last executing test programs: 50.321160131s ago: executing program 2 (id=1486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007ffd}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x40000) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 50.247684888s ago: executing program 2 (id=1492): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_uring_enter(r0, 0x40f9, 0x213, 0x20, 0x0, 0x0) 50.11967573s ago: executing program 2 (id=1496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 49.458379791s ago: executing program 2 (id=1513): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x1a8, 0x1, 0x401, 0x7}) 49.311509324s ago: executing program 2 (id=1519): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) 49.239040551s ago: executing program 2 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r3, 0x0, 0x1, 0x4}}, 0x20) 34.086987221s ago: executing program 32 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r3, 0x0, 0x1, 0x4}}, 0x20) 23.407276157s ago: executing program 4 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23.337241004s ago: executing program 4 (id=2232): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 23.334756734s ago: executing program 4 (id=2233): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 23.236918884s ago: executing program 4 (id=2234): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.099710206s ago: executing program 4 (id=2239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 23.029523872s ago: executing program 4 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r2, 0x0, 0x0) 18.841498299s ago: executing program 3 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0102000000000000000002000003300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269576765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 18.798032233s ago: executing program 3 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10) 18.708577822s ago: executing program 3 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) futimesat(r1, &(0x7f0000000500)='./file0\x00', 0x0) 18.651793127s ago: executing program 3 (id=2334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd7e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 18.557495936s ago: executing program 3 (id=2335): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 18.555112196s ago: executing program 3 (id=2336): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 17.163912854s ago: executing program 5 (id=2356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) unshare(0x6020400) acct(&(0x7f00000001c0)='./file0\x00') unshare(0x8020200) 17.041525606s ago: executing program 5 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) 16.978531032s ago: executing program 5 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffe}, 0x18) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x505, 0x0, 0x25dfdbfd}, 0x14}}, 0x10) 16.914756097s ago: executing program 5 (id=2365): r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) lseek(r2, 0xfffffffff7ffffff, 0x0) 16.852493193s ago: executing program 5 (id=2367): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) 16.802323248s ago: executing program 5 (id=2370): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 7.982463142s ago: executing program 33 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r2, 0x0, 0x0) 3.493283897s ago: executing program 34 (id=2336): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.984575117s ago: executing program 0 (id=2550): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_uring_enter(r0, 0x40f9, 0x213, 0x20, 0x0, 0x0) 1.7323517s ago: executing program 35 (id=2370): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 1.568954245s ago: executing program 1 (id=2559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 978.21877ms ago: executing program 0 (id=2569): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000180)="f3a6", 0x2, 0x4, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r2, 0x2}, 0x8) 975.98213ms ago: executing program 1 (id=2570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 826.945054ms ago: executing program 0 (id=2562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 736.779612ms ago: executing program 0 (id=2564): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x8, 0x128f, &(0x7f0000003700)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x40000, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f0000001180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85) 704.824695ms ago: executing program 1 (id=2565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) getgroups(0x0, 0x0) 551.98671ms ago: executing program 0 (id=2566): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') lseek(r2, 0xffffff60, 0x1) 551.84645ms ago: executing program 1 (id=2567): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, 0x0]) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 502.307204ms ago: executing program 6 (id=2568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r2, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) 423.620251ms ago: executing program 6 (id=2571): symlinkat(0x0, 0xffffffffffffff9c, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x2000000000}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 317.390801ms ago: executing program 6 (id=2572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "d1546197deb53ddf", "b3d231449ef9d69bbc16d13a1ca02d4c", "6c1fda88", "72b3166eddc7622e"}, 0x28) 317.005511ms ago: executing program 6 (id=2573): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000440)={0x0, 0x46a9, 0x400, 0x3, 0x108}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010020}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1) 283.280914ms ago: executing program 6 (id=2574): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 240.613818ms ago: executing program 1 (id=2575): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) 14.136209ms ago: executing program 0 (id=2576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) 13.860949ms ago: executing program 1 (id=2577): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x1a8, 0x1, 0x401, 0x7}) 0s ago: executing program 6 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) kernel console output (not intermixed with test programs): rmissive=0 [ 56.143739][ T29] audit: type=1400 audit(1766832395.166:52358): avc: denied { create } for pid=5505 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.164370][ T29] audit: type=1400 audit(1766832395.176:52359): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.185264][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.188837][ T29] audit: type=1400 audit(1766832395.186:52360): avc: denied { create } for pid=5507 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.195223][ T3043] audit: audit_lost=2192 audit_rate_limit=0 audit_backlog_limit=64 [ 56.195242][ T3043] audit: backlog limit exceeded [ 56.208739][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.215800][ T29] audit: type=1400 audit(1766832395.186:52361): avc: denied { map_create } for pid=5507 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.649255][ T5558] netem: incorrect ge model size [ 56.654291][ T5558] netem: change failed [ 56.708623][ T5567] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 56.790207][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 56.817574][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 56.838917][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 56.861419][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 56.926263][ T5587] ip6gretap0: entered promiscuous mode [ 56.945249][ T5587] ip6gretap0: left promiscuous mode [ 57.775619][ T5649] pim6reg1: entered promiscuous mode [ 57.781017][ T5649] pim6reg1: entered allmulticast mode [ 57.958387][ T5662] netlink: 'syz.0.967': attribute type 2 has an invalid length. [ 57.966114][ T5662] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 57.973804][ T5662] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 57.981476][ T5662] netlink: 76 bytes leftover after parsing attributes in process `syz.0.967'. [ 58.807996][ T5751] team0: Device gtp0 is of different type [ 59.469494][ T5805] __nla_validate_parse: 2 callbacks suppressed [ 59.469515][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 59.545403][ T5811] netlink: 'syz.3.1037': attribute type 9 has an invalid length. [ 59.553286][ T5811] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1037'. [ 60.138431][ T5887] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1073'. [ 61.004015][ T5968] Falling back ldisc for ttyS3. [ 61.102581][ T29] kauditd_printk_skb: 27596 callbacks suppressed [ 61.102598][ T29] audit: type=1400 audit(1766832400.296:76329): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.127819][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.139902][ T3043] audit: audit_lost=3403 audit_rate_limit=0 audit_backlog_limit=64 [ 61.144706][ T3313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.147880][ T3043] audit: backlog limit exceeded [ 61.154394][ T3313] audit: audit_lost=3404 audit_rate_limit=0 audit_backlog_limit=64 [ 61.167164][ T3313] audit: backlog limit exceeded [ 61.172254][ T5984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.178808][ T5984] audit: audit_lost=3405 audit_rate_limit=0 audit_backlog_limit=64 [ 61.179137][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.414138][ T6137] tipc: Started in network mode [ 62.419072][ T6137] tipc: Node identity 4, cluster identity 4711 [ 62.425345][ T6137] tipc: Node number set to 4 [ 62.976440][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 62.985556][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 63.021181][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 63.030345][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 63.069959][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 63.079076][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 63.107971][ T6186] loop0: detected capacity change from 0 to 8192 [ 63.185732][ T6198] ip6gre0: entered promiscuous mode [ 63.200176][ T6198] team0: Device ip6gre0 is of different type [ 63.221819][ T6202] netlink: 'syz.0.1220': attribute type 4 has an invalid length. [ 63.304930][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 63.342641][ T6214] loop3: detected capacity change from 0 to 8192 [ 63.746752][ T6254] netlink: 'syz.3.1244': attribute type 30 has an invalid length. [ 63.879862][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 63.887791][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 63.910799][ T6262] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.927601][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.935376][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.943238][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.950942][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.958686][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.966426][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.974141][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 63.981888][ T4481] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 64.043522][ T6270] netlink: 'syz.1.1251': attribute type 3 has an invalid length. [ 64.055637][ T6272] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 64.122105][ T4481] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 64.257842][ T6284] fido_id[6284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.541653][ T6312] __nla_validate_parse: 2 callbacks suppressed [ 64.541666][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 64.556872][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 64.613297][ T6312] wireguard0: entered promiscuous mode [ 64.618826][ T6312] wireguard0: entered allmulticast mode [ 65.028162][ T6335] process 'syz.2.1279' launched './file1' with NULL argv: empty string added [ 65.071794][ T6338] loop2: detected capacity change from 0 to 128 [ 65.246240][ T6349] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1287'. [ 65.322682][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.322682][ T60] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 65.351993][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.351993][ T60] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 65.392205][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.392205][ T60] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 65.442568][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.442568][ T60] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 65.476121][ T6359] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1291'. [ 65.485320][ T6359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.502142][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.502142][ T60] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 65.548967][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.548967][ T60] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 65.582583][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.582583][ T60] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 65.596305][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.596305][ T60] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 65.610159][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.610159][ T60] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 65.623856][ T60] kworker/u8:4: attempt to access beyond end of device [ 65.623856][ T60] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 65.647240][ T6371] serio: Serial port ptm0 [ 65.706623][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 65.733570][ T6379] xfrm1: entered promiscuous mode [ 65.738662][ T6379] xfrm1: entered allmulticast mode [ 65.747374][ T6381] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1300'. [ 65.772083][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 65.799872][ T6371] serio: Serial port ptm0 [ 65.875113][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.883939][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.009303][ T6401] netem: change failed [ 66.067463][ T4481] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 66.113613][ T29] kauditd_printk_skb: 6891 callbacks suppressed [ 66.113631][ T29] audit: type=1400 audit(1766832405.306:83104): avc: denied { create } for pid=6409 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.130662][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.143422][ T6412] loop2: detected capacity change from 0 to 128 [ 66.171860][ T29] audit: type=1400 audit(1766832405.356:83105): avc: denied { connect } for pid=6409 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.192090][ T29] audit: type=1400 audit(1766832405.356:83106): avc: denied { write } for pid=6409 comm="syz.1.1314" path="socket:[14351]" dev="sockfs" ino=14351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.225408][ T6412] FAT-fs (loop2): Directory bread(block 32) failed [ 66.232185][ T6412] FAT-fs (loop2): Directory bread(block 33) failed [ 66.238809][ T6412] FAT-fs (loop2): Directory bread(block 34) failed [ 66.245437][ T6412] FAT-fs (loop2): Directory bread(block 35) failed [ 66.255637][ T6412] FAT-fs (loop2): Directory bread(block 36) failed [ 66.265726][ T6412] FAT-fs (loop2): Directory bread(block 37) failed [ 66.274599][ T6412] FAT-fs (loop2): Directory bread(block 38) failed [ 66.281175][ T6412] FAT-fs (loop2): Directory bread(block 39) failed [ 66.287978][ T6412] FAT-fs (loop2): Directory bread(block 40) failed [ 66.294873][ T6412] FAT-fs (loop2): Directory bread(block 41) failed [ 66.453393][ T6430] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 66.473446][ T6436] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 66.481256][ T6436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1325'. [ 66.519331][ T29] audit: type=1400 audit(1766832405.706:83107): avc: denied { name_bind } for pid=6441 comm="syz.1.1329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.582474][ T29] audit: type=1400 audit(1766832405.776:83108): avc: denied { setopt } for pid=6443 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.605669][ T6447] sch_tbf: burst 842 is lower than device lo mtu (65550) ! [ 66.613466][ T6447] sch_tbf: burst 842 is lower than device lo mtu (65550) ! [ 66.622767][ T6440] loop4: detected capacity change from 0 to 8192 [ 66.635847][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 66.645284][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 66.683669][ T6440] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.703125][ T29] audit: type=1400 audit(1766832405.896:83109): avc: denied { create } for pid=6450 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.752979][ T29] audit: type=1400 audit(1766832405.916:83110): avc: denied { setopt } for pid=6450 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.784766][ T6456] netlink: 'syz.2.1336': attribute type 21 has an invalid length. [ 66.795764][ T6452] netlink: 'syz.1.1333': attribute type 7 has an invalid length. [ 66.839544][ T6456] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 66.888169][ T29] audit: type=1400 audit(1766832406.076:83111): avc: denied { create } for pid=6468 comm="syz.1.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.923680][ T29] audit: type=1400 audit(1766832406.106:83112): avc: denied { bind } for pid=6468 comm="syz.1.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.943671][ T29] audit: type=1400 audit(1766832406.116:83113): avc: denied { write } for pid=6468 comm="syz.1.1343" path="socket:[14439]" dev="sockfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.235643][ T6502] loop4: detected capacity change from 0 to 1024 [ 67.255708][ T6502] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 67.290877][ T6502] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.368752][ T6502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.403401][ T6502] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 67.479944][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.494924][ T6522] syz.3.1365 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.535270][ T6524] SELinux: failed to load policy [ 67.588291][ T6531] netlink: 'syz.3.1370': attribute type 7 has an invalid length. [ 67.596236][ T6531] netlink: 'syz.3.1370': attribute type 8 has an invalid length. [ 67.673704][ T6536] ALSA: seq fatal error: cannot create timer (-19) [ 68.059134][ T6578] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.462360][ T6614] netlink: 'syz.0.1408': attribute type 29 has an invalid length. [ 68.659794][ T6625] loop4: detected capacity change from 0 to 128 [ 68.808305][ T6638] netlink: 'syz.0.1420': attribute type 12 has an invalid length. [ 68.848862][ T6639] loop2: detected capacity change from 0 to 512 [ 68.904493][ T6639] EXT4-fs: inline encryption not supported [ 68.953673][ T6649] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.958802][ T6639] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 68.974196][ T6639] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1419: iget: bad i_size value: 12154757448730 [ 68.992455][ T6639] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1419: couldn't read orphan inode 13 (err -117) [ 69.017484][ T6651] loop0: detected capacity change from 0 to 512 [ 69.034575][ T6639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.084714][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.103021][ T6651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.105146][ T6636] EXT4-fs (loop2): shut down requested (0) [ 69.123615][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.148750][ T6651] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.185144][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.302021][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.398798][ T6692] bridge_slave_0: left promiscuous mode [ 69.404657][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.424910][ T6692] bridge_slave_1: left allmulticast mode [ 69.430703][ T6692] bridge_slave_1: left promiscuous mode [ 69.436467][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.465448][ T6692] bond0: (slave bond_slave_0): Releasing backup interface [ 69.483602][ T6707] loop4: detected capacity change from 0 to 1024 [ 69.491391][ T6692] bond0: (slave bond_slave_1): Releasing backup interface [ 69.513411][ T6707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.528785][ T6692] team0: Port device team_slave_0 removed [ 69.545449][ T6710] netlink: 'syz.1.1448': attribute type 21 has an invalid length. [ 69.547528][ T6692] team0: Port device team_slave_1 removed [ 69.556408][ T6707] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.571275][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.578763][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.595294][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.602835][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.615026][ T6692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.633867][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.649799][ T6710] __nla_validate_parse: 8 callbacks suppressed [ 69.649820][ T6710] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1448'. [ 69.665206][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 69.808615][ T6733] loop2: detected capacity change from 0 to 512 [ 69.858610][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 69.867616][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 69.910000][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 70.202403][ T6761] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 70.547375][ T6773] netlink: 8 bytes leftover after parsing attributes in process `'. [ 70.863782][ T6795] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1487'. [ 70.905668][ T6798] loop3: detected capacity change from 0 to 1024 [ 70.943003][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.995467][ T6802] loop1: detected capacity change from 0 to 8192 [ 71.027835][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.134753][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 71.134771][ T29] audit: type=1326 audit(1766832410.326:83215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.166518][ T29] audit: type=1326 audit(1766832410.326:83216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.190808][ T6823] loop2: detected capacity change from 0 to 512 [ 71.197298][ T29] audit: type=1326 audit(1766832410.386:83217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.197410][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 71.220909][ T29] audit: type=1326 audit(1766832410.386:83218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.253236][ T29] audit: type=1326 audit(1766832410.386:83219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.269412][ T6823] EXT4-fs: Ignoring removed orlov option [ 71.308045][ T29] audit: type=1326 audit(1766832410.426:83220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.331816][ T29] audit: type=1326 audit(1766832410.426:83221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.355513][ T29] audit: type=1326 audit(1766832410.426:83222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 71.380208][ T6832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1500'. [ 71.417991][ T6823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.430753][ T6823] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.437799][ T29] audit: type=1400 audit(1766832410.626:83223): avc: denied { write } for pid=6838 comm="syz.1.1504" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.437992][ T6840] random: crng reseeded on system resumption [ 71.467343][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.482790][ T6827] bond0: (slave bond2): Enslaving as an active interface with an up link [ 71.491334][ T29] audit: type=1400 audit(1766832410.626:83224): avc: denied { open } for pid=6838 comm="syz.1.1504" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.509552][ T6823] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1496: bg 0: block 248: padding at end of block bitmap is not set [ 71.534223][ T6832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.554523][ T6823] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1496: Failed to acquire dquot type 1 [ 71.568818][ T6823] EXT4-fs (loop2): 1 truncate cleaned up [ 71.575926][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.579674][ T6832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.597296][ T6823] EXT4-fs: Ignoring removed orlov option [ 71.604413][ T6823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.613435][ T6823] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 71.624387][ T6832] bond0 (unregistering): (slave bond2): Releasing backup interface [ 71.635754][ T6832] bond0 (unregistering): Released all slaves [ 71.643306][ T6823] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.1496: Abort forced by user [ 71.653841][ T6823] EXT4-fs (loop2): Remounting filesystem read-only [ 71.660445][ T6823] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 71.674784][ T6823] ext4 filesystem being remounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.750276][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.793324][ C1] hrtimer: interrupt took 34100 ns [ 71.827520][ T6872] loop4: detected capacity change from 0 to 512 [ 71.854942][ T6877] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.854942][ T6877] program syz.0.1518 not setting count and/or reply_len properly [ 71.874212][ T6872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.919598][ T6872] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.939295][ T6882] loop1: detected capacity change from 0 to 2048 [ 71.969360][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.005444][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 72.007129][ T6882] Alternate GPT is invalid, using primary GPT. [ 72.015479][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.021265][ T6882] loop1: p1 p2 p3 [ 72.034783][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 72.037673][ T6882] loop1: partition table partially beyond EOD, truncated [ 72.047715][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.076431][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 72.095858][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.135242][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 72.152487][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.211543][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 72.225148][ T6892] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 72.226644][ T6665] udevd[6665]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 72.234042][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 72.264011][ T6508] udevd[6508]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 72.287834][ T6872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.1515: corrupted xattr block 6: invalid header [ 72.367264][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.577681][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 72.805398][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.842192][ T6927] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.860677][ T6927] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1539: corrupted inode contents [ 72.909062][ T6927] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1539: mark_inode_dirty error [ 72.921219][ T6927] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1539: corrupted inode contents [ 72.933258][ T6927] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1539: mark_inode_dirty error [ 72.950662][ T6927] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 22: comm syz.1.1539: bad entry in directory: directory entry overrun - offset=0, inode=19, rec_len=65536, size=2048 fake=0 [ 73.003744][ T6927] EXT4-fs error (device loop1) in ext4_resetent:3676: error 2 [ 73.030168][ T6927] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #19: comm syz.1.1539: corrupted xattr block 22: invalid header [ 73.065088][ T6927] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 73.132932][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.133135][ T6946] SELinux: Context Ü is not valid (left unmapped). [ 73.446072][ T6980] vhci_hcd vhci_hcd.4: invalid port number 253 [ 73.452429][ T6980] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 73.797686][ T7006] netlink: 'syz.1.1573': attribute type 3 has an invalid length. [ 73.827155][ T7006] netlink: 'syz.1.1573': attribute type 3 has an invalid length. [ 73.913981][ T7012] set_capacity_and_notify: 1 callbacks suppressed [ 73.914003][ T7012] loop4: detected capacity change from 0 to 1024 [ 73.980586][ T7012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.028958][ T7012] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.050828][ T7012] EXT4-fs (loop4): shut down requested (2) [ 74.160477][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.183680][ T7028] loop1: detected capacity change from 0 to 8192 [ 74.236712][ T7028] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 74.245626][ T7028] FAT-fs (loop1): Filesystem has been set read-only [ 74.587397][ T7046] loop4: detected capacity change from 0 to 128 [ 74.610039][ T7046] EXT4-fs: Ignoring removed nobh option [ 74.622925][ T7046] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.642184][ T7046] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.713556][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.834286][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.855921][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.947173][ T7066] netlink: 'syz.1.1596': attribute type 4 has an invalid length. [ 75.578944][ T7097] loop0: detected capacity change from 0 to 8192 [ 75.602026][ T4203] Bluetooth: hci0: command 0x1003 tx timeout [ 75.608117][ T3498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.808358][ T7112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 75.874287][ T7110] loop4: detected capacity change from 0 to 8192 [ 76.230313][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 76.230329][ T29] audit: type=1400 audit(1766832415.416:83360): avc: denied { execute } for pid=7143 comm="syz.4.1630" name="file1" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.305465][ T29] audit: type=1400 audit(1766832415.416:83361): avc: denied { execute_no_trans } for pid=7143 comm="syz.4.1630" path="/309/file1" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.381962][ T29] audit: type=1400 audit(1766832415.546:83362): avc: denied { setopt } for pid=7149 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.401879][ T29] audit: type=1400 audit(1766832415.546:83363): avc: denied { write } for pid=7149 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.439421][ T7153] serio: Serial port ptm1 [ 76.534033][ T29] audit: type=1400 audit(1766832415.726:83364): avc: denied { read write } for pid=7159 comm="syz.1.1637" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.557621][ T29] audit: type=1400 audit(1766832415.726:83365): avc: denied { open } for pid=7159 comm="syz.1.1637" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.583343][ T5448] hid_parser_main: 9 callbacks suppressed [ 76.583363][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 76.596842][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 76.622150][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.629966][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.637704][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.645599][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.653300][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.660975][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.668805][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.676484][ T5448] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 76.714379][ T5448] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.729959][ T29] audit: type=1400 audit(1766832415.926:83366): avc: denied { relabelfrom } for pid=7161 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.749976][ T29] audit: type=1400 audit(1766832415.926:83367): avc: denied { relabelto } for pid=7161 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.811369][ T7166] sctp: [Deprecated]: syz.4.1640 (pid 7166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.811369][ T7166] Use struct sctp_sack_info instead [ 76.828696][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.834253][ T29] audit: type=1400 audit(1766832415.996:83368): avc: denied { getopt } for pid=7165 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.928833][ T29] audit: type=1326 audit(1766832416.036:83369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 76.993175][ T7178] __nla_validate_parse: 9 callbacks suppressed [ 76.993212][ T7178] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1645'. [ 76.993505][ T7176] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 77.341536][ T7204] loop1: detected capacity change from 0 to 8192 [ 77.394229][ T7204] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.457399][ T7217] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 77.475124][ T7215] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.492217][ T7215] vhci_hcd vhci_hcd.2: invalid port number 96 [ 77.498402][ T7215] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 77.565177][ T7224] capability: warning: `syz.1.1667' uses 32-bit capabilities (legacy support in use) [ 77.645579][ T7230] hsr0: entered promiscuous mode [ 77.671492][ T7234] loop1: detected capacity change from 0 to 512 [ 77.692693][ T7234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.734878][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.747569][ T7234] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.793279][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.873664][ T7246] xt_hashlimit: max too large, truncated to 1048576 [ 77.992977][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1681'. [ 78.110395][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 78.119465][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 78.142162][ T7263] wireguard0: entered promiscuous mode [ 78.147649][ T7263] wireguard0: entered allmulticast mode [ 78.554797][ T7308] SELinux: policydb version 0 does not match my version range 15-35 [ 78.615447][ T7308] SELinux: failed to load policy [ 78.655520][ T7320] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1711'. [ 78.703190][ T7325] program syz.4.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.973423][ T7348] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1723'. [ 79.076656][ T7364] loop0: detected capacity change from 0 to 512 [ 79.084287][ T7364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.112916][ T7364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.172192][ T7364] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.232874][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.314971][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1735'. [ 79.324047][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1735'. [ 79.333046][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1735'. [ 79.370754][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 79.414533][ T7387] xfrm1: entered promiscuous mode [ 79.419671][ T7387] xfrm1: entered allmulticast mode [ 79.483440][ T7402] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.717290][ T7427] serio: Serial port ptm0 [ 79.865104][ T7427] serio: Serial port ptm0 [ 80.090416][ T7470] IPVS: Error connecting to the multicast addr [ 80.103135][ T7472] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 80.116154][ T7472] SELinux: failed to load policy [ 80.505328][ T7511] loop4: detected capacity change from 0 to 128 [ 80.687904][ T7517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 80.730560][ T3448] bio_check_eod: 104 callbacks suppressed [ 80.730579][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.730579][ T3448] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 80.755246][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.755246][ T3448] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 80.768831][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.768831][ T3448] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 80.782767][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.782767][ T3448] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 80.796290][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.796290][ T3448] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 80.819146][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.819146][ T3448] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 80.832955][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.832955][ T3448] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 80.847153][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.847153][ T3448] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 80.864240][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.864240][ T3448] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 80.902712][ T3448] kworker/u8:11: attempt to access beyond end of device [ 80.902712][ T3448] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 81.252633][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 81.252671][ T29] audit: type=1400 audit(1766832420.446:83578): avc: denied { bind } for pid=7561 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.316165][ T29] audit: type=1400 audit(1766832420.446:83579): avc: denied { name_bind } for pid=7561 comm="syz.4.1809" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.338205][ T29] audit: type=1400 audit(1766832420.446:83580): avc: denied { node_bind } for pid=7561 comm="syz.4.1809" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 81.360038][ T29] audit: type=1400 audit(1766832420.446:83581): avc: denied { write } for pid=7561 comm="syz.4.1809" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.455353][ T29] audit: type=1326 audit(1766832420.616:83582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 81.479091][ T29] audit: type=1326 audit(1766832420.616:83583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 81.502583][ T29] audit: type=1326 audit(1766832420.616:83584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 81.549943][ T29] audit: type=1400 audit(1766832420.736:83585): avc: denied { write } for pid=7569 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.655912][ T29] audit: type=1400 audit(1766832420.846:83586): avc: denied { name_bind } for pid=7580 comm="syz.1.1819" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.677811][ T29] audit: type=1400 audit(1766832420.846:83587): avc: denied { node_bind } for pid=7580 comm="syz.1.1819" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.784484][ T7589] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 81.866804][ T7593] loop0: detected capacity change from 0 to 512 [ 81.887292][ T7593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.907536][ T7593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 81.924048][ T7593] System zones: 1-12 [ 81.933347][ T7593] EXT4-fs (loop0): 1 truncate cleaned up [ 81.939461][ T7593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.054252][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.101672][ T23] hid_parser_main: 6 callbacks suppressed [ 82.101698][ T23] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 82.115273][ T23] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 82.147067][ T23] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 82.162408][ T23] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.214374][ T7610] fido_id[7610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.226224][ T7614] loop0: detected capacity change from 0 to 512 [ 82.275711][ T7614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.416280][ T7614] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.465554][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.594589][ T7626] loop4: detected capacity change from 0 to 512 [ 82.649092][ T7626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.676954][ T7626] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.762634][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.865983][ T7642] IPv6: Can't replace route, no match found [ 83.093999][ T7657] loop1: detected capacity change from 0 to 1024 [ 83.100813][ T7657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.144530][ T7661] team0: Device gtp0 is of different type [ 83.199464][ T7657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.302327][ T7667] SELinux: failed to load policy [ 83.465966][ T7674] xt_hashlimit: max too large, truncated to 1048576 [ 83.550739][ T7680] loop0: detected capacity change from 0 to 128 [ 83.578792][ T7680] FAT-fs (loop0): Directory bread(block 32) failed [ 83.594756][ T7680] FAT-fs (loop0): Directory bread(block 33) failed [ 83.616156][ T7680] FAT-fs (loop0): Directory bread(block 34) failed [ 83.643756][ T7680] FAT-fs (loop0): Directory bread(block 35) failed [ 83.667916][ T7680] FAT-fs (loop0): Directory bread(block 36) failed [ 83.689596][ T7680] FAT-fs (loop0): Directory bread(block 37) failed [ 83.710598][ T7680] FAT-fs (loop0): Directory bread(block 38) failed [ 83.734413][ T7680] FAT-fs (loop0): Directory bread(block 39) failed [ 83.757419][ T7680] FAT-fs (loop0): Directory bread(block 40) failed [ 83.780889][ T7680] FAT-fs (loop0): Directory bread(block 41) failed [ 83.960232][ T7699] loop0: detected capacity change from 0 to 128 [ 83.986600][ T7657] syz.1.1850 (7657) used greatest stack depth: 7080 bytes left [ 84.048443][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.192962][ T7717] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 84.220455][ T7717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.242586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.398578][ T7733] __nla_validate_parse: 3 callbacks suppressed [ 84.398596][ T7733] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1884'. [ 84.414012][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 84.430753][ T7734] sch_tbf: burst 842 is lower than device lo mtu (65550) ! [ 84.445989][ T7736] xt_hashlimit: max too large, truncated to 1048576 [ 84.460910][ T7734] sch_tbf: burst 842 is lower than device lo mtu (65550) ! [ 84.553626][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 84.586491][ T7740] loop3: detected capacity change from 0 to 8192 [ 84.593262][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 84.714650][ T7745] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 84.772583][ T7747] SELinux: policydb version 0 does not match my version range 15-35 [ 84.780796][ T7747] SELinux: failed to load policy [ 85.644761][ T7764] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 85.671279][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1898'. [ 85.751502][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1901'. [ 85.790271][ T7776] netlink: 'syz.4.1903': attribute type 2 has an invalid length. [ 85.798109][ T7776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1903'. [ 85.906012][ T7785] loop4: detected capacity change from 0 to 512 [ 85.917225][ T7785] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.950048][ T7785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.973091][ T7789] loop1: detected capacity change from 0 to 2048 [ 85.985766][ T7785] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1907: Allocating blocks 41-42 which overlap fs metadata [ 86.013125][ T7789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.081183][ T7789] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.092496][ T7785] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1907: Allocating blocks 41-42 which overlap fs metadata [ 86.111115][ T7798] netlink: 'syz.3.1912': attribute type 7 has an invalid length. [ 86.124545][ T7785] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1907: Failed to acquire dquot type 1 [ 86.152523][ T7785] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 86.175008][ T7785] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1907: corrupted inode contents [ 86.192739][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.224425][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 86.233540][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 86.263571][ T7785] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1907: mark_inode_dirty error [ 86.301211][ T7785] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1907: corrupted inode contents [ 86.337325][ T7785] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1907: mark_inode_dirty error [ 86.374165][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 86.374184][ T29] audit: type=1400 audit(1766832425.556:83644): avc: denied { read write } for pid=7813 comm="syz.1.1920" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 86.377901][ T7785] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1907: corrupted inode contents [ 86.380373][ T29] audit: type=1400 audit(1766832425.556:83645): avc: denied { open } for pid=7813 comm="syz.1.1920" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 86.455801][ T7785] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 86.502753][ T7785] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1907: corrupted inode contents [ 86.505313][ T29] audit: type=1400 audit(1766832425.686:83646): avc: denied { getopt } for pid=7817 comm="syz.3.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.541278][ T7785] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1907: mark_inode_dirty error [ 86.597059][ T7785] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 86.628852][ T7785] EXT4-fs (loop4): 1 truncate cleaned up [ 86.648091][ T7828] SELinux: Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped). [ 86.651440][ T7785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.673860][ T7785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.754991][ T29] audit: type=1326 audit(1766832425.946:83647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 86.778601][ T29] audit: type=1326 audit(1766832425.946:83648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 86.943645][ T29] audit: type=1326 audit(1766832425.996:83649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 86.967342][ T29] audit: type=1326 audit(1766832425.996:83650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 86.991066][ T29] audit: type=1326 audit(1766832425.996:83651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 87.014820][ T29] audit: type=1326 audit(1766832425.996:83652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 87.038522][ T29] audit: type=1326 audit(1766832425.996:83653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7837 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 87.226579][ T23] Process accounting resumed [ 87.292894][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 87.439548][ T2264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.440027][ T7902] loop1: detected capacity change from 0 to 8192 [ 87.467317][ T7902] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.486746][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 87.534017][ T2264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.618683][ T2264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.698796][ T2264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.719756][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.726939][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.734180][ T7877] bridge_slave_0: entered allmulticast mode [ 87.740750][ T7877] bridge_slave_0: entered promiscuous mode [ 87.749722][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.756960][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.772105][ T7877] bridge_slave_1: entered allmulticast mode [ 87.778750][ T7877] bridge_slave_1: entered promiscuous mode [ 87.814420][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.832474][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.845261][ T7934] netlink: 'syz.3.1968': attribute type 21 has an invalid length. [ 87.873239][ T7934] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 87.900077][ T7877] team0: Port device team_slave_0 added [ 87.913511][ T2264] bridge_slave_1: left allmulticast mode [ 87.919259][ T2264] bridge_slave_1: left promiscuous mode [ 87.925001][ T2264] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.935604][ T2264] bridge_slave_0: left allmulticast mode [ 87.941499][ T2264] bridge_slave_0: left promiscuous mode [ 87.947423][ T2264] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.142886][ T7959] loop1: detected capacity change from 0 to 512 [ 88.153196][ T7959] journal_path: Lookup failure for './file0' [ 88.159361][ T7959] EXT4-fs: error: could not find journal device path [ 88.231858][ T7877] team0: Port device team_slave_1 added [ 88.271029][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.278204][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.304265][ T7877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.336830][ T2264] hsr_slave_0: left promiscuous mode [ 88.365195][ T2264] hsr_slave_1: left promiscuous mode [ 88.398593][ T2264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.406136][ T2264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.450703][ T2264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.458261][ T2264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.512133][ T2264] veth1_macvtap: left promiscuous mode [ 88.517827][ T2264] veth0_macvtap: left promiscuous mode [ 88.525130][ T2264] veth1_vlan: left promiscuous mode [ 88.532899][ T2264] veth0_vlan: left promiscuous mode [ 88.543233][ T8004] loop0: detected capacity change from 0 to 512 [ 88.560272][ T8004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.605149][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.647432][ T8004] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.697987][ T2264] team0 (unregistering): Port device team_slave_1 removed [ 88.708212][ T2264] team0 (unregistering): Port device team_slave_0 removed [ 88.745977][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.757667][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.764693][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.790753][ T7877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.806394][ T8014] loop1: detected capacity change from 0 to 1024 [ 88.832774][ T8014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.875978][ T8021] loop0: detected capacity change from 0 to 512 [ 88.899570][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.916665][ T8021] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.932712][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.942418][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.950502][ T8021] EXT4-fs (loop0): mount failed [ 88.996196][ T7877] hsr_slave_0: entered promiscuous mode [ 89.032480][ T7877] hsr_slave_1: entered promiscuous mode [ 89.045734][ T7877] debugfs: 'hsr0' already exists in 'hsr' [ 89.051528][ T7877] Cannot create hsr debugfs directory [ 89.195578][ T8054] loop0: detected capacity change from 0 to 1024 [ 89.214104][ T8054] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 89.239909][ T8054] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.255309][ T7877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.274619][ T7877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.283422][ T7877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.292490][ T7877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.327005][ T8058] loop1: detected capacity change from 0 to 1024 [ 89.378523][ T8058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 89.407627][ T8058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.414438][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.426814][ T8058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2007: bg 0: block 88: padding at end of block bitmap is not set [ 89.467830][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.477984][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.485082][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.496401][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.498394][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.503558][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.592982][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.610861][ T8054] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 89.629317][ T8090] loop3: detected capacity change from 0 to 256 [ 89.655982][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.701072][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.056559][ T7877] veth0_vlan: entered promiscuous mode [ 90.065538][ T7877] veth1_vlan: entered promiscuous mode [ 90.112178][ T7877] veth0_macvtap: entered promiscuous mode [ 90.126802][ T7877] veth1_macvtap: entered promiscuous mode [ 90.173526][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.186084][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.196899][ T2264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211254][ T2264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.236520][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263510][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.297797][ T8153] loop5: detected capacity change from 0 to 256 [ 90.380608][ T8162] SELinux: failed to load policy [ 90.603352][ T8192] __nla_validate_parse: 3 callbacks suppressed [ 90.603367][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 90.641045][ T8194] loop1: detected capacity change from 0 to 512 [ 90.665589][ T8194] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.714977][ T8194] EXT4-fs (loop1): mount failed [ 90.797707][ T8203] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.823062][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.832140][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.870866][ T8203] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.897222][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.906386][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2046'. [ 90.927196][ T8211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2048'. [ 90.936375][ T8211] netlink: 'syz.4.2048': attribute type 7 has an invalid length. [ 90.944226][ T8211] netlink: 'syz.4.2048': attribute type 8 has an invalid length. [ 90.951991][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 90.969078][ T8203] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2046'. [ 91.105980][ T8221] ALSA: seq fatal error: cannot create timer (-19) [ 91.414054][ T8248] loop0: detected capacity change from 0 to 512 [ 91.467122][ T8248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.480270][ T8248] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.499941][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 91.499955][ T29] audit: type=1400 audit(1766832430.686:83764): avc: denied { setattr } for pid=8247 comm="syz.0.2064" path="/377/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.584329][ T29] audit: type=1400 audit(1766832430.756:83765): avc: denied { mount } for pid=8261 comm="syz.5.2070" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.624731][ T8266] macvtap1: entered promiscuous mode [ 91.630109][ T8266] macvtap1: entered allmulticast mode [ 91.705313][ T29] audit: type=1400 audit(1766832430.896:83766): avc: denied { map } for pid=8275 comm="syz.5.2077" path="socket:[19855]" dev="sockfs" ino=19855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 91.824300][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.879075][ T8300] netlink: 'syz.5.2084': attribute type 29 has an invalid length. [ 91.892708][ T8302] IPv6: addrconf: prefix option has invalid lifetime [ 91.972880][ T29] audit: type=1400 audit(1766832431.166:83767): avc: denied { write } for pid=8311 comm="syz.5.2092" name="anycast6" dev="proc" ino=4026533478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 92.018601][ T29] audit: type=1400 audit(1766832431.206:83768): avc: denied { compute_member } for pid=8313 comm="syz.3.2094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.172019][ T29] audit: type=1400 audit(1766832431.346:83769): avc: denied { name_connect } for pid=8330 comm="syz.3.2100" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 92.685045][ T8336] loop1: detected capacity change from 0 to 1024 [ 92.741550][ T8336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.770454][ T8336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 92.799907][ T8336] System zones: 0-1, 3-36 [ 92.811035][ T8336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.836501][ T29] audit: type=1326 audit(1766832432.026:83770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 92.881638][ T29] audit: type=1326 audit(1766832432.026:83771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 92.905255][ T29] audit: type=1326 audit(1766832432.026:83772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 92.918798][ T8340] cgroup: fork rejected by pids controller in /syz4 [ 92.928883][ T29] audit: type=1326 audit(1766832432.026:83773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 92.977472][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.136968][ T8360] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 93.348730][ T8375] netlink: 'syz.5.2121': attribute type 12 has an invalid length. [ 93.472048][ T8387] netem: change failed [ 93.489067][ T8378] loop1: detected capacity change from 0 to 8192 [ 93.505340][ T2151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.543948][ T8378] bio_check_eod: 105 callbacks suppressed [ 93.543966][ T8378] syz.1.2122: attempt to access beyond end of device [ 93.543966][ T8378] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 93.573903][ T2151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.585797][ T8378] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 93.593817][ T8378] FAT-fs (loop1): Filesystem has been set read-only [ 93.600816][ T8378] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 93.614382][ T2151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.652126][ T8378] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 93.696199][ T2151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.786268][ T8408] loop1: detected capacity change from 0 to 164 [ 93.795547][ T2151] bridge_slave_1: left allmulticast mode [ 93.801219][ T2151] bridge_slave_1: left promiscuous mode [ 93.807013][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.834801][ T8408] syz.1.2145: attempt to access beyond end of device [ 93.834801][ T8408] loop1: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 93.861100][ T2151] bridge_slave_0: left allmulticast mode [ 93.866906][ T2151] bridge_slave_0: left promiscuous mode [ 93.872796][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.884081][ T8408] syz.1.2145: attempt to access beyond end of device [ 93.884081][ T8408] loop1: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 94.010092][ T8426] loop1: detected capacity change from 0 to 512 [ 94.017818][ T8426] EXT4-fs: inline encryption not supported [ 94.044258][ T8426] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 94.052869][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.075679][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.089774][ T8426] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.2139: iget: bad i_size value: 12154757448730 [ 94.103597][ T2151] bond0 (unregistering): Released all slaves [ 94.113483][ T2151] bond1 (unregistering): Released all slaves [ 94.119662][ T8426] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2139: couldn't read orphan inode 13 (err -117) [ 94.134290][ T2151] bond2 (unregistering): Released all slaves [ 94.145022][ T2151] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 94.153853][ T2151] bond3 (unregistering): Released all slaves [ 94.168732][ T2151] bond4 (unregistering): Released all slaves [ 94.187322][ T8426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.221097][ T2151] hsr_slave_0: left promiscuous mode [ 94.228046][ T2151] hsr_slave_1: left promiscuous mode [ 94.237736][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.249447][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.299190][ T8421] EXT4-fs (loop1): shut down requested (0) [ 94.319080][ T2151] team0 (unregistering): Port device team_slave_1 removed [ 94.340686][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.355521][ T2151] team0 (unregistering): Port device team_slave_0 removed [ 94.422493][ T8447] syzkaller1: entered promiscuous mode [ 94.428038][ T8447] syzkaller1: entered allmulticast mode [ 94.607223][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 94.721634][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.729029][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.745478][ T8404] bridge_slave_0: entered allmulticast mode [ 94.752705][ T8404] bridge_slave_0: entered promiscuous mode [ 94.760760][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.767909][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.775335][ T8404] bridge_slave_1: entered allmulticast mode [ 94.781989][ T8404] bridge_slave_1: entered promiscuous mode [ 94.811004][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.832903][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.866946][ T8404] team0: Port device team_slave_0 added [ 94.883123][ T8404] team0: Port device team_slave_1 added [ 94.938736][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.945774][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.971884][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.020772][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.027823][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.054030][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.082099][ T8543] loop3: detected capacity change from 0 to 512 [ 95.119356][ T8543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.132581][ T8543] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.133636][ T8404] hsr_slave_0: entered promiscuous mode [ 95.177308][ T8404] hsr_slave_1: entered promiscuous mode [ 95.183674][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 95.189462][ T8404] Cannot create hsr debugfs directory [ 95.251474][ T8553] loop1: detected capacity change from 0 to 512 [ 95.276531][ T8555] loop5: detected capacity change from 0 to 1024 [ 95.289072][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.299006][ T8553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 95.319227][ T8553] System zones: 0-2, 18-18, 34-34 [ 95.325441][ T8553] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2173: bg 0: block 248: padding at end of block bitmap is not set [ 95.340810][ T8553] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2173: Failed to acquire dquot type 1 [ 95.365078][ T8555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.365847][ T8553] EXT4-fs (loop1): 1 truncate cleaned up [ 95.408278][ T7877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.435602][ T8553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.474465][ T8571] loop3: detected capacity change from 0 to 1024 [ 95.479609][ T8553] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.552866][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.562725][ T8571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.582085][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 95.583924][ T8404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.609977][ T8571] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.636878][ T8404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.650930][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.686176][ T8404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.692409][ T8587] netlink: 'syz.5.2181': attribute type 21 has an invalid length. [ 95.709686][ T8404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.733659][ T8587] __nla_validate_parse: 9 callbacks suppressed [ 95.733676][ T8587] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2181'. [ 95.749009][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2181'. [ 95.834046][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.853058][ T8605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.860330][ T8605] IPv6: NLM_F_CREATE should be set when creating new route [ 95.867583][ T8605] IPv6: NLM_F_CREATE should be set when creating new route [ 95.883548][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.903317][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.910426][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.954568][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.961686][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.190751][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.276150][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 96.285118][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 96.342252][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 96.365226][ T8666] loop3: detected capacity change from 0 to 512 [ 96.539399][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 96.539437][ T29] audit: type=1400 audit(1766832435.726:83823): avc: denied { module_load } for pid=8690 comm="syz.3.2205" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 96.585805][ T8404] veth0_vlan: entered promiscuous mode [ 96.629618][ T8404] veth1_vlan: entered promiscuous mode [ 96.701185][ T8404] veth0_macvtap: entered promiscuous mode [ 96.712982][ T8404] veth1_macvtap: entered promiscuous mode [ 96.731140][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.768159][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.777895][ T8718] loop3: detected capacity change from 0 to 512 [ 96.791690][ T1618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.820505][ T8718] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 96.837456][ T1618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871490][ T1618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925826][ T8718] EXT4-fs (loop3): 1 truncate cleaned up [ 96.937143][ T1618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.948722][ T8718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.953969][ T8736] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 96.983679][ T8718] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.987146][ T8736] SELinux: failed to load policy [ 97.014295][ T8718] pimreg: entered allmulticast mode [ 97.021014][ T8718] pimreg: left allmulticast mode [ 97.075672][ T29] audit: type=1326 audit(1766832436.266:83824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 97.108912][ T29] audit: type=1326 audit(1766832436.266:83825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 97.109508][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.132577][ T29] audit: type=1326 audit(1766832436.266:83826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 97.203522][ T29] audit: type=1326 audit(1766832436.326:83827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 97.245117][ T8755] loop3: detected capacity change from 0 to 1024 [ 97.272169][ T8755] EXT4-fs: inline encryption not supported [ 97.305333][ T8755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.331675][ T29] audit: type=1400 audit(1766832436.516:83828): avc: denied { write } for pid=8754 comm="syz.3.2226" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.386474][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.641431][ T29] audit: type=1326 audit(1766832436.826:83829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8795 comm="syz.1.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 97.674628][ T29] audit: type=1326 audit(1766832436.836:83830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7eed8f749 code=0x7ffc0000 [ 97.698353][ T29] audit: type=1326 audit(1766832436.836:83831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7eed8f749 code=0x7ffc0000 [ 97.722118][ T29] audit: type=1326 audit(1766832436.836:83832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7eed8f749 code=0x7ffc0000 [ 99.074876][ T8830] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2245'. [ 99.252422][ T8849] xt_policy: neither incoming nor outgoing policy selected [ 99.603572][ T8871] loop3: detected capacity change from 0 to 8192 [ 99.813218][ T8898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.100747][ T8910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2281'. [ 100.812442][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.835604][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.952304][ T8958] loop5: detected capacity change from 0 to 512 [ 100.990544][ T8958] EXT4-fs (loop5): too many log groups per flexible block group [ 101.037446][ T8958] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 101.052343][ T8958] EXT4-fs (loop5): mount failed [ 101.224166][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2296'. [ 101.363100][ T8999] syzkaller1: entered promiscuous mode [ 101.368716][ T8999] syzkaller1: entered allmulticast mode [ 101.429471][ T8992] loop5: detected capacity change from 0 to 8192 [ 101.554973][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 101.562437][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.569918][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.577479][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.584946][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.592418][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.621941][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.629579][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 101.637043][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 101.679202][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 101.679236][ T29] audit: type=1400 audit(1766832440.866:84600): avc: denied { setopt } for pid=9028 comm="syz.5.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.719809][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz1 [ 101.765742][ T9040] fido_id[9040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.829455][ T29] audit: type=1326 audit(1766832441.016:84601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 101.934302][ T29] audit: type=1326 audit(1766832441.046:84602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 101.957809][ T29] audit: type=1326 audit(1766832441.046:84603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 101.981451][ T29] audit: type=1326 audit(1766832441.046:84604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 102.005092][ T29] audit: type=1326 audit(1766832441.046:84605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 102.028683][ T29] audit: type=1326 audit(1766832441.046:84606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 102.052309][ T29] audit: type=1326 audit(1766832441.046:84607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9045 comm="syz.5.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb1caf749 code=0x7ffc0000 [ 102.174817][ T9063] --map-set only usable from mangle table [ 102.250211][ T29] audit: type=1400 audit(1766832441.396:84608): avc: denied { watch watch_reads } for pid=9061 comm="syz.3.2319" path="/507" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.339863][ T9074] ªªªªªª: renamed from wg2 [ 102.436904][ T9082] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 102.778055][ T9099] loop1: detected capacity change from 0 to 512 [ 102.822427][ T9099] EXT4-fs: Ignoring removed orlov option [ 102.848958][ T9099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.882842][ T9099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.912685][ T9099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2338: bg 0: block 248: padding at end of block bitmap is not set [ 102.948088][ T9099] Quota error (device loop1): write_blk: dquota write failed [ 102.955555][ T9099] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2338: Failed to acquire dquot type 1 [ 102.993230][ T9099] EXT4-fs (loop1): 1 truncate cleaned up [ 103.005969][ T9099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.044583][ T9099] EXT4-fs: Ignoring removed orlov option [ 103.061965][ T9099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.091388][ T9099] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 103.151966][ T9099] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.2338: Abort forced by user [ 103.182441][ T9099] EXT4-fs (loop1): Remounting filesystem read-only [ 103.189016][ T9099] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 103.210695][ T9099] ext4 filesystem being remounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.261330][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.520388][ T9126] loop1: detected capacity change from 0 to 512 [ 103.562834][ T9126] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 3: comm syz.1.2359: lblock 0 mapped to illegal pblock 3 (length 1) [ 103.592187][ T9126] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2359: error -117 reading directory block [ 103.636084][ T9126] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 103.645747][ T9130] bridge_slave_0: left allmulticast mode [ 103.651461][ T9130] bridge_slave_0: left promiscuous mode [ 103.657215][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.675233][ T9126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.703360][ T9126] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #2: comm syz.1.2359: corrupted xattr block 255: invalid header [ 103.718747][ T9130] bridge_slave_1: left allmulticast mode [ 103.724464][ T9130] bridge_slave_1: left promiscuous mode [ 103.730180][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.753118][ T9126] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 103.766916][ T9130] bond0: (slave bond_slave_0): Releasing backup interface [ 103.775043][ T9126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.787018][ T9130] bond0: (slave bond_slave_1): Releasing backup interface [ 103.799517][ T9130] team0: Port device team_slave_0 removed [ 103.826056][ T9130] team0: Port device team_slave_1 removed [ 103.839166][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.846685][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.863379][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.870875][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.890919][ T9130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.967769][ T9149] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.086841][ T3421] Process accounting resumed [ 104.165284][ T9160] ip6gre0: entered promiscuous mode [ 104.188847][ T9160] team0: Port device ip6gre0 added [ 104.245157][ T9165] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 104.245157][ T9165] program syz.1.2362 not setting count and/or reply_len properly [ 104.336670][ T23] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 104.398161][ T9175] fido_id[9175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.440462][ T9181] loop0: detected capacity change from 0 to 2048 [ 104.503943][ T9181] Alternate GPT is invalid, using primary GPT. [ 104.510249][ T9181] loop0: p1 p2 p3 [ 104.514086][ T9181] loop0: partition table partially beyond EOD, truncated [ 104.624432][ T9184] loop0: detected capacity change from 0 to 512 [ 104.673242][ T9184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.693862][ T6508] udevd[6508]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 104.704577][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 104.706462][ T6665] udevd[6665]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 104.725611][ T9184] EXT4-fs (loop0): 1 truncate cleaned up [ 104.762537][ T9184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.958048][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 104.961466][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.967455][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 105.051505][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'. [ 105.062213][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 105.071181][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 105.094917][ T9194] ip6gre1: entered promiscuous mode [ 105.100162][ T9194] ip6gre1: entered allmulticast mode [ 105.190253][ T9199] loop1: detected capacity change from 0 to 512 [ 105.219333][ T9202] tipc: Started in network mode [ 105.224270][ T9202] tipc: Node identity 4, cluster identity 4711 [ 105.230453][ T9202] tipc: Node number set to 4 [ 105.243181][ T9199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.312079][ T9199] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.354077][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.392172][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 105.401342][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.474659][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 105.512109][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.552554][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 105.571985][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.603089][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 105.622071][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.652140][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 105.672488][ T9199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.2377: corrupted xattr block 6: invalid header [ 105.741981][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.754363][ T9210] loop0: detected capacity change from 0 to 164 [ 105.809700][ T9210] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.854230][ T9210] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.882105][ T9210] Symlink component flag not implemented [ 105.887919][ T9210] Symlink component flag not implemented [ 105.921965][ T9210] Symlink component flag not implemented (7) [ 105.928059][ T9210] Symlink component flag not implemented (116) [ 106.104395][ T9224] loop0: detected capacity change from 0 to 512 [ 106.151997][ T9224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.183451][ T9224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.196328][ T9224] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.234400][ T9224] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.2387: iget: bad i_size value: 2533274857506816 [ 106.252333][ T9224] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.2387: iget: bad i_size value: 2533274857506816 [ 106.309686][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.452127][ T9234] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 106.459955][ T9234] netlink: 'syz.1.2392': attribute type 2 has an invalid length. [ 106.468090][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 106.648589][ T9242] loop1: detected capacity change from 0 to 1024 [ 106.655352][ T9242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.682335][ T9242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.894025][ T9251] sd 0:0:1:0: device reset [ 107.092348][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.338891][ T9276] loop0: detected capacity change from 0 to 512 [ 107.353047][ T9276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.375908][ T9276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 107.393707][ T9276] System zones: 1-12 [ 107.402525][ T9276] EXT4-fs (loop0): 1 truncate cleaned up [ 107.415233][ T9276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.526641][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.700921][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 107.741929][ T9283] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 108.084271][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 108.093332][ T9293] netlink: 'syz.0.2418': attribute type 11 has an invalid length. [ 108.101181][ T9293] netlink: 'syz.0.2418': attribute type 14 has an invalid length. [ 108.221616][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 108.221700][ T29] audit: type=1400 audit(1766832447.406:84624): avc: denied { audit_write } for pid=9296 comm="syz.1.2420" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.301920][ T29] audit: type=1107 audit(1766832447.436:84625): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ÿ' [ 108.584525][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 108.716910][ T29] audit: type=1326 audit(1766832447.906:84626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.1.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 108.786918][ T29] audit: type=1326 audit(1766832447.906:84627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.1.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 108.810455][ T29] audit: type=1326 audit(1766832447.906:84628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.1.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 108.833969][ T29] audit: type=1326 audit(1766832447.946:84629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9312 comm="syz.1.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5c8ef749 code=0x7ffc0000 [ 110.274891][ T9348] loop0: detected capacity change from 0 to 512 [ 110.332828][ T9348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.402059][ T9348] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.442901][ T9348] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.2443: corrupted inode contents [ 110.492105][ T9348] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.2443: mark_inode_dirty error [ 110.522413][ T9348] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.2443: corrupted inode contents [ 110.572819][ T9348] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2443: mark_inode_dirty error [ 110.623390][ T29] audit: type=1400 audit(1766832449.816:84630): avc: denied { setattr } for pid=9347 comm="syz.0.2443" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 110.624822][ T9348] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 22: comm syz.0.2443: bad entry in directory: directory entry overrun - offset=0, inode=19, rec_len=65536, size=2048 fake=0 [ 110.665058][ T29] audit: type=1400 audit(1766832449.816:84631): avc: denied { rename } for pid=9347 comm="syz.0.2443" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 110.712139][ T9348] EXT4-fs error (device loop0) in ext4_resetent:3676: error 2 [ 110.720976][ T9348] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #19: comm syz.0.2443: corrupted xattr block 22: invalid header [ 110.762237][ T9348] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 110.852013][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.899341][ T29] audit: type=1400 audit(1766832450.076:84632): avc: denied { validate_trans } for pid=9353 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.950601][ T9356] bond1: entered promiscuous mode [ 110.955757][ T9356] bond1: entered allmulticast mode [ 110.972124][ T9356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.008830][ T9356] bond1 (unregistering): Released all slaves [ 111.224296][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.233468][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.290443][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.299652][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.349878][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.358996][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2450'. [ 111.702118][ T29] audit: type=1326 audit(1766832450.896:84633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe6faf749 code=0x7ffc0000 [ 112.064617][ T9400] loop0: detected capacity change from 0 to 128 [ 112.072715][ T9400] EXT4-fs: Ignoring removed nobh option [ 112.094448][ T9400] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.162559][ T9400] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.220677][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.239328][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 113.239346][ T29] audit: type=1400 audit(1766832452.426:84667): avc: denied { execmem } for pid=9422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 113.352966][ T29] audit: type=1400 audit(1766832452.546:84668): avc: denied { mounton } for pid=9423 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 113.401918][ T29] audit: type=1400 audit(1766832452.566:84669): avc: denied { module_request } for pid=9423 comm="syz-executor" kmod="netdev-nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 113.442285][ T29] audit: type=1400 audit(1766832452.616:84670): avc: denied { sys_module } for pid=9423 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.515975][ T2151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.587447][ T2151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.669969][ T2151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.703051][ T9423] chnl_net:caif_netlink_parms(): no params data found [ 113.725925][ T2151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.773426][ T29] audit: type=1400 audit(1766832452.966:84671): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 113.861634][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.868807][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.892210][ T9423] bridge_slave_0: entered allmulticast mode [ 113.912480][ T9423] bridge_slave_0: entered promiscuous mode [ 113.919373][ T2151] bridge_slave_1: left allmulticast mode [ 113.925076][ T2151] bridge_slave_1: left promiscuous mode [ 113.930790][ T2151] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.962578][ T2151] bridge_slave_0: left allmulticast mode [ 113.968238][ T2151] bridge_slave_0: left promiscuous mode [ 113.974003][ T2151] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.002062][ T3498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.107338][ T29] audit: type=1400 audit(1766832453.296:84672): avc: denied { create } for pid=9441 comm="syz.1.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.127055][ T29] audit: type=1400 audit(1766832453.296:84673): avc: denied { setopt } for pid=9441 comm="syz.1.2475" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.178675][ T2151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.211429][ T9450] ALSA: seq fatal error: cannot create timer (-22) [ 114.220432][ T2151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.231956][ T29] audit: type=1400 audit(1766832453.366:84674): avc: denied { create } for pid=9447 comm="syz.1.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.251819][ T29] audit: type=1400 audit(1766832453.366:84675): avc: denied { setopt } for pid=9447 comm="syz.1.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.271748][ T29] audit: type=1400 audit(1766832453.376:84676): avc: denied { ioctl } for pid=9447 comm="syz.1.2476" path="socket:[24851]" dev="sockfs" ino=24851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.303041][ T2151] bond0 (unregistering): Released all slaves [ 114.311742][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.318950][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.333139][ T9423] bridge_slave_1: entered allmulticast mode [ 114.373724][ T9423] bridge_slave_1: entered promiscuous mode [ 114.397611][ T2151] hsr_slave_0: left promiscuous mode [ 114.403409][ T2151] hsr_slave_1: left promiscuous mode [ 114.409198][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.416671][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.442272][ T2151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.449708][ T2151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.493223][ T2151] veth1_macvtap: left promiscuous mode [ 114.498748][ T2151] veth0_macvtap: left promiscuous mode [ 114.516632][ T2151] veth1_vlan: left promiscuous mode [ 114.527757][ T2151] veth0_vlan: left promiscuous mode [ 114.702811][ T2151] team0 (unregistering): Port device team_slave_1 removed [ 114.723419][ T2151] team0 (unregistering): Port device team_slave_0 removed [ 114.744003][ T9467] loop1: detected capacity change from 0 to 2048 [ 114.752947][ T9467] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.786537][ T9467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.826532][ T9467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2484: bg 0: block 234: padding at end of block bitmap is not set [ 114.862227][ T9423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.871571][ T9467] EXT4-fs (loop1): Remounting filesystem read-only [ 114.882749][ T9423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.914791][ T9423] team0: Port device team_slave_0 added [ 114.921589][ T9423] team0: Port device team_slave_1 added [ 114.928743][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.972639][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.979608][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.005559][ T9423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.028471][ T9477] loop1: detected capacity change from 0 to 512 [ 115.038702][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.045734][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.063804][ T9477] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.071964][ T9423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.171713][ T9423] hsr_slave_0: entered promiscuous mode [ 115.178933][ T9423] hsr_slave_1: entered promiscuous mode [ 115.188301][ T9423] debugfs: 'hsr0' already exists in 'hsr' [ 115.194094][ T9423] Cannot create hsr debugfs directory [ 115.423584][ T9423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.451046][ T9423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 115.464749][ T9423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.483522][ T9423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.574514][ T9423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.602107][ T9423] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.638082][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.645239][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.680270][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.687504][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.745929][ T9423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.756527][ T9423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.926304][ T9423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.984735][ T9555] loop1: detected capacity change from 0 to 512 [ 116.039229][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.111416][ T9555] ext4 filesystem being mounted at /639/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.167687][ T9555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.222291][ T9555] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.2496: mark_inode_dirty error [ 116.270884][ T9423] veth0_vlan: entered promiscuous mode [ 116.295766][ T9423] veth1_vlan: entered promiscuous mode [ 116.302078][ T9555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.329248][ T9578] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.346915][ T9423] veth0_macvtap: entered promiscuous mode [ 116.363014][ T9423] veth1_macvtap: entered promiscuous mode [ 116.384375][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.391732][ T9578] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.2496: mark_inode_dirty error [ 116.406959][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.422354][ T9578] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.436278][ T1008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.445606][ T9578] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2496: mark_inode_dirty error [ 116.472249][ T9578] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.484777][ T9578] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.2496: mark_inode_dirty error [ 116.487520][ T1008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.515250][ T9555] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.2496: corrupted inode contents [ 116.542477][ T1008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552188][ T1008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.561991][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.982144][ T9677] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2534'. [ 118.132642][ T2264] bridge_slave_1: left allmulticast mode [ 118.138421][ T2264] bridge_slave_1: left promiscuous mode [ 118.144230][ T2264] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.178633][ T2264] bridge_slave_0: left allmulticast mode [ 118.184452][ T2264] bridge_slave_0: left promiscuous mode [ 118.190193][ T2264] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.265884][ T2264] bond1 (unregistering): (slave geneve2): Releasing active interface [ 118.314133][ T2264] bond1 (unregistering): Released all slaves [ 118.330163][ T2264] bond2 (unregistering): Released all slaves [ 118.343048][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 118.359895][ T9695] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 118.410228][ T2264] tipc: Left network mode [ 118.424030][ T9697] loop1: detected capacity change from 0 to 8192 [ 118.476469][ T2264] hsr_slave_0: left promiscuous mode [ 118.503743][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 118.503757][ T29] audit: type=1400 audit(1766832457.696:84779): avc: denied { create } for pid=9706 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.529784][ T2264] hsr_slave_1: left promiscuous mode [ 118.552287][ T2264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.571824][ T9710] loop0: detected capacity change from 0 to 2048 [ 118.582483][ T2264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.588164][ T29] audit: type=1400 audit(1766832457.696:84780): avc: denied { bind } for pid=9706 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.609145][ T29] audit: type=1400 audit(1766832457.696:84781): avc: denied { setopt } for pid=9706 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.628736][ T29] audit: type=1400 audit(1766832457.696:84782): avc: denied { write } for pid=9706 comm="syz.6.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.670894][ T9710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.702776][ T29] audit: type=1400 audit(1766832457.886:84783): avc: denied { read write } for pid=9708 comm="syz.0.2553" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.725598][ T29] audit: type=1400 audit(1766832457.886:84784): avc: denied { open } for pid=9708 comm="syz.0.2553" path="/538/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.834200][ T2264] team0 (unregistering): Port device team_slave_1 removed [ 118.859935][ T2264] team0 (unregistering): Port device team_slave_0 removed [ 119.008808][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.016018][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.064743][ T29] audit: type=1400 audit(1766832458.256:84785): avc: denied { create } for pid=9737 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.092125][ T9656] bridge_slave_0: entered allmulticast mode [ 119.112630][ T9656] bridge_slave_0: entered promiscuous mode [ 119.136625][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.143830][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.190505][ T9656] bridge_slave_1: entered allmulticast mode [ 119.202821][ T9656] bridge_slave_1: entered promiscuous mode [ 119.224465][ T885] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.245696][ T29] audit: type=1400 audit(1766832458.256:84786): avc: denied { connect } for pid=9737 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.265409][ T29] audit: type=1400 audit(1766832458.256:84787): avc: denied { setopt } for pid=9737 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.282054][ T885] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 119.285750][ T29] audit: type=1400 audit(1766832458.286:84788): avc: denied { bind } for pid=9737 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.297551][ T885] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.297551][ T885] [ 119.326325][ T885] EXT4-fs (loop0): Total free blocks count 0 [ 119.332318][ T885] EXT4-fs (loop0): Free/Dirty block details [ 119.338238][ T885] EXT4-fs (loop0): free_blocks=2415919104 [ 119.343995][ T885] EXT4-fs (loop0): dirty_blocks=8192 [ 119.349294][ T885] EXT4-fs (loop0): Block reservation details [ 119.355320][ T885] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 119.376992][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.387670][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.426763][ T885] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 119.449591][ T9656] team0: Port device team_slave_0 added [ 119.473809][ T9656] team0: Port device team_slave_1 added [ 119.524136][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.531182][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.557216][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.622896][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.629971][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.656161][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.734200][ T9656] hsr_slave_0: entered promiscuous mode [ 119.740229][ T9656] hsr_slave_1: entered promiscuous mode [ 119.752893][ T9656] debugfs: 'hsr0' already exists in 'hsr' [ 119.758652][ T9656] Cannot create hsr debugfs directory [ 119.814196][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.904000][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.955606][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.013153][ T9656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.029164][ T9656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.042375][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.058026][ T9656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.077534][ T9656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.241769][ T5448] hid_parser_main: 33 callbacks suppressed [ 120.241795][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 120.255380][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 120.263190][ T60] team0: Port device ip6gre0 removed [ 120.276558][ T9828] sctp: [Deprecated]: syz.0.2569 (pid 9828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.276558][ T9828] Use struct sctp_sack_info instead [ 120.293161][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.300876][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.308791][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.316502][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.324209][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.331988][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.339650][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.347370][ T5448] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 120.359482][ T5448] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.387938][ T60] bond0 (unregistering): Released all slaves [ 120.410251][ T9832] fido_id[9832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.432906][ T9770] chnl_net:caif_netlink_parms(): no params data found [ 120.461357][ T60] hsr_slave_0: left promiscuous mode [ 120.476215][ T60] hsr_slave_1: left promiscuous mode [ 120.492275][ T9836] loop6: detected capacity change from 0 to 1024 [ 120.504925][ T60] veth1_macvtap: left promiscuous mode [ 120.510752][ T60] veth0_macvtap: left promiscuous mode [ 120.518013][ T60] veth1_vlan: left promiscuous mode [ 120.523816][ T60] veth0_vlan: left promiscuous mode [ 120.542639][ T9838] loop0: detected capacity change from 0 to 8192 [ 120.551129][ T9836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.594620][ T9836] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.620249][ T9838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 120.629194][ T9838] FAT-fs (loop0): Filesystem has been set read-only [ 120.636087][ T9836] EXT4-fs (loop6): shut down requested (2) [ 120.691386][ T9423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.702797][ T9845] serio: Serial port ptm0 [ 120.739224][ T9850] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2568'. [ 120.795374][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.802575][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.819123][ T9770] bridge_slave_0: entered allmulticast mode [ 120.827713][ T9770] bridge_slave_0: entered promiscuous mode [ 120.853817][ T9862] tls_set_device_offload_rx: netdev not found [ 120.870305][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.877509][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.904633][ T9770] bridge_slave_1: entered allmulticast mode [ 120.921424][ T9770] bridge_slave_1: entered promiscuous mode [ 120.970443][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.990199][ T9870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.003756][ T9870] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.013701][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.021026][ T9879] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2574'. [ 121.029166][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.050833][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.087782][ T9879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.101199][ T9879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.111775][ T9879] bond0 (unregistering): (slave bond1): Releasing backup interface [ 121.121312][ T9879] bond0 (unregistering): Released all slaves [ 121.138360][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.145481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.154528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.161586][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.204650][ T9770] team0: Port device team_slave_0 added [ 121.216419][ T9886] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2578'. [ 121.216452][ T9886] netlink: zone id is out of range [ 121.216479][ T9886] netlink: zone id is out of range [ 121.216497][ T9886] netlink: zone id is out of range [ 121.216562][ T9886] netlink: zone id is out of range [ 121.223914][ T9770] team0: Port device team_slave_1 added [ 121.247113][ T9886] netlink: set zone limit has 8 unknown bytes [ 121.282629][ T3004] ================================================================== [ 121.290852][ T3004] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 121.297485][ T3004] [ 121.299833][ T3004] read-write to 0xffff888107af66c0 of 4 bytes by task 6146 on cpu 0: [ 121.307917][ T3004] dont_mount+0x2a/0x40 [ 121.312086][ T3004] vfs_unlink+0x2ae/0x440 [ 121.316420][ T3004] do_unlinkat+0x1cd/0x4b0 [ 121.320852][ T3004] __x64_sys_unlink+0x2e/0x40 [ 121.325542][ T3004] x64_sys_call+0x2f48/0x3000 [ 121.330265][ T3004] do_syscall_64+0xca/0x2b0 [ 121.334802][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.340710][ T3004] [ 121.343042][ T3004] read to 0xffff888107af66c0 of 4 bytes by task 3004 on cpu 1: [ 121.350593][ T3004] lookup_fast+0xf0/0x320 [ 121.354944][ T3004] path_lookupat+0x15c/0x500 [ 121.359552][ T3004] filename_lookup+0x147/0x340 [ 121.364337][ T3004] do_readlinkat+0x7d/0x320 [ 121.368854][ T3004] __x64_sys_readlink+0x47/0x60 [ 121.373725][ T3004] x64_sys_call+0x2af1/0x3000 [ 121.378414][ T3004] do_syscall_64+0xca/0x2b0 [ 121.382939][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.388859][ T3004] [ 121.391184][ T3004] value changed: 0x00300080 -> 0x00004080 [ 121.396906][ T3004] [ 121.399227][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 121.405390][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.416257][ T3004] Tainted: [W]=WARN [ 121.420077][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 121.430161][ T3004] ================================================================== [ 121.490205][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.497323][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.523605][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.536967][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.544065][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.570015][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.643649][ T9770] hsr_slave_0: entered promiscuous mode [ 121.649850][ T9770] hsr_slave_1: entered promiscuous mode [ 121.693064][ T9770] debugfs: 'hsr0' already exists in 'hsr' [ 121.698828][ T9770] Cannot create hsr debugfs directory [ 121.850170][ T9889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.916003][ T9889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.955261][ T9889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.005590][ T9889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.094328][ T9889] bridge_slave_1: left allmulticast mode [ 122.100013][ T9889] bridge_slave_1: left promiscuous mode [ 122.105896][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.115433][ T9889] bridge_slave_0: left allmulticast mode [ 122.121110][ T9889] bridge_slave_0: left promiscuous mode [ 122.126955][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.214232][ T9889] bond1 (unregistering): Released all slaves [ 122.276585][ T9889] hsr_slave_0: left promiscuous mode [ 122.282362][ T9889] hsr_slave_1: left promiscuous mode [ 122.289276][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.296716][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.304748][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.312167][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.323002][ T9889] veth1_macvtap: left promiscuous mode [ 122.328557][ T9889] veth0_macvtap: left promiscuous mode [ 122.334756][ T9889] veth1_vlan: left promiscuous mode [ 122.340058][ T9889] veth0_vlan: left promiscuous mode [ 122.411188][ T9889] team0 (unregistering): Port device team_slave_1 removed [ 122.422755][ T9889] team0 (unregistering): Port device team_slave_0 removed [ 123.404242][ T9889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.414607][ T9889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.466952][ T9889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.477334][ T9889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.535772][ T9889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.546180][ T9889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.605770][ T9889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.616228][ T9889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.693233][ T9889] bridge_slave_1: left allmulticast mode [ 123.698915][ T9889] bridge_slave_1: left promiscuous mode [ 123.704620][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.712603][ T9889] bridge_slave_0: left allmulticast mode [ 123.718260][ T9889] bridge_slave_0: left promiscuous mode [ 123.723990][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.732429][ T9889] bridge_slave_1: left allmulticast mode [ 123.738066][ T9889] bridge_slave_1: left promiscuous mode [ 123.743748][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.751315][ T9889] bridge_slave_0: left allmulticast mode [ 123.757109][ T9889] bridge_slave_0: left promiscuous mode [ 123.763038][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.914509][ T9889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.925705][ T9889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.934972][ T9889] bond0 (unregistering): Released all slaves [ 123.994484][ T9889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.004275][ T9889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.013697][ T9889] bond0 (unregistering): Released all slaves [ 124.133642][ T9889] bond0 (unregistering): Released all slaves [ 124.178838][ T9889] tipc: Left network mode [ 124.187472][ T9889] hsr_slave_0: left promiscuous mode [ 124.193442][ T9889] hsr_slave_1: left promiscuous mode [ 124.200371][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.209356][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.217297][ T9889] hsr_slave_0: left promiscuous mode [ 124.223254][ T9889] hsr_slave_1: left promiscuous mode [ 124.228994][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.236510][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.245834][ T9889] hsr_slave_0: left promiscuous mode [ 124.251591][ T9889] hsr_slave_1: left promiscuous mode [ 124.263584][ T9889] veth1_macvtap: left promiscuous mode [ 124.269087][ T9889] veth0_macvtap: left promiscuous mode [ 124.274916][ T9889] veth1_vlan: left promiscuous mode [ 124.280172][ T9889] veth0_vlan: left promiscuous mode [ 124.358267][ T9889] team0 (unregistering): Port device team_slave_1 removed [ 124.368354][ T9889] team0 (unregistering): Port device team_slave_0 removed [ 124.410030][ T9889] team0 (unregistering): Port device team_slave_1 removed [ 124.419578][ T9889] team0 (unregistering): Port device team_slave_0 removed