last executing test programs: 1.039276955s ago: executing program 4 (id=4427): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.012984967s ago: executing program 4 (id=4430): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 969.618051ms ago: executing program 4 (id=4433): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x3000000, 0x1f, 0x0, 0xffffffffffffffff, 0x5}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 945.630633ms ago: executing program 4 (id=4434): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 918.574315ms ago: executing program 0 (id=4436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 838.471552ms ago: executing program 0 (id=4440): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000047"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 838.330921ms ago: executing program 0 (id=4441): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 802.261024ms ago: executing program 4 (id=4443): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000000)=0x84) 766.348367ms ago: executing program 0 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 732.6611ms ago: executing program 4 (id=4447): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvfrom(r0, 0x0, 0x45, 0x40000100, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 732.05761ms ago: executing program 0 (id=4448): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 622.109809ms ago: executing program 1 (id=4460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) 600.245501ms ago: executing program 1 (id=4461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) 526.064586ms ago: executing program 1 (id=4464): mount(0x0, 0x0, 0x0, 0x1000, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040)="6a6301000000", 0x6}]) 523.549377ms ago: executing program 3 (id=4468): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 501.764649ms ago: executing program 3 (id=4470): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 459.591452ms ago: executing program 1 (id=4471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 459.380502ms ago: executing program 3 (id=4472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 435.234004ms ago: executing program 1 (id=4473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlockall(0x7) 387.369208ms ago: executing program 1 (id=4476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x400}, &(0x7f0000000080)=0x8) 364.09453ms ago: executing program 3 (id=4478): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 310.309464ms ago: executing program 3 (id=4480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x161a, &(0x7f0000000200)={0x0, 0x8, 0x100, 0x0, 0x130}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/155, 0x9b}], &(0x7f00000012c0)=[0x3]}, 0x20) 309.943695ms ago: executing program 3 (id=4482): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 198.928643ms ago: executing program 2 (id=4485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 182.020755ms ago: executing program 2 (id=4486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xdef98b386264d0e0}, 0x0) 166.379486ms ago: executing program 2 (id=4487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlockall(0x7) 128.711219ms ago: executing program 2 (id=4488): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) 39.203146ms ago: executing program 2 (id=4489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 22.599768ms ago: executing program 2 (id=4490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 0s ago: executing program 0 (id=4491): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): failed to load policy [ 73.683519][ T6648] SELinux: failed to load policy [ 73.881943][ T6680] loop4: detected capacity change from 0 to 1024 [ 73.905794][ T6680] EXT4-fs mount: 42 callbacks suppressed [ 73.905815][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.020754][ T154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.038579][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.051089][ T154] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.051089][ T154] [ 74.062887][ T154] EXT4-fs (loop4): Total free blocks count 0 [ 74.069638][ T154] EXT4-fs (loop4): Free/Dirty block details [ 74.077308][ T154] EXT4-fs (loop4): free_blocks=68451041280 [ 74.083566][ T154] EXT4-fs (loop4): dirty_blocks=32 [ 74.089858][ T154] EXT4-fs (loop4): Block reservation details [ 74.096939][ T154] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 74.106093][ T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 74.245358][ T6701] SELinux: failed to load policy [ 74.281997][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 74.301484][ T6710] gretap0: entered promiscuous mode [ 74.307424][ T6710] macsec1: entered promiscuous mode [ 74.314109][ T6710] macsec1: entered allmulticast mode [ 74.321054][ T6710] gretap0: entered allmulticast mode [ 74.341147][ T6710] gretap0: left allmulticast mode [ 74.341201][ T6710] gretap0: left promiscuous mode [ 74.445140][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1441'. [ 74.455770][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1441'. [ 74.482160][ T6736] loop3: detected capacity change from 0 to 1024 [ 74.509510][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.574096][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.682350][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 74.726705][ T6769] gretap0: entered promiscuous mode [ 74.744563][ T6769] macsec1: entered promiscuous mode [ 74.750713][ T6769] macsec1: entered allmulticast mode [ 74.756685][ T6769] gretap0: entered allmulticast mode [ 74.766278][ T6769] gretap0: left allmulticast mode [ 74.771978][ T6769] gretap0: left promiscuous mode [ 74.889052][ T6780] loop1: detected capacity change from 0 to 1024 [ 74.951221][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.015954][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.453387][ T6847] loop4: detected capacity change from 0 to 256 [ 75.491584][ T6851] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 75.500155][ T6851] syz_tun: entered promiscuous mode [ 75.510492][ T6853] ref_ctr_offset mismatch. inode: 0x61e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 75.511200][ T6851] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.538870][ T6851] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 75.551373][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.559305][ T6851] team0: Port device bond0 added [ 75.586167][ T6855] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 76.125820][ T6882] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 76.135154][ T6882] syz_tun: entered promiscuous mode [ 76.147613][ T6884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6884 comm=syz.4.1509 [ 76.148429][ T6882] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.160476][ T6884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6884 comm=syz.4.1509 [ 76.171779][ T6881] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.193217][ T6886] netlink: 'syz.2.1508': attribute type 13 has an invalid length. [ 76.210564][ T6882] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 76.260060][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.268136][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.351895][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.422622][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.431697][ T6882] bond0: entered promiscuous mode [ 76.437335][ T6882] bond_slave_0: entered promiscuous mode [ 76.443354][ T6882] bond_slave_1: entered promiscuous mode [ 76.449373][ T6882] bond0: entered allmulticast mode [ 76.454699][ T6882] bond_slave_0: entered allmulticast mode [ 76.460717][ T6882] bond_slave_1: entered allmulticast mode [ 76.466760][ T6882] syz_tun: entered allmulticast mode [ 76.473268][ T6882] team0: Port device bond0 added [ 76.491667][ T1836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.524311][ T1836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.551190][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1517'. [ 76.583005][ T1836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.599989][ T1836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.689706][ T6925] team0 (unregistering): Port device team_slave_0 removed [ 76.714609][ T6925] team0 (unregistering): Port device team_slave_1 removed [ 76.743873][ T6925] team0 (unregistering): Port device bond0 removed [ 76.901178][ T6935] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 76.910479][ T6935] syz_tun: entered promiscuous mode [ 76.924109][ T6935] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.936846][ T6935] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 76.949599][ T6935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.962346][ T6935] team0: Port device bond0 added [ 76.995233][ T6941] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xf [ 77.052829][ T6946] loop1: detected capacity change from 0 to 1024 [ 77.054198][ T6948] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 77.063279][ T6946] EXT4-fs: Ignoring removed bh option [ 77.069491][ T6948] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1535'. [ 77.078068][ T6946] EXT4-fs: inline encryption not supported [ 77.109726][ T6946] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.125261][ T6946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 77.137835][ T6946] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1534: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.153326][ T6946] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1534: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.168408][ T6946] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1534: Failed to acquire dquot type 0 [ 77.182106][ T6946] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 77.192863][ T6946] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1534: mark_inode_dirty error [ 77.207504][ T6946] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 77.218364][ T6946] EXT4-fs (loop1): 1 orphan inode deleted [ 77.225879][ T6946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.240747][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.257299][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 77.290773][ T6946] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1534: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.331917][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.499157][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 77.499178][ T29] audit: type=1400 audit(1754523795.911:1395): avc: denied { write } for pid=6974 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.526830][ T29] audit: type=1400 audit(1754523795.911:1396): avc: denied { connect } for pid=6974 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.550196][ T29] audit: type=1400 audit(1754523795.911:1397): avc: denied { name_connect } for pid=6974 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 77.571705][ T29] audit: type=1400 audit(1754523795.981:1398): avc: denied { map_create } for pid=6976 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.591591][ T29] audit: type=1400 audit(1754523795.981:1399): avc: denied { bpf } for pid=6976 comm="syz.2.1548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.612439][ T29] audit: type=1400 audit(1754523795.981:1400): avc: denied { map_read map_write } for pid=6976 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.632994][ T29] audit: type=1400 audit(1754523795.981:1401): avc: denied { prog_load } for pid=6976 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.652576][ T29] audit: type=1400 audit(1754523795.981:1402): avc: denied { perfmon } for pid=6976 comm="syz.2.1548" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.673964][ T29] audit: type=1400 audit(1754523795.981:1403): avc: denied { prog_run } for pid=6976 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.693123][ T29] audit: type=1400 audit(1754523795.981:1404): avc: denied { listen } for pid=6974 comm="syz.3.1546" lport=36665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.802494][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 77.811634][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 77.877431][ T6995] loop1: detected capacity change from 0 to 128 [ 77.887299][ T6995] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.913401][ T6995] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.967861][ T7000] openvswitch: netlink: Message has 6 unknown bytes. [ 77.988210][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.058202][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 78.067082][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 78.081592][ T7011] team0 (unregistering): Port device bond0 removed [ 78.093141][ T7017] netlink: 'syz.0.1565': attribute type 4 has an invalid length. [ 78.132057][ T7019] netlink: 'syz.4.1578': attribute type 4 has an invalid length. [ 78.201436][ T7035] loop4: detected capacity change from 0 to 128 [ 78.211531][ T7035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.226503][ T7035] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.263269][ T7040] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1570'. [ 78.274660][ T7031] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1570'. [ 78.287185][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.392416][ T7055] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1582'. [ 78.488751][ T7069] netlink: 'syz.3.1584': attribute type 4 has an invalid length. [ 78.489601][ T7068] loop4: detected capacity change from 0 to 512 [ 78.508286][ T7068] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.524526][ T7068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.545887][ T7068] EXT4-fs (loop4): 1 truncate cleaned up [ 78.557199][ T7068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.594629][ T7081] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1588'. [ 78.614780][ T7075] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1588'. [ 78.646303][ T7068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.723811][ T7094] netlink: 'syz.0.1596': attribute type 3 has an invalid length. [ 79.026604][ T7099] netlink: 'syz.2.1599': attribute type 4 has an invalid length. [ 79.072279][ T7102] loop4: detected capacity change from 0 to 8192 [ 79.172609][ T7118] netlink: 'syz.4.1606': attribute type 17 has an invalid length. [ 79.375029][ T7161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1636'. [ 79.551464][ T7153] loop1: detected capacity change from 0 to 32768 [ 79.752126][ T7216] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 79.837958][ T7223] netlink: 'syz.1.1647': attribute type 13 has an invalid length. [ 79.880633][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.888670][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.891720][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.906250][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.938980][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.950128][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.016011][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.026636][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.037070][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.053944][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.196590][ T7246] team0 (unregistering): left allmulticast mode [ 80.204098][ T7246] team_slave_0: left allmulticast mode [ 80.210136][ T7246] team_slave_1: left allmulticast mode [ 80.216773][ T7246] bond0: left allmulticast mode [ 80.222838][ T7246] bond_slave_0: left allmulticast mode [ 80.230393][ T7246] bond_slave_1: left allmulticast mode [ 80.237390][ T7246] syz_tun: left allmulticast mode [ 80.243407][ T7246] team0 (unregistering): left promiscuous mode [ 80.251990][ T7246] team_slave_0: left promiscuous mode [ 80.258213][ T7246] team_slave_1: left promiscuous mode [ 80.265906][ T7246] bond0: left promiscuous mode [ 80.272028][ T7246] bond_slave_0: left promiscuous mode [ 80.279189][ T7246] bond_slave_1: left promiscuous mode [ 80.297666][ T7246] team0 (unregistering): Port device team_slave_0 removed [ 80.308071][ T7246] team0 (unregistering): Port device team_slave_1 removed [ 80.318496][ T7246] team0 (unregistering): Port device bond0 removed [ 80.489581][ T7262] netlink: 'syz.2.1662': attribute type 17 has an invalid length. [ 80.499108][ T7261] netlink: 'syz.4.1663': attribute type 13 has an invalid length. [ 80.569619][ T7273] SELinux: failed to load policy [ 80.580446][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.588783][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.640150][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.654389][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.720759][ T154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.731667][ T154] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.741104][ T154] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.751460][ T154] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.849179][ T7288] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 80.859031][ T7288] SELinux: failed to load policy [ 81.075004][ T7302] loop1: detected capacity change from 0 to 512 [ 81.088637][ T7302] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.106442][ T7302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.121058][ T7302] EXT4-fs (loop1): 1 truncate cleaned up [ 81.135851][ T7302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.150070][ T7302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.216041][ T7320] loop1: detected capacity change from 0 to 512 [ 81.225676][ T7320] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.240986][ T7320] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1687: corrupted xattr entries [ 81.254477][ T7320] EXT4-fs (loop1): Remounting filesystem read-only [ 81.261718][ T7320] EXT4-fs (loop1): 1 truncate cleaned up [ 81.268667][ T7320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.298748][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.357410][ T7329] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 81.392286][ T7335] loop2: detected capacity change from 0 to 256 [ 81.400647][ T7335] vfat: Unknown parameter 'utf ' [ 81.489918][ T7348] pim6reg1: entered promiscuous mode [ 81.495817][ T7348] pim6reg1: entered allmulticast mode [ 81.508780][ T7352] loop1: detected capacity change from 0 to 512 [ 81.516801][ T7352] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.530612][ T7352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 81.546996][ T7352] EXT4-fs (loop1): 1 truncate cleaned up [ 81.553873][ T7352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.654125][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.002171][ T7392] loop1: detected capacity change from 0 to 2048 [ 82.073872][ T7392] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 82.073884][ T7392] loop1: partition table partially beyond EOD, truncated [ 82.074007][ T7392] loop1: p1 start 4278190080 is beyond EOD, truncated [ 82.074023][ T7392] loop1: p2 start 16908800 is beyond EOD, truncated [ 82.075601][ T7392] loop1: p5 start 16908800 is beyond EOD, truncated [ 82.126466][ T7381] loop2: detected capacity change from 0 to 32768 [ 82.369239][ T7429] loop1: detected capacity change from 0 to 512 [ 82.413534][ T7429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1729: bg 0: block 248: padding at end of block bitmap is not set [ 82.416301][ T7435] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.416301][ T7435] program syz.0.1733 not setting count and/or reply_len properly [ 82.452010][ T7429] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1729: Failed to acquire dquot type 1 [ 82.473417][ T7429] EXT4-fs (loop1): 1 truncate cleaned up [ 82.474156][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.474311][ T7429] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.488095][ T7429] syz.1.1729 (7429) used greatest stack depth: 9472 bytes left [ 82.506197][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.512412][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 82.512432][ T29] audit: type=1326 audit(1754523800.921:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.4.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 82.512569][ T29] audit: type=1326 audit(1754523800.921:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.4.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 82.512866][ T29] audit: type=1326 audit(1754523800.921:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.4.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 82.512950][ T29] audit: type=1326 audit(1754523800.921:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.4.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 82.688352][ T29] audit: type=1326 audit(1754523801.101:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.688465][ T29] audit: type=1326 audit(1754523801.101:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.693978][ T29] audit: type=1326 audit(1754523801.111:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.694161][ T29] audit: type=1326 audit(1754523801.111:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.694215][ T29] audit: type=1326 audit(1754523801.111:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.696448][ T29] audit: type=1326 audit(1754523801.111:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 82.903824][ T7446] loop4: detected capacity change from 0 to 32768 [ 83.194244][ T7486] loop3: detected capacity change from 0 to 512 [ 83.205386][ T7484] validate_nla: 1 callbacks suppressed [ 83.205405][ T7484] netlink: 'syz.0.1749': attribute type 13 has an invalid length. [ 83.263090][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1751: corrupted inode contents [ 83.283025][ T7486] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1751: mark_inode_dirty error [ 83.304409][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1751: corrupted inode contents [ 83.332674][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.342114][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.357670][ T7486] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1751: mark_inode_dirty error [ 83.467263][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1751: corrupted inode contents [ 83.467622][ T7486] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 83.467815][ T7486] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1751: corrupted inode contents [ 83.474143][ T7486] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1751: mark_inode_dirty error [ 83.476208][ T7486] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 83.559323][ T7486] EXT4-fs (loop3): 1 truncate cleaned up [ 83.559917][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.560004][ T7486] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.571023][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.573965][ T139] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 83.577324][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.716728][ T139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.716770][ T139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.716804][ T139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.716881][ T139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.049357][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.120942][ T7547] __nla_validate_parse: 1 callbacks suppressed [ 84.121033][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1769'. [ 84.392775][ T7574] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 84.491829][ T7587] loop2: detected capacity change from 0 to 764 [ 84.509541][ T7587] Symlink component flag not implemented [ 84.521043][ T7587] Symlink component flag not implemented (7) [ 84.528561][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.538384][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.554115][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.611120][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.620269][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.646370][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.723304][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.732690][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 84.754230][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 85.017195][ T7645] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 85.533439][ T7692] loop1: detected capacity change from 0 to 8192 [ 85.948380][ T7728] IPVS: Error connecting to the multicast addr [ 86.081270][ T7748] loop3: detected capacity change from 0 to 736 [ 86.097297][ T7748] iso9660: Bad value for 'dmode' [ 86.297190][ T7773] pimreg: entered allmulticast mode [ 86.486832][ T7794] loop3: detected capacity change from 0 to 512 [ 86.498194][ T7794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.533988][ T7794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.548914][ T7794] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.561886][ T7799] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 86.585031][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.923738][ T7861] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.963040][ T7861] vhci_hcd: invalid port number 253 [ 86.968380][ T7861] vhci_hcd: invalid port number 253 [ 87.156390][ T7902] IPVS: Error connecting to the multicast addr [ 87.369966][ T7923] rdma_op ffff88813e35b180 conn xmit_rdma 0000000000000000 [ 87.465823][ T7941] loop2: detected capacity change from 0 to 164 [ 87.530711][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 87.530734][ T29] audit: type=1400 audit(1754523805.941:1759): avc: denied { read } for pid=7946 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.564671][ T7941] rock: directory entry would overflow storage [ 87.566073][ T29] audit: type=1400 audit(1754523805.961:1760): avc: denied { create } for pid=7948 comm="syz.3.1953" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.572126][ T7941] rock: sig=0x4f50, size=4, remaining=3 [ 87.594435][ T29] audit: type=1400 audit(1754523805.961:1761): avc: denied { mounton } for pid=7948 comm="syz.3.1953" path="/89/file0" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.594490][ T29] audit: type=1400 audit(1754523805.971:1762): avc: denied { unlink } for pid=6464 comm="syz-executor" name="file0" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.603950][ T29] audit: type=1400 audit(1754523806.011:1763): avc: denied { read } for pid=7951 comm="syz.3.1954" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.625083][ T7941] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 87.649235][ T29] audit: type=1400 audit(1754523806.011:1764): avc: denied { open } for pid=7951 comm="syz.3.1954" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.713322][ T29] audit: type=1400 audit(1754523806.091:1765): avc: denied { ioctl } for pid=7951 comm="syz.3.1954" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.811860][ T29] audit: type=1326 audit(1754523806.221:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 87.836355][ T29] audit: type=1326 audit(1754523806.221:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz.3.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 87.862342][ T29] audit: type=1326 audit(1754523806.241:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 88.152578][ T8000] loop2: detected capacity change from 0 to 2048 [ 88.193317][ T8000] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 88.198970][ T8000] loop2: partition table partially beyond EOD, truncated [ 88.206511][ T8000] loop2: p1 start 4278190080 is beyond EOD, truncated [ 88.213795][ T8000] loop2: p2 start 16908800 is beyond EOD, truncated [ 88.222170][ T8000] loop2: p5 start 16908800 is beyond EOD, truncated [ 88.287968][ T8016] program syz.3.1984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.305546][ T8016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 88.358581][ T8030] IPVS: Error connecting to the multicast addr [ 88.387596][ T8037] loop3: detected capacity change from 0 to 256 [ 88.406765][ T8037] FAT-fs (loop3): Directory bread(block 64) failed [ 88.414792][ T8037] FAT-fs (loop3): Directory bread(block 65) failed [ 88.421809][ T8037] FAT-fs (loop3): Directory bread(block 66) failed [ 88.429569][ T8037] FAT-fs (loop3): Directory bread(block 67) failed [ 88.436868][ T8037] FAT-fs (loop3): Directory bread(block 68) failed [ 88.444978][ T8037] FAT-fs (loop3): Directory bread(block 69) failed [ 88.452960][ T8037] FAT-fs (loop3): Directory bread(block 70) failed [ 88.460221][ T8037] FAT-fs (loop3): Directory bread(block 71) failed [ 88.468605][ T8037] FAT-fs (loop3): Directory bread(block 72) failed [ 88.476883][ T8037] FAT-fs (loop3): Directory bread(block 73) failed [ 88.510623][ T8037] bio_check_eod: 30560 callbacks suppressed [ 88.510643][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.510643][ T8037] loop3: rw=2051, sector=1256, nr_sectors = 32 limit=256 [ 88.537497][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.537497][ T8037] loop3: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 88.554174][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.554174][ T8037] loop3: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 88.569653][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.569653][ T8037] loop3: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 88.584318][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.584318][ T8037] loop3: rw=2051, sector=1512, nr_sectors = 32 limit=256 [ 88.599736][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.599736][ T8037] loop3: rw=2051, sector=1576, nr_sectors = 32 limit=256 [ 88.615200][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.615200][ T8037] loop3: rw=2051, sector=1640, nr_sectors = 32 limit=256 [ 88.632014][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.632014][ T8037] loop3: rw=2051, sector=1704, nr_sectors = 32 limit=256 [ 88.648781][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.648781][ T8037] loop3: rw=2051, sector=1768, nr_sectors = 32 limit=256 [ 88.663858][ T8037] syz.3.1993: attempt to access beyond end of device [ 88.663858][ T8037] loop3: rw=2051, sector=1864, nr_sectors = 32 limit=256 [ 88.957621][ T3153] IPVS: starting estimator thread 0... [ 88.966517][ T8061] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 89.053231][ T8068] IPVS: using max 2160 ests per chain, 108000 per kthread [ 89.355327][ T8114] netlink: 'syz.2.2030': attribute type 21 has an invalid length. [ 89.379298][ T8114] __nla_validate_parse: 11 callbacks suppressed [ 89.379320][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2030'. [ 89.638093][ T8142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.644896][ T8142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.652849][ T8142] vhci_hcd vhci_hcd.0: Device attached [ 89.663382][ T8143] vhci_hcd: connection closed [ 89.663568][ T51] vhci_hcd: stop threads [ 89.672684][ T51] vhci_hcd: release socket [ 89.677329][ T51] vhci_hcd: disconnect device [ 89.758861][ T8153] loop3: detected capacity change from 0 to 1024 [ 89.794381][ T8153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.816949][ T8153] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.841232][ T8150] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2044: Freeing blocks not in datazone - block = 0, count = 16 [ 89.972296][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.085413][ T8179] loop4: detected capacity change from 0 to 512 [ 90.107588][ T8179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.152102][ T8179] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.178518][ T8185] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2057'. [ 90.257338][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.586775][ T8208] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 91.423319][ T8267] usb usb1: usbfs: process 8267 (syz.1.2093) did not claim interface 0 before use [ 91.479655][ T8275] geneve2: entered promiscuous mode [ 91.485275][ T8275] geneve2: entered allmulticast mode [ 91.494617][ T8274] usb usb8: usbfs: process 8274 (syz.1.2096) did not claim interface 0 before use [ 91.535698][ T8280] syzkaller1: entered promiscuous mode [ 91.541678][ T8280] syzkaller1: entered allmulticast mode [ 92.098878][ T8302] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 92.106201][ T8302] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.114695][ T8302] vhci_hcd vhci_hcd.0: Device attached [ 92.131137][ T8305] vhci_hcd: connection closed [ 92.131328][ T7719] vhci_hcd: stop threads [ 92.140768][ T7719] vhci_hcd: release socket [ 92.145609][ T7719] vhci_hcd: disconnect device [ 92.152620][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 92.262172][ T8326] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 92.355587][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.364875][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.375216][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.395802][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.405119][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.406351][ T8345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2129'. [ 92.415667][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 92.551118][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 92.551137][ T29] audit: type=1326 audit(1754523810.961:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.584289][ T29] audit: type=1326 audit(1754523811.001:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.609355][ T29] audit: type=1326 audit(1754523811.001:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.634432][ T29] audit: type=1326 audit(1754523811.001:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.669108][ T29] audit: type=1326 audit(1754523811.071:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7fe76fd69f code=0x7ffc0000 [ 92.692965][ T29] audit: type=1326 audit(1754523811.071:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.717162][ T29] audit: type=1326 audit(1754523811.071:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.1.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 92.979249][ T29] audit: type=1400 audit(1754523811.391:1926): avc: denied { bind } for pid=8400 comm="syz.2.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.999378][ T29] audit: type=1400 audit(1754523811.391:1927): avc: denied { name_bind } for pid=8400 comm="syz.2.2153" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.021781][ T29] audit: type=1400 audit(1754523811.391:1928): avc: denied { node_bind } for pid=8400 comm="syz.2.2153" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.222774][ T8426] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 93.720039][ T8470] loop4: detected capacity change from 0 to 736 [ 93.726861][ T8470] iso9660: Bad value for 'dmode' [ 93.756131][ T8475] IPVS: Error connecting to the multicast addr [ 93.835531][ T8489] IPVS: Error connecting to the multicast addr [ 93.953520][ T8497] loop4: detected capacity change from 0 to 8192 [ 94.351430][ T8555] loop4: detected capacity change from 0 to 512 [ 94.366210][ T8555] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2225: bg 0: block 248: padding at end of block bitmap is not set [ 94.383422][ T8555] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2225: Failed to acquire dquot type 1 [ 94.396590][ T8555] EXT4-fs (loop4): 1 truncate cleaned up [ 94.404397][ T8555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.417945][ T8555] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.432223][ T8555] EXT4-fs (loop4): shut down requested (1) [ 94.432261][ T8560] loop3: detected capacity change from 0 to 128 [ 94.447699][ T8560] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.457665][ T8555] syz.4.2225 (8555) used greatest stack depth: 9368 bytes left [ 94.466651][ T8560] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.471352][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.503553][ T6464] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.701426][ T8574] loop4: detected capacity change from 0 to 512 [ 94.748864][ T8574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.768618][ T8574] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2232: invalid block [ 94.788171][ T8574] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2232: invalid indirect mapped block 4294967295 (level 1) [ 94.814291][ T8574] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2232: invalid indirect mapped block 4294967295 (level 1) [ 94.842848][ T8574] EXT4-fs (loop4): 2 truncates cleaned up [ 94.863774][ T8574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.909461][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.032823][ T8610] random: crng reseeded on system resumption [ 95.055556][ T8610] Restarting kernel threads ... [ 95.064009][ T8610] Done restarting kernel threads. [ 95.173917][ T8625] __nla_validate_parse: 8 callbacks suppressed [ 95.173934][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 95.191921][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 95.220508][ T8631] SELinux: Context is not valid (left unmapped). [ 95.569290][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2284'. [ 95.683220][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 95.698494][ T8704] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 95.707524][ T3412] IPVS: starting estimator thread 0... [ 95.803062][ T8713] IPVS: using max 2256 ests per chain, 112800 per kthread [ 95.895372][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 96.546786][ T8785] loop3: detected capacity change from 0 to 764 [ 96.579839][ T8789] team0: Device gre1 is of different type [ 97.108577][ T8806] 9pnet_fd: Insufficient options for proto=fd [ 97.334550][ T8850] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.342051][ T8850] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 97.553542][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 97.553561][ T29] audit: type=1400 audit(1754523815.971:2112): avc: denied { create } for pid=8887 comm="syz.3.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.600376][ T29] audit: type=1400 audit(1754523815.971:2113): avc: denied { write } for pid=8887 comm="syz.3.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.626516][ T8894] loop3: detected capacity change from 0 to 512 [ 97.656653][ T8894] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2381: corrupted inode contents [ 97.680333][ T8894] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2381: mark_inode_dirty error [ 97.680638][ T8903] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 97.692424][ T8894] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2381: corrupted inode contents [ 97.714539][ T8894] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2381: mark_inode_dirty error [ 97.723671][ T29] audit: type=1400 audit(1754523816.121:2114): avc: denied { relabelto } for pid=8902 comm="syz.2.2384" name="NETLINK" dev="sockfs" ino=26874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:wireless_device_t:s0" [ 97.727781][ T8894] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2381: corrupted inode contents [ 97.779223][ T8894] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 97.798581][ T29] audit: type=1326 audit(1754523816.211:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 97.823980][ T29] audit: type=1326 audit(1754523816.211:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 97.850084][ T29] audit: type=1400 audit(1754523816.211:2117): avc: denied { create } for pid=8904 comm="syz.2.2385" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.854745][ T8894] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2381: corrupted inode contents [ 97.872007][ T29] audit: type=1326 audit(1754523816.211:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 97.887692][ T8894] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2381: mark_inode_dirty error [ 97.912155][ T29] audit: type=1326 audit(1754523816.211:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 97.947704][ T29] audit: type=1400 audit(1754523816.211:2120): avc: denied { write } for pid=8904 comm="syz.2.2385" name="file0" dev="tmpfs" ino=2330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.948275][ T8894] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 97.972290][ T29] audit: type=1326 audit(1754523816.211:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8904 comm="syz.2.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 97.992490][ T8894] EXT4-fs (loop3): 1 truncate cleaned up [ 98.028472][ T8894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.033464][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 98.046652][ T8913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2389'. [ 98.067058][ T8894] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.213787][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.438471][ T8957] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.667640][ T8990] openvswitch: netlink: Message has 6 unknown bytes. [ 99.007357][ T9031] openvswitch: netlink: Message has 6 unknown bytes. [ 99.262722][ T9062] usb usb8: usbfs: process 9062 (syz.4.2458) did not claim interface 0 before use [ 99.420965][ T9078] loop4: detected capacity change from 0 to 512 [ 99.444968][ T9078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2465: corrupted inode contents [ 99.488351][ T9078] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2465: mark_inode_dirty error [ 99.524700][ T9078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2465: corrupted inode contents [ 99.546909][ T9078] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2465: mark_inode_dirty error [ 99.569927][ T9078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2465: corrupted inode contents [ 99.604202][ T9078] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 99.623990][ T9078] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2465: corrupted inode contents [ 99.638365][ T9078] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2465: mark_inode_dirty error [ 99.650506][ T9078] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 99.662947][ T9078] EXT4-fs (loop4): 1 truncate cleaned up [ 99.669831][ T9078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.693166][ T7717] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 99.694857][ T9078] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.774431][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2471'. [ 99.805147][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.843398][ T9103] syzkaller1: entered promiscuous mode [ 99.849074][ T9103] syzkaller1: entered allmulticast mode [ 99.866013][ T9105] loop4: detected capacity change from 0 to 1024 [ 99.885162][ T9105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.898227][ T9105] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.913182][ T9105] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2473: Freeing blocks not in datazone - block = 0, count = 16 [ 99.930454][ T9105] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.947415][ T9105] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 99.960144][ T9105] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.960144][ T9105] [ 99.970382][ T9105] EXT4-fs (loop4): Total free blocks count 0 [ 99.976608][ T9105] EXT4-fs (loop4): Free/Dirty block details [ 99.982788][ T9105] EXT4-fs (loop4): free_blocks=4293918720 [ 99.988820][ T9105] EXT4-fs (loop4): dirty_blocks=16 [ 99.994126][ T9105] EXT4-fs (loop4): Block reservation details [ 100.000181][ T9105] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 100.054025][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.451441][ T9131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2487'. [ 100.516574][ T9140] syzkaller1: entered promiscuous mode [ 100.522322][ T9140] syzkaller1: entered allmulticast mode [ 100.582204][ T9151] netlink: 'syz.4.2498': attribute type 13 has an invalid length. [ 100.601753][ T9151] lo: entered promiscuous mode [ 100.606649][ T9151] lo: entered allmulticast mode [ 100.612265][ T9151] tunl0: entered promiscuous mode [ 100.617558][ T9151] tunl0: entered allmulticast mode [ 100.625380][ T9151] gre0: entered promiscuous mode [ 100.630377][ T9151] gre0: entered allmulticast mode [ 100.636163][ T9151] gretap0: entered promiscuous mode [ 100.641475][ T9151] gretap0: entered allmulticast mode [ 100.649079][ T9151] gretap0: refused to change device tx_queue_len [ 100.655808][ T9151] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.702506][ T9162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2503'. [ 100.897034][ T9181] loop4: detected capacity change from 0 to 128 [ 100.941085][ T9188] netlink: 'syz.2.2514': attribute type 13 has an invalid length. [ 100.941381][ T7719] bio_check_eod: 481 callbacks suppressed [ 100.941397][ T7719] kworker/u8:19: attempt to access beyond end of device [ 100.941397][ T7719] loop4: rw=1, sector=145, nr_sectors = 600 limit=128 [ 100.949671][ T9188] lo: entered promiscuous mode [ 100.974868][ T9188] lo: entered allmulticast mode [ 100.980279][ T9188] tunl0: entered promiscuous mode [ 100.985043][ T9191] loop4: detected capacity change from 0 to 256 [ 100.986154][ T9188] tunl0: entered allmulticast mode [ 100.998680][ T9188] gre0: entered promiscuous mode [ 101.000712][ T9191] FAT-fs (loop4): Directory bread(block 64) failed [ 101.003938][ T9188] gre0: entered allmulticast mode [ 101.004392][ T9188] gretap0: entered promiscuous mode [ 101.016684][ T9191] FAT-fs (loop4): Directory bread(block 65) failed [ 101.021014][ T9188] gretap0: entered allmulticast mode [ 101.034182][ T9188] gretap0: refused to change device tx_queue_len [ 101.040770][ T9188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.056934][ T9191] FAT-fs (loop4): Directory bread(block 66) failed [ 101.066118][ T9191] FAT-fs (loop4): Directory bread(block 67) failed [ 101.073047][ T9191] FAT-fs (loop4): Directory bread(block 68) failed [ 101.079627][ T9191] FAT-fs (loop4): Directory bread(block 69) failed [ 101.087790][ T9191] FAT-fs (loop4): Directory bread(block 70) failed [ 101.094564][ T9191] FAT-fs (loop4): Directory bread(block 71) failed [ 101.101453][ T9191] FAT-fs (loop4): Directory bread(block 72) failed [ 101.109713][ T9191] FAT-fs (loop4): Directory bread(block 73) failed [ 101.147108][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.147108][ T9191] loop4: rw=2051, sector=1256, nr_sectors = 32 limit=256 [ 101.162941][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.162941][ T9191] loop4: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 101.182796][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.182796][ T9191] loop4: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 101.198324][ T9195] syzkaller1: entered promiscuous mode [ 101.198629][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.198629][ T9191] loop4: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 101.204078][ T9195] syzkaller1: entered allmulticast mode [ 101.220083][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.220083][ T9191] loop4: rw=2051, sector=1512, nr_sectors = 32 limit=256 [ 101.237745][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.237745][ T9191] loop4: rw=2051, sector=1576, nr_sectors = 32 limit=256 [ 101.252604][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.252604][ T9191] loop4: rw=2051, sector=1640, nr_sectors = 32 limit=256 [ 101.267137][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.267137][ T9191] loop4: rw=2051, sector=1704, nr_sectors = 32 limit=256 [ 101.281808][ T9191] syz.4.2515: attempt to access beyond end of device [ 101.281808][ T9191] loop4: rw=2051, sector=1768, nr_sectors = 32 limit=256 [ 101.610735][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'. [ 102.181905][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 102.204567][ T9263] sctp: [Deprecated]: syz.4.2548 (pid 9263) Use of int in max_burst socket option deprecated. [ 102.204567][ T9263] Use struct sctp_assoc_value instead [ 102.454763][ T9295] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 102.893109][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 102.893141][ T29] audit: type=1326 audit(1754523821.311:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.924715][ T29] audit: type=1326 audit(1754523821.311:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.924758][ T29] audit: type=1326 audit(1754523821.311:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.924793][ T29] audit: type=1326 audit(1754523821.311:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.924871][ T29] audit: type=1326 audit(1754523821.311:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.924904][ T29] audit: type=1326 audit(1754523821.311:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5b49c5ba7 code=0x7ffc0000 [ 102.924997][ T29] audit: type=1326 audit(1754523821.311:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5b496add9 code=0x7ffc0000 [ 102.925031][ T29] audit: type=1326 audit(1754523821.311:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 102.925185][ T29] audit: type=1326 audit(1754523821.341:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9311 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 103.100770][ T29] audit: type=1326 audit(1754523821.501:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 103.515338][ T9354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 103.522086][ T9354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.531170][ T9354] vhci_hcd vhci_hcd.0: Device attached [ 103.608048][ T9354] vhci_hcd vhci_hcd.0: port 0 already used [ 103.632983][ T9355] vhci_hcd: connection closed [ 103.633204][ T7719] vhci_hcd: stop threads [ 103.642362][ T7719] vhci_hcd: release socket [ 103.647061][ T7719] vhci_hcd: disconnect device [ 103.988687][ T9372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.026474][ T9372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.116853][ T9372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.186177][ T9372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.262460][ T7719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.281348][ T7719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.301441][ T7719] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.322173][ T7719] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.379957][ T9384] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 104.739006][ T9410] geneve2: entered promiscuous mode [ 104.744668][ T9410] geneve2: entered allmulticast mode [ 105.039135][ T9448] geneve2: entered promiscuous mode [ 105.044507][ T9448] geneve2: entered allmulticast mode [ 105.589817][ T9472] IPVS: Error connecting to the multicast addr [ 105.617601][ T9474] program syz.3.2642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.879390][ T9488] geneve2: entered promiscuous mode [ 105.884886][ T9488] geneve2: entered allmulticast mode [ 105.996052][ T9505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 106.002811][ T9505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.011314][ T9505] vhci_hcd vhci_hcd.0: Device attached [ 106.020327][ T9505] vhci_hcd vhci_hcd.0: port 0 already used [ 106.027494][ T9506] vhci_hcd: connection closed [ 106.027647][ T51] vhci_hcd: stop threads [ 106.037184][ T51] vhci_hcd: release socket [ 106.041929][ T51] vhci_hcd: disconnect device [ 106.049271][ T9512] program syz.2.2658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.204238][ T9515] sctp: [Deprecated]: syz.0.2659 (pid 9515) Use of int in max_burst socket option deprecated. [ 106.204238][ T9515] Use struct sctp_assoc_value instead [ 106.548948][ T9552] geneve2: entered promiscuous mode [ 106.554526][ T9552] geneve2: entered allmulticast mode [ 106.556728][ T9555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9555 comm=syz.2.2686 [ 106.780546][ T9574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 106.787529][ T9574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.796099][ T9574] vhci_hcd vhci_hcd.0: Device attached [ 106.806705][ T9574] vhci_hcd vhci_hcd.0: port 0 already used [ 106.814119][ T9576] vhci_hcd: connection closed [ 106.823219][ T7719] vhci_hcd: stop threads [ 106.833205][ T7719] vhci_hcd: release socket [ 106.838139][ T7719] vhci_hcd: disconnect device [ 107.087439][ T9604] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 107.264438][ T9610] serio: Serial port ptm0 [ 107.489670][ T9631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9631 comm=syz.0.2709 [ 107.663729][ T9651] loop4: detected capacity change from 0 to 512 [ 107.670362][ T9651] EXT4-fs: Ignoring removed nobh option [ 107.679199][ T9651] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2718: iget: bad i_size value: 38620345925642 [ 107.692350][ T9651] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2718: couldn't read orphan inode 15 (err -117) [ 107.705127][ T9651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.732156][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.023597][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 108.023648][ T29] audit: type=1326 audit(1754523826.431:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 108.057066][ T29] audit: type=1326 audit(1754523826.471:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8de9e0add9 code=0x7ffc0000 [ 108.081399][ T29] audit: type=1326 audit(1754523826.471:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 108.105263][ T29] audit: type=1326 audit(1754523826.471:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.4.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 108.232620][ T29] audit: type=1400 audit(1754523826.641:2446): avc: denied { audit_write } for pid=9671 comm="syz.3.2727" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.267751][ T29] audit: type=1107 audit(1754523826.641:2447): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 108.306370][ T9678] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2730'. [ 108.413045][ T29] audit: type=1400 audit(1754523826.811:2448): avc: denied { write } for pid=9687 comm="syz.0.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.019244][ T29] audit: type=1400 audit(1754523827.431:2449): avc: denied { write } for pid=9720 comm="syz.1.2747" path="socket:[30034]" dev="sockfs" ino=30034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.044300][ T29] audit: type=1400 audit(1754523827.461:2450): avc: denied { cpu } for pid=9722 comm="syz.4.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.073739][ T29] audit: type=1400 audit(1754523827.491:2451): avc: denied { mounton } for pid=9724 comm="syz.1.2749" path="/597/file0" dev="tmpfs" ino=3067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.073753][ T9725] 9pnet_fd: Insufficient options for proto=fd [ 109.292147][ T9737] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 109.404236][ T9753] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 109.523325][ T9771] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9771 comm=syz.1.2773 [ 109.536410][ T9771] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9771 comm=syz.1.2773 [ 109.838740][ T9817] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 110.095604][ T9859] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.107034][ T9859] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 110.561145][ T9904] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 110.692246][ T9914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9914 comm=syz.3.2841 [ 110.705421][ T9914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9914 comm=syz.3.2841 [ 111.508686][ T9989] netlink: 'syz.4.2868': attribute type 21 has an invalid length. [ 111.518126][ T9989] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 111.526361][ T9989] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2868'. [ 111.554325][ T9992] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.563143][ T9992] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 111.571249][ T9991] netlink: 'syz.4.2869': attribute type 6 has an invalid length. [ 111.610482][ T9994] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2870'. [ 111.768367][T10013] loop3: detected capacity change from 0 to 2048 [ 111.805981][T10013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.830037][T10013] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.878157][T10013] EXT4-fs (loop3): shut down requested (0) [ 111.936338][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.197114][T10083] netlink: 'syz.1.2909': attribute type 6 has an invalid length. [ 112.205682][T10085] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.215535][T10085] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 112.250328][T10091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2913'. [ 112.264307][T10093] netlink: 'syz.2.2924': attribute type 178 has an invalid length. [ 112.403786][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 112.474028][T10122] program syz.3.2927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.613330][T10133] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.633463][T10133] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 112.716547][T10139] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.050507][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 113.050525][ T29] audit: type=1326 audit(1754523831.461:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 113.080971][ T29] audit: type=1326 audit(1754523831.461:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 113.104815][ T29] audit: type=1326 audit(1754523831.461:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 113.128712][ T29] audit: type=1326 audit(1754523831.461:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 113.155122][ T29] audit: type=1326 audit(1754523831.491:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.2.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 113.178819][ T29] audit: type=1326 audit(1754523831.511:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.0.2946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9269caebe9 code=0x0 [ 113.382288][ T29] audit: type=1326 audit(1754523831.791:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 113.406358][ T29] audit: type=1326 audit(1754523831.791:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 113.429901][ T29] audit: type=1326 audit(1754523831.791:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10178 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 113.491198][ T29] audit: type=1326 audit(1754523831.901:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10184 comm="syz.3.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 113.649907][T10199] loop4: detected capacity change from 0 to 2048 [ 113.688339][T10199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.705320][T10199] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.727956][T10199] EXT4-fs (loop4): shut down requested (0) [ 113.757633][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.902041][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2968'. [ 113.970457][T10232] program syz.0.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.052126][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2975'. [ 114.227848][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 114.390786][T10278] loop4: detected capacity change from 0 to 1024 [ 114.430667][ T3153] kernel write not supported for file /1253/sched (pid: 3153 comm: kworker/1:2) [ 114.464721][T10278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.748917][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.956999][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3012'. [ 114.990098][T10320] syzkaller1: entered promiscuous mode [ 114.995942][T10320] syzkaller1: entered allmulticast mode [ 115.231192][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 115.271811][T10340] bond1: entered promiscuous mode [ 115.285634][T10340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.394051][T10346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.401879][T10346] bond2: entered promiscuous mode [ 115.408092][T10346] bond1: (slave bond2): Enslaving as an active interface with an up link [ 115.448529][ T3399] hid_parser_main: 107 callbacks suppressed [ 115.448554][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.462259][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.469852][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.477434][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.484892][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.492468][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.500018][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.507647][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.515429][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.523105][ T3399] hid-generic 09E2:0099:0005.0004: unknown main item tag 0x0 [ 115.545309][ T3399] hid-generic 09E2:0099:0005.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 115.655333][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 115.812445][T10385] macvlan1: entered promiscuous mode [ 115.836956][T10385] ipvlan0: entered promiscuous mode [ 115.858260][T10385] ipvlan0: left promiscuous mode [ 115.875215][T10385] macvlan1: left promiscuous mode [ 115.934489][T10389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3046'. [ 116.080463][T10402] loop3: detected capacity change from 0 to 1024 [ 116.123560][T10402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.138555][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 116.219465][T10408] bond2: entered promiscuous mode [ 116.251874][T10408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.318303][T10415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.351441][T10415] bond3: entered promiscuous mode [ 116.383388][T10415] bond2: (slave bond3): Enslaving as an active interface with an up link [ 116.396474][T10420] macvlan1: entered promiscuous mode [ 116.402587][T10420] ipvlan0: entered promiscuous mode [ 116.408659][T10420] ipvlan0: left promiscuous mode [ 116.421802][T10420] macvlan1: left promiscuous mode [ 116.529623][T10427] sock: sock_set_timeout: `syz.1.3061' (pid 10427) tries to set negative timeout [ 116.555463][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.693849][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 116.703503][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3070'. [ 116.787722][T10458] SELinux: failed to load policy [ 117.148666][T10508] vlan2: entered allmulticast mode [ 117.154157][T10508] bond0: entered allmulticast mode [ 117.159665][T10508] bond_slave_0: entered allmulticast mode [ 117.165740][T10508] bond_slave_1: entered allmulticast mode [ 117.171660][T10508] syz_tun: entered allmulticast mode [ 117.532681][T10538] vlan2: entered allmulticast mode [ 117.537908][T10538] bond0: entered allmulticast mode [ 117.543957][T10538] bond_slave_0: entered allmulticast mode [ 117.550393][T10538] bond_slave_1: entered allmulticast mode [ 118.182983][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 118.183024][ T29] audit: type=1400 audit(1754523836.581:2696): avc: denied { name_bind } for pid=10575 comm="syz.1.3131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.029991][T10607] __nla_validate_parse: 4 callbacks suppressed [ 119.030008][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 119.047805][ T29] audit: type=1400 audit(1754523837.441:2697): avc: denied { nlmsg_read } for pid=10606 comm="syz.1.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.117980][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3144'. [ 119.125171][ T29] audit: type=1400 audit(1754523837.531:2698): avc: denied { bind } for pid=10610 comm="syz.1.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.216117][ T29] audit: type=1326 audit(1754523837.631:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.240475][ T29] audit: type=1326 audit(1754523837.631:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.331923][ T29] audit: type=1326 audit(1754523837.681:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.355604][ T29] audit: type=1326 audit(1754523837.681:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.379375][ T29] audit: type=1326 audit(1754523837.721:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.4.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.403132][ T29] audit: type=1326 audit(1754523837.721:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.4.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.427025][ T29] audit: type=1326 audit(1754523837.721:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.4.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 119.750332][T10667] SELinux: policydb table sizes (131080,302) do not match mine (8,9) [ 119.762094][T10667] SELinux: failed to load policy [ 119.773771][T10672] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3172'. [ 119.803846][T10676] netlink: 'syz.2.3174': attribute type 4 has an invalid length. [ 119.881057][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 119.942499][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3185'. [ 119.971639][T10704] openvswitch: netlink: Message has 6 unknown bytes. [ 120.160518][T10727] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 120.168305][T10727] SELinux: failed to load policy [ 120.404483][T10765] SELinux: policydb version 0 does not match my version range 15-35 [ 120.436244][T10765] SELinux: failed to load policy [ 120.803032][T10800] SELinux: security_context_str_to_sid () failed with errno=-22 [ 120.901785][T10802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 120.908353][T10802] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.916225][T10802] vhci_hcd vhci_hcd.0: Device attached [ 120.953784][T10805] vhci_hcd: connection closed [ 120.954185][ T7720] vhci_hcd: stop threads [ 120.963593][ T7720] vhci_hcd: release socket [ 120.968535][ T7720] vhci_hcd: disconnect device [ 122.004177][T10917] openvswitch: netlink: Message has 6 unknown bytes. [ 122.256710][T10942] syzkaller0: entered promiscuous mode [ 122.262435][T10942] syzkaller0: entered allmulticast mode [ 122.336343][T10951] gre0: Master is either lo or non-ether device [ 122.418861][T10957] wireguard0: entered promiscuous mode [ 122.577009][T10975] ALSA: seq fatal error: cannot create timer (-19) [ 122.859949][T11025] bridge0: port 3(vlan2) entered blocking state [ 122.866345][T11025] bridge0: port 3(vlan2) entered disabled state [ 122.873290][T11025] vlan2: entered allmulticast mode [ 122.878540][T11025] bond0: entered allmulticast mode [ 122.883745][T11025] bond_slave_0: entered allmulticast mode [ 122.889570][T11025] bond_slave_1: entered allmulticast mode [ 122.895443][T11025] syz_tun: entered allmulticast mode [ 122.902457][T11025] vlan2: entered promiscuous mode [ 122.907599][T11025] bond0: entered promiscuous mode [ 122.912679][T11025] bond_slave_0: entered promiscuous mode [ 122.918509][T11025] bond_slave_1: entered promiscuous mode [ 123.084115][T11048] vlan2: entered allmulticast mode [ 123.111290][T11054] loop4: detected capacity change from 0 to 164 [ 123.201541][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 123.201560][ T29] audit: type=1326 audit(1754523841.611:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 123.231344][ T29] audit: type=1326 audit(1754523841.611:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 123.256228][ T29] audit: type=1326 audit(1754523841.611:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 123.280113][ T29] audit: type=1326 audit(1754523841.631:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe76febe9 code=0x7ffc0000 [ 123.426884][ T29] audit: type=1400 audit(1754523841.841:2828): avc: denied { mount } for pid=11078 comm="syz.4.3363" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.534950][ T29] audit: type=1400 audit(1754523841.951:2829): avc: denied { mount } for pid=11091 comm="syz.4.3370" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.571657][ T29] audit: type=1400 audit(1754523841.951:2830): avc: denied { unmount } for pid=11091 comm="syz.4.3370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.637311][T11104] loop4: detected capacity change from 0 to 1024 [ 123.665269][T11104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.683320][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.755383][T11121] gretap0: entered promiscuous mode [ 123.761014][ T29] audit: type=1326 audit(1754523842.161:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 123.785021][ T29] audit: type=1326 audit(1754523842.161:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 123.798008][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.808677][ T29] audit: type=1326 audit(1754523842.161:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 123.841915][T11121] bridge0: port 3(vlan2) entered blocking state [ 123.848563][T11121] bridge0: port 3(vlan2) entered forwarding state [ 123.860591][T11121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.178929][T11171] lo speed is unknown, defaulting to 1000 [ 124.186626][T11171] lo speed is unknown, defaulting to 1000 [ 124.192677][T11171] lo speed is unknown, defaulting to 1000 [ 124.198897][T11171] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.206879][T11171] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 124.217460][T11171] lo speed is unknown, defaulting to 1000 [ 124.225027][T11171] lo speed is unknown, defaulting to 1000 [ 124.231839][T11171] lo speed is unknown, defaulting to 1000 [ 124.240559][T11171] lo speed is unknown, defaulting to 1000 [ 124.247861][T11171] lo speed is unknown, defaulting to 1000 [ 124.313009][T11182] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 124.325763][T11185] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 124.333774][T11185] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 124.341681][T11185] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3412'. [ 124.561288][T11219] 9pnet_fd: Insufficient options for proto=fd [ 124.741016][T11238] pim6reg1: entered promiscuous mode [ 124.746602][T11238] pim6reg1: entered allmulticast mode [ 124.840689][T11261] loop3: detected capacity change from 0 to 512 [ 124.863570][T11261] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.891394][T11261] EXT4-fs (loop3): mount failed [ 125.076481][T11294] vhci_hcd: invalid port number 96 [ 125.081780][T11294] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 125.158393][T11313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11313 comm=syz.1.3470 [ 125.241909][T11359] ref_ctr_offset mismatch. inode: 0xf17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 125.516611][T11397] veth2: entered allmulticast mode [ 125.645730][T11401] ip6gretap0: Device is already in use. [ 125.680012][T11407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11407 comm=syz.2.3492 [ 125.692896][T11407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11407 comm=syz.2.3492 [ 126.848781][T11479] openvswitch: netlink: Message has 6 unknown bytes. [ 126.909747][T11483] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3527'. [ 127.001046][T11492] netlink: 'syz.0.3531': attribute type 2 has an invalid length. [ 127.008880][T11492] netlink: 'syz.0.3531': attribute type 1 has an invalid length. [ 127.016684][T11492] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3531'. [ 127.045457][T11488] loop4: detected capacity change from 0 to 2048 [ 127.052342][T11488] EXT4-fs: Ignoring removed nobh option [ 127.115343][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3535'. [ 127.124397][T11502] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3535'. [ 127.151851][T11488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.222413][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.343282][T11515] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3541'. [ 127.387660][T11431] syz.2.3503 (11431) used greatest stack depth: 6432 bytes left [ 127.403021][T11515] 0{X: renamed from gretap0 [ 127.421429][T11515] 0{X: entered promiscuous mode [ 127.427092][T11515] 0{X: entered allmulticast mode [ 127.457878][T11515] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 127.533801][T11534] netlink: 'syz.2.3549': attribute type 1 has an invalid length. [ 127.541679][T11534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3549'. [ 127.820419][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.843854][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.888490][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3564'. [ 128.033629][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 128.046032][T11587] gtp1: entered promiscuous mode [ 128.051036][T11587] gtp1: entered allmulticast mode [ 128.078405][T11592] loop4: detected capacity change from 0 to 2048 [ 128.096889][T11592] EXT4-fs: inline encryption not supported [ 128.119656][T11592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.155390][T11592] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3576: bg 0: block 234: padding at end of block bitmap is not set [ 128.171196][T11592] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 128.183635][T11592] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.183635][T11592] [ 128.214763][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.233351][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 128.233370][ T29] audit: type=1400 audit(1754523846.651:3117): avc: denied { create } for pid=11609 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.265823][T11612] syzkaller1: entered promiscuous mode [ 128.271497][ T29] audit: type=1400 audit(1754523846.651:3118): avc: denied { write } for pid=11609 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.271516][T11612] syzkaller1: entered allmulticast mode [ 128.411475][T11624] loop4: detected capacity change from 0 to 512 [ 128.430736][T11624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.449656][T11624] ext4 filesystem being mounted at /697/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.488939][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.505880][ T29] audit: type=1400 audit(1754523846.921:3119): avc: denied { create } for pid=11635 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.526243][ T29] audit: type=1400 audit(1754523846.921:3120): avc: denied { connect } for pid=11635 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.546774][ T29] audit: type=1400 audit(1754523846.921:3121): avc: denied { ioctl } for pid=11635 comm="syz.3.3595" path="socket:[36587]" dev="sockfs" ino=36587 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.601035][T11642] netlink: 'syz.2.3597': attribute type 3 has an invalid length. [ 128.654918][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.663806][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.693201][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3603'. [ 128.734845][T11660] loop3: detected capacity change from 0 to 512 [ 128.751626][T11660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.773022][T11660] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.836386][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.440482][T11717] __nla_validate_parse: 2 callbacks suppressed [ 129.440558][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3628'. [ 129.456187][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3628'. [ 129.593518][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.610857][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.690329][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 129.999165][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 130.013720][ T29] audit: type=1400 audit(1754523848.431:3122): avc: denied { mount } for pid=11765 comm="syz.0.3651" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.038502][T11764] gtp0: entered promiscuous mode [ 130.043532][T11764] gtp0: entered allmulticast mode [ 130.060236][ T29] audit: type=1400 audit(1754523848.471:3123): avc: denied { map } for pid=11768 comm="syz.0.3652" path="socket:[36803]" dev="sockfs" ino=36803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.084095][ T29] audit: type=1400 audit(1754523848.471:3124): avc: denied { read } for pid=11768 comm="syz.0.3652" path="socket:[36803]" dev="sockfs" ino=36803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.124642][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 130.161902][ T29] audit: type=1400 audit(1754523848.571:3125): avc: denied { name_connect } for pid=11780 comm="syz.2.3658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 130.207928][T11778] loop3: detected capacity change from 0 to 2048 [ 130.228296][T11778] EXT4-fs: inline encryption not supported [ 130.259412][T11778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.324594][T11778] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3659: bg 0: block 234: padding at end of block bitmap is not set [ 130.339569][T11778] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 130.352350][T11778] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.352350][T11778] [ 130.390263][ T29] audit: type=1400 audit(1754523848.801:3126): avc: denied { shutdown } for pid=11792 comm="syz.2.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.424365][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.579023][T11813] loop4: detected capacity change from 0 to 1024 [ 130.596735][T11813] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.607866][T11813] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.619543][T11813] JBD2: no valid journal superblock found [ 130.625345][T11813] EXT4-fs (loop4): Could not load journal inode [ 130.668228][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 130.725004][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'. [ 130.781927][T11841] netlink: 'syz.0.3684': attribute type 298 has an invalid length. [ 131.683143][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 131.867865][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 131.971323][T11896] loop3: detected capacity change from 0 to 512 [ 132.007326][T11896] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3710: error while reading EA inode 32 err=-116 [ 132.037334][T11901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3712'. [ 132.074516][T11896] EXT4-fs (loop3): Remounting filesystem read-only [ 132.081157][T11896] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 132.091715][T11896] EXT4-fs (loop3): 1 orphan inode deleted [ 132.098446][T11896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.124863][T11896] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.176446][T11908] openvswitch: netlink: Message has 6 unknown bytes. [ 132.193045][T11911] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 132.201618][T11911] SELinux: failed to load policy [ 132.321178][T11925] SELinux: policydb version 0 does not match my version range 15-35 [ 132.343335][T11925] SELinux: failed to load policy [ 132.555526][T11943] loop4: detected capacity change from 0 to 512 [ 132.585598][T11943] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3731: error while reading EA inode 32 err=-116 [ 132.601915][T11943] EXT4-fs (loop4): Remounting filesystem read-only [ 132.608673][T11943] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 132.619121][T11943] EXT4-fs (loop4): 1 orphan inode deleted [ 132.625631][T11943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.650649][T11943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.172047][T12012] SELinux: security_context_str_to_sid () failed with errno=-22 [ 133.242979][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 133.242998][ T29] audit: type=1400 audit(1754523851.651:3182): avc: denied { connect } for pid=12020 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.505460][T12039] openvswitch: netlink: Message has 6 unknown bytes. [ 133.672850][ T29] audit: type=1400 audit(1754523852.081:3183): avc: denied { accept } for pid=12049 comm="syz.1.3778" path="socket:[37465]" dev="sockfs" ino=37465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.748289][T12057] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 133.765418][T12057] SELinux: failed to load policy [ 133.898907][ T29] audit: type=1400 audit(1754523852.311:3184): avc: granted { setsecparam } for pid=12072 comm="syz.4.3789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 134.031336][ T29] audit: type=1326 audit(1754523852.441:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.055035][ T29] audit: type=1326 audit(1754523852.441:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.078758][ T29] audit: type=1326 audit(1754523852.441:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.102551][ T29] audit: type=1326 audit(1754523852.441:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.127124][ T29] audit: type=1326 audit(1754523852.441:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.151505][ T29] audit: type=1326 audit(1754523852.441:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.252946][ T29] audit: type=1326 audit(1754523852.601:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de9e6ebe9 code=0x7ffc0000 [ 134.358998][T12116] loop3: detected capacity change from 0 to 2048 [ 134.396049][T12116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.505175][T12116] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3805: bg 0: block 408: padding at end of block bitmap is not set [ 134.549979][T12116] EXT4-fs (loop3): Remounting filesystem read-only [ 134.664777][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.710864][T12163] openvswitch: netlink: Message has 6 unknown bytes. [ 134.745611][T12167] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 134.752195][T12167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.760188][T12167] vhci_hcd vhci_hcd.0: Device attached [ 134.768280][T12168] vhci_hcd: connection closed [ 134.768547][ T7705] vhci_hcd: stop threads [ 134.777621][ T7705] vhci_hcd: release socket [ 134.782122][ T7705] vhci_hcd: disconnect device [ 134.846176][T12177] SELinux: security_context_str_to_sid () failed with errno=-22 [ 134.896527][T12181] gre0: Master is either lo or non-ether device [ 135.016628][T12185] loop4: detected capacity change from 0 to 2048 [ 135.049325][T12185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.145607][T12185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3838: bg 0: block 408: padding at end of block bitmap is not set [ 135.160433][T12185] EXT4-fs (loop4): Remounting filesystem read-only [ 135.255040][T12206] syzkaller0: entered promiscuous mode [ 135.260738][T12206] syzkaller0: entered allmulticast mode [ 135.284312][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.469696][T12237] loop4: detected capacity change from 0 to 2048 [ 135.539164][T12237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.651183][T12237] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3859: bg 0: block 408: padding at end of block bitmap is not set [ 135.709326][T12237] EXT4-fs (loop4): Remounting filesystem read-only [ 135.794597][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.875880][T12260] vlan2: entered allmulticast mode [ 135.970854][T12272] bridge0: port 3(vlan2) entered blocking state [ 135.977472][T12272] bridge0: port 3(vlan2) entered disabled state [ 135.998114][T12272] vlan2: entered allmulticast mode [ 136.006194][T12272] vlan2: entered promiscuous mode [ 136.011294][T12272] bond0: entered promiscuous mode [ 136.016547][T12272] bond_slave_0: entered promiscuous mode [ 136.022351][T12272] bond_slave_1: entered promiscuous mode [ 136.101784][T12290] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 136.108371][T12290] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.116300][T12290] vhci_hcd vhci_hcd.0: Device attached [ 136.123398][T12291] vhci_hcd: connection closed [ 136.123683][ T7705] vhci_hcd: stop threads [ 136.132736][ T7705] vhci_hcd: release socket [ 136.137226][ T7705] vhci_hcd: disconnect device [ 136.299552][T12313] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.723782][T12333] syzkaller0: entered promiscuous mode [ 136.729329][T12333] syzkaller0: entered allmulticast mode [ 136.878277][T12349] openvswitch: netlink: Message has 6 unknown bytes. [ 137.220813][T12370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.358113][T12391] wireguard0: entered promiscuous mode [ 137.416063][T12405] bridge0: port 3(vlan2) entered blocking state [ 137.422421][T12405] bridge0: port 3(vlan2) entered disabled state [ 137.429274][T12405] vlan2: entered allmulticast mode [ 137.434461][T12405] bond0: entered allmulticast mode [ 137.439652][T12405] bond_slave_0: entered allmulticast mode [ 137.445536][T12405] bond_slave_1: entered allmulticast mode [ 137.451318][T12405] syz_tun: entered allmulticast mode [ 137.457511][T12405] vlan2: entered promiscuous mode [ 137.462693][T12405] bond0: entered promiscuous mode [ 137.467824][T12405] bond_slave_0: entered promiscuous mode [ 137.473795][T12405] bond_slave_1: entered promiscuous mode [ 137.583929][T12426] siw: device registration error -23 [ 137.679307][T12439] wireguard0: entered promiscuous mode [ 137.834449][T12458] 9pnet_fd: Insufficient options for proto=fd [ 138.128164][T12484] vlan2: entered allmulticast mode [ 138.268717][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 138.268736][ T29] audit: type=1400 audit(1754523856.681:3347): avc: denied { create } for pid=12494 comm="syz.2.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.298662][ T29] audit: type=1400 audit(1754523856.681:3348): avc: denied { write } for pid=12494 comm="syz.2.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.319589][ T29] audit: type=1400 audit(1754523856.681:3349): avc: denied { read } for pid=12494 comm="syz.2.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.354223][ T29] audit: type=1326 audit(1754523856.761:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.377910][ T29] audit: type=1326 audit(1754523856.761:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.401732][ T29] audit: type=1326 audit(1754523856.761:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.425529][ T29] audit: type=1326 audit(1754523856.761:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.449301][ T29] audit: type=1326 audit(1754523856.761:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.472981][ T29] audit: type=1326 audit(1754523856.761:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.496535][ T29] audit: type=1326 audit(1754523856.761:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12500 comm="syz.0.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9269caebe9 code=0x7ffc0000 [ 138.568225][T12516] vlan3: entered allmulticast mode [ 138.862326][T12562] wireguard0: entered promiscuous mode [ 138.898272][T12566] 0{X: left allmulticast mode [ 138.910328][T12566] syz_tun: left promiscuous mode [ 138.921385][T12566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.934221][T12566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.134719][T12584] veth2: entered allmulticast mode [ 139.191873][T12597] lo: left promiscuous mode [ 139.196581][T12597] lo: left allmulticast mode [ 139.209534][T12597] tunl0: left promiscuous mode [ 139.214578][T12597] tunl0: left allmulticast mode [ 139.220435][T12597] gre0: left promiscuous mode [ 139.225168][T12597] gre0: left allmulticast mode [ 139.231462][T12597] gretap0: left allmulticast mode [ 139.246778][T12597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.254155][T12597] bridge0: port 3(vlan2) entered blocking state [ 139.260484][T12597] bridge0: port 3(vlan2) entered forwarding state [ 139.272516][T12597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.288391][ T3153] lo speed is unknown, defaulting to 1000 [ 139.294422][ T3153] syz0: Port: 1 Link ACTIVE [ 139.316946][T12602] pim6reg1: entered promiscuous mode [ 139.322317][T12602] pim6reg1: entered allmulticast mode [ 139.446071][T12613] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.546802][T12631] loop3: detected capacity change from 0 to 1024 [ 139.580423][T12631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.666902][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.848916][T12660] netlink: 'syz.3.4046': attribute type 2 has an invalid length. [ 139.856809][T12660] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 139.864746][T12660] __nla_validate_parse: 3 callbacks suppressed [ 139.864767][T12660] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4046'. [ 140.010551][T12671] loop3: detected capacity change from 0 to 164 [ 140.245593][T12689] sock: sock_set_timeout: `syz.2.4059' (pid 12689) tries to set negative timeout [ 140.786599][T12727] netlink: 'syz.1.4075': attribute type 2 has an invalid length. [ 140.794645][T12727] netlink: 'syz.1.4075': attribute type 1 has an invalid length. [ 140.798256][T12731] sock: sock_set_timeout: `syz.4.4077' (pid 12731) tries to set negative timeout [ 140.802473][T12727] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4075'. [ 141.136703][T12747] loop4: detected capacity change from 0 to 512 [ 141.144449][T12747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.157899][T12747] EXT4-fs (loop4): 1 truncate cleaned up [ 141.175385][T12747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.245599][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.347879][T12774] lo: left promiscuous mode [ 141.352517][T12774] lo: left allmulticast mode [ 141.358901][T12774] tunl0: left promiscuous mode [ 141.363940][T12774] tunl0: left allmulticast mode [ 141.370033][T12774] gre0: left promiscuous mode [ 141.374914][T12774] gre0: left allmulticast mode [ 141.381392][T12774] gretap0: left promiscuous mode [ 141.386434][T12774] gretap0: left allmulticast mode [ 141.404639][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.412150][T12774] bridge0: port 3(vlan2) entered blocking state [ 141.418679][T12774] bridge0: port 3(vlan2) entered forwarding state [ 141.428667][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.461108][T12774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.775785][T12823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.856511][T12837] 9pnet_fd: Insufficient options for proto=fd [ 142.639502][T12867] loop4: detected capacity change from 0 to 512 [ 142.658570][T12867] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.676463][T12867] EXT4-fs (loop4): mount failed [ 143.304729][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 143.304745][ T29] audit: type=1400 audit(1754523861.721:3609): avc: denied { create } for pid=12939 comm="syz.4.4169" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.358042][ T29] audit: type=1400 audit(1754523861.761:3610): avc: denied { map } for pid=12939 comm="syz.4.4169" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.382490][ T29] audit: type=1400 audit(1754523861.761:3611): avc: denied { read write } for pid=12939 comm="syz.4.4169" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.413412][T12941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=12941 comm=syz.4.4169 [ 143.436722][T12945] pim6reg1: entered promiscuous mode [ 143.442193][T12945] pim6reg1: entered allmulticast mode [ 143.508675][T12948] ref_ctr_offset mismatch. inode: 0x1084 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 143.668062][T12957] loop3: detected capacity change from 0 to 512 [ 143.683817][ T29] audit: type=1400 audit(1754523862.091:3612): avc: denied { setopt } for pid=12958 comm="syz.4.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.715115][T12957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.728398][T12957] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.740074][ T29] audit: type=1400 audit(1754523862.141:3613): avc: denied { mount } for pid=12956 comm="syz.3.4177" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.768192][T12957] veth2: entered allmulticast mode [ 143.794606][ T29] audit: type=1400 audit(1754523862.211:3614): avc: denied { unmount } for pid=6464 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.816565][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.828181][ T29] audit: type=1400 audit(1754523862.241:3615): avc: denied { execute } for pid=12965 comm="syz.4.4182" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 143.876507][ T29] audit: type=1400 audit(1754523862.291:3616): avc: denied { create } for pid=12967 comm="syz.3.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.896215][ T29] audit: type=1400 audit(1754523862.291:3617): avc: denied { setopt } for pid=12967 comm="syz.3.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.915881][ T29] audit: type=1400 audit(1754523862.291:3618): avc: denied { read } for pid=12967 comm="syz.3.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.348657][T12995] openvswitch: netlink: Message has 6 unknown bytes. [ 144.476861][T12987] loop4: detected capacity change from 0 to 32768 [ 144.622635][T13010] loop4: detected capacity change from 0 to 128 [ 144.642241][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.650794][T13010] FAT-fs (loop4): Filesystem has been set read-only [ 144.667647][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.676504][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.686380][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.696639][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.707590][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.719418][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.729384][T13010] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.749338][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4203'. [ 144.758411][T13018] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4203'. [ 144.798295][T13024] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4205'. [ 144.823115][T13024] 0{X: renamed from gretap0 (while UP) [ 144.836972][T13024] 0{X: entered allmulticast mode [ 144.856071][T13024] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 144.896919][T13028] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 144.904732][T13028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4217'. [ 145.101304][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'. [ 145.110383][T13051] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4218'. [ 145.162960][T13057] loop4: detected capacity change from 0 to 512 [ 145.183213][T13057] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 145.467746][ T7706] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.490130][ T7706] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.519544][ T7706] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 145.547605][ T7706] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 146.192312][T13119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4250'. [ 146.664550][T13176] Q6\bY4: renamed from lo (while UP) [ 146.763913][T13191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4280'. [ 146.820251][T13201] netlink: 'syz.1.4285': attribute type 1 has an invalid length. [ 146.847609][T13205] loop4: detected capacity change from 0 to 1024 [ 146.859598][T13205] journal_path: Non-blockdev passed as './file1' [ 146.866018][T13205] EXT4-fs: error: could not find journal device path [ 147.056397][T13240] loop3: detected capacity change from 0 to 512 [ 147.069365][T13240] EXT4-fs: Ignoring removed oldalloc option [ 147.085205][T13240] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4304: Parent and EA inode have the same ino 15 [ 147.129063][T13240] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4304: Parent and EA inode have the same ino 15 [ 147.145596][T13240] EXT4-fs (loop3): 1 orphan inode deleted [ 147.175617][T13240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.183852][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4311'. [ 147.271237][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.329641][T13281] openvswitch: netlink: Message has 6 unknown bytes. [ 147.444178][T13303] dummy0: entered promiscuous mode [ 147.460468][T13308] Invalid ELF header magic: != ELF [ 147.468610][T13303] dummy0: left promiscuous mode [ 147.476155][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 147.485349][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 147.506769][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 147.509027][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4337'. [ 147.613324][T13330] sd 0:0:1:0: device reset [ 147.830196][T13362] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 147.850361][T13365] netlink: 'syz.2.4360': attribute type 1 has an invalid length. [ 147.904784][T13369] vhci_hcd: invalid port number 96 [ 147.910008][T13369] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 147.956680][T13378] netlink: 'syz.4.4365': attribute type 3 has an invalid length. [ 147.964648][T13378] netlink: 'syz.4.4365': attribute type 4 has an invalid length. [ 148.072098][T13395] syzkaller1: entered promiscuous mode [ 148.077698][T13395] syzkaller1: entered allmulticast mode [ 148.124513][T13401] openvswitch: netlink: Message has 6 unknown bytes. [ 148.400609][T13389] Q6\bY4 speed is unknown, defaulting to 1000 [ 148.459155][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 148.459173][ T29] audit: type=1326 audit(1754523866.871:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.490658][ T29] audit: type=1326 audit(1754523866.911:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.514532][ T29] audit: type=1326 audit(1754523866.911:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.538294][ T29] audit: type=1326 audit(1754523866.911:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.561913][ T29] audit: type=1326 audit(1754523866.911:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.585864][ T29] audit: type=1326 audit(1754523866.911:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.3.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b49cebe9 code=0x7ffc0000 [ 148.647058][T13454] loop3: detected capacity change from 0 to 512 [ 148.709512][ T29] audit: type=1326 audit(1754523866.961:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 148.733345][ T29] audit: type=1326 audit(1754523866.961:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 148.734791][T13454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.756876][ T29] audit: type=1326 audit(1754523866.961:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 148.756929][ T29] audit: type=1326 audit(1754523866.961:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ad83ebe9 code=0x7ffc0000 [ 148.816889][T13454] ext4 filesystem being mounted at /558/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.822205][T13463] loop0: detected capacity change from 0 to 1024 [ 148.829302][T13389] geneve0: entered promiscuous mode [ 148.839030][T13389] geneve0: entered allmulticast mode [ 148.853360][T13463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.862843][ T6464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.903199][T13463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 148.917943][T13463] System zones: 0-1, 3-36 [ 148.926112][T13463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.942154][T13468] SELinux: failed to load policy [ 148.978092][T13472] loop4: detected capacity change from 0 to 512 [ 148.985618][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.036501][T13472] EXT4-fs (loop4): too many log groups per flexible block group [ 149.044391][T13472] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 149.054265][T13472] EXT4-fs (loop4): mount failed [ 149.491854][T13547] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.491854][T13547] program syz.1.4442 not setting count and/or reply_len properly [ 149.638825][T13574] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 149.700514][T13582] loop3: detected capacity change from 0 to 764 [ 149.717633][T13582] Symlink component flag not implemented [ 149.724939][T13582] Symlink component flag not implemented (101) [ 149.863870][T13607] geneve2: entered promiscuous mode [ 149.869159][T13607] geneve2: entered allmulticast mode [ 150.210356][T13643] SELinux: failed to load policy [ 150.397308][T13649] ================================================================== [ 150.405458][T13649] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 150.414143][T13649] [ 150.416486][T13649] write to 0xffff88814ccc1228 of 8 bytes by task 13650 on cpu 0: [ 150.424238][T13649] shmem_file_splice_read+0x470/0x600 [ 150.429658][T13649] splice_direct_to_actor+0x26f/0x680 [ 150.435075][T13649] do_splice_direct+0xda/0x150 [ 150.439860][T13649] do_sendfile+0x380/0x650 [ 150.444329][T13649] __x64_sys_sendfile64+0x105/0x150 [ 150.449567][T13649] x64_sys_call+0x2bb0/0x2ff0 [ 150.454262][T13649] do_syscall_64+0xd2/0x200 [ 150.458846][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.464861][T13649] [ 150.467203][T13649] write to 0xffff88814ccc1228 of 8 bytes by task 13649 on cpu 1: [ 150.474938][T13649] shmem_file_splice_read+0x470/0x600 [ 150.480337][T13649] splice_direct_to_actor+0x26f/0x680 [ 150.485732][T13649] do_splice_direct+0xda/0x150 [ 150.490609][T13649] do_sendfile+0x380/0x650 [ 150.495056][T13649] __x64_sys_sendfile64+0x105/0x150 [ 150.500357][T13649] x64_sys_call+0x2bb0/0x2ff0 [ 150.505075][T13649] do_syscall_64+0xd2/0x200 [ 150.509701][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.515623][T13649] [ 150.517966][T13649] value changed: 0x00000000000010e9 -> 0x00000000000010ea [ 150.525200][T13649] [ 150.527534][T13649] Reported by Kernel Concurrency Sanitizer on: [ 150.533703][T13649] CPU: 1 UID: 0 PID: 13649 Comm: syz.0.4491 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 150.545868][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.555939][T13649] ================================================================== [ 150.591078][T13652] netem: change failed