last executing test programs: 7.01103162s ago: executing program 3 (id=3653): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x0) 6.97950965s ago: executing program 3 (id=3655): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000), 0x11) 6.901036539s ago: executing program 3 (id=3658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0) 6.839593569s ago: executing program 3 (id=3661): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 6.747436939s ago: executing program 3 (id=3667): perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x736f}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 6.291576737s ago: executing program 3 (id=3691): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00\x00', 0x2}], 0x1}, 0x0) 6.287245537s ago: executing program 32 (id=3691): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00\x00', 0x2}], 0x1}, 0x0) 6.195590497s ago: executing program 5 (id=3695): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 5.203168692s ago: executing program 1 (id=3708): r0 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/89, 0x59, 0x0, &(0x7f0000000b80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = dup3(r6, r3, 0x0) ioctl$MON_IOCX_GETX(r7, 0x40189206, &(0x7f0000000100)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x43}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x50, &(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x120) 4.57629322s ago: executing program 0 (id=3711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) unshare(0x68040200) 4.57588802s ago: executing program 1 (id=3712): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}) 4.575702659s ago: executing program 2 (id=3713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2000008}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 4.575441099s ago: executing program 4 (id=3714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r0, &(0x7f0000005f40)=""/175, 0xaf) 3.873185286s ago: executing program 0 (id=3715): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) 3.872769256s ago: executing program 1 (id=3716): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x9, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18ed497ac84ed43551038639923707a6045203ee038a170a12f39df1d5d5d70ec6925b5a37faf1abf23923be96bcd4256c5b1dda0850c7618c2b9bc9b2a9360a96b768d29ba5bb1eecf4d2aa1ffb4138abcbb697d05e818aee943bf3d1ae631ce469b21df60b0d5f4a6f1686f8", @ANYBLOB="c4c5ed8614b25330654de0d6cd47757d90da3e94dea1560b103754c2e0c7d0ad615ab41b38004cb0accec6ea8f304c5261648304b6943c4dafcb908af2ec4a68121d879a2061cc5f73a36ba1ad5a96cc97bed6bae203d8d294f2921f288736f7f41612c8a6abeff0844264fe75431bd490f17af86503297cf1eb023f1175494a475196316cfb7cbba3c1aa004efe9d7ac2612f6588cb9de100e83c6968bb83431d822215d57bc58158c857fc02ec796a26512a3e", @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES16=r0], 0xff2e) timer_create(0x7, &(0x7f0000000180)={0x0, 0xfffffffd}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18210000000000000000000000000000950000000e000000a50000002a00000095", @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES8=r3, @ANYRESHEX=r2, @ANYRES64=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r5, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xffe, r5}, 0x38) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000300)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x10, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f00000006c0)=""/74}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200"], 0xfc}}, 0x0) 3.872546526s ago: executing program 2 (id=3717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f0000}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 3.872365346s ago: executing program 4 (id=3718): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x9, 0x40000000000005, 0x400}, {}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x3, 0x0, 0x9075}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.060577353s ago: executing program 0 (id=3719): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\n\x00'], 0x50) r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000140)=""/155) 3.057280793s ago: executing program 2 (id=3720): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 3.057181143s ago: executing program 4 (id=3721): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='\x00\x00\x00\x00\xde\x00\x00\x9b?\xdc\xea&\xa3\x92\x00D\x02\xa7\xd9f\x17\x1d\x06\xe4\xf7\x81\x1e\xa8\xc5p\xa0D\xb5\xc7\xd3\xf6?\xcf-\xbdy`\"[\xf2\x92\xf0fs\xd0P\xc2\x12NF\xff\xff\xff\x7fQ\b\x00\xc7\xfe7\x8dTu\x95$Z2\xc9\x1dF\xee\x7fW`\f0\xe2\xe5\x98N\x88\x86\fo~\x85t\xa7P\x85\xd6\x994\xceS-Nnb\xf8', 0x0, r0) close(r0) 2.142991939s ago: executing program 0 (id=3722): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 2.142860079s ago: executing program 1 (id=3723): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000e40)=""/139, 0x8b}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000002a80)=""/4126, 0x101e}, {&(0x7f00000000c0)=""/195, 0xc3}, {&(0x7f0000000d80)=""/188, 0xbc}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000c40)=""/275, 0x113}], 0x8}, 0x2000) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) 2.142788829s ago: executing program 2 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.142711369s ago: executing program 4 (id=3725): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.140513615s ago: executing program 0 (id=3726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newvlan={0x18, 0x71, 0x1, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x440000c0) 1.139999235s ago: executing program 1 (id=3727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}, {@in6=@remote, 0x0, 0x32}, @in6=@remote, {}, {}, {0x0, 0x40000000}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) 1.139890255s ago: executing program 2 (id=3728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="000a00000000000007300000000000000000102dcc00001100000000000000000000000000000000000000000720000000000600000000000000000000000000000000000200feffff07000000000000000047d7a9"], 0x60) 1.139837185s ago: executing program 4 (id=3729): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000021000501000000000000000002000015b40b5500020000000c000c400000000000000007050013"], 0x30}}, 0x0) 9.14459ms ago: executing program 0 (id=3730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) fadvise64(r0, 0x7, 0x4, 0x4) 8.99992ms ago: executing program 1 (id=3731): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}, 0x45ff5eb5c5b462aa, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) 8.91002ms ago: executing program 2 (id=3732): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) acct(&(0x7f00000001c0)='./file0\x00') 0s ago: executing program 4 (id=3733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x81000000}}]}]}]}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 4843][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.534183][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.578142][ T8367] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1388'. [ 157.588339][ T8367] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1388'. [ 157.597832][ T8367] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1388'. [ 157.608842][ T8367] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.643105][ T8367] syzkaller0: entered promiscuous mode [ 157.648755][ T8367] syzkaller0: entered allmulticast mode [ 157.679416][ T8367] lo speed is unknown, defaulting to 1000 [ 157.725641][ T8373] loop1: detected capacity change from 0 to 1024 [ 157.733193][ T8373] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.744395][ T8373] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 157.752771][ T8373] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.759875][ T8373] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 157.770435][ T8373] EXT4-fs (loop1): Remounting filesystem read-only [ 157.777348][ T8373] EXT4-fs (loop1): 1 orphan inode deleted [ 157.791570][ T8373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.800381][ T8367] lo speed is unknown, defaulting to 1000 [ 157.820630][ T8373] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 157.827808][ T8373] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.959625][ T8381] syz.2.1403[8381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.959746][ T8381] syz.2.1403[8381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.971417][ T8381] syz.2.1403[8381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.002854][ T8381] loop2: detected capacity change from 0 to 2048 [ 158.032975][ T8381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.069965][ T8381] EXT4-fs: Ignoring removed bh option [ 158.075621][ T8381] EXT4-fs (loop2): can't disable delalloc during remount [ 158.142825][ T8392] syz.1.1396[8392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.142935][ T8392] syz.1.1396[8392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.164663][ T8392] syz.1.1396[8392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.239220][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 158.246046][ T8402] syz!: rxe_newlink: already configured on team_slave_0 [ 158.286526][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.295558][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.302123][ T8402] loop0: detected capacity change from 0 to 1024 [ 158.309178][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1394'. [ 158.314370][ T8402] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.339380][ T8401] siw: device registration error -23 [ 158.341898][ T8402] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1399: Invalid block bitmap block 0 in block_group 0 [ 158.358687][ T8402] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1399: Failed to acquire dquot type 0 [ 158.370351][ T8402] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.1399: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.383983][ T8402] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1399: Invalid inode bitmap blk 0 in block_group 0 [ 158.396907][ T8402] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 158.405655][ T7883] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:48: Failed to release dquot type 0 [ 158.405817][ T8402] EXT4-fs (loop0): 1 orphan inode deleted [ 158.423649][ T8402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.466986][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.493893][ T8409] loop0: detected capacity change from 0 to 512 [ 158.526351][ T8409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 158.534523][ T8409] System zones: 0-2, 18-18, 34-34 [ 158.540306][ T8409] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1402: bg 0: block 248: padding at end of block bitmap is not set [ 158.555221][ T8409] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1402: Failed to acquire dquot type 1 [ 158.567229][ T8409] EXT4-fs (loop0): 1 truncate cleaned up [ 158.573594][ T8409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.586458][ T8409] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.603609][ T8409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8409 comm=syz.0.1402 [ 158.615118][ T8413] loop1: detected capacity change from 0 to 1024 [ 158.633352][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.652540][ T8413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 158.661231][ T8413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.685318][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.776475][ T8422] loop1: detected capacity change from 0 to 164 [ 158.801902][ T3300] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 158.820901][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.820901][ T8422] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 158.835007][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.835007][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.848896][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.848896][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.863684][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.864597][ T8424] tipc: Enabling of bearer rejected, failed to enable media [ 158.882142][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.882142][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.901051][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.901051][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.921439][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.921439][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.952728][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.952728][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.967624][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.967624][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.981853][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.981853][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.998130][ T8422] syz.1.1406: attempt to access beyond end of device [ 158.998130][ T8422] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 159.001083][ T8420] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 159.206261][ T8437] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1412'. [ 159.231772][ T8433] loop2: detected capacity change from 0 to 8192 [ 159.394278][ T8441] rdma_op ffff88812f01ad80 conn xmit_rdma 0000000000000000 [ 159.457740][ T8447] syz.3.1416[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.457881][ T8447] syz.3.1416[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.469596][ T8447] syz.3.1416[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.508444][ T8449] loop2: detected capacity change from 0 to 4096 [ 159.547537][ T8449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.584887][ T8453] loop0: detected capacity change from 0 to 512 [ 159.610094][ T8449] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 159.641352][ T8453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.681157][ T8453] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.741035][ T29] kauditd_printk_skb: 1187 callbacks suppressed [ 159.741054][ T29] audit: type=1400 audit(1734791305.063:32884): avc: denied { execmem } for pid=8451 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.827773][ T29] audit: type=1400 audit(1734791305.153:32885): avc: denied { ioctl } for pid=8454 comm="syz.4.1419" path="socket:[22491]" dev="sockfs" ino=22491 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.255441][ T29] audit: type=1400 audit(1734791305.583:32886): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 160.372313][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.495858][ T29] audit: type=1400 audit(1734791305.613:32887): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 160.516219][ T29] audit: type=1400 audit(1734791305.713:32888): avc: denied { connect } for pid=8470 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.592748][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.690832][ T8479] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.702067][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.710922][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.770266][ T8479] syzkaller0: entered promiscuous mode [ 160.775880][ T8479] syzkaller0: entered allmulticast mode [ 160.830725][ T8479] lo speed is unknown, defaulting to 1000 [ 160.886422][ T8491] loop0: detected capacity change from 0 to 1024 [ 160.902212][ T29] audit: type=1404 audit(1734791306.233:32889): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 160.923132][ T8491] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.941191][ T29] audit: type=1404 audit(1734791306.253:32890): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 160.956382][ T29] audit: type=1400 audit(1734791306.253:32891): avc: denied { mounton } for pid=8478 comm="syz.0.1424" path="/302/file1" dev="tmpfs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.979245][ T29] audit: type=1400 audit(1734791306.253:32892): avc: denied { prog_load } for pid=8490 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.998393][ T29] audit: type=1400 audit(1734791306.253:32893): avc: denied { bpf } for pid=8490 comm="syz.1.1428" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.023096][ T8491] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 161.037155][ T8491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.044056][ T8491] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 161.053941][ T8491] EXT4-fs (loop0): Remounting filesystem read-only [ 161.060880][ T8491] EXT4-fs (loop0): 1 orphan inode deleted [ 161.068052][ T8491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.080032][ T8491] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 161.087140][ T8491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.117338][ T8479] lo speed is unknown, defaulting to 1000 [ 161.151471][ T8500] syz.1.1430[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.188246][ T8500] loop1: detected capacity change from 0 to 128 [ 161.206570][ T8500] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.218769][ T8500] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.267825][ T7857] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.313029][ T8507] loop1: detected capacity change from 0 to 1024 [ 161.319724][ T8507] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 161.580892][ T8512] devpts: called with bogus options [ 161.723937][ T8526] loop0: detected capacity change from 0 to 1024 [ 161.772723][ T8526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 161.781828][ T8526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.823649][ T8535] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.831074][ T8535] vhci_hcd: invalid port number 23 [ 161.838905][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.894243][ T8537] __nla_validate_parse: 5 callbacks suppressed [ 161.894259][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 162.048716][ T8550] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1447'. [ 162.063505][ T8550] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1447'. [ 162.072753][ T8550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1447'. [ 162.093210][ T8550] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.143981][ T8550] syzkaller0: entered promiscuous mode [ 162.149531][ T8550] syzkaller0: entered allmulticast mode [ 162.223438][ T8550] lo speed is unknown, defaulting to 1000 [ 162.269201][ T8556] loop2: detected capacity change from 0 to 1024 [ 162.285694][ T8556] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.329202][ T8556] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 162.364137][ T8556] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.390607][ T8556] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 162.437246][ T8556] EXT4-fs (loop2): Remounting filesystem read-only [ 162.461203][ T8556] EXT4-fs (loop2): 1 orphan inode deleted [ 162.467435][ T8556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.479729][ T8556] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 162.486998][ T8556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.491951][ T8559] rdma_op ffff88813d587980 conn xmit_rdma 0000000000000000 [ 162.570471][ T8561] loop1: detected capacity change from 0 to 512 [ 162.616602][ T8561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.624923][ T8550] lo speed is unknown, defaulting to 1000 [ 162.635878][ T8561] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.757238][ T8561] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 162.791209][ T8567] loop0: detected capacity change from 0 to 1024 [ 162.806539][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.832972][ T8567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 162.858316][ T8567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.913080][ T8571] loop1: detected capacity change from 0 to 4096 [ 162.932139][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.950034][ T8571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.026106][ T8571] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 163.033941][ T8571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1452'. [ 163.133224][ T8588] loop2: detected capacity change from 0 to 512 [ 163.219147][ T8588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.241527][ T8588] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.453352][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.647645][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1459'. [ 164.110541][ T8612] rdma_op ffff888118a62d80 conn xmit_rdma 0000000000000000 [ 164.130827][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.187515][ T8614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1458'. [ 164.211026][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.219511][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.514537][ T8625] loop1: detected capacity change from 0 to 512 [ 164.526074][ T8625] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.581324][ T8625] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1464: Failed to acquire dquot type 1 [ 164.598489][ T8625] EXT4-fs (loop1): 1 truncate cleaned up [ 164.610449][ T8625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.692285][ T8625] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 164.761654][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.796351][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 164.796368][ T29] audit: type=1400 audit(1734791310.123:33455): avc: denied { create } for pid=8627 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.831022][ T29] audit: type=1400 audit(1734791310.153:33456): avc: denied { ioctl } for pid=8627 comm="syz.1.1465" path="socket:[23036]" dev="sockfs" ino=23036 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.921121][ T29] audit: type=1404 audit(1734791310.243:33457): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 164.942721][ T29] audit: type=1404 audit(1734791310.273:33458): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 164.957863][ T29] audit: type=1326 audit(1734791310.273:33459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 164.981464][ T29] audit: type=1326 audit(1734791310.273:33460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 165.005151][ T29] audit: type=1326 audit(1734791310.273:33461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8629 comm="syz.1.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4495a4690 code=0x7ffc0000 [ 165.028813][ T29] audit: type=1400 audit(1734791310.273:33462): avc: denied { prog_load } for pid=8631 comm="syz.4.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.046158][ T3300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.048169][ T29] audit: type=1400 audit(1734791310.273:33463): avc: denied { bpf } for pid=8631 comm="syz.4.1467" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.092836][ T8638] netlink: 36 bytes leftover after parsing attributes in process `4¹ßs'. [ 165.156580][ T8638] loop2: detected capacity change from 0 to 1024 [ 165.165119][ T8638] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.178698][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 165.186474][ T8638] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 165.195817][ T8638] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.199605][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1472'. [ 165.202776][ T8638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 165.220860][ T8638] EXT4-fs (loop2): Remounting filesystem read-only [ 165.227652][ T8638] EXT4-fs (loop2): 1 orphan inode deleted [ 165.233996][ T8638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.246258][ T8638] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 165.253220][ T8638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.501318][ T8670] bpf_get_probe_write_proto: 2 callbacks suppressed [ 165.501370][ T8670] syz.4.1479[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.508240][ T8670] syz.4.1479[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.531192][ T8670] syz.4.1479[8670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.597570][ T8668] SELinux: syz.0.1476 (8668) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 165.841730][ T8684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 165.848459][ T8684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.855964][ T8684] vhci_hcd vhci_hcd.0: Device attached [ 165.863424][ T8685] vhci_hcd: cannot find the pending unlink 9 [ 165.871591][ T8685] vhci_hcd: connection closed [ 165.871701][ T7850] vhci_hcd: stop threads [ 165.880673][ T7850] vhci_hcd: release socket [ 165.885258][ T7850] vhci_hcd: disconnect device [ 165.998634][ T8692] rdma_op ffff88813d587180 conn xmit_rdma 0000000000000000 [ 166.056541][ T8697] veth0_to_team: entered promiscuous mode [ 166.062421][ T8697] veth0_to_team: entered allmulticast mode [ 166.131137][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.143966][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.164036][ T8700] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 166.173359][ T8700] team0: Port device bridge0 added [ 166.190856][ T8700] loop0: detected capacity change from 0 to 512 [ 166.208150][ T8700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.221070][ T8700] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.521818][ T8705] tipc: Resetting bearer [ 166.559602][ T8705] infiniband syz2: set down [ 166.596757][ T8705] tipc: Disabling bearer [ 166.645975][ T3415] smc: removing ib device syz2 [ 166.671494][ T8705] team0 (unregistering): Port device veth0_to_batadv removed [ 166.889384][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.924344][ T8720] SELinux: ‡&/ç (8720) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.966282][ T8721] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.974161][ T8721] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 166.982355][ T8718] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 167.009371][ T8723] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 167.058648][ T8727] loop2: detected capacity change from 0 to 128 [ 167.144179][ T8729] loop1: detected capacity change from 0 to 512 [ 167.157815][ T8729] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 167.159675][ T8732] rdma_op ffff88812f01c180 conn xmit_rdma 0000000000000000 [ 167.192023][ T8729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 167.206302][ T8729] System zones: 1-12 [ 167.210407][ T8729] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.217215][ T8729] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 167.246934][ T8729] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 167.256200][ T8729] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 167.274762][ T8729] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 167.289427][ T8729] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 167.313896][ T8729] EXT4-fs (loop1): 1 truncate cleaned up [ 167.321582][ T8729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 167.344232][ T8729] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 167.433464][ T8736] loop0: detected capacity change from 0 to 1024 [ 167.440744][ T8736] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.452764][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.461434][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.469521][ T8736] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 167.477650][ T8736] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.485425][ T8736] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 167.495726][ T8736] EXT4-fs (loop0): Remounting filesystem read-only [ 167.502446][ T8736] EXT4-fs (loop0): 1 orphan inode deleted [ 167.508861][ T8736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.520907][ T8736] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 167.527884][ T8736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.554644][ T8736] loop0: detected capacity change from 0 to 512 [ 167.562093][ T8736] EXT4-fs: Ignoring removed oldalloc option [ 167.568052][ T8736] EXT4-fs: Ignoring removed i_version option [ 167.591516][ T8736] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.1501: corrupted xattr block 95: invalid header [ 167.605612][ T8736] EXT4-fs (loop0): Remounting filesystem read-only [ 167.612252][ T8736] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 167.622501][ T8736] EXT4-fs (loop0): 1 orphan inode deleted [ 167.628634][ T8736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.641569][ T8736] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 167.648457][ T8736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.666861][ T8736] loop0: detected capacity change from 0 to 512 [ 167.673504][ T8736] EXT4-fs: Ignoring removed bh option [ 167.679218][ T8736] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 167.688785][ T8736] EXT4-fs (loop0): 1 truncate cleaned up [ 167.695541][ T8736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.708886][ T8747] netlink: 'syz.3.1503': attribute type 8 has an invalid length. [ 167.716776][ T8747] __nla_validate_parse: 7 callbacks suppressed [ 167.716792][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 167.745270][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 167.814379][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.835578][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 167.916245][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.935347][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.973024][ T8768] loop0: detected capacity change from 0 to 512 [ 167.992708][ T8768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.005818][ T8768] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.031506][ T8768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1510: bg 0: block 18: invalid block bitmap [ 168.059111][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.087051][ T8772] rdma_op ffff88812f01d180 conn xmit_rdma 0000000000000000 [ 168.129451][ T8776] rdma_op ffff88812f01d180 conn xmit_rdma 0000000000000000 [ 168.144920][ T8778] usb usb8: usbfs: process 8778 (syz.4.1514) did not claim interface 0 before use [ 168.242956][ T8785] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 168.527269][ T8808] loop3: detected capacity change from 0 to 2048 [ 168.561906][ T8811] rdma_op ffff88813dba8980 conn xmit_rdma 0000000000000000 [ 168.562566][ T8808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.611430][ T8816] siw: device registration error -23 [ 168.728409][ T8820] ebtables: ebtables: counters copy to user failed while replacing table [ 168.751775][ T8820] loop2: detected capacity change from 0 to 164 [ 168.772141][ T8820] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 168.787948][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.854690][ T8830] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1530'. [ 169.103337][ T8835] loop0: detected capacity change from 0 to 128 [ 169.110030][ T8835] ext4: Bad value for 'auto_da_alloc' [ 169.129328][ T8835] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 169.489529][ T8856] macsec0: entered promiscuous mode [ 169.494816][ T8856] veth1_to_batadv: entered promiscuous mode [ 169.506520][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1538'. [ 169.515640][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1538'. [ 169.537608][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1538'. [ 169.569548][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.582532][ T8856] loop0: detected capacity change from 0 to 512 [ 169.589097][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.643508][ T8856] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1531: iget: bad extended attribute block 1 [ 169.676479][ T8856] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1531: couldn't read orphan inode 15 (err -117) [ 169.701283][ T8856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.732686][ T8870] loop2: detected capacity change from 0 to 512 [ 169.749883][ T8856] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 169.840329][ T8875] lo speed is unknown, defaulting to 1000 [ 169.944802][ T8875] lo speed is unknown, defaulting to 1000 [ 170.033129][ T29] kauditd_printk_skb: 1562 callbacks suppressed [ 170.033147][ T29] audit: type=1400 audit(1734791315.303:35016): avc: denied { create } for pid=8868 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.060365][ T29] audit: type=1400 audit(1734791315.363:35017): avc: denied { read } for pid=8868 comm="syz.4.1543" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.084778][ T29] audit: type=1400 audit(1734791315.363:35018): avc: denied { open } for pid=8868 comm="syz.4.1543" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.109575][ T29] audit: type=1400 audit(1734791315.363:35019): avc: denied { ioctl } for pid=8868 comm="syz.4.1543" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.194577][ T8879] batadv0: entered promiscuous mode [ 170.200178][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.208969][ T8870] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 170.217132][ T8870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 170.266440][ T8870] System zones: 0-1, 15-15, 18-18, 34-34 [ 170.266789][ T8870] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.266825][ T8870] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 170.266936][ T8870] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 170.266963][ T8870] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 170.267229][ T8870] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1542: bad orphan inode 16 [ 170.267421][ T8870] ext4_test_bit(bit=15, block=18) = 1 [ 170.267454][ T8870] is_bad_inode(inode)=0 [ 170.267463][ T8870] NEXT_ORPHAN(inode)=0 [ 170.267470][ T8870] max_ino=32 [ 170.267476][ T8870] i_nlink=2 [ 170.268200][ T8870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.451896][ T29] audit: type=1400 audit(1734791315.463:35020): avc: denied { ioctl } for pid=8868 comm="syz.4.1543" path="socket:[23494]" dev="sockfs" ino=23494 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.478133][ T29] audit: type=1326 audit(1734791315.593:35021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8371a84690 code=0x7ffc0000 [ 170.501675][ T29] audit: type=1326 audit(1734791315.593:35022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8371a84a77 code=0x7ffc0000 [ 170.525128][ T29] audit: type=1326 audit(1734791315.593:35023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8371a84690 code=0x7ffc0000 [ 170.548666][ T29] audit: type=1326 audit(1734791315.593:35024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371a85d29 code=0x7ffc0000 [ 170.627413][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.824093][ T8898] loop2: detected capacity change from 0 to 764 [ 171.014548][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.028718][ T8914] loop2: detected capacity change from 0 to 512 [ 171.037042][ T8914] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.043793][ T8914] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1557: Failed to acquire dquot type 1 [ 171.055620][ T8914] EXT4-fs (loop2): 1 truncate cleaned up [ 171.062305][ T8914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.076378][ T8914] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 171.095741][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.143165][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1556'. [ 171.152343][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1556'. [ 171.167026][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1556'. [ 171.284344][ T8933] rdma_op ffff888118a64d80 conn xmit_rdma 0000000000000000 [ 171.299655][ T8935] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 171.375267][ T8938] loop3: detected capacity change from 0 to 512 [ 171.383267][ T8938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 171.393742][ T8938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 171.401868][ T8938] System zones: 1-12 [ 171.405937][ T8938] EXT4-fs (loop3): orphan cleanup on readonly fs [ 171.412830][ T8938] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 171.426903][ T8938] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 171.435767][ T8938] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 171.448884][ T8937] netlink: 'syz.0.1565': attribute type 8 has an invalid length. [ 171.449085][ T8938] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 171.456700][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 171.470272][ T8938] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 171.492048][ T8938] EXT4-fs (loop3): 1 truncate cleaned up [ 171.497891][ T8938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 171.519880][ T8938] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 171.898436][ T8956] rdma_op ffff88813d584980 conn xmit_rdma 0000000000000000 [ 171.923209][ T8960] program syz.4.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.140109][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 172.818718][ T8995] rdma_op ffff88810277bd80 conn xmit_rdma 0000000000000000 [ 172.990687][ T9001] netlink: 'syz.1.1590': attribute type 8 has an invalid length. [ 172.998550][ T9001] __nla_validate_parse: 1 callbacks suppressed [ 172.998564][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 173.048669][ T9026] netlink: 'syz.0.1599': attribute type 9 has an invalid length. [ 173.070696][ T9027] loop3: detected capacity change from 0 to 1024 [ 173.094015][ T9027] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.121348][ T9027] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1600: Invalid block bitmap block 0 in block_group 0 [ 173.147922][ T9027] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1600: Failed to acquire dquot type 0 [ 173.159979][ T9027] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.1600: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.174903][ T9027] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1600: Invalid inode bitmap blk 0 in block_group 0 [ 173.175875][ T9043] rdma_op ffff8881021bf980 conn xmit_rdma 0000000000000000 [ 173.188008][ T9027] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 173.195232][ T7850] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:34: Failed to release dquot type 0 [ 173.215673][ T9027] EXT4-fs (loop3): 1 orphan inode deleted [ 173.222241][ T9027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.256132][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 173.289927][ T9027] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.1600: iget: bad extra_isize 65535 (inode size 256) [ 173.429934][ T9068] loop2: detected capacity change from 0 to 1024 [ 173.452129][ T9068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 173.461028][ T9068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.488803][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.524096][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 173.557920][ T9076] rdma_op ffff8881021c0980 conn xmit_rdma 0000000000000000 [ 173.714802][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'. [ 173.930616][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.980039][ T9099] usb usb8: usbfs: process 9099 (syz.1.1628) did not claim interface 0 before use [ 174.101129][ T9113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 174.107750][ T9113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.115270][ T9113] vhci_hcd vhci_hcd.0: Device attached [ 174.147549][ T9116] vhci_hcd: cannot find the pending unlink 9 [ 174.164587][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1633'. [ 174.180653][ T9116] vhci_hcd: connection closed [ 174.182810][ T7857] vhci_hcd: stop threads [ 174.192010][ T7857] vhci_hcd: release socket [ 174.196497][ T7857] vhci_hcd: disconnect device [ 174.237912][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1634'. [ 174.317198][ T9126] loop3: detected capacity change from 0 to 1024 [ 174.331129][ T9126] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.371186][ T9126] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1634: Invalid block bitmap block 0 in block_group 0 [ 174.394243][ T9126] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1634: Failed to acquire dquot type 0 [ 174.405941][ T9126] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.1634: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.419764][ T9126] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1634: Invalid inode bitmap blk 0 in block_group 0 [ 174.432909][ T7857] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:38: Failed to release dquot type 0 [ 174.445757][ T9126] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 174.454698][ T9126] EXT4-fs (loop3): 1 orphan inode deleted [ 174.461032][ T9126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.507025][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.539412][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1642'. [ 174.575497][ T9152] loop3: detected capacity change from 0 to 512 [ 174.585244][ T9152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 174.592754][ T9152] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 174.607884][ T9152] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 174.615856][ T9152] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.1645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 174.634273][ T9152] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1645: couldn't read orphan inode 13 (err -117) [ 174.647842][ T9152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.666133][ T9160] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 174.695616][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.768014][ T9173] rdma_op ffff888134e4e180 conn xmit_rdma 0000000000000000 [ 174.803776][ T9175] loop3: detected capacity change from 0 to 1024 [ 174.835228][ T9175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 174.855851][ T9175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.913139][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.043338][ T29] kauditd_printk_skb: 1689 callbacks suppressed [ 175.043356][ T29] audit: type=1400 audit(1734791320.373:36706): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.095978][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 175.100272][ T29] audit: type=1400 audit(1734791320.373:36707): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.104919][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 175.104935][ T9202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1663'. [ 175.146048][ T29] audit: type=1400 audit(1734791320.373:36708): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.170953][ T29] audit: type=1400 audit(1734791320.423:36709): avc: denied { create } for pid=9199 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.224322][ T29] audit: type=1400 audit(1734791320.443:36710): avc: denied { connect } for pid=9199 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.244292][ T29] audit: type=1400 audit(1734791320.443:36711): avc: denied { read } for pid=9199 comm="syz.0.1664" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.267175][ T29] audit: type=1400 audit(1734791320.443:36712): avc: denied { open } for pid=9199 comm="syz.0.1664" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.290546][ T29] audit: type=1400 audit(1734791320.443:36713): avc: denied { execmem } for pid=9199 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 175.309883][ T29] audit: type=1400 audit(1734791320.523:36714): avc: denied { create } for pid=9203 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.330347][ T29] audit: type=1404 audit(1734791320.523:36715): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 175.589098][ T9216] xt_CT: No such helper "netbios-ns" [ 175.654367][ T9221] rdma_op ffff88813d586980 conn xmit_rdma 0000000000000000 [ 175.752536][ T9240] SELinux: security_context_str_to_sid () failed with errno=-22 [ 175.955919][ T9258] rdma_op ffff88811ceed980 conn xmit_rdma 0000000000000000 [ 176.012444][ T9263] veth1_to_batadv: entered promiscuous mode [ 176.024185][ T9263] macsec1: entered promiscuous mode [ 176.426994][ T9287] rdma_op ffff88811ceedd80 conn xmit_rdma 0000000000000000 [ 176.639252][ T9300] loop0: detected capacity change from 0 to 1024 [ 176.664660][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.673157][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.749391][ T9300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 176.771025][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.854880][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.892148][ T9312] rdma_op ffff88813d584580 conn xmit_rdma 0000000000000000 [ 176.986060][ T9320] tmpfs: Bad value for 'mpol' [ 177.243359][ T9340] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.481420][ T9338] rdma_op ffff88811ceed980 conn xmit_rdma 0000000000000000 [ 177.922925][ T9436] dvmrp1: entered allmulticast mode [ 178.077312][ T9461] __nla_validate_parse: 6 callbacks suppressed [ 178.077329][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 178.215097][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 178.356347][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 178.399482][ T9489] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 178.442389][ T9493] loop2: detected capacity change from 0 to 1764 [ 178.540274][ T9498] rdma_op ffff88811ceed180 conn xmit_rdma 0000000000000000 [ 178.749459][ T9526] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1808'. [ 179.006500][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1820'. [ 179.023528][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1820'. [ 179.097534][ T9560] tmpfs: Bad value for 'mpol' [ 179.239472][ T9574] loop3: detected capacity change from 0 to 512 [ 179.258340][ T9574] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.266378][ T9574] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1830: Failed to acquire dquot type 1 [ 179.278749][ T9574] EXT4-fs (loop3): 1 truncate cleaned up [ 179.284816][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.300395][ T9574] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 179.331720][ T9581] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1833'. [ 179.643605][ T9606] rdma_op ffff88811ceee980 conn xmit_rdma 0000000000000000 [ 179.700616][ T9608] loop2: detected capacity change from 0 to 512 [ 179.728703][ T9608] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 179.745615][ T9608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 179.753736][ T9608] System zones: 1-12 [ 179.757832][ T9608] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.764869][ T9608] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1846: bg 0: block 361: padding at end of block bitmap is not set [ 179.779748][ T9608] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 179.788699][ T9608] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1846: attempt to clear invalid blocks 33619980 len 1 [ 179.804309][ T9608] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1846: invalid indirect mapped block 1811939328 (level 0) [ 179.810396][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 179.830257][ T9623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.839276][ T9608] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1846: invalid indirect mapped block 2 (level 2) [ 179.868328][ T9620] erspan0: left allmulticast mode [ 179.873539][ T9620] erspan0: left promiscuous mode [ 179.878704][ T9620] bridge0: port 2(erspan0) entered disabled state [ 179.885792][ T9608] EXT4-fs (loop2): 1 truncate cleaned up [ 179.894449][ T9620] veth0_to_bond: left allmulticast mode [ 179.900142][ T9620] veth0_to_bond: left promiscuous mode [ 179.905878][ T9620] bridge0: port 1(veth0_to_bond) entered disabled state [ 179.916084][ T9608] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 179.921036][ T9631] rdma_op ffff88811ceec580 conn xmit_rdma 0000000000000000 [ 179.959336][ T9637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1861'. [ 179.968852][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 180.014712][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.023244][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.114175][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 180.114191][ T29] audit: type=1404 audit(1734791325.413:37825): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 180.135685][ T29] audit: type=1404 audit(1734791325.423:37826): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 180.150752][ T29] audit: type=1400 audit(1734791325.423:37827): avc: denied { prog_load } for pid=9649 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.169962][ T29] audit: type=1400 audit(1734791325.423:37828): avc: denied { bpf } for pid=9649 comm="syz.3.1867" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.190589][ T29] audit: type=1400 audit(1734791325.423:37829): avc: denied { perfmon } for pid=9649 comm="syz.3.1867" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.211804][ T29] audit: type=1400 audit(1734791325.423:37830): avc: denied { prog_run } for pid=9649 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.230891][ T29] audit: type=1400 audit(1734791325.423:37831): avc: denied { create } for pid=9649 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.250698][ T29] audit: type=1400 audit(1734791325.423:37832): avc: denied { ioctl } for pid=9649 comm="syz.3.1867" path="socket:[26830]" dev="sockfs" ino=26830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.275744][ T29] audit: type=1400 audit(1734791325.423:37833): avc: denied { module_request } for pid=9649 comm="syz.3.1867" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.298713][ T29] audit: type=1400 audit(1734791325.433:37834): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.525911][ T9686] netlink: 'syz.4.1879': attribute type 2 has an invalid length. [ 180.533760][ T9686] netlink: 'syz.4.1879': attribute type 11 has an invalid length. [ 180.692495][ T9704] tmpfs: Bad value for 'mpol' [ 180.791079][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.799532][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.877700][ T9713] loop3: detected capacity change from 0 to 1024 [ 181.312803][ T9759] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.321178][ T9759] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.329483][ T9759] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.337704][ T9759] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.379103][ T9762] rdma_op ffff8881021c0980 conn xmit_rdma 0000000000000000 [ 181.421396][ T9768] netlink: 'syz.3.1915': attribute type 2 has an invalid length. [ 181.433112][ T9772] program syz.4.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.542878][ T9782] loop0: detected capacity change from 0 to 512 [ 181.552609][ T9786] Driver unsupported XDP return value 0 on prog (id 1557) dev N/A, expect packet loss! [ 181.567272][ T9782] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.581437][ T9782] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1921: Failed to acquire dquot type 1 [ 181.594685][ T9782] EXT4-fs (loop0): 1 truncate cleaned up [ 181.613707][ T9782] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 181.757948][ T9805] netlink: 'syz.2.1931': attribute type 2 has an invalid length. [ 181.765748][ T9805] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 182.018954][ T9841] loop0: detected capacity change from 0 to 1024 [ 182.029875][ T9841] EXT4-fs: Ignoring removed orlov option [ 182.035684][ T9841] EXT4-fs: Ignoring removed oldalloc option [ 182.046092][ T9841] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.057113][ T9841] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 182.074926][ T9841] EXT4-fs (loop0): invalid journal inode [ 182.080700][ T9841] EXT4-fs (loop0): can't get journal size [ 182.172013][ T9861] rdma_op ffff8881021c0180 conn xmit_rdma 0000000000000000 [ 182.223981][ T9859] loop2: detected capacity change from 0 to 1024 [ 182.259781][ T9859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 182.452934][ T9907] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 182.472204][ T9909] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 182.519285][ T9907] geneve1: entered promiscuous mode [ 182.529197][ T9907] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 182.787570][ T9935] rdma_op ffff88811ab61180 conn xmit_rdma 0000000000000000 [ 183.191913][ T9983] loop0: detected capacity change from 0 to 512 [ 183.202601][ T9983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.209408][ T9983] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2008: Failed to acquire dquot type 1 [ 183.222048][ T9983] EXT4-fs (loop0): 1 truncate cleaned up [ 183.313149][ T9992] rdma_op ffff88813d41c980 conn xmit_rdma 0000000000000000 [ 183.332523][T10002] __nla_validate_parse: 18 callbacks suppressed [ 183.332540][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2014'. [ 183.347920][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2014'. [ 183.374434][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2016'. [ 183.501757][T10025] bridge0: entered promiscuous mode [ 183.507115][T10025] bridge0: entered allmulticast mode [ 183.628359][T10036] rdma_op ffff8881021c1980 conn xmit_rdma 0000000000000000 [ 183.655183][T10040] (unnamed net_device) (uninitialized): option use_carrier: invalid value (13) [ 183.694573][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.703249][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.046777][T10058] loop2: detected capacity change from 0 to 512 [ 184.057054][T10058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 184.063923][T10058] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2038: Failed to acquire dquot type 1 [ 184.075908][T10058] EXT4-fs (loop2): 1 truncate cleaned up [ 184.085423][T10058] validate_nla: 2 callbacks suppressed [ 184.085437][T10058] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 184.191441][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2042'. [ 184.403869][T10096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 184.434026][T10100] loop0: detected capacity change from 0 to 1024 [ 184.458857][T10100] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 184.488878][T10109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.528392][T10115] netlink: 'syz.4.2063': attribute type 5 has an invalid length. [ 184.536324][T10115] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2063'. [ 184.601548][T10129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'. [ 184.637923][T10133] netlink: 'syz.1.2072': attribute type 1 has an invalid length. [ 184.664850][T10128] rdma_op ffff8881198acd80 conn xmit_rdma 0000000000000000 [ 184.710111][T10138] loop0: detected capacity change from 0 to 1024 [ 184.718238][T10140] rdma_op ffff8881198add80 conn xmit_rdma 0000000000000000 [ 184.751035][T10138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 184.843518][T10156] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2082'. [ 184.878044][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.886694][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.108759][T10191] loop3: detected capacity change from 0 to 512 [ 185.126945][ T29] kauditd_printk_skb: 1245 callbacks suppressed [ 185.126962][ T29] audit: type=1400 audit(1734791330.453:39074): avc: denied { mounton } for pid=10190 comm="syz.3.2097" path="/409/file0" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.134415][T10191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 185.177739][ T29] audit: type=1400 audit(1734791330.493:39075): avc: denied { sys_module } for pid=10192 comm="syz.4.2099" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 185.199198][ T29] audit: type=1400 audit(1734791330.503:39076): avc: denied { create } for pid=10198 comm="syz.2.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.201376][T10191] Quota error (device loop3): do_check_range: Getting block 1540 out of range 1-5 [ 185.218971][ T29] audit: type=1400 audit(1734791330.503:39077): avc: denied { write } for pid=10198 comm="syz.2.2100" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.219035][ T29] audit: type=1326 audit(1734791330.503:39078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 185.228270][T10191] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 185.248617][ T29] audit: type=1326 audit(1734791330.503:39079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 185.248653][ T29] audit: type=1326 audit(1734791330.503:39080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 185.272352][T10191] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2097: Failed to acquire dquot type 1 [ 185.281612][ T29] audit: type=1326 audit(1734791330.503:39081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 185.315533][T10201] rdma_op ffff8881198ac980 conn xmit_rdma 0000000000000000 [ 185.332115][T10191] EXT4-fs (loop3): 1 truncate cleaned up [ 185.414822][T10191] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 185.427914][T10212] rdma_op ffff88811ceec980 conn xmit_rdma 0000000000000000 [ 185.588267][T10240] rdma_op ffff8881021c0180 conn xmit_rdma 0000000000000000 [ 185.597398][T10236] rdma_op ffff8881021c0180 conn xmit_rdma 0000000000000000 [ 185.644936][T10244] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 185.677224][T10248] netlink: 696 bytes leftover after parsing attributes in process `syz.3.2124'. [ 185.716303][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.725308][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.916711][T10275] loop3: detected capacity change from 0 to 1024 [ 185.952744][T10275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 186.287909][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2147'. [ 186.442726][T10314] netlink: 'syz.3.2150': attribute type 21 has an invalid length. [ 186.913897][T10367] netlink: 'syz.2.2175': attribute type 32 has an invalid length. [ 187.162020][T10392] 9pnet_fd: Insufficient options for proto=fd [ 187.245762][T10402] loop2: detected capacity change from 0 to 512 [ 187.274567][T10402] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.284822][T10402] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2190: Failed to acquire dquot type 1 [ 187.336096][T10402] EXT4-fs (loop2): 1 truncate cleaned up [ 187.355859][T10402] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 187.433222][T10422] veth5: entered promiscuous mode [ 187.438309][T10422] veth5: entered allmulticast mode [ 187.573343][T10446] 9pnet_fd: Insufficient options for proto=fd [ 187.624017][T10448] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 187.705973][T10466] rds_sendmsg: 1 callbacks suppressed [ 187.705991][T10466] rdma_op ffff8881198ad980 conn xmit_rdma 0000000000000000 [ 187.797797][T10470] loop0: detected capacity change from 0 to 1024 [ 187.827903][T10490] loop2: detected capacity change from 0 to 512 [ 187.842479][T10470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 187.853556][T10490] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.860256][T10490] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2227: Failed to acquire dquot type 1 [ 187.872970][T10490] EXT4-fs (loop2): 1 truncate cleaned up [ 187.891540][T10490] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 188.225020][T10547] loop2: detected capacity change from 0 to 256 [ 188.234576][T10549] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 188.244291][T10547] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.293422][T10547] FAT-fs (loop2): Directory bread(block 64) failed [ 188.309870][T10547] FAT-fs (loop2): Directory bread(block 65) failed [ 188.326523][T10547] FAT-fs (loop2): Directory bread(block 66) failed [ 188.341094][T10547] FAT-fs (loop2): Directory bread(block 67) failed [ 188.349454][T10547] FAT-fs (loop2): Directory bread(block 68) failed [ 188.357077][T10547] FAT-fs (loop2): Directory bread(block 69) failed [ 188.363823][T10547] FAT-fs (loop2): Directory bread(block 70) failed [ 188.370450][T10547] FAT-fs (loop2): Directory bread(block 71) failed [ 188.377328][T10547] FAT-fs (loop2): Directory bread(block 72) failed [ 188.384178][T10547] FAT-fs (loop2): Directory bread(block 73) failed [ 188.433587][T10558] __nla_validate_parse: 7 callbacks suppressed [ 188.433608][T10558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2257'. [ 188.503808][T10565] loop2: detected capacity change from 0 to 1024 [ 188.519754][T10568] loop0: detected capacity change from 0 to 512 [ 188.555042][T10573] rdma_op ffff8881160abd80 conn xmit_rdma 0000000000000000 [ 188.574170][T10565] EXT4-fs mount: 27 callbacks suppressed [ 188.574205][T10565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.598316][T10565] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.613839][T10565] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2262: corrupted xattr block 128: overlapping e_value [ 188.629009][T10568] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2261: Failed to acquire dquot type 1 [ 188.641277][T10568] EXT4-fs (loop0): 1 truncate cleaned up [ 188.649277][T10568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.656517][T10565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 188.662124][T10568] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.681068][T10565] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2262: corrupted xattr block 128: overlapping e_value [ 188.681296][T10565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 188.705702][T10565] EXT4-fs error (device loop2): ext4_xattr_block_find:1877: inode #15: comm syz.2.2262: corrupted xattr block 128: overlapping e_value [ 188.737718][T10582] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 188.760657][T10584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2268'. [ 188.779855][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.826072][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.855889][T10596] loop3: detected capacity change from 0 to 512 [ 188.896888][T10596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.919985][T10596] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.931954][T10596] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.144557][T10636] netlink: 'syz.1.2290': attribute type 5 has an invalid length. [ 189.296594][T10652] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 189.406127][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2303'. [ 189.459559][T10671] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2306'. [ 189.528692][T10679] SET target dimension over the limit! [ 189.644926][T10693] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 189.905562][T10732] netlink: 'syz.2.2334': attribute type 21 has an invalid length. [ 189.980158][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.988785][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.995537][T10752] rdma_op ffff8881198ae180 conn xmit_rdma 0000000000000000 [ 190.015357][T10754] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 190.146948][ T29] kauditd_printk_skb: 1178 callbacks suppressed [ 190.146964][ T29] audit: type=1400 audit(1734791335.473:40254): avc: denied { create } for pid=10765 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.176746][ T29] audit: type=1400 audit(1734791335.473:40255): avc: denied { map_create } for pid=10749 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.196173][ T29] audit: type=1400 audit(1734791335.473:40256): avc: denied { map_read map_write } for pid=10749 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.216315][ T29] audit: type=1400 audit(1734791335.503:40257): avc: denied { write } for pid=10765 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.238095][ T29] audit: type=1400 audit(1734791335.533:40258): avc: denied { create } for pid=10770 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.259309][ T29] audit: type=1400 audit(1734791335.533:40259): avc: denied { write } for pid=10770 comm="syz.1.2351" path="socket:[30845]" dev="sockfs" ino=30845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.284551][ T29] audit: type=1400 audit(1734791335.533:40260): avc: denied { nlmsg_write } for pid=10770 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.308043][ T29] audit: type=1400 audit(1734791335.533:40261): avc: denied { read } for pid=10749 comm="syz.3.2344" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.332814][ T29] audit: type=1400 audit(1734791335.533:40262): avc: denied { open } for pid=10749 comm="syz.3.2344" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.358132][ T29] audit: type=1400 audit(1734791335.553:40263): avc: denied { read } for pid=10749 comm="syz.3.2344" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.549909][T10786] rdma_op ffff888128a93d80 conn xmit_rdma 0000000000000000 [ 190.705820][T10795] netlink: 'syz.2.2361': attribute type 21 has an invalid length. [ 190.713732][T10795] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2361'. [ 190.981468][T10819] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 191.047246][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2377'. [ 191.066149][T10836] ipt_ECN: cannot use operation on non-tcp rule [ 191.184689][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2391'. [ 191.232161][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'. [ 191.345182][T10886] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2404'. [ 191.369775][T10886] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.388544][T10888] »»»»»»: renamed from lo [ 191.485274][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2413'. [ 191.502233][T10910] rdma_op ffff8881198af180 conn xmit_rdma 0000000000000000 [ 191.578569][T10916] rdma_op ffff8881198ac180 conn xmit_rdma 0000000000000000 [ 191.620226][T10927] rdma_op ffff8881198af180 conn xmit_rdma 0000000000000000 [ 191.678908][T10943] loop2: detected capacity change from 0 to 1024 [ 191.711361][T10943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 191.741987][T10943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.771755][T10943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.972978][T10992] rdma_op ffff888128a90980 conn xmit_rdma 0000000000000000 [ 192.084346][T11006] rdma_op ffff888128a90580 conn xmit_rdma 0000000000000000 [ 192.093387][T10996] loop3: detected capacity change from 0 to 1024 [ 192.123607][T11013] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 192.135462][T10996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 192.157818][T10996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.204633][T11019] loop2: detected capacity change from 0 to 1024 [ 192.239739][T11030] rdma_op ffff8881198ad980 conn xmit_rdma 0000000000000000 [ 192.243828][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.261406][T11019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 192.270387][T11019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.359452][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.555512][T11074] 9p: Unknown access argument ÿÿÿÿÿÿÿÿ: -22 [ 192.646738][T11088] erspan1: entered promiscuous mode [ 192.912148][T11140] sit0: entered promiscuous mode [ 192.917216][T11140] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 193.063160][T11150] loop3: detected capacity change from 0 to 1024 [ 193.112106][T11150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 193.123317][T11150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.234510][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.337583][T11176] rdma_op ffff8881198aed80 conn xmit_rdma 0000000000000000 [ 193.428901][T11189] loop3: detected capacity change from 0 to 512 [ 193.445683][T11189] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.452660][T11189] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2535: Failed to acquire dquot type 1 [ 193.464535][T11189] EXT4-fs (loop3): 1 truncate cleaned up [ 193.471525][T11189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.487731][T11189] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 193.508143][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.534794][T11198] »»»»»»: entered promiscuous mode [ 193.540199][T11198] bond0: (slave »»»»»»): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.616722][T11206] loop0: detected capacity change from 0 to 1024 [ 193.653326][T11206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 193.671534][T11206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.719742][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.828316][T11231] rdma_op ffff888128a93d80 conn xmit_rdma 0000000000000000 [ 193.864380][T11241] loop0: detected capacity change from 0 to 256 [ 193.886768][T11241] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 194.059883][T11271] __nla_validate_parse: 9 callbacks suppressed [ 194.059973][T11271] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.2573'. [ 194.149729][T11285] 9pnet_fd: Insufficient options for proto=fd [ 194.373655][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 194.382693][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 194.402527][T11326] »»»»»»: left promiscuous mode [ 194.407590][T11326] sit0: left promiscuous mode [ 194.412481][T11326] 1ªX¹¦À: left allmulticast mode [ 194.420618][T11326] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.429080][T11326] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.437626][T11326] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.446104][T11326] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.466146][T11326] veth5: left promiscuous mode [ 194.470989][T11326] veth5: left allmulticast mode [ 194.477245][T11326] erspan1: left promiscuous mode [ 194.486360][T11334] validate_nla: 1 callbacks suppressed [ 194.486390][T11334] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 194.519229][T11336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2602'. [ 194.566909][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2604'. [ 194.577045][T11348] loop0: detected capacity change from 0 to 1024 [ 194.595387][T11351] 9pnet_fd: Insufficient options for proto=fd [ 194.598187][T11348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.631504][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.641357][T11354] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 194.660251][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2613'. [ 194.667492][T11360] vhci_hcd: invalid port number 96 [ 194.674399][T11360] vhci_hcd: default hub control req: c306 v0079 i0060 l0 [ 194.748178][T11375] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2620'. [ 194.847563][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2629'. [ 194.882588][T11401] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 194.890362][T11401] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 194.890828][T11398] rdma_op ffff888128a91d80 conn xmit_rdma 0000000000000000 [ 194.898411][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 195.011634][T11416] rdma_op ffff8881198ad980 conn xmit_rdma 0000000000000000 [ 195.017494][T11421] netlink: 'syz.3.2641': attribute type 22 has an invalid length. [ 195.026778][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 195.096151][T11433] rdma_op ffff8881198aed80 conn xmit_rdma 0000000000000000 [ 195.151006][ T29] kauditd_printk_skb: 1672 callbacks suppressed [ 195.151023][ T29] audit: type=1400 audit(1734791340.473:41934): avc: denied { create } for pid=11443 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.187529][ T29] audit: type=1400 audit(1734791340.513:41935): avc: denied { write } for pid=11443 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.207854][ T29] audit: type=1400 audit(1734791340.513:41936): avc: denied { nlmsg_write } for pid=11443 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.228767][ T29] audit: type=1400 audit(1734791340.513:41937): avc: denied { create } for pid=11446 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.296022][T11462] netlink: 'syz.3.2659': attribute type 10 has an invalid length. [ 195.310238][ T29] audit: type=1400 audit(1734791340.513:41938): avc: denied { write } for pid=11446 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.331134][ T29] audit: type=1400 audit(1734791340.543:41939): avc: denied { create } for pid=11450 comm="syz.1.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.351030][ T29] audit: type=1400 audit(1734791340.543:41940): avc: denied { connect } for pid=11450 comm="syz.1.2656" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.351062][ T29] audit: type=1400 audit(1734791340.543:41941): avc: denied { write } for pid=11450 comm="syz.1.2656" laddr=172.20.20.170 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.351092][ T29] audit: type=1400 audit(1734791340.583:41942): avc: denied { create } for pid=11453 comm="syz.4.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.351168][ T29] audit: type=1400 audit(1734791340.583:41943): avc: denied { write } for pid=11453 comm="syz.4.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.374715][T11462] macvlan1: entered promiscuous mode [ 195.374737][T11462] macvlan1: entered allmulticast mode [ 195.377439][T11462] veth1_vlan: entered allmulticast mode [ 195.378858][T11462] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 195.498854][T11479] 9pnet_fd: Insufficient options for proto=fd [ 195.508306][T11472] rdma_op ffff888128a90980 conn xmit_rdma 0000000000000000 [ 195.931940][T11559] loop3: detected capacity change from 0 to 164 [ 195.948367][T11556] rdma_op ffff888128a91d80 conn xmit_rdma 0000000000000000 [ 196.024451][T11570] bond1: entered promiscuous mode [ 196.029666][T11570] bond1: entered allmulticast mode [ 196.040132][T11570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.058254][T11570] bond1 (unregistering): Released all slaves [ 196.164995][T11591] rdma_op ffff8881198ad580 conn xmit_rdma 0000000000000000 [ 196.262103][T11609] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 196.338892][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.347335][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.647424][T11647] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 196.655279][T11647] netlink: 'syz.1.2740': attribute type 2 has an invalid length. [ 196.750513][T11659] 9pnet_fd: Insufficient options for proto=fd [ 196.851974][T11666] rdma_op ffff888128a93980 conn xmit_rdma 0000000000000000 [ 196.910120][T11672] loop0: detected capacity change from 0 to 512 [ 196.938126][T11672] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.953429][T11672] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2751: Failed to acquire dquot type 1 [ 196.971475][T11672] EXT4-fs (loop0): 1 truncate cleaned up [ 197.013558][T11672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.044744][T11672] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 197.072689][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.106164][T11693] rdma_op ffff888128a91d80 conn xmit_rdma 0000000000000000 [ 197.158518][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.167054][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.172944][T11707] netlink: 'syz.2.2769': attribute type 10 has an invalid length. [ 197.303269][T11733] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 197.347069][T11737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.355595][T11737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.546383][T11765] loop3: detected capacity change from 0 to 1024 [ 197.573995][T11765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 197.598015][T11765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.662696][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.736742][T11783] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 197.961842][T11809] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 198.031247][T11817] 9pnet_fd: Insufficient options for proto=fd [ 198.121702][T11829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.406121][T11864] rds_sendmsg: 2 callbacks suppressed [ 198.406140][T11864] rdma_op ffff8881198ad180 conn xmit_rdma 0000000000000000 [ 198.747373][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.755940][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.780559][T11931] rdma_op ffff8881021c1980 conn xmit_rdma 0000000000000000 [ 199.157208][T11962] __nla_validate_parse: 15 callbacks suppressed [ 199.157222][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 199.172843][T11962] »»»»»» speed is unknown, defaulting to 1000 [ 199.243145][T11968] rdma_op ffff888117ae4980 conn xmit_rdma 0000000000000000 [ 199.315329][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 199.317385][T11980] loop3: detected capacity change from 0 to 512 [ 199.332899][T11979] rdma_op ffff888117ae7180 conn xmit_rdma 0000000000000000 [ 199.355389][T11980] EXT4-fs (loop3): orphan cleanup on readonly fs [ 199.365473][T11980] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2884: Failed to acquire dquot type 1 [ 199.380221][T11980] EXT4-fs (loop3): 1 truncate cleaned up [ 199.395580][T11980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.437335][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.474766][T12002] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2895'. [ 199.484127][T12002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2895'. [ 199.624216][T12027] rdma_op ffff888117ae7180 conn xmit_rdma 0000000000000000 [ 199.685944][T12032] loop2: detected capacity change from 0 to 1024 [ 199.733086][T12032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 199.748250][T12044] xfrm2: entered allmulticast mode [ 199.758852][T12032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.809661][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.860660][T12063] loop2: detected capacity change from 0 to 128 [ 199.936586][T12070] IPv6: Can't replace route, no match found [ 200.057161][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.065661][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.174785][ T29] kauditd_printk_skb: 1864 callbacks suppressed [ 200.174803][ T29] audit: type=1400 audit(1734791345.503:43804): avc: denied { read } for pid=12088 comm="syz.2.2931" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.224376][ T29] audit: type=1400 audit(1734791345.513:43805): avc: denied { mounton } for pid=12097 comm="syz.1.2933" path="/596" dev="tmpfs" ino=3190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.247494][ T29] audit: type=1400 audit(1734791345.533:43806): avc: denied { open } for pid=12088 comm="syz.2.2931" path="net:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.271344][ T29] audit: type=1400 audit(1734791345.533:43807): avc: denied { create } for pid=12088 comm="syz.2.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.291795][ T29] audit: type=1400 audit(1734791345.533:43808): avc: denied { bind } for pid=12088 comm="syz.2.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.312095][ T29] audit: type=1400 audit(1734791345.533:43809): avc: denied { setopt } for pid=12088 comm="syz.2.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.321581][T12108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.332121][ T29] audit: type=1400 audit(1734791345.533:43810): avc: denied { write } for pid=12088 comm="syz.2.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.338644][T12108] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 200.358457][ T29] audit: type=1400 audit(1734791345.533:43811): avc: denied { write } for pid=12088 comm="syz.2.2931" path="socket:[35918]" dev="sockfs" ino=35918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.566670][T12125] loop0: detected capacity change from 0 to 512 [ 200.590573][T12125] EXT4-fs (loop0): orphan cleanup on readonly fs [ 200.597169][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2947'. [ 200.611207][T12125] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2946: Failed to acquire dquot type 1 [ 200.622953][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2947'. [ 200.632897][T12125] EXT4-fs (loop0): 1 truncate cleaned up [ 200.639830][T12125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.657012][T12125] validate_nla: 10 callbacks suppressed [ 200.657041][T12125] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 200.689573][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.032910][T12174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2968'. [ 201.056437][T12178] netlink: 'syz.2.2969': attribute type 21 has an invalid length. [ 201.064443][T12178] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2969'. [ 201.084107][T12178] netlink: 'syz.2.2969': attribute type 4 has an invalid length. [ 201.091928][T12178] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2969'. [ 201.133347][T12182] netlink: 'syz.4.2972': attribute type 1 has an invalid length. [ 201.188114][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 201.339874][T12212] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 201.354456][T12210] netlink: 'syz.1.2985': attribute type 12 has an invalid length. [ 201.380645][T12215] loop3: detected capacity change from 0 to 1024 [ 201.441206][T12220] SELinux: security_context_str_to_sid (ñ) failed with errno=-22 [ 201.450412][T12215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 201.478135][T12215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.598424][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.034351][T12303] loop2: detected capacity change from 0 to 1024 [ 202.097725][T12320] netlink: 'syz.4.3033': attribute type 21 has an invalid length. [ 202.164142][T12303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 202.182236][T12303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.297879][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.351814][T12342] rdma_op ffff888117b6c580 conn xmit_rdma 0000000000000000 [ 202.898806][T12427] loop0: detected capacity change from 0 to 512 [ 202.923778][T12427] EXT4-fs (loop0): orphan cleanup on readonly fs [ 202.939014][T12427] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.3081: Failed to acquire dquot type 1 [ 202.959756][T12427] EXT4-fs (loop0): 1 truncate cleaned up [ 202.983723][T12427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.011329][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.040231][T12439] rdma_op ffff888117ae7d80 conn xmit_rdma 0000000000000000 [ 203.156635][T12448] netlink: 'syz.0.3089': attribute type 22 has an invalid length. [ 203.286350][T12463] deleting an unspecified loop device is not supported. [ 203.294254][T12462] netlink: 'syz.4.3095': attribute type 12 has an invalid length. [ 203.402542][T12472] rdma_op ffff888117ae7d80 conn xmit_rdma 0000000000000000 [ 203.490908][T12484] netlink: 'syz.4.3104': attribute type 21 has an invalid length. [ 203.654859][T12504] syz.1.3113: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 203.669290][T12502] rdma_op ffff888117b6c580 conn xmit_rdma 0000000000000000 [ 203.669688][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz.1.3113 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 203.687588][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 203.697793][T12504] Call Trace: [ 203.701082][T12504] [ 203.704033][T12504] dump_stack_lvl+0xf2/0x150 [ 203.708743][T12504] dump_stack+0x15/0x1a [ 203.713037][T12504] warn_alloc+0x145/0x1b0 [ 203.717410][T12504] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 203.723382][T12504] ? common_lsm_audit+0x920/0x1010 [ 203.728520][T12504] __vmalloc_node_range_noprof+0xaa/0xe80 [ 203.734313][T12504] ? from_kuid+0xf0/0x340 [ 203.738676][T12504] ? __rcu_read_unlock+0x4e/0x70 [ 203.743735][T12504] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 203.749826][T12504] ? __rcu_read_unlock+0x4e/0x70 [ 203.754867][T12504] ? should_fail_ex+0x31/0x230 [ 203.759730][T12504] ? xskq_create+0x36/0xd0 [ 203.764293][T12504] ? should_failslab+0x8f/0xb0 [ 203.764331][T12504] vmalloc_user_noprof+0x59/0x70 [ 203.764365][T12504] ? xskq_create+0x79/0xd0 [ 203.764390][T12504] xskq_create+0x79/0xd0 [ 203.782836][T12504] xsk_init_queue+0x82/0xd0 [ 203.787433][T12504] xsk_setsockopt+0x388/0x520 [ 203.792417][T12504] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.797739][T12504] __sys_setsockopt+0x187/0x200 [ 203.802610][T12504] __x64_sys_setsockopt+0x66/0x80 [ 203.807730][T12504] x64_sys_call+0x282e/0x2dc0 [ 203.812455][T12504] do_syscall_64+0xc9/0x1c0 [ 203.816984][T12504] ? clear_bhb_loop+0x55/0xb0 [ 203.821678][T12504] ? clear_bhb_loop+0x55/0xb0 [ 203.826376][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.832325][T12504] RIP: 0033:0x7fa4495a5d29 [ 203.836766][T12504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.856461][T12504] RSP: 002b:00007fa447c11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.864920][T12504] RAX: ffffffffffffffda RBX: 00007fa449795fa0 RCX: 00007fa4495a5d29 [ 203.872946][T12504] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 203.880958][T12504] RBP: 00007fa449621aa8 R08: 0000000000000004 R09: 0000000000000000 [ 203.888950][T12504] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.896996][T12504] R13: 0000000000000000 R14: 00007fa449795fa0 R15: 00007ffe9f737b28 [ 203.904999][T12504] [ 203.908101][T12504] Mem-Info: [ 203.911396][T12504] active_anon:41077 inactive_anon:1 isolated_anon:0 [ 203.911396][T12504] active_file:9352 inactive_file:14548 isolated_file:0 [ 203.911396][T12504] unevictable:0 dirty:105 writeback:0 [ 203.911396][T12504] slab_reclaimable:3184 slab_unreclaimable:18387 [ 203.911396][T12504] mapped:28752 shmem:33869 pagetables:1021 [ 203.911396][T12504] sec_pagetables:0 bounce:0 [ 203.911396][T12504] kernel_misc_reclaimable:0 [ 203.911396][T12504] free:1813263 free_pcp:20033 free_cma:0 [ 203.956669][T12504] Node 0 active_anon:164308kB inactive_anon:4kB active_file:37408kB inactive_file:58192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115008kB dirty:420kB writeback:0kB shmem:135476kB writeback_tmp:0kB kernel_stack:4000kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no [ 203.984828][T12504] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.011707][T12504] lowmem_reserve[]: 0 2866 7844 0 [ 204.016824][T12504] Node 0 DMA32 free:2950284kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 204.031341][T12526] rdma_op ffff888101071980 conn xmit_rdma 0000000000000000 [ 204.045587][T12504] lowmem_reserve[]: 0 0 4978 0 [ 204.045674][T12504] Node 0 Normal free:4279196kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:164192kB inactive_anon:4kB active_file:37408kB inactive_file:58192kB unevictable:0kB writepending:420kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:76452kB local_pcp:5784kB free_cma:0kB [ 204.087960][T12504] lowmem_reserve[]: 0 0 0 0 [ 204.092572][T12504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.105336][T12504] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950284kB [ 204.121496][T12504] Node 0 Normal: 21*4kB (UE) 581*8kB (UME) 310*16kB (UME) 210*32kB (UME) 134*64kB (UE) 84*128kB (UME) 62*256kB (UE) 65*512kB (UME) 100*1024kB (UME) 70*2048kB (U) 964*4096kB (UM) = 4279196kB [ 204.140349][T12504] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 204.149743][T12504] 57767 total pagecache pages [ 204.154443][T12504] 10 pages in swap cache [ 204.158680][T12504] Free swap = 122280kB [ 204.162863][T12504] Total swap = 124996kB [ 204.167034][T12504] 2097051 pages RAM [ 204.170902][T12504] 0 pages HighMem/MovableOnly [ 204.175584][T12504] 80180 pages reserved [ 204.206636][T12530] __nla_validate_parse: 11 callbacks suppressed [ 204.206654][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3122'. [ 204.301763][T12544] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3128'. [ 204.340727][T12552] loop0: detected capacity change from 0 to 256 [ 204.361692][T12552] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.373113][T12549] rdma_op ffff888117ae7d80 conn xmit_rdma 0000000000000000 [ 204.553641][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3146'. [ 204.562926][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3146'. [ 204.583320][T12591] sctp: [Deprecated]: syz.1.3145 (pid 12591) Use of int in maxseg socket option. [ 204.583320][T12591] Use struct sctp_assoc_value instead [ 204.657906][T12607] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709550593) [ 204.669158][T12607] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 204.703527][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.712043][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.030022][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3163'. [ 205.039181][T12629] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.191849][ T29] kauditd_printk_skb: 1183 callbacks suppressed [ 205.191942][ T29] audit: type=1400 audit(1734791350.523:44990): avc: denied { create } for pid=12638 comm="syz.3.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.225097][ T29] audit: type=1400 audit(1734791350.553:44991): avc: denied { write } for pid=12638 comm="syz.3.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.249983][ T29] audit: type=1400 audit(1734791350.553:44992): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.273387][ T29] audit: type=1400 audit(1734791350.553:44993): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.296895][ T29] audit: type=1400 audit(1734791350.553:44994): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.328229][ T29] audit: type=1400 audit(1734791350.633:44995): avc: denied { create } for pid=12641 comm="syz.2.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.348113][ T29] audit: type=1400 audit(1734791350.633:44996): avc: denied { setopt } for pid=12641 comm="syz.2.3170" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.368614][ T29] audit: type=1400 audit(1734791350.633:44997): avc: denied { read write } for pid=12645 comm="syz.1.3171" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.372098][T12649] usb usb9: usbfs: process 12649 (syz.0.3168) did not claim interface 0 before use [ 205.392887][ T29] audit: type=1400 audit(1734791350.633:44998): avc: denied { open } for pid=12645 comm="syz.1.3171" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.426699][ T29] audit: type=1400 audit(1734791350.653:44999): avc: denied { ioctl } for pid=12645 comm="syz.1.3171" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.433832][T12656] netlink: 700 bytes leftover after parsing attributes in process `syz.1.3175'. [ 205.527631][T12665] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3178'. [ 205.549710][T12670] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.632733][T12680] rdma_op ffff888117ae4980 conn xmit_rdma 0000000000000000 [ 205.754904][T12704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3196'. [ 205.764070][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'. [ 205.773122][T12704] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3196'. [ 205.782184][T12704] validate_nla: 1 callbacks suppressed [ 205.782197][T12704] netlink: 'syz.1.3196': attribute type 2 has an invalid length. [ 205.896563][T12716] loop2: detected capacity change from 0 to 1024 [ 206.050996][T12716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 206.076288][T12716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.126267][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.284841][T12767] xfrm1: entered allmulticast mode [ 206.564793][T12794] rdma_op ffff888117ae5580 conn xmit_rdma 0000000000000000 [ 206.667050][T12809] netlink: 'syz.1.3236': attribute type 3 has an invalid length. [ 206.785131][T12821] rdma_op ffff888117ae7d80 conn xmit_rdma 0000000000000000 [ 206.909004][T12843] loop2: detected capacity change from 0 to 2048 [ 206.953051][T12843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.008030][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.050029][T12864] rdma_op ffff888117ae6980 conn xmit_rdma 0000000000000000 [ 207.164504][T12879] usb usb8: usbfs: process 12879 (syz.3.3265) did not claim interface 0 before use [ 207.472950][T12915] rdma_op ffff88811d234580 conn xmit_rdma 0000000000000000 [ 207.730514][T12948] netlink: 'syz.4.3296': attribute type 26 has an invalid length. [ 207.750780][T12944] rdma_op ffff88811d235180 conn xmit_rdma 0000000000000000 [ 207.991786][T12989] SET target dimension over the limit! [ 208.063773][T13001] rdma_op ffff88811d237580 conn xmit_rdma 0000000000000000 [ 208.437711][T13051] netlink: 'syz.1.3343': attribute type 39 has an invalid length. [ 208.638299][T13085] loop2: detected capacity change from 0 to 2048 [ 208.674917][T13085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.790024][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.968544][T13150] rds_sendmsg: 3 callbacks suppressed [ 208.968597][T13150] rdma_op ffff888117ae4d80 conn xmit_rdma 0000000000000000 [ 209.198623][T13188] rdma_op ffff888117ae4d80 conn xmit_rdma 0000000000000000 [ 209.213414][T13193] rdma_op ffff88811d237180 conn xmit_rdma 0000000000000000 [ 209.364846][T13214] loop2: detected capacity change from 0 to 1024 [ 209.414572][T13214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 209.423152][T13214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.448167][T13230] rdma_op ffff888117ae6980 conn xmit_rdma 0000000000000000 [ 209.485832][T13224] rdma_op ffff88811d235180 conn xmit_rdma 0000000000000000 [ 209.585744][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.791488][T13261] __nla_validate_parse: 10 callbacks suppressed [ 209.791509][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3432'. [ 209.807241][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3432'. [ 209.837620][T13267] loop3: detected capacity change from 0 to 164 [ 209.843713][T13264] netlink: 352 bytes leftover after parsing attributes in process `syz.4.3439'. [ 209.876683][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3443'. [ 210.152581][T13302] netlink: 352 bytes leftover after parsing attributes in process `syz.1.3457'. [ 210.226949][ T29] kauditd_printk_skb: 1731 callbacks suppressed [ 210.226966][ T29] audit: type=1326 audit(1734791355.553:46731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.275167][T13315] netlink: 'syz.3.3463': attribute type 33 has an invalid length. [ 210.280630][T13316] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 210.283032][T13315] netlink: 'syz.3.3463': attribute type 13 has an invalid length. [ 210.300029][ T29] audit: type=1326 audit(1734791355.593:46732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.300313][T13315] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3463'. [ 210.323776][ T29] audit: type=1326 audit(1734791355.593:46733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4495a4690 code=0x7ffc0000 [ 210.356503][ T29] audit: type=1326 audit(1734791355.593:46734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa4495a7557 code=0x7ffc0000 [ 210.380146][ T29] audit: type=1326 audit(1734791355.593:46735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.403756][ T29] audit: type=1326 audit(1734791355.593:46736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa4495a7557 code=0x7ffc0000 [ 210.427378][ T29] audit: type=1326 audit(1734791355.593:46737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4495a498a code=0x7ffc0000 [ 210.450872][ T29] audit: type=1326 audit(1734791355.593:46738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.474965][ T29] audit: type=1326 audit(1734791355.593:46739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.498835][ T29] audit: type=1326 audit(1734791355.593:46740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4495a5d29 code=0x7ffc0000 [ 210.504879][T13329] loop2: detected capacity change from 0 to 512 [ 210.534503][T13331] rdma_op ffff888117ae5580 conn xmit_rdma 0000000000000000 [ 210.542310][T13329] EXT4-fs (loop2): orphan cleanup on readonly fs [ 210.549042][T13329] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3470: Failed to acquire dquot type 1 [ 210.575154][T13329] EXT4-fs (loop2): 1 truncate cleaned up [ 210.591676][T13329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.601031][T13337] usb usb7: usbfs: process 13337 (syz.3.3471) did not claim interface 0 before use [ 210.615312][T13329] netlink: 352 bytes leftover after parsing attributes in process `syz.2.3470'. [ 210.701880][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.764913][T13362] loop0: detected capacity change from 0 to 164 [ 210.793208][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3486'. [ 210.802224][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 210.979000][T13391] rdma_op ffff888128a92580 conn xmit_rdma 0000000000000000 [ 211.119051][T13407] rdma_op ffff888128a92580 conn xmit_rdma 0000000000000000 [ 211.130870][T13411] devtmpfs: Too few inodes for current use [ 211.192444][T13417] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3510'. [ 211.274123][T13422] rdma_op ffff888128a92580 conn xmit_rdma 0000000000000000 [ 211.410839][T13431] loop0: detected capacity change from 0 to 1024 [ 211.444500][T13431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 211.454414][T13431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.487871][T13439] rdma_op ffff88811d235980 conn xmit_rdma 0000000000000000 [ 211.499409][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.601673][T13457] loop2: detected capacity change from 0 to 256 [ 211.618070][T13457] FAT-fs (loop2): bogus sectors per cluster 0 [ 211.624359][T13457] FAT-fs (loop2): Can't find a valid FAT filesystem [ 211.667279][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.674844][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.682322][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.689726][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.697223][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.704669][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.712270][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.719804][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.727248][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.734794][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.742229][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.749801][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.757319][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.764792][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.772380][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.779954][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.787472][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.795099][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.802705][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.810142][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.817747][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.825323][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.832741][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.840255][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.847741][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.855181][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.862625][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.870025][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.877483][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.884922][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.892425][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.899948][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.907400][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.914952][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.922376][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.929786][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.937208][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.944684][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.952105][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.959502][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.966918][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.974374][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.981875][ T3943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.992741][ T3943] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz0] on syz0 [ 212.603832][T13567] loop0: detected capacity change from 0 to 512 [ 212.614605][T13567] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 212.622919][T13567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.639603][T13567] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 212.664689][T13567] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 212.671824][T13567] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #16: comm syz.0.3576: corrupted xattr block 31: invalid header [ 212.679161][T13575] netlink: 'syz.1.3579': attribute type 1 has an invalid length. [ 212.686546][T13567] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 212.702452][T13567] EXT4-fs (loop0): 1 orphan inode deleted [ 212.708496][T13567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.743021][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.771369][T13583] syz.4.3582[13583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.771480][T13583] syz.4.3582[13583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.788556][T13583] syz.4.3582[13583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.834509][T13592] loop0: detected capacity change from 0 to 2048 [ 212.945214][T13592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.000201][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.588920][T13656] loop2: detected capacity change from 0 to 1024 [ 213.632511][T13656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 213.652693][T13656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.687087][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.883026][T13684] loop0: detected capacity change from 0 to 2048 [ 213.903601][T13684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.948399][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.294875][ T3435] hid-generic 0004:0008:0586.0003: hidraw0: HID v8.b3 Device [syz0] on syz0 [ 214.486372][T13757] rds_sendmsg: 5 callbacks suppressed [ 214.486390][T13757] rdma_op ffff888117ae6980 conn xmit_rdma 0000000000000000 [ 214.622966][T13774] loop3: detected capacity change from 0 to 512 [ 214.663218][T13774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.681168][T13774] ext4 filesystem being mounted at /719/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.964511][T13818] __nla_validate_parse: 9 callbacks suppressed [ 214.964526][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 215.090928][ T6235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.231156][ T29] kauditd_printk_skb: 1045 callbacks suppressed [ 215.231175][ T29] audit: type=1400 audit(1734791360.563:47784): avc: denied { map_create } for pid=13849 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.287866][ T29] audit: type=1400 audit(1734791360.563:47785): avc: denied { prog_load } for pid=13849 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 215.307280][ T29] audit: type=1400 audit(1734791360.563:47786): avc: denied { read } for pid=13849 comm="syz.4.3697" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 215.331095][ T29] audit: type=1400 audit(1734791360.583:47787): avc: denied { read } for pid=13854 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 215.352751][ T29] audit: type=1400 audit(1734791360.593:47788): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 215.376176][ T29] audit: type=1400 audit(1734791360.593:47789): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.400508][ T29] audit: type=1400 audit(1734791360.613:47790): avc: denied { mount } for pid=13855 comm="syz.4.3699" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 215.423108][ T29] audit: type=1400 audit(1734791360.613:47791): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 215.446412][ T29] audit: type=1400 audit(1734791360.643:47792): avc: denied { execmem } for pid=13861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.466044][ T29] audit: type=1400 audit(1734791360.663:47793): avc: denied { execmem } for pid=13864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 216.898469][T13888] »»»»»» speed is unknown, defaulting to 1000 [ 216.972464][T13888] lo speed is unknown, defaulting to 1000 [ 219.388501][T13921] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3723'. [ 219.397904][T13919] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3723'. [ 220.333067][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 220.333082][ T29] audit: type=1400 audit(1734791365.663:47870): avc: denied { execmem } for pid=13922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 220.361651][ T29] audit: type=1400 audit(1734791365.663:47871): avc: denied { module_request } for pid=13924 comm="syz.0.3726" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 220.384000][ T29] audit: type=1400 audit(1734791365.663:47872): avc: denied { sys_module } for pid=13924 comm="syz.0.3726" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 220.405248][ T29] audit: type=1400 audit(1734791365.663:47873): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 220.428643][ T29] audit: type=1400 audit(1734791365.693:47874): avc: denied { prog_load } for pid=13927 comm="syz.1.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 220.448025][ T29] audit: type=1400 audit(1734791365.693:47875): avc: denied { prog_load } for pid=13929 comm="syz.2.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 220.467333][ T29] audit: type=1400 audit(1734791365.693:47876): avc: denied { create } for pid=13927 comm="syz.1.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 220.487759][ T29] audit: type=1400 audit(1734791365.713:47877): avc: denied { create } for pid=13929 comm="syz.2.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 220.507573][ T29] audit: type=1400 audit(1734791365.733:47878): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.444378][ T29] audit: type=1400 audit(1734791366.773:47879): avc: denied { execmem } for pid=13931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 222.361132][ C0] ================================================================== [ 222.369249][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 222.377419][ C0] [ 222.379735][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 222.387101][ C0] __tmigr_cpu_activate+0x55/0x200 [ 222.392239][ C0] tmigr_cpu_activate+0x8a/0xc0 [ 222.397098][ C0] timer_clear_idle+0x28/0x100 [ 222.401863][ C0] tick_nohz_restart_sched_tick+0x22/0x110 [ 222.407678][ C0] tick_nohz_idle_exit+0xfe/0x1d0 [ 222.412745][ C0] do_idle+0x1eb/0x230 [ 222.416920][ C0] cpu_startup_entry+0x25/0x30 [ 222.421709][ C0] start_secondary+0x96/0xa0 [ 222.426313][ C0] common_startup_64+0x12c/0x137 [ 222.431272][ C0] [ 222.433590][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 222.441214][ C0] tmigr_handle_remote+0x26e/0x940 [ 222.446327][ C0] run_timer_softirq+0x5f/0x70 [ 222.451109][ C0] handle_softirqs+0xbf/0x280 [ 222.455792][ C0] __irq_exit_rcu+0x3a/0xc0 [ 222.460301][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 222.465934][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.471908][ C0] acpi_safe_halt+0x21/0x30 [ 222.476421][ C0] acpi_idle_do_entry+0x1d/0x30 [ 222.481283][ C0] acpi_idle_enter+0x96/0xb0 [ 222.485873][ C0] cpuidle_enter_state+0xc5/0x260 [ 222.490923][ C0] cpuidle_enter+0x40/0x70 [ 222.495361][ C0] do_idle+0x192/0x230 [ 222.499431][ C0] cpu_startup_entry+0x25/0x30 [ 222.504213][ C0] rest_init+0xef/0xf0 [ 222.508276][ C0] start_kernel+0x586/0x5e0 [ 222.512776][ C0] x86_64_start_reservations+0x2a/0x30 [ 222.518244][ C0] x86_64_start_kernel+0x9a/0xa0 [ 222.523193][ C0] common_startup_64+0x12c/0x137 [ 222.528130][ C0] [ 222.530442][ C0] value changed: 0x00 -> 0x01 [ 222.535105][ C0] [ 222.537417][ C0] Reported by Kernel Concurrency Sanitizer on: [ 222.543591][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 222.553945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 222.564001][ C0] ================================================================== Dec 21 14:29:28 syzkaller auth.info sshd[3284]: Received disconnect from 10.128.0.163 port 42310:11: disconnected by user Dec 21 14:29:28 syzkaller auth.info sshd[3284]: Disconnected from user root 10.128.0.163 port 42310