last executing test programs: 1.843366011s ago: executing program 4 (id=7574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) 1.788500286s ago: executing program 4 (id=7576): ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 1.030438107s ago: executing program 0 (id=7598): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.010972099s ago: executing program 2 (id=7603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39011, 0x0) 938.721285ms ago: executing program 0 (id=7605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0xaa42, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) 895.104758ms ago: executing program 4 (id=7607): syz_emit_ethernet(0x3a1, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0x8, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 856.634051ms ago: executing program 0 (id=7608): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000009f80)="c674015814a875ec92e8793fce1d", 0x0, 0x130000b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x27) 856.219261ms ago: executing program 4 (id=7609): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x80800) 787.496757ms ago: executing program 0 (id=7610): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001007e00000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 787.203527ms ago: executing program 4 (id=7611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r1, 0x5, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 739.404341ms ago: executing program 0 (id=7614): r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r1, 0x0, 0x850) close_range(r0, 0xffffffffffffffff, 0x0) 734.150531ms ago: executing program 0 (id=7616): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) r1 = io_uring_setup(0x7626, &(0x7f0000000600)={0x0, 0x1e28, 0x20, 0x3f, 0x800089, 0x0, r0}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x80000) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r3, &(0x7f0000000300)='net/netfilter\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 719.525572ms ago: executing program 2 (id=7618): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0xaa42, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) 667.159087ms ago: executing program 4 (id=7619): syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x225e, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x6]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 666.815556ms ago: executing program 2 (id=7620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) 612.194461ms ago: executing program 2 (id=7623): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 526.730688ms ago: executing program 1 (id=7625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 449.880694ms ago: executing program 2 (id=7628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39011, 0x0) 389.898099ms ago: executing program 1 (id=7629): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='N', 0x1}], 0x1}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x205, 0x3, 0x3c6, r1}, &(0x7f0000000040)=0x10) 286.739547ms ago: executing program 1 (id=7631): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) 230.717532ms ago: executing program 3 (id=7632): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x3b5, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 223.197543ms ago: executing program 1 (id=7633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0) 176.438256ms ago: executing program 3 (id=7634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) 66.106405ms ago: executing program 3 (id=7635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 65.598685ms ago: executing program 3 (id=7636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 20.143469ms ago: executing program 1 (id=7637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) 19.705749ms ago: executing program 3 (id=7638): syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 19.445809ms ago: executing program 1 (id=7639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000000094080000000017"], 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) 493.53µs ago: executing program 3 (id=7640): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc1", 0xcd) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 0s ago: executing program 2 (id=7641): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004040, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.595072][T16194] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.615900][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.662259][ T29] audit: type=1400 audit(1755938499.648:588): avc: denied { read } for pid=16201 comm="syz.3.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.710255][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4660'. [ 240.156793][T16228] loop0: detected capacity change from 0 to 512 [ 240.175983][T16228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.188809][T16228] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.241933][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.267693][T16232] loop0: detected capacity change from 0 to 1024 [ 240.293250][T16232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.306199][T16232] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.331522][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.366567][T16240] loop4: detected capacity change from 0 to 128 [ 240.375903][T16240] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.388666][T16240] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.419297][T11988] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.625552][T16257] lo speed is unknown, defaulting to 1000 [ 240.686783][T16259] loop1: detected capacity change from 0 to 2048 [ 240.756630][T16259] Alternate GPT is invalid, using primary GPT. [ 240.763571][T16259] loop1: p1 p2 p3 [ 240.841917][ T29] audit: type=1400 audit(1755938500.818:589): avc: denied { write } for pid=16260 comm="syz.2.4678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 241.570970][T16263] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4678'. [ 241.713330][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 241.734684][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 241.746900][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 241.893509][T16266] loop4: detected capacity change from 0 to 1024 [ 241.963174][T16266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.989777][T16266] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.039607][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.338207][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4684'. [ 242.409096][T16288] loop1: detected capacity change from 0 to 512 [ 242.415725][T16288] EXT4-fs: Ignoring removed i_version option [ 242.426808][T16288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.453302][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.796702][T16300] sg_write: process 1195 (syz.0.4690) changed security contexts after opening file descriptor, this is not allowed. [ 242.869460][T16304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4692'. [ 242.944179][T16311] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4694'. [ 243.002999][ T29] audit: type=1400 audit(1755938502.988:590): avc: denied { read } for pid=16301 comm="syz.0.4691" lport=48389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.679966][T16322] loop3: detected capacity change from 0 to 256 [ 243.867983][T16322] FAT-fs (loop3): codepage cp863 not found [ 244.117948][T16332] netlink: 'syz.4.4702': attribute type 1 has an invalid length. [ 244.416422][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 244.607336][T16354] loop1: detected capacity change from 0 to 2048 [ 244.616090][T16354] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.631710][T16354] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 244.661926][T16358] loop1: detected capacity change from 0 to 512 [ 244.668459][T16358] EXT4-fs: Ignoring removed i_version option [ 244.679951][T16358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.703124][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.793735][T16368] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 244.830050][T16373] loop1: detected capacity change from 0 to 128 [ 244.866858][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4718'. [ 244.893240][T16377] loop1: detected capacity change from 0 to 256 [ 244.907800][T16377] FAT-fs (loop1): codepage cp855 not found [ 244.946936][T16382] loop1: detected capacity change from 0 to 1024 [ 244.964054][T16382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.976946][T16382] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.996178][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.027912][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4722'. [ 245.365442][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'. [ 245.424737][T16408] loop0: detected capacity change from 0 to 2048 [ 245.431834][T16408] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.487350][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4728'. [ 245.505648][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4733'. [ 245.571527][T16408] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 245.855519][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4740'. [ 245.855561][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4742'. [ 246.163305][T16448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4746'. [ 246.189736][T16451] loop4: detected capacity change from 0 to 1024 [ 246.205184][T16451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.217865][T16451] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.237868][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.550122][T16478] loop3: detected capacity change from 0 to 1024 [ 246.572545][T16478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.585025][T16478] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.609390][T10336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.985011][T16497] netlink: 'syz.1.4760': attribute type 10 has an invalid length. [ 247.448287][T16505] loop0: detected capacity change from 0 to 2048 [ 247.481630][ T3293] Alternate GPT is invalid, using primary GPT. [ 247.487997][ T3293] loop0: p1 p2 p3 [ 247.583950][T16505] Alternate GPT is invalid, using primary GPT. [ 247.590244][T16505] loop0: p1 p2 p3 [ 247.755472][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 247.767479][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 247.795286][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 247.868175][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 247.882877][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 247.896882][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 247.963890][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4772'. [ 248.752471][T16537] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4778'. [ 248.762409][T16538] netlink: 'syz.0.4779': attribute type 29 has an invalid length. [ 248.772707][T16538] netlink: 'syz.0.4779': attribute type 29 has an invalid length. [ 248.789832][T16538] netlink: 'syz.0.4779': attribute type 29 has an invalid length. [ 248.873735][T16542] loop0: detected capacity change from 0 to 8192 [ 249.147732][T16559] loop0: detected capacity change from 0 to 2048 [ 249.181786][T16559] Alternate GPT is invalid, using primary GPT. [ 249.188186][T16559] loop0: p1 p2 p3 [ 249.424245][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 249.477514][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 249.489982][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 250.027836][T16582] loop4: detected capacity change from 0 to 512 [ 250.446029][T16582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.461342][T16582] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.621257][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.644778][T16595] __nla_validate_parse: 2 callbacks suppressed [ 250.644797][T16595] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4801'. [ 250.786491][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 250.874815][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4809'. [ 250.883440][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4807'. [ 250.884662][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4809'. [ 250.949309][T16625] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4812'. [ 251.139631][T16636] loop4: detected capacity change from 0 to 2048 [ 251.192397][T16636] Alternate GPT is invalid, using primary GPT. [ 251.199007][T16636] loop4: p1 p2 p3 [ 251.254499][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 251.499136][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4817'. [ 251.783245][T16650] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4823'. [ 252.403290][T16661] loop0: detected capacity change from 0 to 512 [ 252.443906][T16661] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 252.478371][T16661] System zones: 0-2, 18-18, 34-35 [ 252.496609][T16661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.526087][T16661] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.579170][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.640697][ T29] audit: type=1400 audit(1755938512.538:591): avc: denied { mounton } for pid=16658 comm="syz.0.4827" path="/526/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.774786][ T29] audit: type=1400 audit(1755938512.758:592): avc: denied { setopt } for pid=16656 comm="syz.2.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.840763][T16676] loop1: detected capacity change from 0 to 512 [ 252.851320][T16676] EXT4-fs: Ignoring removed oldalloc option [ 252.866677][T16676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.879665][T16676] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.884202][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 252.957616][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 253.108863][ T29] audit: type=1400 audit(1755938513.078:593): avc: denied { setattr } for pid=16675 comm="syz.1.4832" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.833749][T16705] loop0: detected capacity change from 0 to 512 [ 253.847096][T16705] EXT4-fs: Ignoring removed i_version option [ 253.903617][T16707] loop4: detected capacity change from 0 to 512 [ 253.936158][T16707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.968422][T16705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.006008][T16707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 254.065599][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.076777][T16707] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4839: bg 0: block 248: padding at end of block bitmap is not set [ 254.134436][T16707] Quota error (device loop4): write_blk: dquota write failed [ 254.142030][T16707] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.152479][T16707] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4839: Failed to acquire dquot type 1 [ 254.380630][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.553743][T16707] EXT4-fs (loop4): 1 truncate cleaned up [ 254.699638][T16707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.760429][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.805355][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.483055][T16734] futex_wake_op: syz.3.4851 tries to shift op by -1; fix this program [ 256.447630][T16751] __nla_validate_parse: 1 callbacks suppressed [ 256.447647][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4858'. [ 256.687432][T16757] loop1: detected capacity change from 0 to 1024 [ 256.700167][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4861'. [ 256.740971][T16757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.757075][T16764] futex_wake_op: syz.2.4862 tries to shift op by -1; fix this program [ 256.780628][T16757] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.795396][T16757] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.4860: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.823755][T16757] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 256.836245][T16757] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.836245][T16757] [ 256.896850][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.046363][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.088621][T16772] loop4: detected capacity change from 0 to 512 [ 257.113226][T16772] EXT4-fs: Ignoring removed i_version option [ 257.127495][T16772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.154508][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.343216][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4869'. [ 257.414306][T16787] loop3: detected capacity change from 0 to 128 [ 257.439001][T16787] EXT4-fs: test_dummy_encryption option not supported [ 257.545020][T16791] futex_wake_op: syz.3.4873 tries to shift op by -1; fix this program [ 257.840045][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4874'. [ 257.900477][T16797] loop1: detected capacity change from 0 to 1024 [ 257.922948][T16797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.938925][T16797] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.952396][T16797] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.4875: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.967380][T16797] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 257.979798][T16797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.979798][T16797] [ 258.113763][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.165915][T16804] loop1: detected capacity change from 0 to 512 [ 258.174544][T16804] EXT4-fs: Ignoring removed i_version option [ 258.214378][T16804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.459176][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.918890][T16815] lo speed is unknown, defaulting to 1000 [ 259.114621][T16823] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4882'. [ 259.829475][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4886'. [ 260.093548][T16843] loop3: detected capacity change from 0 to 8192 [ 260.103498][T16844] loop1: detected capacity change from 0 to 256 [ 260.149923][T16844] FAT-fs (loop1): IO charset maccenteuro not found [ 260.467195][T16847] loop0: detected capacity change from 0 to 1024 [ 260.691220][T16847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.832358][T16862] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4894'. [ 261.979657][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.987707][T16888] loop4: detected capacity change from 0 to 1024 [ 263.024154][T16888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.148670][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.187533][T16892] loop1: detected capacity change from 0 to 8192 [ 263.244284][T16903] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4906'. [ 263.378998][T16911] loop0: detected capacity change from 0 to 512 [ 263.459781][T16916] loop3: detected capacity change from 0 to 128 [ 263.471524][T16911] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 263.488832][T16911] System zones: 0-2, 18-18, 34-35 [ 263.525372][T16911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.602988][T16911] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.198951][T16928] loop3: detected capacity change from 0 to 32768 [ 264.259986][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.319864][T16935] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4918'. [ 264.344016][T16932] loop4: detected capacity change from 0 to 8192 [ 264.379518][T16940] loop0: detected capacity change from 0 to 256 [ 264.470387][T16948] loop1: detected capacity change from 0 to 128 [ 264.628107][T16940] FAT-fs (loop0): codepage cp862 not found [ 264.669951][T13676] bridge_slave_1: left allmulticast mode [ 264.676448][T13676] bridge_slave_1: left promiscuous mode [ 264.682404][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.716369][T13676] bridge_slave_0: left allmulticast mode [ 264.722110][T13676] bridge_slave_0: left promiscuous mode [ 264.727793][T13676] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.739146][T16953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.751869][T16953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.103854][T13676] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 265.113563][T13676] bond0 (unregistering): Released all slaves [ 265.688387][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 265.994398][T13676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.004784][T13676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.014262][T13676] bond0 (unregistering): Released all slaves [ 266.022759][T16955] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.029907][T16960] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.036807][T16967] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4931'. [ 266.046618][T16959] lo speed is unknown, defaulting to 1000 [ 266.073357][ T29] audit: type=1326 audit(1755938526.058:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.098183][ T29] audit: type=1326 audit(1755938526.058:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.098975][T13676] tipc: Left network mode [ 266.122505][ T29] audit: type=1326 audit(1755938526.058:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.151084][ T29] audit: type=1326 audit(1755938526.058:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.160410][T16991] loop0: detected capacity change from 0 to 512 [ 266.174965][ T29] audit: type=1326 audit(1755938526.058:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.205029][ T29] audit: type=1326 audit(1755938526.058:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.229392][ T29] audit: type=1326 audit(1755938526.058:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 266.296975][T16991] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 266.305475][T13676] tipc: Left network mode [ 266.309838][ T29] audit: type=1400 audit(1755938526.288:601): avc: denied { ioctl } for pid=16997 comm="syz.1.4942" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 266.337036][T16991] System zones: 0-2, 18-18, 34-35 [ 266.341400][T16991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.357058][T16991] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.368472][T13676] hsr_slave_0: left promiscuous mode [ 266.385583][T13676] hsr_slave_1: left promiscuous mode [ 266.399152][T13676] hsr_slave_0: left promiscuous mode [ 266.399163][ T29] audit: type=1326 audit(1755938526.388:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e11ebe9 code=0x7ffc0000 [ 266.428871][T13676] hsr_slave_1: left promiscuous mode [ 266.428926][ T29] audit: type=1326 audit(1755938526.408:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f276e11ebe9 code=0x7ffc0000 [ 266.459909][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.467493][T13676] batadv0: mtu less than device minimum [ 266.473570][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.484382][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.495185][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.506082][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.516795][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.527706][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.538461][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.549047][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.559804][T13676] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.573755][T13676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.581740][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.581889][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.596672][T13676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.613610][T13676] batman_adv: batadv0: Interface deactivated: dummy0 [ 266.620400][T13676] batman_adv: batadv0: Removing interface: dummy0 [ 266.634233][T13676] veth0_macvtap: left promiscuous mode [ 266.639836][T13676] veth1_vlan: left promiscuous mode [ 266.646109][T13676] veth0_vlan: left promiscuous mode [ 266.682918][T17024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.716898][T17024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.776142][T13676] team0 (unregistering): Port device team_slave_1 removed [ 266.786581][T13676] team0 (unregistering): Port device team_slave_0 removed [ 266.822072][T17016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4948'. [ 266.956516][T17042] 8021q: VLANs not supported on ip6gre0 [ 267.014322][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4962'. [ 267.193433][T13676] IPVS: stop unused estimator thread 0... [ 267.270874][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4963'. [ 268.290626][T17076] smc: net device bond0 applied user defined pnetid SYZ0 [ 268.319191][T17076] smc: net device bond0 erased user defined pnetid SYZ0 [ 268.393050][T17078] loop4: detected capacity change from 0 to 512 [ 268.414183][T17078] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 268.422475][T17078] System zones: 0-2, 18-18, 34-35 [ 268.428413][T17078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.442873][T17078] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.481356][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.537810][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4980'. [ 269.646825][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 269.708866][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4981'. [ 270.182562][T13044] bond0 (unregistering): left allmulticast mode [ 270.188958][T13044] bond0 (unregistering): left promiscuous mode [ 270.203429][T13044] bond0 (unregistering): Released all slaves [ 270.212742][T13044] bond1 (unregistering): Released all slaves [ 270.236457][T13044] bridge0 (unregistering): left allmulticast mode [ 270.505687][T13044] bond0 (unregistering): left allmulticast mode [ 270.512091][T13044] bond0 (unregistering): left promiscuous mode [ 270.665181][T13044] bond0 (unregistering): Released all slaves [ 270.675026][T17134] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4991'. [ 270.843858][T13044] tipc: Left network mode [ 270.854052][T13044] tipc: Disabling bearer [ 270.859043][T13044] tipc: Left network mode [ 270.881874][T13044] hsr_slave_0: left promiscuous mode [ 270.887809][T13044] hsr_slave_1: left promiscuous mode [ 270.902269][T13044] hsr_slave_0: left promiscuous mode [ 270.911186][T13044] hsr_slave_1: left promiscuous mode [ 270.930876][T13044] veth0_macvtap: left promiscuous mode [ 270.936433][T13044] veth1_vlan: left promiscuous mode [ 270.950594][T13044] veth0_vlan: left promiscuous mode [ 270.961015][T13044] veth0_macvtap: left promiscuous mode [ 270.966967][T13044] veth1_vlan: left promiscuous mode [ 270.980647][T13044] veth0_vlan: left promiscuous mode [ 271.115069][T13044] pimreg (unregistering): left allmulticast mode [ 271.257717][T17153] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.295603][T17153] IPv6: Can't replace route, no match found [ 271.338295][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'. [ 271.409330][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'. [ 271.669971][T17172] loop4: detected capacity change from 0 to 1024 [ 271.696186][T17172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.701076][T17177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5005'. [ 271.708539][T17172] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.735962][T17172] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.5004: lblock 0 mapped to illegal pblock 0 (length 1) [ 271.749808][T17172] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 271.762392][T17172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 271.762392][T17172] [ 271.784031][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.831659][T17182] loop4: detected capacity change from 0 to 128 [ 272.124066][T17187] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.131492][T17187] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 273.139100][T17207] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5016'. [ 273.178321][T17211] loop4: detected capacity change from 0 to 1024 [ 273.194067][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 273.196090][T17211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.215832][T17211] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.230490][T17211] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.5018: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.244804][T17211] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 273.257273][T17211] EXT4-fs (loop4): This should not happen!! Data will be lost [ 273.257273][T17211] [ 273.272737][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5019'. [ 273.289742][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.548861][T17234] loop3: detected capacity change from 0 to 1764 [ 273.591327][T17239] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5028'. [ 274.019417][T17251] netlink: 452 bytes leftover after parsing attributes in process `syz.2.5031'. [ 274.295877][T17270] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5040'. [ 274.489719][T17279] futex_wake_op: syz.4.5043 tries to shift op by -1; fix this program [ 274.509161][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 274.572143][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5044'. [ 274.984885][T17286] capability: warning: `syz.2.5045' uses deprecated v2 capabilities in a way that may be insecure [ 275.613094][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.623209][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.170737][T17323] futex_wake_op: syz.2.5060 tries to shift op by -1; fix this program [ 276.221026][T17329] loop0: detected capacity change from 0 to 1024 [ 276.272750][T17329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.291731][T17329] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.336764][T17329] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.5063: lblock 0 mapped to illegal pblock 0 (length 6) [ 276.351563][T17329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 276.363882][T17329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 276.363882][T17329] [ 276.383647][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.460964][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 277.965413][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 277.965426][ T29] audit: type=1400 audit(1755938537.948:607): avc: denied { getopt } for pid=17391 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.114974][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 278.216851][T17410] loop0: detected capacity change from 0 to 512 [ 278.232972][T17410] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 278.241376][T17410] System zones: 0-2, 18-18, 34-35 [ 278.247303][T17410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.260127][T17410] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.280886][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.392658][T17418] loop1: detected capacity change from 0 to 8192 [ 279.469210][T17448] loop0: detected capacity change from 0 to 512 [ 279.482986][T17448] EXT4-fs: Ignoring removed oldalloc option [ 279.499749][T17448] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.5104: Parent and EA inode have the same ino 15 [ 279.530674][T17448] EXT4-fs (loop0): 1 orphan inode deleted [ 279.537212][T17448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.735563][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.981445][T17471] loop4: detected capacity change from 0 to 512 [ 280.091756][T17471] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 280.109650][T17471] System zones: 0-2, 18-18, 34-35 [ 280.174170][T17471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.214890][T17471] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.474953][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.806566][T17486] loop0: detected capacity change from 0 to 8192 [ 280.852422][T17488] loop4: detected capacity change from 0 to 1024 [ 280.874949][T17488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.924871][T17488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.972261][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5122'. [ 281.004503][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.028378][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5135'. [ 282.455830][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5142'. [ 282.523837][ T29] audit: type=1400 audit(1755938542.508:608): avc: denied { getopt } for pid=17553 comm="syz.1.5143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.584051][T17546] loop0: detected capacity change from 0 to 512 [ 282.685011][T17546] EXT4-fs (loop0): blocks per group (7872) and clusters per group (32768) inconsistent [ 283.154145][T17578] futex_wake_op: syz.2.5149 tries to shift op by -1; fix this program [ 283.853789][T17587] loop0: detected capacity change from 0 to 512 [ 283.936893][T17587] EXT4-fs: Ignoring removed oldalloc option [ 284.123065][T17587] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.5151: Parent and EA inode have the same ino 15 [ 284.323442][T17587] EXT4-fs (loop0): 1 orphan inode deleted [ 284.354753][T17587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.577007][T17610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.590913][T17610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.603402][ T9902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.682550][T17616] loop4: detected capacity change from 0 to 256 [ 284.706026][T17616] FAT-fs (loop4): codepage cp1251 not found [ 284.747973][ T29] audit: type=1400 audit(1755938544.728:609): avc: denied { name_connect } for pid=17623 comm="syz.4.5164" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 284.921655][T17628] futex_wake_op: syz.3.5165 tries to shift op by -1; fix this program [ 285.117721][T17632] smc: net device bond0 applied user defined pnetid SYZ0 [ 285.575397][T17661] sctp: [Deprecated]: syz.4.5177 (pid 17661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.575397][T17661] Use struct sctp_sack_info instead [ 285.841949][T17666] loop4: detected capacity change from 0 to 128 [ 285.849109][T17666] EXT4-fs: Ignoring removed nobh option [ 285.990066][T17666] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.053970][T17676] netlink: 'syz.0.5186': attribute type 25 has an invalid length. [ 286.061905][T17676] netlink: 'syz.0.5186': attribute type 7 has an invalid length. [ 286.071989][T17666] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.232862][T11988] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.300173][T17688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5191'. [ 286.519276][T17694] loop1: detected capacity change from 0 to 764 [ 286.724831][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5195'. [ 286.733922][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5195'. [ 287.316018][T17716] loop8: detected capacity change from 0 to 7 [ 287.770756][T17723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5202'. [ 287.864109][T17726] futex_wake_op: syz.1.5203 tries to shift op by -1; fix this program [ 288.041510][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5205'. [ 288.102448][T17733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17733 comm=syz.3.5206 [ 288.395826][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5210'. [ 288.465433][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5210'. [ 288.486239][T17756] loop4: detected capacity change from 0 to 512 [ 288.532244][T17756] EXT4-fs: Ignoring removed oldalloc option [ 288.552127][T17756] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.5214: Parent and EA inode have the same ino 15 [ 288.573463][T17756] EXT4-fs (loop4): 1 orphan inode deleted [ 288.582620][T17756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.642325][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.687314][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5217'. [ 288.810866][ T29] audit: type=1400 audit(1755938548.798:610): avc: denied { listen } for pid=17765 comm="syz.4.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.296867][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5228'. [ 289.577099][T17823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17823 comm=syz.2.5238 [ 289.840029][T17869] loop4: detected capacity change from 0 to 512 [ 289.847542][T17869] EXT4-fs: Ignoring removed oldalloc option [ 289.862714][T17869] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.5251: Parent and EA inode have the same ino 15 [ 289.919953][T17869] EXT4-fs (loop4): 1 orphan inode deleted [ 289.926473][T17869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.974629][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.868003][T17917] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5266'. [ 291.004399][T17920] loop1: detected capacity change from 0 to 512 [ 291.050856][T17920] EXT4-fs: Ignoring removed oldalloc option [ 291.103738][T17920] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5268: Parent and EA inode have the same ino 15 [ 291.151487][T17920] EXT4-fs (loop1): 1 orphan inode deleted [ 291.185327][T17920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.285964][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.375978][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'. [ 291.461733][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5276'. [ 291.603588][T17977] sctp: [Deprecated]: syz.1.5280 (pid 17977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.603588][T17977] Use struct sctp_sack_info instead [ 292.908499][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5289'. [ 293.075340][T18020] loop4: detected capacity change from 0 to 512 [ 293.086823][T18020] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.107940][T18020] EXT4-fs (loop4): 1 truncate cleaned up [ 293.113997][T18020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.128413][T18020] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.5292: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 293.159535][T11988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.482717][T18064] netlink: 'syz.4.5308': attribute type 39 has an invalid length. [ 293.492929][T18063] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5309'. [ 293.511418][ T29] audit: type=1400 audit(1755938553.498:611): avc: denied { audit_write } for pid=18036 comm="syz.1.5300" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 293.579351][T18031] chnl_net:caif_netlink_parms(): no params data found [ 293.665416][T18073] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5306'. [ 293.684379][ T29] audit: type=1400 audit(1755938553.648:612): avc: denied { nlmsg_read } for pid=18054 comm="syz.3.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.708002][T13676] bridge_slave_1: left allmulticast mode [ 293.713971][T13676] bridge_slave_1: left promiscuous mode [ 293.719761][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.833951][T13676] bridge_slave_0: left allmulticast mode [ 293.839635][T13676] bridge_slave_0: left promiscuous mode [ 293.845571][T13676] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.025288][T13676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.055671][T13676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.416691][T13676] bond0 (unregistering): Released all slaves [ 294.489730][T13676] tipc: Left network mode [ 294.490093][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.501569][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.524116][T18031] bridge_slave_0: entered allmulticast mode [ 294.533568][T18031] bridge_slave_0: entered promiscuous mode [ 294.543328][T13676] hsr_slave_0: left promiscuous mode [ 294.553262][T13676] hsr_slave_1: left promiscuous mode [ 294.563258][T13676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.578185][T13676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.585822][T13676] batman_adv: batadv0: Removing interface: team0 [ 294.618039][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5328'. [ 294.634770][T13676] team0 (unregistering): Port device team_slave_1 removed [ 294.672754][T13676] team0 (unregistering): Port device team_slave_0 removed [ 294.717443][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.724671][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.757085][T18031] bridge_slave_1: entered allmulticast mode [ 294.765665][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'. [ 294.775928][T18031] bridge_slave_1: entered promiscuous mode [ 294.818142][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.841704][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.888704][T18031] team0: Port device team_slave_0 added [ 294.904615][T18165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.925519][T18031] team0: Port device team_slave_1 added [ 294.946253][T18165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.973919][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.981145][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.007416][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.029641][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.036860][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.063027][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.078506][T18171] team0: No ports can be present during mode change [ 295.109671][T13676] IPVS: stop unused estimator thread 0... [ 295.306719][T18031] hsr_slave_0: entered promiscuous mode [ 295.322200][T18031] hsr_slave_1: entered promiscuous mode [ 295.615473][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5346'. [ 295.900018][T18031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.913123][T18031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.922708][T18031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.936183][T18031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.041970][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.075235][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.096966][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.104082][T13044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.136116][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.143265][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.188791][T18031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.200008][T18031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.379689][ T29] audit: type=1107 audit(1755938556.358:613): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 296.450025][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5355'. [ 296.552341][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5355'. [ 296.571841][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.605564][T18297] loop1: detected capacity change from 0 to 1024 [ 296.642523][T18297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.836497][T18031] veth0_vlan: entered promiscuous mode [ 296.919736][T18031] veth1_vlan: entered promiscuous mode [ 296.968691][T18031] veth0_macvtap: entered promiscuous mode [ 296.975797][T11815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.987182][T18031] veth1_macvtap: entered promiscuous mode [ 297.025967][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.047734][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5365'. [ 297.065088][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.077083][ T3431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.099313][ T3431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.135585][ T3431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.146111][ T29] audit: type=1400 audit(1755938557.128:614): avc: denied { mount } for pid=18031 comm="syz-executor" name="/" dev="gadgetfs" ino=3914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 297.154710][ T3431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.227199][T18368] loop1: detected capacity change from 0 to 128 [ 297.298659][T18373] loop0: detected capacity change from 0 to 4096 [ 297.344289][T18373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.381816][T18031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.420319][ T29] audit: type=1400 audit(1755938557.398:615): avc: denied { create } for pid=18390 comm="syz.0.5382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.043599][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5395'. [ 298.056283][T18421] syz_tun: left allmulticast mode [ 298.061468][T18421] syz_tun: left promiscuous mode [ 298.066707][T18421] bridge0: port 3(syz_tun) entered disabled state [ 298.075955][T18421] bridge_slave_1: left allmulticast mode [ 298.081748][T18421] bridge_slave_1: left promiscuous mode [ 298.087572][T18421] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.108550][T18421] bridge_slave_0: left allmulticast mode [ 298.114272][T18421] bridge_slave_0: left promiscuous mode [ 298.119997][T18421] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.319198][T18439] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5401'. [ 298.342295][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5402'. [ 299.218619][ T29] audit: type=1326 audit(1755938559.198:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.1.5413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f276e11ebe9 code=0x0 [ 299.412555][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.422335][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.977331][T18523] loop3: detected capacity change from 0 to 2048 [ 299.986252][T18523] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 300.063063][T18527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.071783][T18527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.080055][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5425'. [ 300.259718][T18561] loop3: detected capacity change from 0 to 512 [ 300.277760][T18561] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 300.349165][T18576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5431'. [ 300.699198][ T29] audit: type=1326 audit(1755938560.678:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.3.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 300.728324][ T29] audit: type=1326 audit(1755938560.708:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.3.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 300.752396][ T29] audit: type=1326 audit(1755938560.708:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.3.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 300.776695][ T29] audit: type=1326 audit(1755938560.708:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.3.5443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a74bebe9 code=0x7ffc0000 [ 300.857307][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'. [ 300.902086][T18622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.911103][T18622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.920292][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5445'. [ 301.027001][T18627] netlink: 'syz.0.5448': attribute type 39 has an invalid length. [ 302.246114][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5485'. [ 302.308678][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5485'. [ 302.965826][T18728] netlink: 'syz.0.5488': attribute type 39 has an invalid length. [ 303.961559][T18757] netlink: 'syz.4.5500': attribute type 39 has an invalid length. [ 304.922117][T18799] netlink: 'syz.1.5516': attribute type 29 has an invalid length. [ 304.933118][T18799] netlink: 'syz.1.5516': attribute type 29 has an invalid length. [ 304.942470][T18799] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5516'. [ 305.879825][T18839] futex_wake_op: syz.0.5532 tries to shift op by -1; fix this program [ 306.791957][ T29] audit: type=1400 audit(2000000001.970:621): avc: denied { write } for pid=18864 comm="syz.2.5543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 307.692949][T18903] futex_wake_op: syz.3.5558 tries to shift op by -1; fix this program [ 307.998847][T18909] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5560'. [ 308.157578][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5562'. [ 308.799821][T18939] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5571'. [ 308.830194][T18943] netlink: 'syz.1.5573': attribute type 39 has an invalid length. [ 308.875614][T18945] loop3: detected capacity change from 0 to 256 [ 308.899481][T18945] FAT-fs (loop3): codepage cp861 not found [ 309.428306][ T29] audit: type=1107 audit(2000000004.610:622): pid=18962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 309.470053][ T29] audit: type=1400 audit(2000000004.650:623): avc: denied { bind } for pid=18965 comm="syz.0.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.511983][T18970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5583'. [ 309.535982][T18972] futex_wake_op: syz.0.5584 tries to shift op by -1; fix this program [ 309.826176][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5587'. [ 310.109283][T19016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5595'. [ 310.960836][T19054] netlink: 'syz.1.5606': attribute type 39 has an invalid length. [ 310.996689][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5607'. [ 311.368687][ T29] audit: type=1400 audit(2000000006.550:624): avc: denied { connect } for pid=19094 comm="syz.3.5626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 311.711474][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5635'. [ 311.720502][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5635'. [ 312.514308][T19122] 9pnet_virtio: no channels available for device syz [ 312.771018][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5642'. [ 312.816058][T19140] futex_wake_op: syz.4.5645 tries to shift op by -1; fix this program [ 312.911879][ T29] audit: type=1400 audit(2000000008.070:625): avc: denied { getopt } for pid=19145 comm="syz.2.5647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.437506][T19168] __nla_validate_parse: 1 callbacks suppressed [ 313.437521][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5654'. [ 314.429187][T19228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5680'. [ 314.438242][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5680'. [ 314.568559][T19237] futex_wake_op: syz.2.5684 tries to shift op by -1; fix this program [ 315.218522][T19258] netlink: 'syz.0.5691': attribute type 39 has an invalid length. [ 315.405013][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5693'. [ 315.414159][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5693'. [ 315.936160][ T29] audit: type=1326 audit(2000000011.120:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19284 comm="syz.2.5702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93a2a8ebe9 code=0x0 [ 316.505303][T19307] futex_wake_op: syz.1.5711 tries to shift op by -1; fix this program [ 317.384547][T19324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54528 sclass=netlink_route_socket pid=19324 comm=syz.0.5716 [ 317.917159][T19338] netlink: 'syz.0.5722': attribute type 39 has an invalid length. [ 317.996434][T19343] netlink: 'syz.0.5725': attribute type 1 has an invalid length. [ 318.014679][T19343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.154103][T19343] bond1: (slave ip6gretap1): making interface the new active one [ 318.264299][T19343] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 318.602943][ T29] audit: type=1400 audit(2000000013.780:627): avc: denied { write } for pid=19317 comm="syz.3.5714" lport=39983 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 318.628456][T19355] veth3: entered promiscuous mode [ 318.637339][T19355] bond1: (slave veth3): Enslaving as an active interface with a down link [ 319.303240][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 319.313736][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 319.410253][T19394] netlink: 'syz.1.5735': attribute type 39 has an invalid length. [ 320.266421][T19488] batadv0: left allmulticast mode [ 320.271762][T19488] batadv0: left promiscuous mode [ 320.612459][ T29] audit: type=1400 audit(2000000015.790:628): avc: denied { recv } for pid=19549 comm="syz.3.5777" saddr=10.128.0.163 src=30036 daddr=10.128.0.61 dest=49228 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.493326][T19606] 9pnet_virtio: no channels available for device syz [ 321.576436][ T29] audit: type=1400 audit(2000000016.760:629): avc: denied { mounton } for pid=19617 comm="syz.3.5787" path="/file0" dev="ramfs" ino=60964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 322.818347][ T29] audit: type=1107 audit(2000000018.000:630): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 323.111444][ T29] audit: type=1400 audit(2000000018.290:631): avc: denied { recv } for pid=19566 comm="syz.4.5780" saddr=10.128.0.163 src=39790 daddr=10.128.0.61 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.690405][ T29] audit: type=1107 audit(2000000018.870:632): pid=19809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 323.828662][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 323.838758][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 323.848395][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 323.859732][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 323.976131][ T29] audit: type=1326 audit(2000000019.160:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.032644][ T29] audit: type=1326 audit(2000000019.160:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.056764][ T29] audit: type=1326 audit(2000000019.160:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.080612][ T29] audit: type=1326 audit(2000000019.160:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.105010][ T29] audit: type=1326 audit(2000000019.160:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.129379][ T29] audit: type=1326 audit(2000000019.160:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.153567][ T29] audit: type=1326 audit(2000000019.160:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.154767][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'. [ 324.177008][ T29] audit: type=1326 audit(2000000019.160:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.177074][ T29] audit: type=1326 audit(2000000019.160:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19833 comm="syz.0.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c460ebe9 code=0x7fc00000 [ 324.478455][T19879] syz_tun: entered allmulticast mode [ 324.488693][T19879] dvmrp1: entered allmulticast mode [ 324.499883][T19877] syz_tun: left allmulticast mode [ 324.534239][T19885] netlink: 'syz.2.5842': attribute type 39 has an invalid length. [ 325.579759][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5879'. [ 325.759425][T19981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5883'. [ 325.941137][T19992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19992 comm=syz.3.5888 [ 326.204574][T20020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20020 comm=syz.3.5900 [ 326.526790][T20024] chnl_net:caif_netlink_parms(): no params data found [ 326.640014][ T3431] tipc: Left network mode [ 326.656068][ T3431] hsr_slave_0: left promiscuous mode [ 326.674818][ T3431] hsr_slave_1: left promiscuous mode [ 326.694201][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.717932][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.741887][ T3431] batadv0: left allmulticast mode [ 326.747046][ T3431] batadv0: left promiscuous mode [ 326.809861][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 326.826403][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 326.835937][T20055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.882731][T20055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.952475][T20024] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.959886][T20024] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.973497][T20063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20063 comm=syz.1.5911 [ 327.002561][T20024] bridge_slave_0: entered allmulticast mode [ 327.017374][T20024] bridge_slave_0: entered promiscuous mode [ 327.027476][T20024] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.035890][T20024] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.046628][T20024] bridge_slave_1: entered allmulticast mode [ 327.056926][T20024] bridge_slave_1: entered promiscuous mode [ 327.133860][T20024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.163129][ T3431] IPVS: stop unused estimator thread 0... [ 327.166847][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5914'. [ 327.183685][T20024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.222284][T20024] team0: Port device team_slave_0 added [ 327.234598][T20024] team0: Port device team_slave_1 added [ 327.255752][T20024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.263555][T20024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.289672][T20024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.303183][T20024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.310188][T20024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.337250][T20024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.372251][T20024] hsr_slave_0: entered promiscuous mode [ 327.378384][T20024] hsr_slave_1: entered promiscuous mode [ 327.384332][T20024] debugfs: 'hsr0' already exists in 'hsr' [ 327.390156][T20024] Cannot create hsr debugfs directory [ 327.634455][T20024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.665386][T20135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20135 comm=syz.4.5923 [ 327.681412][T20024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.691577][T20024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.719501][T20024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.762194][T20024] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.769317][T20024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.835184][T20024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.867135][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.894226][T20024] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.913468][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.920574][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.991154][T13676] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.998270][T13676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.022864][T20178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20178 comm=syz.2.5933 [ 328.049257][T20024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.078375][T20185] syz_tun: entered allmulticast mode [ 328.126287][T20176] dvmrp1: entered allmulticast mode [ 328.179924][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'. [ 328.180037][T20175] syz_tun: left allmulticast mode [ 328.207301][T20024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.388098][T20024] veth0_vlan: entered promiscuous mode [ 328.409405][T20024] veth1_vlan: entered promiscuous mode [ 328.443207][T20024] veth0_macvtap: entered promiscuous mode [ 328.483656][T20024] veth1_macvtap: entered promiscuous mode [ 328.519158][T20024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.546997][T20024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.559963][ T3431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.569966][ T3431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.591303][T13676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.610283][T13676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.692081][T20271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20271 comm=syz.1.5945 [ 328.928320][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 328.928353][ T29] audit: type=1400 audit(2000000024.110:656): avc: denied { shutdown } for pid=20287 comm="syz.1.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.994618][ T29] audit: type=1400 audit(2000000024.110:657): avc: denied { read } for pid=20287 comm="syz.1.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 330.189786][ T29] audit: type=1400 audit(2000000025.360:658): avc: denied { mount } for pid=20402 comm="syz.0.5976" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.213315][ T29] audit: type=1400 audit(2000000025.360:659): avc: denied { write } for pid=20402 comm="syz.0.5976" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.235683][ T29] audit: type=1400 audit(2000000025.360:660): avc: denied { open } for pid=20402 comm="syz.0.5976" path="/129/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.269650][ T29] audit: type=1400 audit(2000000025.450:661): avc: denied { unmount } for pid=18031 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.298020][T20407] wireguard0: entered promiscuous mode [ 330.303654][T20407] wireguard0: entered allmulticast mode [ 330.738577][ T29] audit: type=1400 audit(2000000025.910:662): avc: denied { ioctl } for pid=20436 comm="syz.3.5989" path="socket:[63603]" dev="sockfs" ino=63603 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 330.885855][T20440] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5989'. [ 330.949502][T20437] netlink: 'syz.3.5989': attribute type 10 has an invalid length. [ 331.537209][T20472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20472 comm=syz.3.5993 [ 333.528465][T20541] 9pnet_virtio: no channels available for device syz [ 334.379757][T20545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20545 comm=syz.3.6006 [ 335.096279][T20576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20576 comm=syz.1.6020 [ 336.443034][T20601] wireguard0: entered promiscuous mode [ 336.448655][T20601] wireguard0: entered allmulticast mode [ 336.827598][T20621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20621 comm=syz.3.6033 [ 337.948619][T20647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20647 comm=syz.2.6045 [ 338.249065][T20675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20675 comm=syz.3.6059 [ 339.382678][T20706] loop1: detected capacity change from 0 to 2048 [ 339.502567][T20714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20714 comm=syz.0.6074 [ 339.748939][ T3293] Alternate GPT is invalid, using primary GPT. [ 339.756716][ T3293] loop1: p1 p2 p3 [ 340.250650][T20725] 9pnet_virtio: no channels available for device syz [ 340.625078][T20706] Alternate GPT is invalid, using primary GPT. [ 340.632761][T20706] loop1: p1 p2 p3 [ 340.779580][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 340.796677][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 340.809017][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 340.877631][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 340.889288][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 340.900366][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 341.072209][T20748] netlink: 'syz.0.6084': attribute type 33 has an invalid length. [ 341.080107][T20748] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6084'. [ 341.137318][T20755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20755 comm=syz.4.6088 [ 341.576270][ T29] audit: type=1400 audit(2000000036.760:663): avc: denied { ioctl } for pid=20812 comm="syz.4.6102" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.799220][T20817] loop4: detected capacity change from 0 to 2048 [ 341.842821][ T3293] Alternate GPT is invalid, using primary GPT. [ 341.849150][ T3293] loop4: p1 p2 p3 [ 342.043057][T20817] Alternate GPT is invalid, using primary GPT. [ 342.049488][T20817] loop4: p1 p2 p3 [ 342.104650][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 342.124108][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 342.157133][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 342.429711][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 342.478827][T20831] binfmt_misc: register: failed to install interpreter file ./file0 [ 342.673195][T20840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6112'. [ 343.083919][T20865] binfmt_misc: register: failed to install interpreter file ./file0 [ 343.110039][T20867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20867 comm=syz.0.6123 [ 343.363184][T20885] netlink: 'syz.1.6132': attribute type 39 has an invalid length. [ 343.458454][T20899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20899 comm=syz.1.6135 [ 343.566438][T20880] chnl_net:caif_netlink_parms(): no params data found [ 343.727735][T20880] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.736204][T20880] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.765523][T20880] bridge_slave_0: entered allmulticast mode [ 343.779836][T20880] bridge_slave_0: entered promiscuous mode [ 343.808062][T20880] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.815593][T20880] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.862015][T20880] bridge_slave_1: entered allmulticast mode [ 343.877324][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6141'. [ 343.882289][T20880] bridge_slave_1: entered promiscuous mode [ 343.919265][T20924] wireguard0: entered promiscuous mode [ 343.925464][T20924] wireguard0: entered allmulticast mode [ 343.935708][T13044] bridge_slave_1: left allmulticast mode [ 343.942146][T13044] bridge_slave_1: left promiscuous mode [ 343.947802][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.985408][T13044] bridge_slave_0: left allmulticast mode [ 343.991800][T13044] bridge_slave_0: left promiscuous mode [ 343.997527][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.155091][T13044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.185692][T13044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.203008][T13044] bond0 (unregistering): Released all slaves [ 344.254497][T20880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.265178][T13044] tipc: Left network mode [ 344.276781][T20880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.349784][T20880] team0: Port device team_slave_0 added [ 344.372787][T20880] team0: Port device team_slave_1 added [ 344.524845][T13044] hsr_slave_0: left promiscuous mode [ 344.531826][T13044] hsr_slave_1: left promiscuous mode [ 344.538178][T13044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.550436][T13044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.609036][T13044] team0 (unregistering): Port device team_slave_1 removed [ 344.644182][T13044] team0 (unregistering): Port device team_slave_0 removed [ 344.704138][T20974] binfmt_misc: register: failed to install interpreter file ./file0 [ 344.739223][T20880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.747651][T20880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.775130][T20880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.788111][T20982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20982 comm=syz.1.6156 [ 344.864783][T20880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.873392][T20880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.900689][T20880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.935454][T20999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.974639][T20999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.064457][T20880] hsr_slave_0: entered promiscuous mode [ 345.070440][T20880] hsr_slave_1: entered promiscuous mode [ 345.087949][T20880] debugfs: 'hsr0' already exists in 'hsr' [ 345.095291][T20880] Cannot create hsr debugfs directory [ 345.105613][T13044] IPVS: stop unused estimator thread 0... [ 345.142285][T21003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.171620][T21003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.428212][T20880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.444027][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6162'. [ 345.464430][T21018] veth1_macvtap: left promiscuous mode [ 345.475226][T20880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.486606][T20880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.504646][T20880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.619035][T20880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.658216][T20880] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.684788][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.691895][T13662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.733566][T20880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.745335][T20880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.771946][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21054 comm=syz.0.6167 [ 345.817905][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.825007][T13662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.925189][T21077] netlink: 'syz.0.6173': attribute type 39 has an invalid length. [ 345.947575][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 345.964500][T20880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.089678][T21109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21109 comm=syz.2.6182 [ 346.156654][T21111] netlink: 'syz.3.6181': attribute type 10 has an invalid length. [ 346.279807][T21140] netlink: 'syz.3.6188': attribute type 39 has an invalid length. [ 346.338318][T20880] veth0_vlan: entered promiscuous mode [ 346.364043][T20880] veth1_vlan: entered promiscuous mode [ 346.396878][T21154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21154 comm=syz.0.6193 [ 346.411478][T20880] veth0_macvtap: entered promiscuous mode [ 346.419647][T20880] veth1_macvtap: entered promiscuous mode [ 346.446061][T20880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.475008][T20880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.503508][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.538982][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.563009][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.592065][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.703138][T21189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21189 comm=syz.3.6207 [ 346.942761][T21203] netlink: 'syz.3.6213': attribute type 39 has an invalid length. [ 347.332227][T21224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21224 comm=syz.2.6221 [ 347.547245][T21236] netlink: 'syz.2.6225': attribute type 39 has an invalid length. [ 347.720287][T21261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21261 comm=syz.2.6236 [ 348.004680][T21292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21292 comm=syz.3.6250 [ 349.023445][T21335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21335 comm=syz.0.6261 [ 349.464129][T21315] chnl_net:caif_netlink_parms(): no params data found [ 349.578173][T21315] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.587064][T21315] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.612025][T21315] bridge_slave_0: entered allmulticast mode [ 349.618471][T21315] bridge_slave_0: entered promiscuous mode [ 349.652269][T21315] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.659509][T21315] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.680877][T21315] bridge_slave_1: entered allmulticast mode [ 349.693633][T21315] bridge_slave_1: entered promiscuous mode [ 349.727650][T21315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.741079][T21315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.766762][T21315] team0: Port device team_slave_0 added [ 349.774178][T21315] team0: Port device team_slave_1 added [ 349.855339][T21315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.863062][T21315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.889226][T21315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.901948][T21315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.908972][T21315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.935712][T21315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.017815][T21364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21364 comm=syz.3.6271 [ 350.056318][T21315] hsr_slave_0: entered promiscuous mode [ 350.065500][T21315] hsr_slave_1: entered promiscuous mode [ 350.074255][T21315] debugfs: 'hsr0' already exists in 'hsr' [ 350.079984][T21315] Cannot create hsr debugfs directory [ 350.275966][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6267'. [ 350.297208][T21388] 9pnet_virtio: no channels available for device syz [ 350.897909][T21315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.923387][T21315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.117362][T21315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.152597][T21315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.275004][T21315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.326823][T21315] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.388881][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.396179][T13044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.467162][T21315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.479175][T21315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.499120][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.506253][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.586429][T21315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.673449][T21315] veth0_vlan: entered promiscuous mode [ 351.683559][T21315] veth1_vlan: entered promiscuous mode [ 351.705325][T21315] veth0_macvtap: entered promiscuous mode [ 351.714736][T21315] veth1_macvtap: entered promiscuous mode [ 351.726248][T21315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.739414][T21315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.752155][ T293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.764097][T21445] netlink: 'syz.0.6292': attribute type 4 has an invalid length. [ 351.773790][T13676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.790867][T13676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.837076][T13676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.208774][T21461] 9pnet_virtio: no channels available for device syz [ 353.169312][T21486] futex_wake_op: syz.1.6303 tries to shift op by -1; fix this program [ 355.083301][ T29] audit: type=1400 audit(2000000051.269:664): avc: denied { ioctl } for pid=21564 comm="syz.4.6316" path="socket:[67001]" dev="sockfs" ino=67001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.315824][T21585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21585 comm=syz.2.6321 [ 355.753058][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6328'. [ 355.796534][T21614] futex_wake_op: syz.2.6329 tries to shift op by -1; fix this program [ 355.810097][T21612] veth1_macvtap: left promiscuous mode [ 356.184355][T21642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21642 comm=syz.4.6334 [ 356.772378][ T29] audit: type=1400 audit(2000000052.899:665): avc: denied { write } for pid=21652 comm="syz.4.6339" path="socket:[67109]" dev="sockfs" ino=67109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.493209][T21672] netlink: 'syz.0.6346': attribute type 6 has an invalid length. [ 357.522948][T21674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21674 comm=syz.2.6347 [ 357.832111][T21687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6351'. [ 358.197807][T21701] futex_wake_op: syz.1.6357 tries to shift op by -1; fix this program [ 358.640236][T21707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21707 comm=syz.2.6358 [ 358.728744][T21710] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6359'. [ 359.209166][T21729] 9pnet_fd: Insufficient options for proto=fd [ 360.063081][T21753] syz_tun: entered allmulticast mode [ 360.122105][T21753] dvmrp8: entered allmulticast mode [ 360.152644][T21757] 9pnet_fd: Insufficient options for proto=fd [ 360.182066][T21751] syz_tun: left allmulticast mode [ 360.261361][ T29] audit: type=1400 audit(2000000056.379:666): avc: denied { unmount } for pid=21756 comm="syz.4.6378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 360.528162][T21766] loop1: detected capacity change from 0 to 1764 [ 360.535790][T21766] iso9660: Unknown parameter 'checicu' [ 360.546954][T21766] loop1: detected capacity change from 0 to 512 [ 361.476683][T21766] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 361.745595][ T29] audit: type=1400 audit(2000000056.649:667): avc: denied { accept } for pid=21760 comm="syz.1.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 362.287880][T21784] 9pnet_fd: Insufficient options for proto=fd [ 362.304642][T21786] futex_wake_op: syz.4.6389 tries to shift op by -1; fix this program [ 362.425572][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6390'. [ 362.449259][T21791] veth1_macvtap: left promiscuous mode [ 363.165336][T21810] loop1: detected capacity change from 0 to 512 [ 363.184509][T21810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.197352][T21810] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.216088][ T29] audit: type=1400 audit(2000000059.399:668): avc: denied { ioctl } for pid=21809 comm="syz.1.6396" path="/16/bus/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 363.252935][T21315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.575082][T21831] 9pnet_fd: Insufficient options for proto=fd [ 364.276493][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6413'. [ 364.310385][ T29] audit: type=1400 audit(2000000060.349:669): avc: denied { name_bind } for pid=21841 comm="syz.4.6408" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 364.460151][T21864] 9pnet_fd: Insufficient options for proto=fd [ 365.088662][T21904] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6435'. [ 365.519665][T21934] loop1: detected capacity change from 0 to 2048 [ 365.555731][ T3293] Alternate GPT is invalid, using primary GPT. [ 365.563355][ T3293] loop1: p1 p2 p3 [ 365.759377][T21934] Alternate GPT is invalid, using primary GPT. [ 365.766981][T21934] loop1: p1 p2 p3 [ 365.864145][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 366.202956][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 366.231498][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 366.396526][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 366.408038][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 366.419136][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 367.384371][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6467'. [ 367.416558][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6467'. [ 367.426913][T21974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6467'. [ 367.438113][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6467'. [ 367.448443][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6467'. [ 367.458864][T21974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6467'. [ 368.216751][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6479'. [ 368.306461][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6479'. [ 368.316286][T22003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6479'. [ 368.485119][T22013] net_ratelimit: 30 callbacks suppressed [ 368.485136][T22013] IPv6: addrconf: prefix option has invalid lifetime [ 368.947242][T22034] loop1: detected capacity change from 0 to 512 [ 369.005800][T22034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.049577][T22041] IPv6: addrconf: prefix option has invalid lifetime [ 369.099253][T22034] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.212505][T21315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.256456][T22048] 9pnet_fd: Insufficient options for proto=fd [ 369.647385][T22064] 9pnet_fd: Insufficient options for proto=fd [ 369.944915][T22084] 9pnet_fd: Insufficient options for proto=fd [ 371.754225][T22152] IPv6: addrconf: prefix option has invalid lifetime [ 371.928729][T22134] chnl_net:caif_netlink_parms(): no params data found [ 372.057455][T22134] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.065459][T22134] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.102720][T22134] bridge_slave_0: entered allmulticast mode [ 372.133701][T22134] bridge_slave_0: entered promiscuous mode [ 372.155874][T22134] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.163118][T22134] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.187369][T22134] bridge_slave_1: entered allmulticast mode [ 372.214888][T22134] bridge_slave_1: entered promiscuous mode [ 372.273005][T22134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.283037][T22184] IPv6: addrconf: prefix option has invalid lifetime [ 372.300231][T22134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.337530][T22134] team0: Port device team_slave_0 added [ 372.345598][T22134] team0: Port device team_slave_1 added [ 372.450369][T22134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.458110][T22134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.484790][T22134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.553803][T22134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.561483][T22134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.588186][T22134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.642302][T22134] hsr_slave_0: entered promiscuous mode [ 372.651983][T22134] hsr_slave_1: entered promiscuous mode [ 372.662076][T22134] debugfs: 'hsr0' already exists in 'hsr' [ 372.667923][T22134] Cannot create hsr debugfs directory [ 372.803002][T22134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.864693][T22134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.922386][T22134] bond0: (slave netdevsim1): Releasing backup interface [ 372.942508][T22134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.009771][T22134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.115356][T22134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.128206][T22134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.162468][T22134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.175331][T22134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.298064][T22220] 9pnet_fd: Insufficient options for proto=fd [ 373.627314][T22134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.643633][T22134] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.655823][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.663009][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.685745][T22134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.697613][T22134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.716278][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.723431][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.799084][T22134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.899204][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6569'. [ 373.944426][T22134] veth0_vlan: entered promiscuous mode [ 373.957812][T22134] veth1_vlan: entered promiscuous mode [ 373.977901][T22134] veth0_macvtap: entered promiscuous mode [ 373.997122][T22134] veth1_macvtap: entered promiscuous mode [ 374.006207][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6571'. [ 374.030416][T22134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.049183][T22134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.075170][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.091213][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.106986][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.118468][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.435403][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6583'. [ 374.509688][T22302] 9pnet_fd: Insufficient options for proto=fd [ 375.023423][T22333] syzkaller0: entered promiscuous mode [ 375.029025][T22333] syzkaller0: entered allmulticast mode [ 375.100221][T22342] 9pnet_fd: Insufficient options for proto=fd [ 375.708480][T22382] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.6626'. [ 378.023232][T22413] IPv6: syztnl0: Disabled Multicast RS [ 378.522872][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6644'. [ 379.065082][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6657'. [ 379.222639][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 379.273128][T22499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6674'. [ 379.283560][T22499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6674'. [ 379.294089][T22499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6674'. [ 379.404678][T22505] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6677'. [ 379.624518][T22522] loop2: detected capacity change from 0 to 128 [ 379.652431][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6683'. [ 379.702505][T22522] EXT4-fs: Ignoring removed nobh option [ 379.805041][T22522] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.829768][T22522] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.886855][T22522] EXT4-fs (loop2): shut down requested (1) [ 379.902650][ T29] audit: type=1400 audit(2000000076.089:670): avc: denied { search } for pid=2975 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.028485][T22134] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.375427][T22566] tipc: Enabling of bearer rejected, failed to enable media [ 381.254262][ T29] audit: type=1400 audit(2000000077.429:671): avc: denied { mount } for pid=22580 comm="syz.0.6708" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 381.924190][T22655] netlink: 'syz.3.6738': attribute type 33 has an invalid length. [ 381.932249][T22655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6738'. [ 381.987979][T22655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6738'. [ 382.018285][T22658] 9pnet_fd: Insufficient options for proto=fd [ 382.027640][ T3389] IPVS: starting estimator thread 0... [ 382.089389][T22662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6740'. [ 382.130589][T22659] IPVS: using max 2784 ests per chain, 139200 per kthread [ 383.609551][ T29] audit: type=1400 audit(2000000079.789:672): avc: denied { write } for pid=22773 comm="syz.4.6787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 383.631128][ T29] audit: type=1400 audit(2000000079.789:673): avc: denied { read } for pid=22773 comm="syz.4.6787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 383.985858][ T29] audit: type=1400 audit(2000000080.169:674): avc: denied { connect } for pid=22807 comm="syz.0.6800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 384.006520][ T29] audit: type=1400 audit(2000000080.169:675): avc: denied { ioctl } for pid=22807 comm="syz.0.6800" path="socket:[71259]" dev="sockfs" ino=71259 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 384.516046][ T29] audit: type=1400 audit(2000000080.699:676): avc: denied { getopt } for pid=22824 comm="syz.1.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.597881][T22839] netlink: 'syz.1.6813': attribute type 4 has an invalid length. [ 384.699370][T22856] loop1: detected capacity change from 0 to 128 [ 384.728085][T22856] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 384.738355][T22856] FAT-fs (loop1): Filesystem has been set read-only [ 384.752135][ T29] audit: type=1400 audit(2000000080.939:677): avc: denied { ioctl } for pid=22862 comm="syz.3.6824" path="socket:[70445]" dev="sockfs" ino=70445 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 384.778471][ T29] audit: type=1400 audit(2000000080.939:678): avc: denied { getopt } for pid=22862 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 384.779587][T22865] __nla_validate_parse: 4 callbacks suppressed [ 384.779600][T22865] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6826'. [ 384.828401][T21315] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 385.876702][ T29] audit: type=1400 audit(2000000082.059:679): avc: denied { read write } for pid=22924 comm="syz.4.6849" name="file1" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.901020][ T29] audit: type=1400 audit(2000000082.059:680): avc: denied { open } for pid=22924 comm="syz.4.6849" path="/133/file1" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.998740][ T29] audit: type=1400 audit(2000000082.089:681): avc: denied { unlink } for pid=20880 comm="syz-executor" name="file1" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 386.012158][T22931] loop1: detected capacity change from 0 to 512 [ 386.075096][T22931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.098436][T22931] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.129804][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'. [ 386.136258][T22954] loop2: detected capacity change from 0 to 512 [ 386.157384][ T29] audit: type=1400 audit(2000000082.339:682): avc: denied { create } for pid=22929 comm="syz.1.6850" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 386.179586][T22954] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 386.188867][T22954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 386.199686][T22931] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.6850: invalid size [ 386.217423][T22931] EXT4-fs (loop1): Remounting filesystem read-only [ 386.226696][T22954] EXT4-fs (loop2): orphan cleanup on readonly fs [ 386.238680][ T29] audit: type=1400 audit(2000000082.379:683): avc: denied { rename } for pid=22929 comm="syz.1.6850" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 386.262667][ T29] audit: type=1400 audit(2000000082.379:684): avc: denied { rmdir } for pid=22929 comm="syz.1.6850" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.264212][T22954] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.6860: iget: bad i_size value: 12154761577498 [ 386.312315][T22954] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6860: couldn't read orphan inode 13 (err -117) [ 386.328471][T22954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.347765][T22954] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.6860: dx entry: limit 65535 != root limit 120 [ 386.361630][T22954] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6860: Corrupt directory, running e2fsck is recommended [ 386.383803][T21315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.397729][T13662] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.409876][T13662] Quota error (device loop1): write_blk: dquota write failed [ 386.418681][T13662] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 386.429914][T22134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.256280][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6877'. [ 387.278967][T22997] veth1_macvtap: left promiscuous mode [ 387.419518][ T29] audit: type=1400 audit(2000000083.599:685): avc: denied { setopt } for pid=23011 comm="syz.2.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.441993][ T29] audit: type=1400 audit(2000000083.629:686): avc: denied { ioctl } for pid=23011 comm="syz.2.6884" path="socket:[70647]" dev="sockfs" ino=70647 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 387.509132][T23028] team0: No ports can be present during mode change [ 388.222452][T23054] loop2: detected capacity change from 0 to 4096 [ 388.230211][T23054] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.237699][T23054] EXT4-fs: test_dummy_encryption option not supported [ 388.366459][T23074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.388402][T23074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.540836][T23092] netlink: 'syz.2.6918': attribute type 1 has an invalid length. [ 388.548600][T23092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6918'. [ 388.904436][T23163] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6953'. [ 389.171471][T23190] mmap: syz.2.6965 (23190): VmData 167489536 exceed data ulimit 2417. Update limits or use boot option ignore_rlimit_data. [ 390.998846][T23280] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.7002'. [ 391.228903][T23294] loop2: detected capacity change from 0 to 4096 [ 391.288224][T23294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.358839][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 391.358852][ T29] audit: type=1400 audit(2000000087.539:690): avc: denied { mounton } for pid=23293 comm="syz.2.7008" path="/83/file1/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 391.389573][T23294] cgroup: name respecified [ 391.456969][T22134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.154117][ T29] audit: type=1400 audit(2000000087.969:691): avc: denied { read } for pid=23320 comm="syz.3.7022" path="socket:[72231]" dev="sockfs" ino=72231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 392.338692][T23344] netlink: 'syz.2.7030': attribute type 10 has an invalid length. [ 392.413507][T23344] syz_tun: entered promiscuous mode [ 392.443276][T23349] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.7032'. [ 392.456025][T23344] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 392.682541][T23362] 9pnet: Could not find request transport: fd0x0000000000000003 [ 393.047852][T23383] loop2: detected capacity change from 0 to 2048 [ 393.122192][ T3293] Alternate GPT is invalid, using primary GPT. [ 393.128557][ T3293] loop2: p1 p2 p3 [ 393.195293][T23383] Alternate GPT is invalid, using primary GPT. [ 393.202363][T23383] loop2: p1 p2 p3 [ 393.707753][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 394.042821][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 394.314350][T23412] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.7057'. [ 394.379257][T23416] netlink: 'syz.0.7059': attribute type 4 has an invalid length. [ 394.422351][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 394.432080][T23416] netlink: 'syz.0.7059': attribute type 4 has an invalid length. [ 394.466141][ T3861] udevd[3861]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 394.483722][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 394.694162][T23435] 9pnet_fd: Insufficient options for proto=fd [ 394.791966][T23442] netlink: 'syz.3.7071': attribute type 5 has an invalid length. [ 394.799752][T23442] netlink: 972 bytes leftover after parsing attributes in process `syz.3.7071'. [ 394.843933][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7072'. [ 395.126605][ T3862] udevd[3862]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 395.203649][ T29] audit: type=1400 audit(2000000091.389:692): avc: denied { remount } for pid=23449 comm="syz.3.7075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.496513][T23471] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7084'. [ 395.784285][T23471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.878675][T23471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.975036][T23471] bond0 (unregistering): Released all slaves [ 395.985495][T23478] 9pnet_fd: Insufficient options for proto=fd [ 396.050169][T23480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7086'. [ 396.425171][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7102'. [ 396.979857][T23533] 9pnet_fd: Insufficient options for proto=fd [ 397.167893][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7116'. [ 398.377393][ T29] audit: type=1400 audit(2000000094.559:693): avc: denied { accept } for pid=23593 comm="syz.0.7136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.224154][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7146'. [ 399.639657][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7157'. [ 399.752443][T23661] netlink: 'syz.4.7166': attribute type 4 has an invalid length. [ 399.760262][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7166'. [ 399.782767][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'. [ 399.815130][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7178'. [ 399.993099][T23697] netlink: 'syz.4.7182': attribute type 4 has an invalid length. [ 400.001781][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7182'. [ 400.038857][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7183'. [ 400.117048][T23714] loop1: detected capacity change from 0 to 128 [ 400.176879][T23714] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 400.270090][T23714] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 400.526256][T23733] syz.2.7197 (23733) used greatest stack depth: 9048 bytes left [ 400.537613][T21315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.923362][T23748] tipc: Started in network mode [ 400.928287][T23748] tipc: Node identity ac1414aa, cluster identity 4711 [ 400.973476][T23748] tipc: Enabled bearer , priority 10 [ 401.234496][T23754] loop2: detected capacity change from 0 to 4096 [ 401.313937][T23754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.409262][T22134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.092047][ T10] tipc: Node number set to 2886997162 [ 402.204951][T23777] __nla_validate_parse: 1 callbacks suppressed [ 402.204971][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7215'. [ 403.625461][ T29] audit: type=1400 audit(2000000099.809:694): avc: denied { checkpoint_restore } for pid=23887 comm="syz.4.7267" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.035906][T23920] loop2: detected capacity change from 0 to 512 [ 404.066168][T23920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 404.088788][T23920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 404.107697][T23920] System zones: 1-12 [ 404.118346][T23920] EXT4-fs (loop2): 1 truncate cleaned up [ 404.124629][T23920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.139010][T23920] EXT4-fs (loop2): shut down requested (1) [ 404.202030][T22134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.333651][T23941] 9pnet_fd: Insufficient options for proto=fd [ 404.348629][T23944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7293'. [ 404.587789][T23971] 9pnet_fd: Insufficient options for proto=fd [ 405.457726][ T3396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3396 comm=kworker/1:5 [ 406.102405][ T29] audit: type=1326 audit(2000000102.279:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24058 comm="syz.4.7345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde80eebe9 code=0x0 [ 406.350357][T24063] 9pnet_fd: Insufficient options for proto=fd [ 406.490395][T24050] Set syz1 is full, maxelem 65536 reached [ 407.094858][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7361'. [ 407.178331][T24104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7356'. [ 407.790236][T24135] loop2: detected capacity change from 0 to 1024 [ 408.262334][T24135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.284087][T24135] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.353039][T22134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.441886][T24185] 9pnet_fd: Insufficient options for proto=fd [ 408.552915][ T29] audit: type=1400 audit(2000000104.729:696): avc: denied { mounton } for pid=24189 comm="syz.0.7400" path=2F3430362FE91F7189591E9233614B dev="tmpfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 408.966371][T24240] bond0: entered promiscuous mode [ 408.971517][T24240] bond_slave_0: entered promiscuous mode [ 408.977361][T24240] bond_slave_1: entered promiscuous mode [ 408.998764][ T29] audit: type=1400 audit(2000000105.139:697): avc: denied { append } for pid=24211 comm="syz.2.7411" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.859402][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7440'. [ 410.522760][T24301] lo speed is unknown, defaulting to 1000 [ 410.529047][T24301] lo speed is unknown, defaulting to 1000 [ 410.535510][T24301] lo speed is unknown, defaulting to 1000 [ 410.544151][T24301] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.954918][T24301] lo speed is unknown, defaulting to 1000 [ 410.995012][T24301] lo speed is unknown, defaulting to 1000 [ 411.103413][T24301] lo speed is unknown, defaulting to 1000 [ 411.110037][T24301] lo speed is unknown, defaulting to 1000 [ 411.179456][T24301] lo speed is unknown, defaulting to 1000 [ 411.241142][T24301] lo speed is unknown, defaulting to 1000 [ 411.323612][T24301] lo speed is unknown, defaulting to 1000 [ 411.440088][T24341] netlink: 'syz.0.7458': attribute type 13 has an invalid length. [ 411.448209][T24341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7458'. [ 411.614241][T24360] loop1: detected capacity change from 0 to 128 [ 411.630290][T24360] FAT-fs (loop1): Directory bread(block 32) failed [ 411.639380][T24360] FAT-fs (loop1): Directory bread(block 33) failed [ 411.647140][T24360] FAT-fs (loop1): Directory bread(block 34) failed [ 411.656014][T24360] FAT-fs (loop1): Directory bread(block 35) failed [ 411.662950][T24360] FAT-fs (loop1): Directory bread(block 36) failed [ 411.669824][T24360] FAT-fs (loop1): Directory bread(block 37) failed [ 411.679971][T24360] FAT-fs (loop1): Directory bread(block 38) failed [ 411.686577][T24360] FAT-fs (loop1): Directory bread(block 39) failed [ 411.695804][T24360] FAT-fs (loop1): Directory bread(block 40) failed [ 411.703078][T24360] FAT-fs (loop1): Directory bread(block 41) failed [ 414.206176][T24430] 9pnet_fd: Insufficient options for proto=fd [ 414.389619][ T29] audit: type=1326 audit(2000000110.569:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24439 comm="syz.1.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237f2ebe9 code=0x7ffc0000 [ 414.429306][ T29] audit: type=1326 audit(2000000110.569:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24439 comm="syz.1.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237f2ebe9 code=0x7ffc0000 [ 414.454209][ T29] audit: type=1326 audit(2000000110.569:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24439 comm="syz.1.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc237f2ebe9 code=0x7ffc0000 [ 414.478082][ T29] audit: type=1326 audit(2000000110.569:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24439 comm="syz.1.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237f2ebe9 code=0x7ffc0000 [ 414.503405][ T29] audit: type=1326 audit(2000000110.569:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24439 comm="syz.1.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc237f2ebe9 code=0x7ffc0000 [ 414.645620][T24457] 9pnet_fd: Insufficient options for proto=fd [ 414.789329][ T29] audit: type=1326 audit(2000000110.969:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24477 comm="syz.3.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9ff9ebe9 code=0x7ffc0000 [ 414.833151][ T29] audit: type=1326 audit(2000000110.969:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24477 comm="syz.3.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9ff9ebe9 code=0x7ffc0000 [ 414.858102][ T29] audit: type=1326 audit(2000000110.969:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24477 comm="syz.3.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9f9ff9ebe9 code=0x7ffc0000 [ 414.882979][ T29] audit: type=1326 audit(2000000110.969:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24477 comm="syz.3.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9ff9ebe9 code=0x7ffc0000 [ 414.907830][ T29] audit: type=1326 audit(2000000110.969:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24477 comm="syz.3.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9ff9ebe9 code=0x7ffc0000 [ 415.233863][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 415.242979][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 415.253540][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 415.264027][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 415.333710][T24507] fido_id[24507]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 415.352180][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7539'. [ 415.696300][T24550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7553'. [ 415.790240][T24558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.799798][T24558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.193111][T24581] 9pnet: Could not find request transport: fd0x0000000000000003 [ 416.245648][T24588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7569'. [ 416.505761][T24618] loop2: detected capacity change from 0 to 128 [ 416.521231][T24618] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.535883][T24618] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.606972][T22134] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.062367][T24644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7592'. [ 417.324752][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7610'. [ 418.147401][ T2993] ================================================================== [ 418.155516][ T2993] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 418.162129][ T2993] [ 418.164458][ T2993] read-write to 0xffff8881004a1cc0 of 4 bytes by task 3293 on cpu 0: [ 418.172651][ T2993] dont_mount+0x2a/0x40 [ 418.176807][ T2993] vfs_unlink+0x28f/0x420 [ 418.181130][ T2993] do_unlinkat+0x24e/0x480 [ 418.185550][ T2993] __x64_sys_unlink+0x2e/0x40 [ 418.190214][ T2993] x64_sys_call+0x2dc0/0x2ff0 [ 418.194965][ T2993] do_syscall_64+0xd2/0x200 [ 418.199485][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.205369][ T2993] [ 418.207686][ T2993] read to 0xffff8881004a1cc0 of 4 bytes by task 2993 on cpu 1: [ 418.215322][ T2993] lookup_fast+0xf0/0x320 [ 418.219641][ T2993] walk_component+0x3f/0x220 [ 418.224217][ T2993] path_lookupat+0xfe/0x2a0 [ 418.228766][ T2993] filename_lookup+0x147/0x340 [ 418.233551][ T2993] do_readlinkat+0x7d/0x320 [ 418.238081][ T2993] __x64_sys_readlink+0x47/0x60 [ 418.242922][ T2993] x64_sys_call+0x28da/0x2ff0 [ 418.247603][ T2993] do_syscall_64+0xd2/0x200 [ 418.252095][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.257987][ T2993] [ 418.260291][ T2993] value changed: 0x00300080 -> 0x00004080 [ 418.265983][ T2993] [ 418.268285][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 418.274513][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 418.283777][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.293904][ T2993] ================================================================== [ 418.364014][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7641'. [ 418.373874][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7641'.