { ioctl } for pid=3498 comm="syz.1.7" path="socket:[3880]" dev="sockfs" ino=3880 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.745010][ T3309] loop1: p2 start 4293394690 is beyond EOD, truncated [ 31.751910][ T3309] loop1: p4 size 100663296 extends beyond EOD, truncated [ 31.765795][ T3504] loop1: p1 p2 p4 [ 31.773982][ T29] audit: type=1400 audit(1769164974.960:143): avc: denied { create } for pid=3492 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 31.780193][ T3504] loop1: p1 size 262144 extends beyond EOD, truncated [ 31.831708][ T3522] loop3: detected capacity change from 0 to 1024 [ 31.838981][ T3504] loop1: p2 start 4293394690 is beyond EOD, truncated [ 31.846286][ T3504] loop1: p4 size 100663296 extends beyond EOD, truncated [ 31.862234][ T29] audit: type=1326 audit(1769164975.040:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3518 comm="syz.3.10" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5682dacb9 code=0x0 [ 31.867126][ T3522] EXT4-fs: Ignoring removed orlov option [ 31.890851][ T29] audit: type=1400 audit(1769164975.080:145): avc: denied { write } for pid=3529 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.936035][ T3522] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 31.936070][ T3522] EXT4-fs: failed to create workqueue [ 31.951550][ T3522] EXT4-fs (loop3): mount failed [ 31.952142][ T3534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12'. [ 31.966253][ T29] audit: type=1400 audit(1769164975.100:146): avc: denied { create } for pid=3529 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.985815][ T29] audit: type=1400 audit(1769164975.100:147): avc: denied { write } for pid=3529 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.004276][ T3537] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13'. [ 32.005243][ T29] audit: type=1400 audit(1769164975.100:148): avc: denied { ioctl } for pid=3529 comm="syz.4.11" path="socket:[3891]" dev="sockfs" ino=3891 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.018467][ T3534] batadv_slave_0: entered promiscuous mode [ 32.039633][ T29] audit: type=1400 audit(1769164975.100:149): avc: denied { read } for pid=3529 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.067060][ T29] audit: type=1400 audit(1769164975.180:150): avc: denied { create } for pid=3536 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.082389][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 32.087533][ T29] audit: type=1400 audit(1769164975.180:151): avc: denied { bind } for pid=3536 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.138035][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 32.138795][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.159818][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.203087][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.207746][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.232440][ T3541] syz.2.14 (3541) used greatest stack depth: 8568 bytes left [ 32.284061][ T3547] random: crng reseeded on system resumption [ 32.284403][ T3544] ======================================================= [ 32.284403][ T3544] WARNING: The mand mount option has been deprecated and [ 32.284403][ T3544] and is ignored by this kernel. Remove the mand [ 32.284403][ T3544] option from the mount to silence this warning. [ 32.284403][ T3544] ======================================================= [ 32.354815][ T3544] process '' launched './file0' with NULL argv: empty string added [ 32.367881][ T3532] batadv_slave_0: left promiscuous mode [ 32.400256][ T3554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.412722][ T3545] 9pnet_fd: p9_fd_create_tcp (3545): problem connecting socket to 127.0.0.1 [ 32.531160][ C1] hrtimer: interrupt took 25899 ns [ 32.662392][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 32.712751][ T3554] bridge_slave_1: left allmulticast mode [ 32.718862][ T3554] bridge_slave_1: left promiscuous mode [ 32.724921][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.805967][ T3554] bridge_slave_0: left allmulticast mode [ 32.812059][ T3554] bridge_slave_0: left promiscuous mode [ 32.817850][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.890237][ T3565] loop1: detected capacity change from 0 to 512 [ 32.973250][ T3565] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.982440][ T3565] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 32.995647][ T3565] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 33.015574][ T3565] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.21: attempt to clear invalid blocks 2 len 1 [ 33.040240][ T3565] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.21: invalid indirect mapped block 1819239214 (level 0) [ 33.057696][ T3565] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.21: invalid indirect mapped block 1819239214 (level 1) [ 33.076832][ T3565] EXT4-fs (loop1): 1 truncate cleaned up [ 33.092348][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.106546][ T861] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.151827][ T3565] xt_hashlimit: invalid rate [ 33.206166][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.265382][ T3599] netlink: 128 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.291831][ T3599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.355040][ T3605] loop1: detected capacity change from 0 to 1764 [ 33.488310][ T3614] mmap: syz.0.33 (3614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.497802][ T3616] 9pnet_fd: p9_fd_create_tcp (3616): problem connecting socket to 127.0.0.1 [ 33.533628][ T3614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 33.690340][ T3626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.702312][ T3622] bridge_slave_1: left allmulticast mode [ 33.709529][ T3622] bridge_slave_1: left promiscuous mode [ 33.716368][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.725191][ T3622] bridge_slave_0: left allmulticast mode [ 33.731384][ T3622] bridge_slave_0: left promiscuous mode [ 33.737539][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.908471][ T3635] vhci_hcd vhci_hcd.3: default hub control req: 2e00 v0000 i0000 l0 [ 33.998643][ T3655] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 34.054291][ T3659] SELinux: failed to load policy [ 34.060910][ T3659] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 34.073330][ T3659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.084096][ T3659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 34.183262][ T3672] vhci_hcd vhci_hcd.3: invalid port number 9 [ 34.314401][ T3689] syzkaller0: entered promiscuous mode [ 34.320678][ T3689] syzkaller0: entered allmulticast mode [ 34.591775][ T3700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.999941][ T3705] vhci_hcd vhci_hcd.3: invalid port number 9 [ 35.009229][ T3700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.127379][ T3700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.138251][ T3488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.195496][ T3712] Zero length message leads to an empty skb [ 35.206734][ T3700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.222594][ T3719] FAULT_INJECTION: forcing a failure. [ 35.222594][ T3719] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.236959][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.236980][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.236989][ T3719] Call Trace: [ 35.236993][ T3719] [ 35.236999][ T3719] __dump_stack+0x1d/0x30 [ 35.237087][ T3719] dump_stack_lvl+0x95/0xd0 [ 35.237103][ T3719] dump_stack+0x15/0x1b [ 35.237117][ T3719] should_fail_ex+0x263/0x280 [ 35.237174][ T3719] should_fail+0xb/0x20 [ 35.237187][ T3719] should_fail_usercopy+0x1a/0x20 [ 35.237203][ T3719] _copy_from_user+0x1c/0xb0 [ 35.237300][ T3719] ___sys_sendmsg+0xc1/0x1e0 [ 35.237326][ T3719] __sys_sendmmsg+0x185/0x320 [ 35.237418][ T3719] __x64_sys_sendmmsg+0x57/0x70 [ 35.237434][ T3719] x64_sys_call+0x1e28/0x3000 [ 35.237495][ T3719] do_syscall_64+0xc0/0x2a0 [ 35.237515][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.237531][ T3719] RIP: 0033:0x7fa2afaaacb9 [ 35.237576][ T3719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.237589][ T3719] RSP: 002b:00007fa2ae507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 35.237605][ T3719] RAX: ffffffffffffffda RBX: 00007fa2afd25fa0 RCX: 00007fa2afaaacb9 [ 35.237622][ T3719] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 35.237632][ T3719] RBP: 00007fa2ae507090 R08: 0000000000000000 R09: 0000000000000000 [ 35.237641][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.237649][ T3719] R13: 00007fa2afd26038 R14: 00007fa2afd25fa0 R15: 00007ffeff5ed458 [ 35.237724][ T3719] [ 35.411562][ T3721] netlink: 'syz.4.71': attribute type 4 has an invalid length. [ 35.492722][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.510646][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.540539][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.619125][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.706649][ T3732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.762556][ T3732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.783814][ T3736] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 35.883261][ T3732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.949885][ T3732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.988850][ T3748] netlink: 'syz.3.83': attribute type 21 has an invalid length. [ 36.001232][ T3751] netlink: 'syz.3.83': attribute type 21 has an invalid length. [ 36.019539][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.041731][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.070271][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.088323][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.118358][ T3758] batman_adv: batadv0: Adding interface: ipvlan2 [ 36.124931][ T3758] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.150889][ T3758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.161597][ T3758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.176124][ T3761] loop2: detected capacity change from 0 to 512 [ 36.242457][ T3758] batman_adv: batadv0: Interface activated: ipvlan2 [ 36.268824][ T3761] loop2: detected capacity change from 0 to 2048 [ 36.327021][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.328888][ T3783] FAULT_INJECTION: forcing a failure. [ 36.328888][ T3783] name failslab, interval 1, probability 0, space 0, times 1 [ 36.352190][ T3783] CPU: 1 UID: 0 PID: 3783 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.352224][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.352276][ T3783] Call Trace: [ 36.352328][ T3783] [ 36.352337][ T3783] __dump_stack+0x1d/0x30 [ 36.352367][ T3783] dump_stack_lvl+0x95/0xd0 [ 36.352392][ T3783] dump_stack+0x15/0x1b [ 36.352468][ T3783] should_fail_ex+0x263/0x280 [ 36.352494][ T3783] should_failslab+0x8c/0xb0 [ 36.352577][ T3783] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 36.352599][ T3783] ? __alloc_skb+0x2f0/0x4b0 [ 36.352632][ T3783] __alloc_skb+0x2f0/0x4b0 [ 36.352650][ T3783] ? __alloc_skb+0x219/0x4b0 [ 36.352671][ T3783] sock_wmalloc+0x7e/0xc0 [ 36.352714][ T3783] unix_stream_connect+0x2d5/0xa00 [ 36.352751][ T3783] ? selinux_netlbl_socket_connect+0x114/0x130 [ 36.352784][ T3783] ? __pfx_unix_stream_connect+0x10/0x10 [ 36.352801][ T3783] __sys_connect+0x1f1/0x2a0 [ 36.352848][ T3783] __x64_sys_connect+0x3f/0x50 [ 36.352899][ T3783] x64_sys_call+0x2e09/0x3000 [ 36.352917][ T3783] do_syscall_64+0xc0/0x2a0 [ 36.352936][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.352980][ T3783] RIP: 0033:0x7fa2afaaacb9 [ 36.352992][ T3783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.353005][ T3783] RSP: 002b:00007fa2ae507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 36.353041][ T3783] RAX: ffffffffffffffda RBX: 00007fa2afd25fa0 RCX: 00007fa2afaaacb9 [ 36.353050][ T3783] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003 [ 36.353059][ T3783] RBP: 00007fa2ae507090 R08: 0000000000000000 R09: 0000000000000000 [ 36.353068][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.353116][ T3783] R13: 00007fa2afd26038 R14: 00007fa2afd25fa0 R15: 00007ffeff5ed458 [ 36.353129][ T3783] [ 36.625741][ T3792] __nla_validate_parse: 11 callbacks suppressed [ 36.625760][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 36.696508][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 36.718765][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 36.718795][ T29] audit: type=1326 audit(1769164979.910:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.760562][ T3804] loop1: detected capacity change from 0 to 1024 [ 36.779902][ T3802] bridge_slave_1: left allmulticast mode [ 36.785923][ T3802] bridge_slave_1: left promiscuous mode [ 36.791753][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.803888][ T29] audit: type=1326 audit(1769164979.910:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.828170][ T29] audit: type=1326 audit(1769164979.940:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.852664][ T29] audit: type=1326 audit(1769164979.940:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.876804][ T29] audit: type=1326 audit(1769164979.940:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.901455][ T29] audit: type=1326 audit(1769164979.940:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.926814][ T29] audit: type=1326 audit(1769164979.940:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.950430][ T29] audit: type=1326 audit(1769164979.940:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.975267][ T29] audit: type=1326 audit(1769164979.940:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 36.989199][ T3810] netlink: 424 bytes leftover after parsing attributes in process `syz.4.105'. [ 36.999788][ T29] audit: type=1326 audit(1769164979.940:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2afaaacb9 code=0x7ffc0000 [ 37.036245][ T3802] bridge_slave_0: left allmulticast mode [ 37.042079][ T3802] bridge_slave_0: left promiscuous mode [ 37.048102][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.081053][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.195997][ T3829] FAULT_INJECTION: forcing a failure. [ 37.195997][ T3829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.209428][ T3829] CPU: 0 UID: 0 PID: 3829 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.209450][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.209459][ T3829] Call Trace: [ 37.209463][ T3829] [ 37.209469][ T3829] __dump_stack+0x1d/0x30 [ 37.209524][ T3829] dump_stack_lvl+0x95/0xd0 [ 37.209549][ T3829] dump_stack+0x15/0x1b [ 37.209617][ T3829] should_fail_ex+0x263/0x280 [ 37.209632][ T3829] should_fail+0xb/0x20 [ 37.209645][ T3829] should_fail_usercopy+0x1a/0x20 [ 37.209670][ T3829] _copy_from_user+0x1c/0xb0 [ 37.209742][ T3829] do_sock_getsockopt+0xf1/0x210 [ 37.209759][ T3829] __x64_sys_getsockopt+0x11d/0x1a0 [ 37.209777][ T3829] x64_sys_call+0x2dc7/0x3000 [ 37.209794][ T3829] do_syscall_64+0xc0/0x2a0 [ 37.209858][ T3829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.209874][ T3829] RIP: 0033:0x7f2817ceacb9 [ 37.209886][ T3829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.209926][ T3829] RSP: 002b:00007f2816747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 37.209941][ T3829] RAX: ffffffffffffffda RBX: 00007f2817f65fa0 RCX: 00007f2817ceacb9 [ 37.209960][ T3829] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 37.209968][ T3829] RBP: 00007f2816747090 R08: 0000200000000280 R09: 0000000000000000 [ 37.209984][ T3829] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 37.209993][ T3829] R13: 00007f2817f66038 R14: 00007f2817f65fa0 R15: 00007ffd3b81fd68 [ 37.210007][ T3829] [ 37.831176][ T3852] loop1: detected capacity change from 0 to 512 [ 37.838026][ T3852] EXT4-fs: Ignoring removed nobh option [ 37.844607][ T3852] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.858850][ T3852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.874927][ T3852] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.888503][ T3852] EXT4-fs (loop1): 1 truncate cleaned up [ 37.895053][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.922411][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.959737][ T3860] FAULT_INJECTION: forcing a failure. [ 37.959737][ T3860] name failslab, interval 1, probability 0, space 0, times 0 [ 37.972674][ T3860] CPU: 1 UID: 0 PID: 3860 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.972704][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.972821][ T3860] Call Trace: [ 37.972827][ T3860] [ 37.972833][ T3860] __dump_stack+0x1d/0x30 [ 37.972853][ T3860] dump_stack_lvl+0x95/0xd0 [ 37.972869][ T3860] dump_stack+0x15/0x1b [ 37.972883][ T3860] should_fail_ex+0x263/0x280 [ 37.972945][ T3860] should_failslab+0x8c/0xb0 [ 37.973042][ T3860] __kmalloc_cache_noprof+0x64/0x4a0 [ 37.973060][ T3860] ? sctp_add_bind_addr+0x71/0x1e0 [ 37.973077][ T3860] sctp_add_bind_addr+0x71/0x1e0 [ 37.973102][ T3860] sctp_do_bind+0x427/0x4b0 [ 37.973122][ T3860] sctp_connect_new_asoc+0x153/0x3a0 [ 37.973143][ T3860] sctp_sendmsg+0xff4/0x1a40 [ 37.973219][ T3860] ? selinux_socket_sendmsg+0x101/0x1c0 [ 37.973239][ T3860] ? __pfx_sctp_sendmsg+0x10/0x10 [ 37.973256][ T3860] inet_sendmsg+0xc5/0xd0 [ 37.973280][ T3860] __sock_sendmsg+0x102/0x170 [ 37.973355][ T3860] __sys_sendto+0x2b2/0x380 [ 37.973375][ T3860] __x64_sys_sendto+0x76/0x90 [ 37.973459][ T3860] x64_sys_call+0x29a7/0x3000 [ 37.973480][ T3860] do_syscall_64+0xc0/0x2a0 [ 37.973500][ T3860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.973515][ T3860] RIP: 0033:0x7fa2afaaacb9 [ 37.973528][ T3860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.973541][ T3860] RSP: 002b:00007fa2ae507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 37.973606][ T3860] RAX: ffffffffffffffda RBX: 00007fa2afd25fa0 RCX: 00007fa2afaaacb9 [ 37.973616][ T3860] RDX: 000000000000000a RSI: 0000200000000340 RDI: 0000000000000004 [ 37.973625][ T3860] RBP: 00007fa2ae507090 R08: 0000200000000280 R09: 0000000000000010 [ 37.973634][ T3860] R10: 00000000000080c4 R11: 0000000000000246 R12: 0000000000000001 [ 37.973676][ T3860] R13: 00007fa2afd26038 R14: 00007fa2afd25fa0 R15: 00007ffeff5ed458 [ 37.973741][ T3860] [ 38.386706][ T3876] FAULT_INJECTION: forcing a failure. [ 38.386706][ T3876] name failslab, interval 1, probability 0, space 0, times 0 [ 38.400121][ T3876] CPU: 1 UID: 0 PID: 3876 Comm: syz.3.130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.400197][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.400206][ T3876] Call Trace: [ 38.400211][ T3876] [ 38.400217][ T3876] __dump_stack+0x1d/0x30 [ 38.400237][ T3876] dump_stack_lvl+0x95/0xd0 [ 38.400252][ T3876] dump_stack+0x15/0x1b [ 38.400310][ T3876] should_fail_ex+0x263/0x280 [ 38.400325][ T3876] should_failslab+0x8c/0xb0 [ 38.400340][ T3876] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 38.400358][ T3876] ? __alloc_skb+0x2f0/0x4b0 [ 38.400372][ T3876] __alloc_skb+0x2f0/0x4b0 [ 38.400385][ T3876] ? __alloc_skb+0x219/0x4b0 [ 38.400398][ T3876] netlink_ack+0xfd/0x500 [ 38.400417][ T3876] netlink_rcv_skb+0x192/0x220 [ 38.400489][ T3876] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 38.400521][ T3876] rtnetlink_rcv+0x1c/0x30 [ 38.400540][ T3876] netlink_unicast+0x5c0/0x690 [ 38.400563][ T3876] netlink_sendmsg+0x5c8/0x6f0 [ 38.400613][ T3876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.400699][ T3876] __sock_sendmsg+0x145/0x170 [ 38.400768][ T3876] ____sys_sendmsg+0x31e/0x4a0 [ 38.400839][ T3876] ___sys_sendmsg+0x195/0x1e0 [ 38.400863][ T3876] __x64_sys_sendmsg+0xd4/0x160 [ 38.400883][ T3876] x64_sys_call+0x17ba/0x3000 [ 38.400900][ T3876] do_syscall_64+0xc0/0x2a0 [ 38.400980][ T3876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.401061][ T3876] RIP: 0033:0x7fe5682dacb9 [ 38.401074][ T3876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.401087][ T3876] RSP: 002b:00007fe566d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.401102][ T3876] RAX: ffffffffffffffda RBX: 00007fe568555fa0 RCX: 00007fe5682dacb9 [ 38.401112][ T3876] RDX: 000000000004c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 38.401144][ T3876] RBP: 00007fe566d37090 R08: 0000000000000000 R09: 0000000000000000 [ 38.401153][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.401162][ T3876] R13: 00007fe568556038 R14: 00007fe568555fa0 R15: 00007ffe5548eb68 [ 38.401175][ T3876] [ 38.702602][ T3880] 9p: Bad value for 'rfdno' [ 38.710244][ T3886] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 38.723723][ T3880] loop4: detected capacity change from 0 to 1024 [ 38.730605][ T3887] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 38.739837][ T3880] EXT4-fs: Ignoring removed orlov option [ 38.746530][ T3880] EXT4-fs: inline encryption not supported [ 38.752522][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 38.765088][ T3888] bridge_slave_1: left allmulticast mode [ 38.770893][ T3888] bridge_slave_1: left promiscuous mode [ 38.776625][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.789350][ T3880] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 38.799305][ T3880] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.811077][ T3888] bridge_slave_0: left allmulticast mode [ 38.816893][ T3888] bridge_slave_0: left promiscuous mode [ 38.822779][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.832769][ T3880] EXT4-fs (loop4): invalid journal inode [ 38.916663][ T3891] bond0: entered promiscuous mode [ 38.921973][ T3891] bond_slave_0: entered promiscuous mode [ 38.927958][ T3891] bond_slave_1: entered promiscuous mode [ 38.933750][ T3891] batadv0: entered promiscuous mode [ 38.938573][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 38.947989][ T3891] bond0: left promiscuous mode [ 38.952822][ T3891] bond_slave_0: left promiscuous mode [ 38.958749][ T3891] bond_slave_1: left promiscuous mode [ 38.964699][ T3891] batadv0: left promiscuous mode [ 38.978174][ T3895] vlan2: entered allmulticast mode [ 38.983498][ T3895] bridge_slave_0: entered allmulticast mode [ 39.086708][ T3907] loop4: detected capacity change from 0 to 512 [ 39.130112][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.164750][ T3916] loop3: detected capacity change from 0 to 1024 [ 39.184872][ T3907] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.201781][ T3918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 39.213960][ T3916] loop3: detected capacity change from 0 to 1024 [ 39.221284][ T3919] loop2: detected capacity change from 0 to 512 [ 39.228832][ T3919] journal_path: Non-blockdev passed as './file0' [ 39.233839][ T3916] EXT4-fs: inline encryption not supported [ 39.235807][ T3919] EXT4-fs: error: could not find journal device path [ 39.255995][ T3907] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.143: corrupted xattr block 6: invalid header [ 39.273056][ T3907] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 39.282686][ T3916] EXT4-fs: Ignoring removed bh option [ 39.288651][ T3907] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.143: corrupted xattr block 6: invalid header [ 39.308736][ T3916] EXT4-fs: Mount option(s) incompatible with ext2 [ 39.329769][ T3916] netlink: 'syz.3.146': attribute type 10 has an invalid length. [ 39.339375][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 39.354907][ T3916] random: crng reseeded on system resumption [ 39.408546][ T3907] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 39.424406][ T3907] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #12: comm syz.4.143: corrupted xattr block 6: invalid header [ 39.438653][ T3922] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.143: corrupted xattr block 6: invalid header [ 39.461732][ T3922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 39.471927][ T3922] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #12: comm syz.4.143: corrupted xattr block 6: invalid header [ 39.501979][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.681914][ T23] IPVS: starting estimator thread 0... [ 39.736248][ T3953] FAULT_INJECTION: forcing a failure. [ 39.736248][ T3953] name failslab, interval 1, probability 0, space 0, times 0 [ 39.749044][ T3953] CPU: 1 UID: 0 PID: 3953 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.749124][ T3953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.749135][ T3953] Call Trace: [ 39.749143][ T3953] [ 39.749151][ T3953] __dump_stack+0x1d/0x30 [ 39.749178][ T3953] dump_stack_lvl+0x95/0xd0 [ 39.749292][ T3953] dump_stack+0x15/0x1b [ 39.749312][ T3953] should_fail_ex+0x263/0x280 [ 39.749372][ T3953] should_failslab+0x8c/0xb0 [ 39.749392][ T3953] kmem_cache_alloc_noprof+0x68/0x490 [ 39.749512][ T3953] ? getname_flags+0x7f/0x3b0 [ 39.749540][ T3953] getname_flags+0x7f/0x3b0 [ 39.749569][ T3953] __x64_sys_symlink+0x40/0x60 [ 39.749594][ T3953] x64_sys_call+0x24a9/0x3000 [ 39.749644][ T3953] do_syscall_64+0xc0/0x2a0 [ 39.749672][ T3953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.749694][ T3953] RIP: 0033:0x7f2817ceacb9 [ 39.749718][ T3953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.749739][ T3953] RSP: 002b:00007f2816726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 39.749774][ T3953] RAX: ffffffffffffffda RBX: 00007f2817f66090 RCX: 00007f2817ceacb9 [ 39.749791][ T3953] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 39.749805][ T3953] RBP: 00007f2816726090 R08: 0000000000000000 R09: 0000000000000000 [ 39.749820][ T3953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.749835][ T3953] R13: 00007f2817f66128 R14: 00007f2817f66090 R15: 00007ffd3b81fd68 [ 39.749858][ T3953] [ 39.921416][ T3950] IPVS: using max 2688 ests per chain, 134400 per kthread [ 39.960453][ T3957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.161'. [ 40.028767][ T3964] loop2: detected capacity change from 0 to 512 [ 40.046450][ T3964] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.099248][ T3964] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.118460][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 40.138517][ T3964] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 40.166133][ T3964] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.163: bad orphan inode 14 [ 40.198871][ T3969] bridge_slave_1: left allmulticast mode [ 40.205049][ T3969] bridge_slave_1: left promiscuous mode [ 40.211003][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.238491][ T3964] ext4_test_bit(bit=13, block=18) = 1 [ 40.244121][ T3964] is_bad_inode(inode)=0 [ 40.248516][ T3964] NEXT_ORPHAN(inode)=0 [ 40.252732][ T3964] max_ino=32 [ 40.256134][ T3964] i_nlink=1 [ 40.260407][ T3964] EXT4-fs (loop2): 1 truncate cleaned up [ 40.278159][ T3969] bridge_slave_0: left allmulticast mode [ 40.284179][ T3969] bridge_slave_0: left promiscuous mode [ 40.289924][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.300836][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.316151][ T3964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 40.495933][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.758612][ T4004] loop2: detected capacity change from 0 to 1024 [ 40.798459][ T4004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.874107][ T4016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.884445][ T4016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.386352][ T4067] geneve2: entered promiscuous mode [ 41.393634][ T31] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 44743 - 0 [ 41.408004][ T31] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 44743 - 0 [ 41.426784][ T31] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 44743 - 0 [ 41.440969][ T31] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 44743 - 0 [ 41.475453][ T4072] FAULT_INJECTION: forcing a failure. [ 41.475453][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.489243][ T4072] CPU: 0 UID: 0 PID: 4072 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.489341][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.489355][ T4072] Call Trace: [ 41.489364][ T4072] [ 41.489375][ T4072] __dump_stack+0x1d/0x30 [ 41.489403][ T4072] dump_stack_lvl+0x95/0xd0 [ 41.489426][ T4072] dump_stack+0x15/0x1b [ 41.489451][ T4072] should_fail_ex+0x263/0x280 [ 41.489523][ T4072] should_fail+0xb/0x20 [ 41.489540][ T4072] should_fail_usercopy+0x1a/0x20 [ 41.489625][ T4072] _copy_to_user+0x20/0xa0 [ 41.489722][ T4072] simple_read_from_buffer+0xb5/0x130 [ 41.489761][ T4072] proc_fail_nth_read+0x10e/0x150 [ 41.489805][ T4072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.489862][ T4072] vfs_read+0x1ab/0x7f0 [ 41.489896][ T4072] ? __rcu_read_unlock+0x4e/0x70 [ 41.489918][ T4072] ? __fget_files+0x184/0x1c0 [ 41.489940][ T4072] ? mutex_lock+0x57/0x90 [ 41.489967][ T4072] ksys_read+0xdc/0x1a0 [ 41.490127][ T4072] __x64_sys_read+0x40/0x50 [ 41.490162][ T4072] x64_sys_call+0x2889/0x3000 [ 41.490238][ T4072] do_syscall_64+0xc0/0x2a0 [ 41.490265][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.490292][ T4072] RIP: 0033:0x7f00173cb58e [ 41.490312][ T4072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.490346][ T4072] RSP: 002b:00007f0015e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.490371][ T4072] RAX: ffffffffffffffda RBX: 00007f0015e676c0 RCX: 00007f00173cb58e [ 41.490389][ T4072] RDX: 000000000000000f RSI: 00007f0015e670a0 RDI: 0000000000000003 [ 41.490403][ T4072] RBP: 00007f0015e67090 R08: 0000000000000000 R09: 0000000000000000 [ 41.490418][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.490433][ T4072] R13: 00007f0017686038 R14: 00007f0017685fa0 R15: 00007fff581fa858 [ 41.490502][ T4072] [ 41.741481][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.801982][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 41.802001][ T29] audit: type=1326 audit(1769164984.990:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.832689][ T29] audit: type=1326 audit(1769164984.990:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.853340][ T4084] __nla_validate_parse: 4 callbacks suppressed [ 41.853359][ T4084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 41.876663][ T29] audit: type=1326 audit(1769164985.060:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.900859][ T29] audit: type=1326 audit(1769164985.060:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.924723][ T29] audit: type=1326 audit(1769164985.060:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.952361][ T4086] netlink: 256 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.956670][ T29] audit: type=1326 audit(1769164985.090:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.962141][ T4086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.985520][ T29] audit: type=1326 audit(1769164985.090:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 41.985555][ T29] audit: type=1326 audit(1769164985.090:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 42.042748][ T29] audit: type=1326 audit(1769164985.090:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 42.066203][ T29] audit: type=1326 audit(1769164985.090:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ef55eacb9 code=0x7ffc0000 [ 42.181202][ T4099] netlink: 204 bytes leftover after parsing attributes in process `syz.0.214'. [ 42.181878][ T4101] netlink: 'syz.3.215': attribute type 10 has an invalid length. [ 42.203040][ T4101] macvlan1: entered promiscuous mode [ 42.208568][ T4101] macvlan1: entered allmulticast mode [ 42.217336][ T4101] veth1_vlan: entered allmulticast mode [ 42.225955][ T4101] team0: Port device macvlan1 added [ 42.232202][ T4101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28688 sclass=netlink_route_socket pid=4101 comm=syz.3.215 [ 42.336926][ T4111] loop4: detected capacity change from 0 to 4096 [ 42.353964][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.372308][ T4111] netlink: 5 bytes leftover after parsing attributes in process `syz.4.219'. [ 42.391073][ T4111] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 42.430182][ T4111] 0ªî{X¹¦: entered allmulticast mode [ 42.436121][ T4111] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 42.458269][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 42.477197][ T4111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4111 comm=syz.4.219 [ 42.564954][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.737350][ T4152] loop4: detected capacity change from 0 to 512 [ 42.765536][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.800298][ T4152] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.811446][ T4157] FAULT_INJECTION: forcing a failure. [ 42.811446][ T4157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.824740][ T4157] CPU: 0 UID: 0 PID: 4157 Comm: syz.2.235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.824773][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.824787][ T4157] Call Trace: [ 42.824794][ T4157] [ 42.824868][ T4157] __dump_stack+0x1d/0x30 [ 42.824897][ T4157] dump_stack_lvl+0x95/0xd0 [ 42.824923][ T4157] dump_stack+0x15/0x1b [ 42.825054][ T4157] should_fail_ex+0x263/0x280 [ 42.825077][ T4157] should_fail+0xb/0x20 [ 42.825098][ T4157] should_fail_usercopy+0x1a/0x20 [ 42.825123][ T4157] _copy_from_user+0x1c/0xb0 [ 42.825152][ T4157] ___sys_sendmsg+0xc1/0x1e0 [ 42.825294][ T4157] __x64_sys_sendmsg+0xd4/0x160 [ 42.825325][ T4157] x64_sys_call+0x17ba/0x3000 [ 42.825353][ T4157] do_syscall_64+0xc0/0x2a0 [ 42.825385][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.825430][ T4157] RIP: 0033:0x7f2817ceacb9 [ 42.825447][ T4157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.825501][ T4157] RSP: 002b:00007f2816747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.825591][ T4157] RAX: ffffffffffffffda RBX: 00007f2817f65fa0 RCX: 00007f2817ceacb9 [ 42.825608][ T4157] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 42.825711][ T4157] RBP: 00007f2816747090 R08: 0000000000000000 R09: 0000000000000000 [ 42.825726][ T4157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.825748][ T4157] R13: 00007f2817f66038 R14: 00007f2817f65fa0 R15: 00007ffd3b81fd68 [ 42.825769][ T4157] [ 43.009701][ T4152] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.234: corrupted xattr block 6: invalid header [ 43.050424][ T4152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 43.061024][ T4152] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.234: corrupted xattr block 6: invalid header [ 43.067882][ T4163] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 43.091170][ T4152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 43.123428][ T4152] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #12: comm syz.4.234: corrupted xattr block 6: invalid header [ 43.139429][ T4165] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.158116][ T4165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.165388][ T4165] IPv6: NLM_F_CREATE should be set when creating new route [ 43.179218][ T4152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 43.231078][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.266351][ T4180] netlink: 68 bytes leftover after parsing attributes in process `syz.4.245'. [ 43.275017][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.287881][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.383724][ T4192] loop4: detected capacity change from 0 to 256 [ 43.410211][ T4192] FAT-fs (loop4): codepage cp857 not found [ 43.658697][ T4198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.677408][ T4198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.030228][ T4213] loop2: detected capacity change from 0 to 128 [ 44.067753][ T4213] EXT4-fs: test_dummy_encryption option not supported [ 44.291433][ T4218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.320355][ T4218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.349071][ T4222] loop4: detected capacity change from 0 to 128 [ 44.389717][ T4222] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 44.398579][ T4222] FAT-fs (loop4): Filesystem has been set read-only [ 44.514179][ T4235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.608098][ T4238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.270'. [ 44.617271][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 44.629991][ T4238] tipc: Started in network mode [ 44.634909][ T4238] tipc: Node identity 7f000001, cluster identity 4711 [ 44.642115][ T4238] tipc: Enabled bearer , priority 10 [ 45.021890][ T4251] loop4: detected capacity change from 0 to 512 [ 45.086288][ T4251] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 45.327499][ T4277] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 45.379341][ T4282] loop2: detected capacity change from 0 to 128 [ 45.495016][ T4290] loop3: detected capacity change from 0 to 2048 [ 45.511375][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.571987][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.758309][ T23] tipc: Node number set to 2130706433 [ 46.168828][ T4314] loop4: detected capacity change from 0 to 1024 [ 46.176926][ T4314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.191876][ T4314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 46.194572][ T4316] loop3: detected capacity change from 0 to 512 [ 46.200963][ T4314] System zones: 0-1, 3-36 [ 46.217754][ T4314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.226942][ T4316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.259198][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.318128][ T4321] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.334544][ T4321] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.367764][ T3339] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.502562][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.584219][ T4330] EXT4-fs (loop3): shut down requested (1) [ 46.603892][ T4330] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 46.641915][ T4350] FAT-fs (loop4): codepage cp864 not found [ 46.665786][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.808570][ T4357] capability: warning: `syz.0.317' uses deprecated v2 capabilities in a way that may be insecure [ 46.830623][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 46.830638][ T29] audit: type=1400 audit(1769164990.020:680): avc: denied { create } for pid=4359 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.889111][ T29] audit: type=1400 audit(1769164990.050:681): avc: denied { connect } for pid=4359 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.111169][ T29] audit: type=1400 audit(1769164990.100:682): avc: denied { write } for pid=4359 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.130860][ T29] audit: type=1400 audit(1769164990.280:683): avc: denied { setopt } for pid=4365 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.150411][ T29] audit: type=1400 audit(1769164990.280:684): avc: denied { bind } for pid=4365 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.577280][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.594004][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.633186][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.670761][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.762965][ T29] audit: type=1400 audit(1769164990.950:685): avc: denied { mounton } for pid=4382 comm="syz.4.327" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.763129][ T4383] EXT4-fs (loop4): unable to read superblock [ 47.925445][ T29] audit: type=1400 audit(1769164991.100:686): avc: denied { bind } for pid=4385 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.951099][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.966914][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.182523][ T4390] set_capacity_and_notify: 6 callbacks suppressed [ 48.182542][ T4390] loop2: detected capacity change from 0 to 256 [ 48.913973][ T29] audit: type=1400 audit(1769164992.100:687): avc: denied { getopt } for pid=4412 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.184392][ T4420] loop4: detected capacity change from 0 to 256 [ 49.248160][ T29] audit: type=1400 audit(1769164992.430:688): avc: denied { create } for pid=4423 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.433480][ T29] audit: type=1400 audit(1769164992.460:689): avc: denied { setopt } for pid=4423 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.443771][ T4420] FAT-fs (loop4): codepage cp949 not found [ 49.649775][ T4445] __nla_validate_parse: 2 callbacks suppressed [ 49.649794][ T4445] netlink: 136 bytes leftover after parsing attributes in process `syz.4.354'. [ 49.665676][ T4445] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 49.696733][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.719500][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.239842][ T4456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.321135][ T4462] loop4: detected capacity change from 0 to 256 [ 50.330523][ T4461] loop2: detected capacity change from 0 to 512 [ 50.337886][ T4461] EXT4-fs: test_dummy_encryption option not supported [ 50.353727][ T4463] xt_hashlimit: size too large, truncated to 1048576 [ 50.554508][ T4484] usb usb9: usbfs: process 4484 (syz.0.370) did not claim interface 0 before use [ 50.633752][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 50.649280][ T4491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.369'. [ 50.658336][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 50.667474][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 50.678560][ T4491] tipc: Started in network mode [ 50.683831][ T4491] tipc: Node identity 7f000001, cluster identity 4711 [ 50.691165][ T4491] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 50.698267][ T4491] tipc: Enabled bearer , priority 10 [ 50.825980][ T4495] loop3: detected capacity change from 0 to 128 [ 50.832645][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 50.854796][ T4495] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.869257][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.906519][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.921695][ T4495] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.960869][ T3339] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.970390][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.108338][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.248332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.253062][ T4513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.282983][ T4513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.388333][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.474666][ T4523] cgroup: Unknown subsys name 'cpuset' [ 51.528322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.571529][ T4528] loop3: detected capacity change from 0 to 512 [ 51.589321][ T4528] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (18563!=18645) [ 51.598978][ T4528] EXT4-fs (loop3): group descriptors corrupted! [ 51.668354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.808266][ T36] tipc: Node number set to 2130706433 [ 52.062099][ T4547] loop4: detected capacity change from 0 to 1024 [ 52.104987][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.150514][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 52.150532][ T29] audit: type=1400 audit(1769164995.340:711): avc: denied { append } for pid=4542 comm="syz.4.389" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.213791][ T4560] loop2: detected capacity change from 0 to 1024 [ 52.221103][ T4560] EXT4-fs: Ignoring removed bh option [ 52.227132][ T4560] ext3: Bad value for 'barrier' [ 52.245781][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.529329][ T4568] gretap0: entered promiscuous mode [ 52.556518][ T4569] loop4: detected capacity change from 0 to 128 [ 52.563540][ T4569] EXT4-fs: test_dummy_encryption option not supported [ 52.594397][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 52.603420][ T4568] gretap0: left promiscuous mode [ 52.878821][ T29] audit: type=1400 audit(1769164996.060:712): avc: denied { setopt } for pid=4575 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.974628][ T4578] loop3: detected capacity change from 0 to 256 [ 53.228291][ T29] audit: type=1400 audit(1769164996.410:713): avc: denied { shutdown } for pid=4581 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.249108][ T29] audit: type=1400 audit(1769164996.410:714): avc: denied { read } for pid=4581 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.386137][ T4586] loop3: detected capacity change from 0 to 2048 [ 53.444044][ T4586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.523111][ T29] audit: type=1400 audit(1769164996.710:715): avc: denied { remove_name } for pid=4585 comm="syz.3.408" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.546364][ T29] audit: type=1400 audit(1769164996.710:716): avc: denied { rename } for pid=4585 comm="syz.3.408" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.196636][ T4600] loop4: detected capacity change from 0 to 1024 [ 54.216686][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.241936][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.379884][ T4600] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.412: Allocating blocks 497-513 which overlap fs metadata [ 54.403975][ T4605] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.412: Allocating blocks 497-513 which overlap fs metadata [ 54.432061][ T4600] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.412: Allocating blocks 497-513 which overlap fs metadata [ 54.451200][ T4608] loop3: detected capacity change from 0 to 512 [ 54.458812][ T4608] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.464936][ T4599] EXT4-fs (loop4): pa ffff8881079e30e0: logic 48, phys. 177, len 21 [ 54.477246][ T4599] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 54.496541][ T4608] EXT4-fs (loop3): 1 truncate cleaned up [ 54.513636][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.551568][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.585084][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.625615][ T4621] loop2: detected capacity change from 0 to 1024 [ 54.641414][ T4620] loop3: detected capacity change from 0 to 1024 [ 54.655920][ T4621] EXT4-fs: Ignoring removed orlov option [ 54.663796][ T4621] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.688042][ T4620] EXT4-fs: test_dummy_encryption option not supported [ 54.706089][ T4621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.762466][ T4627] loop4: detected capacity change from 0 to 128 [ 54.777965][ T4629] loop3: detected capacity change from 0 to 512 [ 54.796773][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.818411][ C1] net_ratelimit: 4 callbacks suppressed [ 54.818433][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 54.835377][ T4629] EXT4-fs: Ignoring removed nobh option [ 54.842864][ T4627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.872134][ T4629] EXT4-fs: test_dummy_encryption option not supported [ 54.882351][ T4627] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.934615][ T29] audit: type=1400 audit(1769164998.100:717): avc: denied { write } for pid=4626 comm="syz.4.422" path="/93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.050645][ T3342] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.094915][ T4643] loop4: detected capacity change from 0 to 512 [ 55.111527][ T4643] EXT4-fs: Ignoring removed orlov option [ 55.181679][ T4643] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.428: corrupted in-inode xattr: invalid ea_ino [ 55.206151][ T4643] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.428: couldn't read orphan inode 15 (err -117) [ 55.249522][ T4643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.265294][ T4643] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.428: invalid indirect mapped block 234881024 (level 0) [ 55.482795][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.688016][ T4652] loop3: detected capacity change from 0 to 128 [ 55.710060][ T4652] EXT4-fs: test_dummy_encryption option not supported [ 55.725145][ T4655] loop4: detected capacity change from 0 to 512 [ 55.732665][ T4655] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 55.858324][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 55.929561][ T4657] FAT-fs (loop3): codepage cp874 not found [ 56.007275][ T4666] EXT4-fs (loop4): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 56.150152][ T4657] EXT4-fs: Ignoring removed i_version option [ 56.156400][ T4657] EXT4-fs: Ignoring removed bh option [ 56.267613][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.341053][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.386178][ T4657] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.424173][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.540539][ T4683] xt_hashlimit: size too large, truncated to 1048576 [ 56.739320][ T29] audit: type=1400 audit(1769164999.930:718): avc: denied { create } for pid=4656 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.801693][ T4690] EXT4-fs: test_dummy_encryption option not supported [ 56.812140][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.898335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 57.007645][ T4705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.053905][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.067144][ T4705] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.102441][ T3339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.171291][ T4709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.242913][ T4709] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.275102][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.359046][ T4716] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 57.373645][ T29] audit: type=1400 audit(1769165000.540:719): avc: denied { read } for pid=4710 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.714950][ T4721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.785288][ T4721] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.805401][ T4721] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.455: corrupted xattr block 6: invalid header [ 57.826169][ T4721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 57.857184][ T4725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.938335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 57.994143][ T4721] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.455: corrupted xattr block 6: invalid header [ 58.028415][ T4721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 58.062121][ T29] audit: type=1400 audit(1769165001.250:720): avc: denied { listen } for pid=4731 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.082467][ T29] audit: type=1400 audit(1769165001.250:721): avc: denied { accept } for pid=4731 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.102945][ T29] audit: type=1400 audit(1769165001.250:722): avc: denied { mounton } for pid=4720 comm="syz.2.455" path="/79/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.127211][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.150031][ T3342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.224241][ T29] audit: type=1400 audit(1769165001.410:723): avc: denied { read } for pid=4734 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.342907][ T4752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.368535][ T4752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.988345][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 60.018316][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 60.085294][ T4777] set_capacity_and_notify: 8 callbacks suppressed [ 60.085313][ T4777] loop2: detected capacity change from 0 to 256 [ 60.160224][ T4777] vfat: Unknown parameter 'ÿÿ' [ 61.058358][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 61.210547][ T29] audit: type=1400 audit(1769165004.400:724): avc: denied { nlmsg_read } for pid=4806 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 61.291481][ T4808] loop2: detected capacity change from 0 to 512 [ 61.372813][ T4808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.108312][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 62.587042][ T29] audit: type=1400 audit(1769165004.470:725): avc: denied { wake_alarm } for pid=4799 comm="syz.2.488" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.608228][ T29] audit: type=1400 audit(1769165004.800:726): avc: denied { bind } for pid=4813 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.138695][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 63.386908][ T4808] EXT4-fs (loop2): 1 orphan inode deleted [ 63.393031][ T4808] EXT4-fs (loop2): 1 truncate cleaned up [ 63.399675][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.423801][ T4823] Invalid argument reading file caps for ./file0 [ 63.465068][ T4829] loop3: detected capacity change from 0 to 128 [ 63.621860][ T4829] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.663259][ T29] audit: type=1400 audit(1769165006.850:727): avc: denied { mounton } for pid=4833 comm="syz.4.499" path="/proc/269/cgroup" dev="proc" ino=9388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 63.692982][ T4829] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.746456][ T4835] VFS: Mount too revealing [ 63.784865][ T4840] x_tables: duplicate underflow at hook 3 [ 63.920111][ T3339] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.022690][ T4850] SELinux: failed to load policy [ 64.178315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 64.191420][ T4861] SELinux: policydb magic number 0x6f72702f does not match expected magic number 0xf97cff8c [ 64.202102][ T4861] SELinux: failed to load policy [ 64.225822][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.308674][ T29] audit: type=1400 audit(1769165007.500:728): avc: denied { ioctl } for pid=4868 comm="syz.3.513" path="mnt:[4026532385]" dev="nsfs" ino=4026532385 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.218292][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 65.376964][ T4884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.417400][ T4884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.543959][ T29] audit: type=1400 audit(1769165008.710:729): avc: denied { name_bind } for pid=4888 comm="syz.4.521" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.562348][ T4884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.596974][ T4884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.845127][ T4901] tmpfs: Unsupported parameter 'huge' [ 66.064330][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.088122][ T4903] tipc: Enabled bearer , priority 0 [ 66.146308][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.162747][ T4903] syzkaller0: entered promiscuous mode [ 66.168477][ T4903] syzkaller0: entered allmulticast mode [ 66.258322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 66.329553][ T4903] tipc: Resetting bearer [ 66.358890][ T4902] tipc: Resetting bearer [ 66.382485][ T4902] tipc: Disabling bearer [ 66.514658][ T29] audit: type=1400 audit(1769165009.700:730): avc: denied { read } for pid=4916 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.817376][ T29] audit: type=1400 audit(1769165010.000:731): avc: denied { getopt } for pid=4933 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.982448][ T4942] syz.3.532 (4942): /proc/4941/oom_adj is deprecated, please use /proc/4941/oom_score_adj instead. [ 67.115279][ T4948] loop3: detected capacity change from 0 to 256 [ 67.238686][ T4948] FAT-fs (loop3): codepage cp855 not found [ 67.308318][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.476377][ T4997] loop3: detected capacity change from 0 to 256 [ 67.514753][ T4997] FAT-fs (loop3): IO charset cp932 not found [ 67.588464][ T4999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 67.695989][ T5003] pimreg: tun_chr_ioctl cmd 1074025677 [ 67.709554][ T5003] pimreg: linktype set to 6 [ 67.893310][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.904344][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.997598][ T5033] loop2: detected capacity change from 0 to 128 [ 68.041721][ T5033] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.059309][ T5033] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.088721][ T29] audit: type=1400 audit(1769165011.280:732): avc: denied { map } for pid=5032 comm="syz.2.550" path="/94/file0/cgroup.controllers" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.130353][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.292494][ T5071] loop2: detected capacity change from 0 to 128 [ 68.338329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.446093][ T5090] ip_vti0: entered allmulticast mode [ 68.529122][ T5098] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 68.663049][ T5108] loop2: detected capacity change from 0 to 1024 [ 68.696216][ T5108] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 68.705774][ T5108] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 68.715689][ T5108] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.566: Failed to acquire dquot type 0 [ 68.733044][ T5108] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.755332][ T29] audit: type=1400 audit(1769165011.940:733): avc: denied { setopt } for pid=5118 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.791968][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.877893][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.922666][ T5108] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.566: corrupted inode contents [ 68.936541][ T5108] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.566: mark_inode_dirty error [ 68.949042][ T5108] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.566: corrupted inode contents [ 68.961663][ T5108] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.566: mark_inode_dirty error [ 68.973957][ T5108] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.566: corrupted inode contents [ 68.986879][ T5108] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 68.996021][ T5108] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.566: corrupted inode contents [ 69.008440][ T5108] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.566: mark_inode_dirty error [ 69.020423][ T5108] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 69.030149][ T5108] EXT4-fs (loop2): 1 truncate cleaned up [ 69.036295][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.054487][ T5108] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 69.063818][ T5108] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 69.073433][ T5108] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.566: Failed to acquire dquot type 0 [ 69.089438][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.127406][ T29] audit: type=1400 audit(1769165012.310:734): avc: denied { connect } for pid=5184 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.147223][ T29] audit: type=1400 audit(1769165012.310:735): avc: denied { write } for pid=5184 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.191635][ T5190] loop2: detected capacity change from 0 to 256 [ 69.216298][ T5190] FAT-fs (loop2): codepage cp950 not found [ 69.275255][ T5202] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.276238][ T5200] tipc: Started in network mode [ 69.287158][ T5200] tipc: Node identity 32f51b3794c3, cluster identity 4711 [ 69.294537][ T5200] tipc: Enabled bearer , priority 0 [ 69.306571][ T5199] tipc: Disabling bearer [ 69.378327][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 69.487642][ T5211] netlink: 136 bytes leftover after parsing attributes in process `syz.4.591'. [ 69.509491][ T5214] loop3: detected capacity change from 0 to 256 [ 69.518693][ T5214] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.534283][ T5214] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.556474][ T5216] loop4: detected capacity change from 0 to 512 [ 69.563458][ T5216] EXT4-fs: test_dummy_encryption option not supported [ 70.227485][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.236709][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.395500][ T5232] tipc: Started in network mode [ 70.400686][ T5232] tipc: Node identity 4e80aa8a15ea, cluster identity 8 [ 70.407652][ T5232] tipc: Enabled bearer , priority 0 [ 70.417307][ T5231] tipc: Disabling bearer [ 70.418344][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 70.457037][ T5234] loop4: detected capacity change from 0 to 256 [ 70.477642][ T5234] FAT-fs (loop4): codepage cp949 not found [ 70.507380][ T5237] loop3: detected capacity change from 0 to 128 [ 70.874918][ T29] audit: type=1400 audit(1769165014.060:736): avc: denied { append } for pid=5245 comm="syz.0.603" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.928898][ T5246] vhci_hcd vhci_hcd.0: invalid port number 253 [ 70.935177][ T5246] vhci_hcd vhci_hcd.0: invalid port number 253 [ 71.177942][ T5248] ================================================================== [ 71.186130][ T5248] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 71.195127][ T5248] [ 71.197473][ T5248] write to 0xffff88812753a228 of 8 bytes by task 5249 on cpu 0: [ 71.205215][ T5248] shmem_file_splice_read+0x470/0x600 [ 71.210840][ T5248] splice_direct_to_actor+0x26e/0x670 [ 71.216259][ T5248] do_splice_direct+0x119/0x1a0 [ 71.221593][ T5248] do_sendfile+0x380/0x650 [ 71.226059][ T5248] __x64_sys_sendfile64+0x105/0x150 [ 71.231318][ T5248] x64_sys_call+0x2db1/0x3000 [ 71.236137][ T5248] do_syscall_64+0xc0/0x2a0 [ 71.240693][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.246794][ T5248] [ 71.249157][ T5248] write to 0xffff88812753a228 of 8 bytes by task 5248 on cpu 1: [ 71.256992][ T5248] shmem_file_splice_read+0x470/0x600 [ 71.262494][ T5248] splice_direct_to_actor+0x26e/0x670 [ 71.267903][ T5248] do_splice_direct+0x119/0x1a0 [ 71.272801][ T5248] do_sendfile+0x380/0x650 [ 71.277246][ T5248] __x64_sys_sendfile64+0x105/0x150 [ 71.282548][ T5248] x64_sys_call+0x2db1/0x3000 [ 71.287509][ T5248] do_syscall_64+0xc0/0x2a0 [ 71.292040][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.297961][ T5248] [ 71.300301][ T5248] value changed: 0x0000000000035620 -> 0x000000000003570c [ 71.307432][ T5248] [ 71.309777][ T5248] Reported by Kernel Concurrency Sanitizer on: [ 71.316313][ T5248] CPU: 1 UID: 0 PID: 5248 Comm: syz.0.604 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.325977][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.336144][ T5248] ================================================================== [ 71.458455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 72.498329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 73.548367][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 74.578347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 75.618387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 76.658462][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 77.698398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 78.738462][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 79.778412][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 80.818356][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available