last executing test programs: 1m13.01664834s ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1m12.98322843s ago: executing program 0 (id=1156): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_io_uring_setup(0x14e2, &(0x7f0000000440)={0x0, 0xbf4d, 0x10100, 0x3, 0x288}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x55145afb, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 1m12.95062907s ago: executing program 0 (id=1158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x2e8, 0x2e8, 0xfeffffff, 0x0, 0x2e8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x8, 0x6, 0x1}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv4=@dev={0xac, 0x14, 0x14, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1m12.9143954s ago: executing program 0 (id=1160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) writev(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="21aaf72efc39164f8e6b4d143d71f22d17066268255006648ce3360d156787eae8", 0x21}], 0x1) 1m12.87992424s ago: executing program 0 (id=1163): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noinit_itable}]}, 0x1, 0x505, &(0x7f0000001180)="$eJzs3c9vI1cdAPCvnThxstkmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEBNJQ6DZjxOvVl7E22ydhR/PtJo3pvn+PveZue9zTc7fgGMrVsRcRgRUxHxXkTM59cL+RFvd470dZ8ePVw7Pnq4Vogkefdfhaw9vRY9X5O6kb9nOSJ+9L2InxYej9vaP9harddru3l9sd3YWWztH9zdbKxu1DZq29XqyvLK0pv33qhe2lhfbkzlpa9+8sfDb/087dZcfqV3HJepM/TSSZzUZET84FkEG4GJfDxTo+4IT6UYES9ExCvZ/T8fE9l3EwC4zpJkPpL53joAcN0VsxxYoVjJcwFzUSxWKp0c3osxW6w3W+07D5p72+udXNlClIoPNuu1pTxXuBClQlpfzsqf16un6vci4vmI+OX0TFavrDXr66P8hw8AjLEbp9b//0531n8A4Jorj7oDAMDQWf8BYPxY/wFg/Jys/579A4Cx0Vn/Z0bdDQBgiOT/AWD8WP8BYKz88J130iM5zj//ev39/b2t5vt312utrUpjb62y1tzdqWw0mxvZZ/Y0znq/erO5s/x67H2w8O2dVnuxtX9wv9Hc227fzz7X+36tlL3qcAgjAwAGef7lj/9SSFfkt2ayI3r2ciiNtGfAs1YcdQeAkZkYdQeAkfHED4yvC/yMLz0A10SfLXofUe73gFCSJMnFwt682JcDF3H7S/L/MK568v/+FzCMGfl/GF/y/zC+kqRw3j3/47wvBACuNjl+YMDv/1/Iz7/Lfznwk/XTr/joWfYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArrbu/r+VfC/wuSgWK5WImxGxEKXCg816bSkinouIP0+XptP68oj7DABcVPHvhXz/r9vzr8090vTSjZPiVET87Nfv/uqD1XZ7908RU4V/T3evtz/Kr1eH33sA4GzddTo79/wg/+nRw7XuMcz+/OO7EVHuxD8+morjk/iTMZmdy1GKiNn/FPJ6R6End3ERhx9GxBf7jb8Qc1kOpLPz6en4aeybQ41ffCR+MWvrnNM/iy9cQl9g3Hyczj9v97v/inErO/e//8vZDHVx+fyXvtXacTYHfh6/O/9NDJj/bp03xut/+H6nNPN424cRX56M6MY+7pl/uvELA+K/ds74f/3KS68Makt+E3E7+sfvjbXYbuwstvYP7m42VjdqG7XtanVleWXpzXtvVBezHPXi4NXgn2/deW5QWzr+2QHxy2eM/+vnHP9v//fej7/2hPjffLVf/GK8+IT46Zr4jXPGX539ffn0tc+SJOnGXx8w/rO+/3fOGf+Tvx08tm04ADA6rf2DrdV6vbaroHD1C+lf2SvQjb6F7wwr1lT0b/rFq517+lRTkjxVrEEzxmVk3YCr4OSmj4jPRt0ZAAAAAAAAAAAAAACgr2E8sTTqMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9/T8AAP//3ofTKQ==") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8000000000000001, 0x8001, 0x0, 0x0, 0x8, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff19df110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) 1m12.78363488s ago: executing program 0 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 57.744318455s ago: executing program 32 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.402975597s ago: executing program 5 (id=4238): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/38, 0x26}}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "44863a46875d7a99c994a2f0f3e6c9891f90f0da47b609b1", "282614002ac3b260591ff12441d3b9bd7570005c1a865e453a529854881fe0d4"}}}}}}, 0x0) 879.818358ms ago: executing program 2 (id=4294): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 879.544988ms ago: executing program 2 (id=4296): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 865.790719ms ago: executing program 2 (id=4297): syz_clone(0x80000600, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 793.752388ms ago: executing program 2 (id=4300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 792.980988ms ago: executing program 2 (id=4303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010100)={&(0x7f00000100c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 736.596749ms ago: executing program 2 (id=4305): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) 733.712418ms ago: executing program 1 (id=4308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r1, 0x0) 698.695248ms ago: executing program 1 (id=4311): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x54e, &(0x7f0000001040)="$eJzs3VFv0+YawPHHpYWeHAkdnXOEUFXgpZwjFakEJ4GgiCvPeZO+4NiR7aD2ClU0RRUpTJRJa282btgmbR+C232IfSO0+90w2U5KS5u4pbSpqv8v2vzGfuz3ed3ID25jWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhu3bZLlnjG7yyp4dx6GLQ+ve2vvW+G3N4zGdGviJX8J9PTcjWbdfW/nxZfSf43J7PZu1mZTibTsv3PK/96+J/JicH6IxI+FZtb2y9Wer3u63EncoKuXRq+rKl9EwWm5TS1MlGgatWqfXexEamG8XS0HMW6pdxQO3EQqnn3tirVahWli8tBx2/WHU8PZj64U7btqnpUbGsnjAL/7qNi5C4azzN+M41JFicxD5IP4mMTq1g7LaXW1nvdSt4AkqDSYYLKIyNEVNkul0ulcrlUvV+7/8C2J/fNsD8j+yLG/6HFeH3FozdwPBP9+i+eGPGlI0uiDny5UpdQAmkNWd43qP//v6tH9ru7/g+q/NVPi2ckrf/Xs3fXh9X/Ibmc3mtTtmRbXsiK9KQnXXk99oxO99UULb4YiSQQIy1x0jmqP0dJTapSFVueyqI0JBIlDTHiiZZIliWSWHT6iXIlFC2OxBJIKErmxZXboqQkNalJRZRoKcqyBNIRX5pSFyfdypqsp/u9IsoaluNOUGnoMAqDz11XyiNGS/3H8X3V4zdwHB8H9R8AAAAAAJxbVvrb9+T8f0qupa2G8bQ97rQAAAAAAMBXlP7lfzaZTCWta2Jx/g8AAAAAwHljpdfYWSJSkBtZa02s9HIpfgkAAAAAAMA5kf79/3oySe+BckOsndulcP4PAAAAAMA58XPuPfaj9iXrjz8lDKest+2l/1kbThLnbFzI1rvw+Rbjxox1ub+RZPLXx8zkpKtnreksaOcmmB/6k7W8PKyDEvjxMAk8rE7238mvcjOLubmaTVcHS7JeCg3j6aIbeA9L4jiXJ2K9FH/3cv17SYf/i9+6bMnaeq9bfPaqt5rm8jbZytuN/g0U991HcUQub9L7LaTXXBw44qn0Qox+v4WsX3v3+Cey1SeO0Oc7mcti5vp3vC3sHf900mepOGz0/SxKxxz5O7mVxdyav5VNDsiinJdFeXcWX7QvDpFFJS+LyjGzAIBxWcupQtb+wv8FR7kvq+5yxOr+TuazmPmZ9MA6OXPAEd3OO6Lbx6xuv+97BtKwGpv0+9tnVfV9ssL7of1GXtlKduGFNxvfypXNre076xsrz7vPuy/L5UrVvmfb98sylQ6jP6H2AAAOkPuMnY+X8iKsezln1f/e+UpBUZ7JK+nJqiykVxuk3zg4cKuFXV9DWMg5ay2kZTJ7wsvCiLO6i+lVDoPtlkfG7s2hcvI/CAAATtFcTh228v+FYC3knHfvreWjz44Lu57WBgAAToYOP1iF+CcrDE37aalWKznxolZh4D5Woak3tTJ+rEN30fGbWrXDIA7cwEsaT0xdRyrqtNtBGKtGEKp2EJml9Mnvqv/o90i3HD82btT2tBNp5QZ+7LixqpvIVe3ON56JFnWYrhy1tWsaxnViE/gqCjqhq4tKRVrvCjR17cemYZKmr9qhaTnhsnoSeJ2WVnUduaFpx0G2wUFfxm8EYSvdbHHcOxsAgDNic2v7xUqv1319qMY/jhK80xj3GAEAwF5UaQAAAAAAAAAAAAAAAAAAAAAAzr6jXclH4+w0Lh7qJ/ioH3Wi+QxuBX0Wdsu5bKQPuhCR0+w099Dxw8kckQCclr8DAAD//+mYTN4=") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 632.543749ms ago: executing program 1 (id=4312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) 628.165919ms ago: executing program 1 (id=4313): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x30010000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x464, 0x1, 0x70bd25, 0x25dfdbfe, "f7d4cd9a62c8f8fc91511634111df48f849151d96e27b0acae54c5a0a7909b863120291733272024480c0c6232bc7bdf98635b2998bc6b0366ca563623922217e0435d741a498a106de5fd2d395ee8b6dc9eafe2594f81804c7c53f143f72df3325925ff64b8f9f00c55322bec4bccb953920799", ["", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4060010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x130, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5d75c94e190c846a92efb742a93e9cb73a0d971146d295095c7d05cba4baf434"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a68ba5d6b57c1fb2a0d2cdf6934483df383eecfdc7582bd28418b68d48ab2752"}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x130}}, 0x0) 611.860649ms ago: executing program 1 (id=4314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x4000044) 587.869149ms ago: executing program 5 (id=4315): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 587.562969ms ago: executing program 1 (id=4316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r1, 0x1c05}], 0x2, 0x0, 0x0, 0x0) 528.550838ms ago: executing program 5 (id=4317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) readv(r2, &(0x7f0000001980)=[{&(0x7f0000001740)=""/92, 0x5c}, {0x0}], 0x2) 528.194389ms ago: executing program 5 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000000)) 527.870079ms ago: executing program 5 (id=4319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b}) 513.815949ms ago: executing program 5 (id=4321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) 500.142689ms ago: executing program 4 (id=4322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 481.143889ms ago: executing program 4 (id=4323): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x8, 0x0) 208.291339ms ago: executing program 3 (id=4326): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 170.048899ms ago: executing program 4 (id=4327): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 96.548549ms ago: executing program 3 (id=4328): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @private=0xa010101}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) umount2(0x0, 0x1) 96.220739ms ago: executing program 4 (id=4329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 95.91386ms ago: executing program 3 (id=4330): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') 95.66667ms ago: executing program 4 (id=4331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 80.98104ms ago: executing program 4 (id=4332): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe1, &(0x7f0000000640)={@local, @random="b6b7cd1e38be", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xbf, 0x0, @opaque="f59734d59c463d16a4cb829a4e546df6accfdddf720e88866c0ab9d52b18a1191ebae21ffcaea690d50ed5ae677b963034d701d8852de7b9cf415bd09f0b854f3fc9b00c80e6b146947d55b2560bfaba79d9058fc9874d545e79ce036bf3a9fe577962f49ad1d1d431c84cd6f2020e592b5fbf9a1968fdf3cbecc9ff36c60e48206100cb6466bec7e9374f45aa518681f4e946ff5032b7b1093518918f301b2e0fdbe0e12845f681195ed7dd59806f3405bef063c4f6c8"}}}}}, 0x0) read(r0, &(0x7f0000000140)=""/183, 0xb7) 80.44883ms ago: executing program 3 (id=4333): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0x65757100, 0x1000000}}) 18.33551ms ago: executing program 3 (id=4334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 0s ago: executing program 3 (id=4335): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x810) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) kernel console output (not intermixed with test programs): (loop1): mounting ext3 file system using the ext4 subsystem [ 67.518213][ T6464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 67.546613][ T6464] System zones: 1-12 [ 67.550916][ T6464] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1322: corrupted in-inode xattr: e_value size too large [ 67.568324][ T6464] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1322: couldn't read orphan inode 15 (err -117) [ 67.580813][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.630057][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.659404][ T6472] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1328'. [ 67.672225][ T6472] batadv1: entered promiscuous mode [ 67.677521][ T6472] batadv1: entered allmulticast mode [ 67.730206][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.840159][ T6482] loop3: detected capacity change from 0 to 512 [ 67.946587][ T6491] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 68.226725][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.249526][ T6482] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.494003][ T6516] program syz.1.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.562947][ T6518] IPv6: Can't replace route, no match found [ 68.915156][ T6532] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 68.995138][ T6537] loop1: detected capacity change from 0 to 2048 [ 69.055465][ T6537] loop1: p1 < > p4 [ 69.059982][ T6537] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.093082][ T3002] loop1: p1 < > p4 [ 69.102214][ T3002] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.218902][ T6548] loop4: detected capacity change from 0 to 512 [ 69.236713][ T6548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.254186][ T6548] ext4 filesystem being mounted at /301/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 69.309348][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 69.320748][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 72.246927][ T6574] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 72.265963][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.287175][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.343725][ T6578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.352812][ T6578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.361577][ T6578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.370396][ T6578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.428487][ T6578] geneve2: entered promiscuous mode [ 72.433764][ T6578] geneve2: entered allmulticast mode [ 72.446175][ T6578] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.455215][ T6578] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.464152][ T6578] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.473138][ T6578] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.503351][ T6589] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 72.511265][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 72.511283][ T29] audit: type=1400 audit(1733616810.181:1794): avc: denied { read } for pid=6588 comm="syz.1.1375" path="socket:[14139]" dev="sockfs" ino=14139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.569366][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1377'. [ 72.663675][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'. [ 72.821644][ T6606] loop4: detected capacity change from 0 to 512 [ 72.868508][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.914922][ T6606] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.984614][ T29] audit: type=1400 audit(1733616810.661:1795): avc: denied { ioctl } for pid=6604 comm="syz.4.1383" path="/305/bus/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.068080][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.087137][ T29] audit: type=1326 audit(1733616810.691:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 73.110627][ T29] audit: type=1326 audit(1733616810.691:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 73.134311][ T29] audit: type=1326 audit(1733616810.691:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 73.187543][ T6587] loop3: detected capacity change from 0 to 128 [ 73.464541][ T29] audit: type=1400 audit(1733616811.011:1799): avc: denied { watch watch_reads } for pid=6625 comm="syz.4.1389" path="/306" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.487612][ T29] audit: type=1400 audit(1733616811.111:1800): avc: denied { ioctl } for pid=6631 comm="syz.2.1394" path="socket:[13178]" dev="sockfs" ino=13178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.572450][ T6639] loop1: detected capacity change from 0 to 2048 [ 73.753930][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.788159][ T6653] syz.3.1400[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.788310][ T6653] syz.3.1400[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.802027][ T6639] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 73.841798][ T6653] syz.3.1400[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.900923][ T6635] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 73.924550][ T6635] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.924550][ T6635] [ 73.934232][ T6635] EXT4-fs (loop1): Total free blocks count 0 [ 73.940326][ T6635] EXT4-fs (loop1): Free/Dirty block details [ 73.946334][ T6635] EXT4-fs (loop1): free_blocks=66060288 [ 73.951886][ T6635] EXT4-fs (loop1): dirty_blocks=32 [ 73.957032][ T6635] EXT4-fs (loop1): Block reservation details [ 73.963024][ T6635] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 74.014940][ T29] audit: type=1400 audit(1733616811.661:1801): avc: granted { setsecparam } for pid=6655 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.084485][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 74.094557][ T29] audit: type=1400 audit(1733616811.751:1802): avc: denied { connect } for pid=6661 comm="syz.4.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.183341][ T29] audit: type=1400 audit(1733616811.821:1803): avc: denied { create } for pid=6663 comm="syz.4.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.314033][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.772330][ T6702] xt_hashlimit: max too large, truncated to 1048576 [ 74.859829][ T6709] loop2: detected capacity change from 0 to 1024 [ 74.871345][ T6709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.890882][ T6711] loop1: detected capacity change from 0 to 512 [ 75.004663][ T6722] loop3: detected capacity change from 0 to 128 [ 75.038972][ T6711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.053387][ T6711] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.067269][ T6722] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.083580][ T6709] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.108846][ T6722] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.193244][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 75.229925][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.243647][ T6737] loop2: detected capacity change from 0 to 1024 [ 75.257272][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.300525][ T6737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.319211][ T2207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.330059][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.404216][ T2207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.416292][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 75.418468][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.510161][ T2207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.526511][ T6766] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 75.565475][ T2207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.638913][ T6728] chnl_net:caif_netlink_parms(): no params data found [ 75.717431][ T6791] rdma_op ffff8881169bf980 conn xmit_rdma 0000000000000000 [ 75.810801][ T6801] capability: warning: `syz.1.1462' uses deprecated v2 capabilities in a way that may be insecure [ 75.972451][ T2207] bond0 (unregistering): Released all slaves [ 76.039571][ T6834] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.052225][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.059355][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.066849][ T6728] bridge_slave_0: entered allmulticast mode [ 76.073260][ T6728] bridge_slave_0: entered promiscuous mode [ 76.082011][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.089182][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.097071][ T6728] bridge_slave_1: entered allmulticast mode [ 76.104008][ T6728] bridge_slave_1: entered promiscuous mode [ 76.224981][ T6846] loop2: detected capacity change from 0 to 1024 [ 76.246470][ T2207] hsr_slave_0: left promiscuous mode [ 76.252536][ T2207] hsr_slave_1: left promiscuous mode [ 76.261382][ T2207] veth1_macvtap: left promiscuous mode [ 76.266986][ T2207] veth0_macvtap: left promiscuous mode [ 76.272671][ T2207] veth1_vlan: left promiscuous mode [ 76.277988][ T2207] veth0_vlan: left promiscuous mode [ 76.286381][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.408775][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.428139][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.489347][ T6728] team0: Port device team_slave_0 added [ 76.497900][ T6853] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 76.507353][ T6728] team0: Port device team_slave_1 added [ 76.545842][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.552852][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.578918][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.590905][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.597920][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.624314][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.643814][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.688419][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1480'. [ 76.732704][ T6728] hsr_slave_0: entered promiscuous mode [ 76.763358][ T6728] hsr_slave_1: entered promiscuous mode [ 76.868620][ T6889] loop3: detected capacity change from 0 to 512 [ 76.881537][ T6889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.934190][ T6889] EXT4-fs (loop3): 1 truncate cleaned up [ 76.940283][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.961415][ T6892] team0: Device ipvlan2 failed to register rx_handler [ 77.028707][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.054992][ T6728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.094972][ T6728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.127553][ T6728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.156529][ T6728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.253783][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.296437][ T6728] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.313393][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.320552][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.346845][ T6728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.357449][ T6728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.408140][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.415271][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.501860][ T6947] loop1: detected capacity change from 0 to 512 [ 77.529720][ T6947] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 77.538129][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.629183][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 77.629198][ T29] audit: type=1400 audit(1733616815.311:1873): avc: denied { audit_read } for pid=6926 comm="syz.2.1500" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.674305][ T6974] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.852125][ T29] audit: type=1326 audit(1733616815.521:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6992 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 77.875783][ T29] audit: type=1326 audit(1733616815.521:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6992 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 77.899216][ T29] audit: type=1326 audit(1733616815.521:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6992 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 77.960995][ T6728] veth0_vlan: entered promiscuous mode [ 77.969057][ T6728] veth1_vlan: entered promiscuous mode [ 77.982469][ T6728] veth0_macvtap: entered promiscuous mode [ 77.989893][ T6728] veth1_macvtap: entered promiscuous mode [ 78.000010][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.010619][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.020551][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.031016][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.041572][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.049987][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.060580][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.070476][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.080954][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.090211][ T29] audit: type=1400 audit(1733616815.731:1877): avc: denied { read } for pid=7013 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.091872][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.132306][ T6728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.141142][ T6728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.149980][ T6728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.158706][ T6728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.242631][ T29] audit: type=1400 audit(1733616815.921:1878): avc: denied { block_suspend } for pid=7023 comm="syz.4.1524" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.288631][ T29] audit: type=1400 audit(1733616815.971:1879): avc: denied { mounton } for pid=6728 comm="syz-executor" path="/root/syzkaller.v40XOd/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.320632][ T29] audit: type=1400 audit(1733616815.971:1880): avc: denied { mount } for pid=6728 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.342938][ T29] audit: type=1400 audit(1733616815.971:1881): avc: denied { mount } for pid=6728 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.365038][ T29] audit: type=1400 audit(1733616815.971:1882): avc: denied { mounton } for pid=6728 comm="syz-executor" path="/root/syzkaller.v40XOd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.440980][ T7045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7045 comm=syz.1.1530 [ 78.448524][ T7036] loop3: detected capacity change from 0 to 2048 [ 78.592191][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1536'. [ 78.612181][ T7067] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 78.680665][ T7078] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.685274][ T7080] loop5: detected capacity change from 0 to 128 [ 78.689436][ T7078] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.704615][ T7078] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.713390][ T7078] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.724025][ T7080] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 78.732067][ T7080] FAT-fs (loop5): Filesystem has been set read-only [ 78.749109][ T7080] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 78.763323][ T7080] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 78.787544][ T7078] vxlan0: entered promiscuous mode [ 78.792905][ T7078] vxlan0: entered allmulticast mode [ 78.826811][ T7078] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.835799][ T7078] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.844773][ T7078] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.853870][ T7078] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.676152][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 79.746687][ T7210] loop3: detected capacity change from 0 to 1024 [ 79.753609][ T7210] EXT4-fs: Ignoring removed oldalloc option [ 79.761432][ T7210] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 79.795690][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.862852][ T7224] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.871698][ T7224] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.880672][ T7224] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.889562][ T7224] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.898388][ T7224] vxlan0: entered promiscuous mode [ 79.900153][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.903560][ T7224] vxlan0: entered allmulticast mode [ 80.018792][ T7237] usb usb7: usbfs: process 7237 (syz.3.1597) did not claim interface 0 before use [ 80.108927][ T7249] atomic_op ffff8881179ee528 conn xmit_atomic 0000000000000000 [ 80.417264][ T7291] syz.5.1622[7291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.417440][ T7291] syz.5.1622[7291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.465213][ T7291] syz.5.1622[7291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.569926][ T7307] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 80.591490][ T7307] geneve1: entered promiscuous mode [ 80.610232][ T7307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.619105][ T7307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627883][ T7307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.636713][ T7307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.666584][ T7307] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 80.708150][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.723727][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.846920][ T7342] netlink: 'syz.4.1645': attribute type 2 has an invalid length. [ 80.969686][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 81.078608][ T7363] loop3: detected capacity change from 0 to 512 [ 81.092117][ T7365] ALSA: seq fatal error: cannot create timer (-22) [ 81.107070][ T7363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.119929][ T7363] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.144362][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.180879][ T7370] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 81.180994][ T7369] IPVS: stopping master sync thread 7370 ... [ 81.280106][ T7383] sctp: [Deprecated]: syz.2.1659 (pid 7383) Use of int in max_burst socket option. [ 81.280106][ T7383] Use struct sctp_assoc_value instead [ 81.605332][ T7420] wireguard0: entered promiscuous mode [ 81.610871][ T7420] wireguard0: entered allmulticast mode [ 81.837632][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.858461][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.958633][ T7449] loop3: detected capacity change from 0 to 128 [ 82.114490][ T7472] loop3: detected capacity change from 0 to 764 [ 82.122595][ T7472] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.370858][ T7501] loop4: detected capacity change from 0 to 128 [ 82.379777][ T7501] EXT4-fs: Ignoring removed nobh option [ 82.405710][ T7501] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.431308][ T7501] ext4 filesystem being mounted at /377/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.461083][ T7508] loop3: detected capacity change from 0 to 128 [ 82.518831][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.538469][ T7514] loop3: detected capacity change from 0 to 8192 [ 82.545995][ T7514] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.672939][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 82.672954][ T29] audit: type=1400 audit(1733616820.351:1991): avc: denied { write } for pid=3375 comm="kworker/1:4" path="socket:[17758]" dev="sockfs" ino=17758 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.758959][ T7536] loop4: detected capacity change from 0 to 1764 [ 82.768444][ T29] audit: type=1326 audit(1733616820.391:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.792148][ T29] audit: type=1326 audit(1733616820.391:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.815777][ T29] audit: type=1326 audit(1733616820.401:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.839352][ T29] audit: type=1326 audit(1733616820.401:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.862944][ T29] audit: type=1326 audit(1733616820.401:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.886429][ T29] audit: type=1326 audit(1733616820.401:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.903992][ T7536] ISOFS: unable to read i-node block [ 82.909965][ T29] audit: type=1326 audit(1733616820.401:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.915317][ T7536] isofs_fill_super: get root inode failed [ 82.944782][ T29] audit: type=1326 audit(1733616820.401:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 82.968360][ T29] audit: type=1326 audit(1733616820.401:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 83.133818][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 83.154757][ T7566] loop5: detected capacity change from 0 to 256 [ 83.274175][ T7571] loop1: detected capacity change from 0 to 2048 [ 83.626940][ T7571] loop1: p1 < > p2 p3 < p5 > p4 [ 83.631946][ T7571] loop1: partition table partially beyond EOD, truncated [ 83.643982][ T7566] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 83.651921][ T7566] FAT-fs (loop5): Filesystem has been set read-only [ 83.660146][ T7571] loop1: p1 start 4278190080 is beyond EOD, truncated [ 83.666995][ T7571] loop1: p2 start 16908800 is beyond EOD, truncated [ 83.731202][ T7571] loop1: p4 start 11326 is beyond EOD, truncated [ 83.737712][ T7571] loop1: p5 start 16908800 is beyond EOD, truncated [ 83.779274][ T3002] loop1: p1 < > p2 p3 < p5 > p4 [ 83.784259][ T3002] loop1: partition table partially beyond EOD, truncated [ 83.791615][ T3002] loop1: p1 start 4278190080 is beyond EOD, truncated [ 83.798686][ T3002] loop1: p2 start 16908800 is beyond EOD, truncated [ 83.806397][ T3002] loop1: p4 start 11326 is beyond EOD, truncated [ 83.812772][ T3002] loop1: p5 start 16908800 is beyond EOD, truncated [ 83.879518][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 83.934520][ T7580] loop2: detected capacity change from 0 to 2048 [ 84.006743][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 84.020327][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1758'. [ 84.109028][ T7602] netlink: 'syz.5.1763': attribute type 10 has an invalid length. [ 84.126735][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.142920][ T7602] team0: Port device bond0 added [ 84.378367][ T7626] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 84.394960][ T7626] SELinux: failed to load policy [ 84.502570][ T7636] loop4: detected capacity change from 0 to 512 [ 84.539917][ T7636] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 84.549135][ T7636] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 84.566300][ T7636] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 84.593793][ T7636] EXT4-fs (loop4): 1 truncate cleaned up [ 84.599912][ T7636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.633795][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.706248][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1786'. [ 85.014722][ T7700] loop5: detected capacity change from 0 to 512 [ 85.019213][ T7702] vlan2: entered promiscuous mode [ 85.022559][ T7700] EXT4-fs: Ignoring removed orlov option [ 85.032386][ T7700] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.046314][ T7700] EXT4-fs (loop5): 1 orphan inode deleted [ 85.052108][ T7700] EXT4-fs (loop5): 1 truncate cleaned up [ 85.067769][ T7700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.092892][ T7700] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 85.121302][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.204236][ T7712] loop2: detected capacity change from 0 to 2048 [ 85.255672][ T7712] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 85.260917][ T7712] loop2: partition table partially beyond EOD, truncated [ 85.281110][ T7712] loop2: p1 size 33024 extends beyond EOD, truncated [ 85.302850][ T7712] loop2: p2 start 16908804 is beyond EOD, truncated [ 85.309548][ T7712] loop2: p3 start 4284289 is beyond EOD, truncated [ 85.317401][ T7712] loop2: p5 size 33024 extends beyond EOD, truncated [ 85.328266][ T7712] loop2: p6 start 16908804 is beyond EOD, truncated [ 85.488425][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.490904][ T3674] udevd[3674]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 85.512482][ T4041] udevd[4041]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 85.532689][ T7745] syz.2.1829[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.532848][ T7745] syz.2.1829[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.544421][ T7745] syz.2.1829[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.703705][ T7765] vlan2: entered allmulticast mode [ 85.776578][ T7769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7769 comm=syz.5.1840 [ 85.789209][ T7769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7769 comm=syz.5.1840 [ 86.363678][ T7798] loop5: detected capacity change from 0 to 256 [ 86.496042][ T7808] loop5: detected capacity change from 0 to 512 [ 86.502755][ T7808] EXT4-fs: test_dummy_encryption option not supported [ 86.585436][ T7814] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 86.593227][ T7814] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1861'. [ 86.695786][ T7816] infiniband syz1: set down [ 86.700351][ T7816] infiniband syz1: added team_slave_0 [ 86.728618][ T7816] RDS/IB: syz1: added [ 86.734983][ T7816] smc: adding ib device syz1 with port count 1 [ 86.744907][ T7816] smc: ib device syz1 port 1 has pnetid [ 87.192388][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.203042][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.256184][ T7875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7875 comm=syz.4.1890 [ 87.308263][ T7881] loop5: detected capacity change from 0 to 512 [ 87.315615][ T7881] EXT4-fs: Ignoring removed oldalloc option [ 87.331814][ T7881] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1893: Parent and EA inode have the same ino 15 [ 87.344596][ T7881] EXT4-fs (loop5): Remounting filesystem read-only [ 87.351245][ T7881] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 87.367839][ T7881] EXT4-fs (loop5): 1 orphan inode deleted [ 87.387476][ T7881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.408677][ T7881] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 87.415773][ T7892] loop4: detected capacity change from 0 to 512 [ 87.429057][ T7881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.474080][ T7892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.522629][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.599842][ T7910] loop4: detected capacity change from 0 to 512 [ 87.625415][ T7910] EXT4-fs (loop4): filesystem is read-only [ 87.656144][ T7918] loop5: detected capacity change from 0 to 512 [ 87.679163][ T7918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.696116][ T7918] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.781212][ T7930] loop3: detected capacity change from 0 to 2048 [ 87.788013][ T7932] loop4: detected capacity change from 0 to 256 [ 87.814795][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.819805][ T7930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.860310][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 87.860328][ T29] audit: type=1400 audit(1733616825.541:2106): avc: denied { setopt } for pid=7936 comm="syz.4.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.928916][ T29] audit: type=1326 audit(1733616825.611:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 87.952628][ T29] audit: type=1326 audit(1733616825.611:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.034125][ T7946] loop4: detected capacity change from 0 to 512 [ 88.047275][ T29] audit: type=1326 audit(1733616825.671:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.070885][ T29] audit: type=1326 audit(1733616825.671:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.071622][ T7946] EXT4-fs: Ignoring removed orlov option [ 88.094354][ T29] audit: type=1326 audit(1733616825.671:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.094431][ T29] audit: type=1326 audit(1733616825.711:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.147104][ T29] audit: type=1326 audit(1733616825.711:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.170663][ T29] audit: type=1326 audit(1733616825.721:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.194227][ T29] audit: type=1326 audit(1733616825.721:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3a47fed9 code=0x7ffc0000 [ 88.222205][ T7946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.242973][ T7929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.262012][ T7929] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 88.264050][ T7946] EXT4-fs (loop4): 1 orphan inode deleted [ 88.274594][ T7929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.274594][ T7929] [ 88.274616][ T7929] EXT4-fs (loop3): Total free blocks count 0 [ 88.274632][ T7929] EXT4-fs (loop3): Free/Dirty block details [ 88.274646][ T7929] EXT4-fs (loop3): free_blocks=2415919104 [ 88.280400][ T7946] EXT4-fs (loop4): 1 truncate cleaned up [ 88.290044][ T7929] EXT4-fs (loop3): dirty_blocks=8192 [ 88.290066][ T7929] EXT4-fs (loop3): Block reservation details [ 88.299687][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.301952][ T7929] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 88.370118][ T7946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.398981][ T2207] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 88.414144][ T7957] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1926'. [ 88.438186][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.498718][ T7965] syz.4.1929[7965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.498922][ T7965] syz.4.1929[7965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.522826][ T7965] syz.4.1929[7965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.527094][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 88.551510][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.563520][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.638234][ T7977] geneve0: entered allmulticast mode [ 88.760957][ T7989] 9pnet_fd: Insufficient options for proto=fd [ 89.195945][ T8019] mmap: syz.2.1953 (8019): VmData 29093888 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 89.322483][ T8036] syz.5.1962[8036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.322583][ T8036] syz.5.1962[8036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.339023][ T8036] syz.5.1962[8036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.345202][ T8038] loop3: detected capacity change from 0 to 1024 [ 89.380895][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1962'. [ 89.387631][ T8038] EXT4-fs: Ignoring removed orlov option [ 89.395715][ T8038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.455064][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.504898][ T8052] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1968'. [ 89.528323][ T8054] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 89.536095][ T8054] SELinux: failed to load policy [ 89.552369][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.561579][ T2965] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.569390][ T2965] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.576626][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.605424][ T8059] SELinux: policydb version -962592231 does not match my version range 15-33 [ 89.615089][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.623446][ T8059] SELinux: failed to load policy [ 89.640521][ T8057] hid-generic 0000:0000:0000.0002: pid 8057 passed too short report [ 89.935694][ T8103] SELinux: policydb version 4376 does not match my version range 15-33 [ 89.944587][ T8103] SELinux: failed to load policy [ 90.040823][ T8117] bridge0: port 3(syz_tun) entered blocking state [ 90.047483][ T8117] bridge0: port 3(syz_tun) entered disabled state [ 90.054393][ T8117] syz_tun: entered allmulticast mode [ 90.061623][ T8117] syz_tun: entered promiscuous mode [ 90.067284][ T8117] bridge0: port 3(syz_tun) entered blocking state [ 90.073826][ T8117] bridge0: port 3(syz_tun) entered forwarding state [ 90.090982][ T8122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.162261][ T8128] wireguard0: entered promiscuous mode [ 90.167873][ T8128] wireguard0: entered allmulticast mode [ 90.206071][ T8137] loop2: detected capacity change from 0 to 1024 [ 90.212706][ T8137] EXT4-fs: Ignoring removed orlov option [ 90.218454][ T8137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.249376][ T8145] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 90.261074][ T8137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.310374][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.441174][ T8169] loop5: detected capacity change from 0 to 1024 [ 90.470608][ T8169] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.481596][ T8169] EXT4-fs: Ignoring removed orlov option [ 90.487467][ T8169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.507342][ T8169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.649962][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.660711][ T8194] netem: change failed [ 90.693580][ T8199] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 90.751092][ T8205] loop5: detected capacity change from 0 to 512 [ 90.771396][ T8205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.785547][ T8207] loop4: detected capacity change from 0 to 256 [ 90.810471][ T8205] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.818813][ T8205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 90.846671][ T8205] System zones: 0-1, 15-15, 18-18, 34-34 [ 90.852906][ T8205] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.859432][ T8205] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.874074][ T8205] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 90.874432][ T8215] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.889672][ T8205] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2039: bg 0: block 40: padding at end of block bitmap is not set [ 90.910753][ T8205] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 90.939298][ T8205] EXT4-fs (loop5): 1 truncate cleaned up [ 90.959605][ T8205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.976204][ T8221] loop2: detected capacity change from 0 to 1024 [ 90.984397][ T8224] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 91.005498][ T8224] SELinux: failed to load policy [ 91.011729][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.026545][ T8205] EXT4-fs (loop5): shut down requested (1) [ 91.033080][ T8205] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 91.042059][ T8205] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 91.052897][ T8221] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.069256][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.096678][ T8233] bridge0: port 3(syz_tun) entered blocking state [ 91.103292][ T8233] bridge0: port 3(syz_tun) entered disabled state [ 91.109958][ T8233] syz_tun: entered allmulticast mode [ 91.116039][ T8233] syz_tun: entered promiscuous mode [ 91.121514][ T8233] bridge0: port 3(syz_tun) entered blocking state [ 91.122170][ T8237] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2056'. [ 91.127993][ T8233] bridge0: port 3(syz_tun) entered forwarding state [ 91.144305][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.438272][ T24] kernel write not supported for file /vcs (pid: 24 comm: kworker/1:0) [ 91.548418][ T8287] loop2: detected capacity change from 0 to 512 [ 91.574102][ T8292] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.574102][ T8292] The task syz.4.2071 (8292) triggered the difference, watch for misbehavior. [ 91.582864][ T8287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.606595][ T8287] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.667272][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.082662][ T8347] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2104'. [ 92.120140][ T8351] loop5: detected capacity change from 0 to 2048 [ 92.127249][ T8351] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.137408][ T8351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.162853][ T8351] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2105: bg 0: block 234: padding at end of block bitmap is not set [ 92.177749][ T8351] EXT4-fs (loop5): Remounting filesystem read-only [ 92.184356][ T8351] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 92.218571][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.229590][ T8359] vhci_hcd: default hub control req: 4001 v0220 i0001 l0 [ 92.388268][ T8374] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.428331][ T8380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.464221][ T8383] @: renamed from vlan0 [ 92.565698][ T8398] netlink: 'syz.4.2127': attribute type 13 has an invalid length. [ 92.573590][ T8398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2127'. [ 92.583996][ T8398] syz_tun: refused to change device tx_queue_len [ 92.590471][ T8398] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 92.627964][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'. [ 92.964474][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2137'. [ 93.080022][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2142'. [ 93.216308][ T8455] geneve2: entered promiscuous mode [ 93.221571][ T8455] geneve2: entered allmulticast mode [ 93.354676][ T8474] loop3: detected capacity change from 0 to 764 [ 93.462124][ T8491] SELinux: syz.3.2161 (8491) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 93.477291][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 93.526001][ T8498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2173'. [ 93.555950][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.572474][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.597503][ T8510] syz.2.2166[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.597606][ T8510] syz.2.2166[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.612035][ T8510] syz.2.2166[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.635819][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 93.635834][ T29] audit: type=1404 audit(1733616831.321:2355): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 93.697335][ T29] audit: type=1400 audit(1733616831.321:2356): avc: denied { read write } for pid=6728 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.721680][ T29] audit: type=1400 audit(1733616831.341:2357): avc: denied { map_create } for pid=8514 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.740853][ T29] audit: type=1404 audit(1733616831.351:2358): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 93.756120][ T29] audit: type=1400 audit(1733616831.351:2359): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.761762][ T8521] hub 9-0:1.0: USB hub found [ 93.780382][ T29] audit: type=1400 audit(1733616831.351:2360): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.780420][ T29] audit: type=1400 audit(1733616831.351:2361): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.796634][ T8521] hub 9-0:1.0: 8 ports detected [ 93.809340][ T29] audit: type=1326 audit(1733616831.361:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 93.863262][ T29] audit: type=1326 audit(1733616831.361:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 93.886686][ T29] audit: type=1326 audit(1733616831.361:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.2.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 93.888855][ T8525] syz.5.2174[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.930820][ T8519] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 93.933157][ T8525] syz.5.2174[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.961982][ T8525] syz.5.2174[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.965656][ T8522] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 94.071433][ T8536] tipc: Started in network mode [ 94.076491][ T8536] tipc: Node identity ac14140f, cluster identity 4711 [ 94.083609][ T8536] tipc: New replicast peer: 255.255.255.5 [ 94.089578][ T8536] tipc: Enabled bearer , priority 10 [ 94.126258][ T8542] IPVS: stopping master sync thread 8543 ... [ 94.126828][ T8543] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 94.254673][ T8556] loop5: detected capacity change from 0 to 8192 [ 94.256080][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.262597][ T8556] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 94.285262][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.314945][ T8560] loop3: detected capacity change from 0 to 512 [ 94.321587][ T8560] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.334010][ T8560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.386755][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.492310][ T8579] bond1: entered promiscuous mode [ 94.497416][ T8579] bond1: entered allmulticast mode [ 94.502692][ T8579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.512404][ T8579] bond1 (unregistering): Released all slaves [ 94.560521][ T8589] loop5: detected capacity change from 0 to 1024 [ 94.569727][ T8589] EXT4-fs: Ignoring removed orlov option [ 94.575533][ T8589] EXT4-fs: Ignoring removed orlov option [ 94.588485][ T8589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.618086][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.630857][ T8595] hub 9-0:1.0: USB hub found [ 94.635891][ T8595] hub 9-0:1.0: 8 ports detected [ 94.663830][ T8599] loop5: detected capacity change from 0 to 764 [ 94.721817][ T8606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.777330][ T8611] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 94.832092][ T8614] geneve2: entered promiscuous mode [ 94.837490][ T8614] geneve2: entered allmulticast mode [ 94.893580][ T8622] netlink: 'syz.3.2217': attribute type 153 has an invalid length. [ 94.950140][ T8625] loop5: detected capacity change from 0 to 256 [ 95.100857][ T8641] loop1: detected capacity change from 0 to 1024 [ 95.110270][ T8641] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.132620][ T8641] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2227: Invalid block bitmap block 0 in block_group 0 [ 95.159526][ T8641] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2227: Failed to acquire dquot type 0 [ 95.185377][ T8641] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.2227: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.202522][ T8641] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2227: Invalid inode bitmap blk 0 in block_group 0 [ 95.215616][ T381] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 0 [ 95.225250][ T9] tipc: Node number set to 2886997007 [ 95.275370][ T8641] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 95.284131][ T8641] EXT4-fs (loop1): 1 orphan inode deleted [ 95.291846][ T8641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.344224][ T8653] geneve2: entered promiscuous mode [ 95.349543][ T8653] geneve2: entered allmulticast mode [ 95.430263][ T8659] syz.1.2232[8659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.430336][ T8659] syz.1.2232[8659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.443247][ T8659] syz.1.2232[8659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.459235][ T8659] __nla_validate_parse: 2 callbacks suppressed [ 95.459254][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 95.580386][ T8669] loop1: detected capacity change from 0 to 8192 [ 95.587277][ T8669] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 95.639686][ T8672] SELinux: policydb version 0 does not match my version range 15-33 [ 95.654966][ T8672] SELinux: failed to load policy [ 95.861345][ T8685] geneve2: entered promiscuous mode [ 95.866716][ T8685] geneve2: entered allmulticast mode [ 95.962476][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.971591][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.168141][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.168465][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.176760][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.185135][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.206928][ T8715] hid-generic 0000:0000:0000.0003: pid 8715 passed too short report [ 96.301471][ T8720] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 96.301622][ T8719] IPVS: stopping master sync thread 8720 ... [ 96.591970][ T8743] loop5: detected capacity change from 0 to 1024 [ 96.604251][ T8743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.711464][ T8756] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 96.816808][ T8771] loop2: detected capacity change from 0 to 512 [ 96.832918][ T8771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.874368][ T8771] EXT4-fs (loop2): 1 truncate cleaned up [ 96.926308][ T8784] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 97.051964][ T8799] syz.1.2300[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.172478][ T8815] rdma_op ffff888104c21d80 conn xmit_rdma 0000000000000000 [ 97.242398][ T8822] netlink: 'syz.5.2311': attribute type 3 has an invalid length. [ 97.250239][ T8822] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2311'. [ 97.259646][ T8822] NCSI netlink: No device for ifindex 33554690 [ 97.295035][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2314'. [ 97.412085][ T8840] IPv6: Can't replace route, no match found [ 97.448783][ T8846] IPv6: Can't replace route, no match found [ 97.489315][ T8850] sctp: [Deprecated]: syz.5.2325 (pid 8850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.489315][ T8850] Use struct sctp_sack_info instead [ 97.762716][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 97.764033][ T8885] loop4: detected capacity change from 0 to 164 [ 97.786533][ T8885] Unable to read rock-ridge attributes [ 97.797131][ T8885] Unable to read rock-ridge attributes [ 98.072957][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 98.080718][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 98.097245][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.105027][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.112812][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.120510][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.128291][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.132213][ T8923] lo: entered allmulticast mode [ 98.135976][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.148729][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.156464][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.164111][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.171826][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.179503][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.187222][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.194993][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.197697][ T8924] lo: left allmulticast mode [ 98.202753][ T24] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 98.205363][ T24] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 98.275508][ T8929] netlink: 'syz.5.2362': attribute type 3 has an invalid length. [ 98.365569][ T8942] SELinux: failed to load policy [ 98.472275][ T8954] loop3: detected capacity change from 0 to 512 [ 98.513949][ T8954] EXT4-fs mount: 5 callbacks suppressed [ 98.513965][ T8954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.535228][ T8954] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.627863][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.689671][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 98.689757][ T29] audit: type=1400 audit(1733616836.371:2656): avc: denied { block_suspend } for pid=8968 comm="syz.1.2380" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.868994][ T8986] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.877835][ T8986] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.886607][ T8986] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.895425][ T8986] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.917250][ T29] audit: type=1400 audit(1733616836.601:2657): avc: denied { create } for pid=8987 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.935066][ T8986] vxlan0: entered promiscuous mode [ 98.937587][ T29] audit: type=1400 audit(1733616836.601:2658): avc: denied { write } for pid=8987 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.943003][ T8986] vxlan0: entered allmulticast mode [ 98.962850][ T29] audit: type=1400 audit(1733616836.601:2659): avc: denied { nlmsg_write } for pid=8987 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.024655][ T29] audit: type=1400 audit(1733616836.691:2660): avc: denied { read write } for pid=8991 comm="syz.1.2391" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.048358][ T29] audit: type=1400 audit(1733616836.691:2661): avc: denied { open } for pid=8991 comm="syz.1.2391" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.084127][ T29] audit: type=1400 audit(1733616836.761:2662): avc: denied { read } for pid=8994 comm="syz.2.2392" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.107403][ T29] audit: type=1400 audit(1733616836.761:2663): avc: denied { open } for pid=8994 comm="syz.2.2392" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.180216][ T29] audit: type=1400 audit(1733616836.861:2664): avc: denied { create } for pid=9003 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.208302][ T29] audit: type=1400 audit(1733616836.891:2665): avc: denied { bind } for pid=9003 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.336216][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.347006][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.423019][ T9026] netlink: 'syz.3.2405': attribute type 21 has an invalid length. [ 99.431007][ T9026] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2405'. [ 99.487232][ T9032] bridge1: entered promiscuous mode [ 100.184160][ T9077] netlink: 'syz.5.2431': attribute type 10 has an invalid length. [ 100.192584][ T9077] veth1_macvtap: left promiscuous mode [ 100.257414][ T9083] bpf_get_probe_write_proto: 5 callbacks suppressed [ 100.257431][ T9083] syz.2.2434[9083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.271866][ T9083] syz.2.2434[9083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.284278][ T9083] syz.2.2434[9083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.401160][ T9095] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.616915][ T9118] tipc: Started in network mode [ 100.621827][ T9118] tipc: Node identity ffffffff, cluster identity 4711 [ 100.628685][ T9118] tipc: Node number set to 4294967295 [ 100.682862][ T9115] loop2: detected capacity change from 0 to 8192 [ 100.731417][ T9123] loop3: detected capacity change from 0 to 1024 [ 100.778824][ T9123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.959980][ T9144] loop4: detected capacity change from 0 to 512 [ 100.968548][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.978546][ T9144] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 100.988222][ T9144] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 100.994772][ T9144] EXT4-fs (loop4): mount failed [ 101.055049][ T9150] loop3: detected capacity change from 0 to 512 [ 101.075919][ T9150] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2464: corrupted in-inode xattr: invalid ea_ino [ 101.079358][ T9157] macsec0: entered promiscuous mode [ 101.096245][ T9150] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2464: couldn't read orphan inode 15 (err -117) [ 101.109416][ T9150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.109436][ T9157] macsec0 (unregistering): left promiscuous mode [ 101.132060][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.193418][ T9165] loop3: detected capacity change from 0 to 512 [ 101.207106][ T9164] loop4: detected capacity change from 0 to 2048 [ 101.216744][ T9165] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.231884][ T9165] EXT4-fs (loop3): mount failed [ 101.240127][ T9164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.261504][ T9164] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 101.276179][ T9164] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 101.288701][ T9164] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.288701][ T9164] [ 101.298526][ T9164] EXT4-fs (loop4): Total free blocks count 0 [ 101.304664][ T9164] EXT4-fs (loop4): Free/Dirty block details [ 101.310641][ T9164] EXT4-fs (loop4): free_blocks=66060288 [ 101.316302][ T9164] EXT4-fs (loop4): dirty_blocks=192 [ 101.321517][ T9164] EXT4-fs (loop4): Block reservation details [ 101.322568][ T9177] capability: warning: `syz.2.2474' uses 32-bit capabilities (legacy support in use) [ 101.327545][ T9164] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 101.365744][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.446025][ T9189] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 101.446025][ T9189] program syz.5.2480 not setting count and/or reply_len properly [ 101.528418][ T9195] loop5: detected capacity change from 0 to 2048 [ 101.559038][ T9195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.608524][ T9195] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2485: bg 0: block 72: padding at end of block bitmap is not set [ 101.658436][ T9211] netlink: '+}[@': attribute type 1 has an invalid length. [ 101.665808][ T9211] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 101.687698][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.702059][ T9213] loop3: detected capacity change from 0 to 128 [ 101.779709][ T9215] bond1: entered promiscuous mode [ 101.784855][ T9215] bond1: entered allmulticast mode [ 101.790502][ T9219] loop5: detected capacity change from 0 to 512 [ 101.810818][ T9219] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 101.824554][ T9215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.860430][ T9215] bond1 (unregistering): Released all slaves [ 101.945879][ T9233] loop3: detected capacity change from 0 to 1764 [ 102.081871][ T9254] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2510'. [ 102.103959][ T9256] loop2: detected capacity change from 0 to 512 [ 102.140037][ T9256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.153552][ T9256] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.206266][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.215516][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.225739][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.240215][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.249248][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.249276][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.249317][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.300850][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.309926][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 102.664077][ T9304] syz.1.2532[9304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.664182][ T9304] syz.1.2532[9304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.690401][ T9304] syz.1.2532[9304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.757116][ T9312] syz.5.2535[9312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.787170][ T9312] syz.5.2535[9312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.817434][ T9312] syz.5.2535[9312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.900943][ T9332] loop5: detected capacity change from 0 to 128 [ 102.952638][ T9338] loop2: detected capacity change from 0 to 128 [ 102.977601][ T9332] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.992025][ T9338] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.993252][ T9345] loop1: detected capacity change from 0 to 512 [ 103.012417][ T9345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.022637][ T9338] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.024529][ T9332] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.079550][ T9345] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2549: bad orphan inode 131083 [ 103.119227][ T9345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.120479][ T9351] loop4: detected capacity change from 0 to 512 [ 103.151495][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.163545][ T6728] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.169954][ T9351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.216316][ T9351] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.349976][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.458545][ T9389] loop3: detected capacity change from 0 to 512 [ 103.521710][ T9389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.534965][ T9389] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.580389][ T9389] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2564: corrupted inode contents [ 103.612809][ T9389] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.2564: mark_inode_dirty error [ 103.673282][ T9421] loop4: detected capacity change from 0 to 128 [ 103.678041][ T9389] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.2564: corrupted inode contents [ 103.705960][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 103.705975][ T29] audit: type=1400 audit(1733616841.391:2907): avc: denied { append } for pid=9416 comm="syz.2.2577" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.731842][ T9389] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2564: mark_inode_dirty error [ 103.742706][ T9427] usb usb1: usbfs: process 9427 (syz.2.2577) did not claim interface 0 before use [ 103.749503][ T29] audit: type=1400 audit(1733616841.431:2908): avc: denied { create } for pid=9388 comm="syz.3.2564" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.775636][ T29] audit: type=1400 audit(1733616841.431:2909): avc: denied { mounton } for pid=9388 comm="syz.3.2564" path="/520/bus/bus/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.820133][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.846548][ T29] audit: type=1400 audit(1733616841.531:2910): avc: denied { write } for pid=9432 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.892869][ T29] audit: type=1400 audit(1733616841.571:2911): avc: denied { bind } for pid=9435 comm="syz.2.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.912457][ T29] audit: type=1400 audit(1733616841.571:2912): avc: denied { node_bind } for pid=9435 comm="syz.2.2595" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.936840][ T29] audit: type=1400 audit(1733616841.581:2913): avc: denied { ioctl } for pid=9438 comm="syz.1.2586" path="socket:[22958]" dev="sockfs" ino=22958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.971547][ T29] audit: type=1400 audit(1733616841.651:2914): avc: denied { ioctl } for pid=9440 comm="syz.4.2588" path="socket:[23864]" dev="sockfs" ino=23864 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.008595][ T29] audit: type=1326 audit(1733616841.681:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 104.032056][ T29] audit: type=1326 audit(1733616841.681:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 104.135792][ T9459] syz.4.2596[9459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.141292][ T9453] loop1: detected capacity change from 0 to 2048 [ 104.182262][ T9453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.206540][ T9453] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.208546][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.225119][ T9453] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 104.228945][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.241070][ T9453] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.241070][ T9453] [ 104.248450][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.258051][ T9453] EXT4-fs (loop1): Total free blocks count 0 [ 104.265446][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.271411][ T9453] EXT4-fs (loop1): Free/Dirty block details [ 104.278861][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.284675][ T9453] EXT4-fs (loop1): free_blocks=2415919104 [ 104.292075][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.297873][ T9453] EXT4-fs (loop1): dirty_blocks=16 [ 104.305188][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.310286][ T9453] EXT4-fs (loop1): Block reservation details [ 104.317677][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.323625][ T9453] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 104.331005][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.344575][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.352087][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.352190][ T9466] loop3: detected capacity change from 0 to 1024 [ 104.359719][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.373507][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.380937][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.388374][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.395913][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.403371][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.408065][ T9466] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 104.410815][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.427497][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.435106][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.442591][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.450043][ T2965] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.459607][ T2965] hid-generic 0000:0000:0000.0005: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 104.469870][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.745600][ T9507] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.753171][ T9507] vhci_hcd: invalid port number 48 [ 104.758356][ T9507] vhci_hcd: default hub control req: 6f6e v203a i0030 l27750 [ 104.805814][ T9515] batadv1: entered promiscuous mode [ 104.811066][ T9515] batadv1: entered allmulticast mode [ 104.908977][ T9519] netlink: 'syz.4.2622': attribute type 10 has an invalid length. [ 104.916993][ T9519] netlink: 'syz.4.2622': attribute type 19 has an invalid length. [ 104.997643][ T9529] loop5: detected capacity change from 0 to 512 [ 105.013021][ T9529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.053833][ T9529] EXT4-fs (loop5): 1 truncate cleaned up [ 105.060190][ T9529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.095912][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.181689][ T9555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.531260][ T9603] loop1: detected capacity change from 0 to 512 [ 105.571400][ T9603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.599171][ T9603] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.626347][ T9614] loop4: detected capacity change from 0 to 2048 [ 105.633072][ T9614] EXT4-fs: Ignoring removed bh option [ 105.647649][ T9614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.666850][ T9614] EXT4-fs error (device loop4): ext4_read_inline_dir:1566: inode #12: block 9: comm syz.4.2665: path /564/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 105.689711][ T9620] loop3: detected capacity change from 0 to 128 [ 105.697235][ T9620] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 105.740930][ T9620] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.743326][ T9624] loop2: detected capacity change from 0 to 2048 [ 105.757908][ T9620] ext2 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.796727][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.806339][ T9624] loop2: p1 < > p3 < > p4 < > [ 105.811125][ T9624] loop2: partition table partially beyond EOD, truncated [ 105.818900][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.829165][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.839985][ T9624] loop2: p3 start 4284289 is beyond EOD, truncated [ 105.910715][ T9635] loop3: detected capacity change from 0 to 512 [ 105.977969][ T9635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.013534][ T9653] loop4: detected capacity change from 0 to 512 [ 106.017804][ T9635] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.032659][ T9653] EXT4-fs: Ignoring removed oldalloc option [ 106.050735][ T9653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2680: Parent and EA inode have the same ino 15 [ 106.071690][ T9653] EXT4-fs (loop4): Remounting filesystem read-only [ 106.079796][ T9653] EXT4-fs (loop4): 1 orphan inode deleted [ 106.088045][ T9653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.100565][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.102539][ T9653] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 106.118124][ T9653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.279872][ T9674] loop5: detected capacity change from 0 to 1024 [ 106.309188][ T9672] ebtables: ebtables: counters copy to user failed while replacing table [ 106.319909][ T9674] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.339129][ T9674] JBD2: no valid journal superblock found [ 106.344955][ T9674] EXT4-fs (loop5): Could not load journal inode [ 106.552777][ T9708] random: crng reseeded on system resumption [ 106.680478][ T9718] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.689188][ T9720] rdma_op ffff8881169c0980 conn xmit_rdma 0000000000000000 [ 106.732926][ T9728] bridge0: port 4(gretap0) entered blocking state [ 106.739454][ T9728] bridge0: port 4(gretap0) entered disabled state [ 106.753260][ T9728] gretap0: entered allmulticast mode [ 106.759352][ T9728] gretap0: entered promiscuous mode [ 106.764941][ T9728] bridge0: port 4(gretap0) entered blocking state [ 106.771620][ T9728] bridge0: port 4(gretap0) entered forwarding state [ 106.806538][ T9734] gretap0: left allmulticast mode [ 106.811622][ T9734] gretap0: left promiscuous mode [ 106.816857][ T9734] bridge0: port 4(gretap0) entered disabled state [ 106.850583][ T9738] loop2: detected capacity change from 0 to 164 [ 106.869596][ T9738] Unsupported NM flag settings (8) [ 106.900580][ T9743] loop4: detected capacity change from 0 to 512 [ 106.927863][ T9743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.977645][ T9743] EXT4-fs (loop4): 1 truncate cleaned up [ 106.981837][ T9755] batadv_slave_1: entered promiscuous mode [ 106.985900][ T9743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.990809][ T9755] batadv_slave_1: left promiscuous mode [ 107.066469][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.080793][ T9766] bridge0: port 3(gretap0) entered blocking state [ 107.087431][ T9766] bridge0: port 3(gretap0) entered disabled state [ 107.094209][ T9766] gretap0: entered allmulticast mode [ 107.100337][ T9766] gretap0: entered promiscuous mode [ 107.108049][ T9766] bridge0: port 3(gretap0) entered blocking state [ 107.114552][ T9766] bridge0: port 3(gretap0) entered forwarding state [ 107.139873][ T9766] gretap0: left allmulticast mode [ 107.145287][ T9766] gretap0: left promiscuous mode [ 107.150698][ T9766] bridge0: port 3(gretap0) entered disabled state [ 107.288239][ T9785] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 107.304401][ T9780] __nla_validate_parse: 21 callbacks suppressed [ 107.304419][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 107.386150][ T9795] bpf_get_probe_write_proto: 5 callbacks suppressed [ 107.386172][ T9795] syz.5.2745[9795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.400270][ T9795] syz.5.2745[9795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.424006][ T9793] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2744'. [ 107.427586][ T9795] syz.5.2745[9795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.871752][ T9845] loop2: detected capacity change from 0 to 1764 [ 107.935451][ T9847] ebtables: ebtables: counters copy to user failed while replacing table [ 108.011264][ T9857] bridge0: port 3(gretap0) entered blocking state [ 108.018078][ T9857] bridge0: port 3(gretap0) entered disabled state [ 108.025114][ T9857] gretap0: entered allmulticast mode [ 108.031033][ T9857] gretap0: entered promiscuous mode [ 108.037922][ T9857] bridge0: port 3(gretap0) entered blocking state [ 108.044408][ T9857] bridge0: port 3(gretap0) entered forwarding state [ 108.051903][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'. [ 108.061051][ T9857] gretap0: left allmulticast mode [ 108.066185][ T9857] gretap0: left promiscuous mode [ 108.071398][ T9857] bridge0: port 3(gretap0) entered disabled state [ 108.290032][ T9881] loop2: detected capacity change from 0 to 2048 [ 108.304267][ T9883] loop1: detected capacity change from 0 to 512 [ 108.341744][ T9881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.354595][ T9883] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2787: corrupted in-inode xattr: invalid ea_ino [ 108.372591][ T9881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.385237][ T9883] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2787: couldn't read orphan inode 15 (err -117) [ 108.396543][ T9881] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 65793 with max blocks 1 with error 28 [ 108.399712][ T9883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.411710][ T9881] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.411710][ T9881] [ 108.433646][ T9881] EXT4-fs (loop2): Total free blocks count 0 [ 108.439890][ T9881] EXT4-fs (loop2): Free/Dirty block details [ 108.445976][ T9881] EXT4-fs (loop2): free_blocks=2415919104 [ 108.451819][ T9881] EXT4-fs (loop2): dirty_blocks=16 [ 108.457189][ T9881] EXT4-fs (loop2): Block reservation details [ 108.463188][ T9881] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 108.469923][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.494472][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.533256][ T9896] bridge0: port 3(gretap0) entered blocking state [ 108.539791][ T9896] bridge0: port 3(gretap0) entered disabled state [ 108.546659][ T9895] syz.1.2790[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.546934][ T9895] syz.1.2790[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.552444][ T9896] gretap0: entered allmulticast mode [ 108.576052][ T9896] gretap0: entered promiscuous mode [ 108.583760][ T9896] bridge0: port 3(gretap0) entered blocking state [ 108.588925][ T9900] loop4: detected capacity change from 0 to 128 [ 108.590248][ T9896] bridge0: port 3(gretap0) entered forwarding state [ 108.603935][ T9895] syz.1.2790[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.604785][ T9901] gretap0: left allmulticast mode [ 108.621403][ T9901] gretap0: left promiscuous mode [ 108.626537][ T9901] bridge0: port 3(gretap0) entered disabled state [ 108.652438][ T9900] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.671483][ T9904] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 108.697866][ T9900] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.733571][ T9900] ext2 filesystem being mounted at /585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.765734][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 108.765751][ T29] audit: type=1400 audit(1733616846.411:3117): avc: denied { map } for pid=9908 comm="syz.2.2794" path="socket:[25620]" dev="sockfs" ino=25620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.795387][ T29] audit: type=1400 audit(1733616846.411:3118): avc: denied { read } for pid=9908 comm="syz.2.2794" path="socket:[25620]" dev="sockfs" ino=25620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.865478][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.932349][ T9919] tipc: Enabling of bearer rejected, failed to enable media [ 108.969149][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 108.985189][ T9925] netlink: 'syz.1.2803': attribute type 15 has an invalid length. [ 109.013472][ T9923] loop3: detected capacity change from 0 to 2048 [ 109.035860][ T9928] geneve0: entered allmulticast mode [ 109.055549][ T9923] loop3: p1 < > p4 [ 109.067934][ T9923] loop3: p4 size 8388608 extends beyond EOD, truncated [ 109.112417][ T29] audit: type=1326 audit(1733616846.791:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 109.137012][ T29] audit: type=1326 audit(1733616846.811:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 109.160652][ T29] audit: type=1326 audit(1733616846.811:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 109.184097][ T29] audit: type=1326 audit(1733616846.811:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz.2.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b74fed9 code=0x7ffc0000 [ 109.297479][ T29] audit: type=1326 audit(1733616846.981:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 109.323927][ T29] audit: type=1326 audit(1733616846.981:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 109.347635][ T29] audit: type=1326 audit(1733616846.981:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 109.370978][ T29] audit: type=1326 audit(1733616846.981:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="syz.3.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 109.397346][ T9957] loop1: detected capacity change from 0 to 512 [ 109.419789][ T9957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.432479][ T9957] EXT4-fs (loop1): 1 truncate cleaned up [ 109.439215][ T9957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.531267][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.673801][ T9978] loop3: detected capacity change from 0 to 164 [ 109.691638][ T9978] Unable to read rock-ridge attributes [ 109.718063][ T9978] Unable to read rock-ridge attributes [ 109.899550][ T9999] syz.1.2839[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.899663][ T9999] syz.1.2839[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.913323][ T9999] syz.1.2839[9999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.038409][T10010] loop4: detected capacity change from 0 to 512 [ 110.080192][T10010] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2844: corrupted in-inode xattr: invalid ea_ino [ 110.137685][T10010] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2844: couldn't read orphan inode 15 (err -117) [ 110.177053][T10010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.311739][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.398664][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 110.410367][T10037] ip6gretap1: entered allmulticast mode [ 110.565778][T10053] syz.5.2865[10053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.654709][T10063] netlink: 'syz.5.2869': attribute type 1 has an invalid length. [ 110.742285][T10071] loop5: detected capacity change from 0 to 2048 [ 110.836617][T10071] Alternate GPT is invalid, using primary GPT. [ 110.842927][T10071] loop5: p1 p2 p3 [ 110.918306][ T3002] Alternate GPT is invalid, using primary GPT. [ 110.924645][ T3002] loop5: p1 p2 p3 [ 110.956508][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 110.970189][ T4041] udevd[4041]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 110.970273][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 111.025132][ T4041] udevd[4041]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 111.031911][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 111.036225][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 111.118740][T10098] batadv_slave_1: entered promiscuous mode [ 111.131195][T10097] batadv_slave_1: left promiscuous mode [ 111.150850][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2888'. [ 111.160157][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 111.234406][T10106] loop5: detected capacity change from 0 to 1024 [ 111.277401][T10106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.356511][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.399886][T10133] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 111.577812][T10161] loop2: detected capacity change from 0 to 1024 [ 111.597965][T10161] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 111.632475][T10167] vlan2: entered promiscuous mode [ 111.843604][T10199] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2930'. [ 111.879276][T10204] loop4: detected capacity change from 0 to 512 [ 111.911055][T10206] loop2: detected capacity change from 0 to 256 [ 111.927886][T10204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.941911][T10204] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.011711][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.047062][T10218] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.089728][T10225] loop4: detected capacity change from 0 to 512 [ 112.092853][T10223] loop5: detected capacity change from 0 to 2048 [ 112.122282][T10225] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.2942: casefold flag without casefold feature [ 112.148435][T10225] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2942: couldn't read orphan inode 15 (err -117) [ 112.157771][T10223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.173626][T10225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.217547][T10223] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.2943: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.289230][T10223] EXT4-fs (loop5): Remounting filesystem read-only [ 112.310693][T10238] loop2: detected capacity change from 0 to 512 [ 112.343024][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.343440][T10238] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.364721][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.425335][ T3309] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 112.449298][T10247] netlink: 'syz.5.2951': attribute type 11 has an invalid length. [ 112.457295][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2951'. [ 112.614342][T10266] loop3: detected capacity change from 0 to 512 [ 112.643396][T10266] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.652540][T10266] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 112.686550][T10266] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 112.721675][T10272] loop4: detected capacity change from 0 to 128 [ 112.735174][T10274] loop5: detected capacity change from 0 to 2048 [ 112.735279][T10279] program syz.2.2965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.748488][T10266] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.766369][T10272] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.805723][T10274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.827301][T10266] System zones: 0-2, 18-18, 34-34 [ 112.832876][T10272] ext4 filesystem being mounted at /623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.882526][T10266] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.925533][ T6728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.938468][T10266] EXT4-fs (loop3): 1 truncate cleaned up [ 112.944572][T10266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.958360][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.979474][T10288] loop2: detected capacity change from 0 to 1024 [ 113.014026][T10288] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.018754][T10294] loop5: detected capacity change from 0 to 128 [ 113.032277][T10288] JBD2: no valid journal superblock found [ 113.038131][T10288] EXT4-fs (loop2): Could not load journal inode [ 113.047320][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.113144][T10299] loop2: detected capacity change from 0 to 512 [ 113.115549][T10300] loop5: detected capacity change from 0 to 164 [ 113.126136][T10290] rdma_op ffff8881020a8980 conn xmit_rdma 0000000000000000 [ 113.165457][T10299] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2975: casefold flag without casefold feature [ 113.196573][T10300] Unsupported NM flag settings (8) [ 113.240660][T10299] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2975: couldn't read orphan inode 15 (err -117) [ 113.289162][T10308] SELinux: syz.4.2979 (10308) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.315261][T10299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.399303][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.599001][T10342] loop4: detected capacity change from 0 to 2048 [ 113.624679][T10345] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 113.655415][T10342] loop4: p1 < > p4 [ 113.659828][T10342] loop4: p4 size 8388608 extends beyond EOD, truncated [ 113.719487][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 113.719996][T10354] loop5: detected capacity change from 0 to 2048 [ 113.776226][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.779649][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 113.840799][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.840884][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 113.880777][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 113.880794][ T29] audit: type=1326 audit(1733616851.561:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 113.908582][T10358] loop4: detected capacity change from 0 to 8192 [ 113.921973][T10367] bpf_get_probe_write_proto: 8 callbacks suppressed [ 113.921988][T10367] syz.2.3006[10367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.938710][ T29] audit: type=1326 audit(1733616851.591:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 113.940533][T10367] syz.2.3006[10367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.974296][T10367] syz.2.3006[10367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.987156][ T29] audit: type=1326 audit(1733616851.671:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 114.022255][ T29] audit: type=1326 audit(1733616851.671:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 114.047108][T10358] syz.4.3003: attempt to access beyond end of device [ 114.047108][T10358] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 114.088788][T10358] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.095792][ T29] audit: type=1326 audit(1733616851.741:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 114.096770][T10358] FAT-fs (loop4): Filesystem has been set read-only [ 114.127104][ T29] audit: type=1326 audit(1733616851.741:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 114.150807][ T29] audit: type=1326 audit(1733616851.741:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 114.174906][T10367] ebtables: ebtables: counters copy to user failed while replacing table [ 114.198629][T10358] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.228974][T10381] loop1: detected capacity change from 0 to 512 [ 114.247964][T10358] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 114.256545][ T29] audit: type=1326 audit(1733616851.921:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 114.273687][T10381] /dev/loop1: Can't open blockdev [ 114.280126][ T29] audit: type=1326 audit(1733616851.921:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 114.290739][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 114.308854][ T29] audit: type=1326 audit(1733616851.921:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67bba4fed9 code=0x7ffc0000 [ 114.489150][T10402] loop4: detected capacity change from 0 to 512 [ 114.580306][T10402] ext4 filesystem being mounted at /633/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.753403][T10428] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.763691][T10428] vhci_hcd: invalid port number 10 [ 114.768890][T10428] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 114.811309][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 114.820341][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 114.851366][T10440] loop5: detected capacity change from 0 to 512 [ 114.983679][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 115.018954][T10440] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.3038: iget: bogus i_mode (0) [ 115.041817][T10440] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3038: couldn't read orphan inode 17 (err -117) [ 115.066369][T10471] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 115.066492][T10470] IPVS: stopping master sync thread 10471 ... [ 115.083134][T10440] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3038: bg 0: block 7: invalid block bitmap [ 115.092200][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3051'. [ 115.272227][T10494] loop3: detected capacity change from 0 to 2048 [ 115.358037][ T3307] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.434159][T10514] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.576827][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'. [ 115.937393][T10568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3092'. [ 115.985184][T10575] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3096'. [ 116.045489][T10586] Process accounting resumed [ 116.148413][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 116.167143][T10603] IPVS: Error joining to the multicast group [ 116.221965][T10612] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 116.258989][T10599] loop2: detected capacity change from 0 to 8192 [ 116.291313][T10620] SELinux: syz.3.3118 (10620) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 116.317740][T10599] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 116.325721][T10599] FAT-fs (loop2): Filesystem has been set read-only [ 116.384767][T10629] loop3: detected capacity change from 0 to 1764 [ 116.391636][T10629] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.431044][T10634] netlink: 'syz.5.3125': attribute type 1 has an invalid length. [ 116.502203][T10646] loop3: detected capacity change from 0 to 2048 [ 116.585431][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.601710][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.385622][T10657] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.684389][T10750] SELinux: failed to load policy [ 117.731419][T10758] pimreg: entered allmulticast mode [ 117.738972][T10758] pimreg: left allmulticast mode [ 117.763999][T10762] loop2: detected capacity change from 0 to 256 [ 117.913157][T10783] pimreg: entered allmulticast mode [ 117.931326][T10783] pimreg: left allmulticast mode [ 118.029556][T10795] netlink: 'syz.5.3199': attribute type 3 has an invalid length. [ 118.091351][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.100737][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.885820][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 118.885875][ T29] audit: type=1400 audit(1733617112.570:3803): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.919094][ T29] audit: type=1400 audit(1733617112.570:3804): avc: denied { prog_load } for pid=10931 comm="syz.1.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 118.938337][ T29] audit: type=1400 audit(1733617112.570:3805): avc: denied { prog_load } for pid=10931 comm="syz.1.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 118.957560][ T29] audit: type=1326 audit(1733617112.570:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 118.981096][ T29] audit: type=1326 audit(1733617112.570:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 119.004728][ T29] audit: type=1326 audit(1733617112.570:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 119.028395][ T29] audit: type=1326 audit(1733617112.570:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 119.051898][ T29] audit: type=1326 audit(1733617112.570:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.1.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 119.075501][ T29] audit: type=1400 audit(1733617112.570:3811): avc: denied { prog_load } for pid=10934 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.094686][ T29] audit: type=1326 audit(1733617112.570:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.1.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea562fed9 code=0x7ffc0000 [ 121.033490][T11244] xt_hashlimit: max too large, truncated to 1048576 [ 122.728428][T11503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 122.734993][T11503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.742521][T11503] vhci_hcd vhci_hcd.0: Device attached [ 122.783496][T11504] vhci_hcd: connection closed [ 122.783651][ T36] vhci_hcd: stop threads [ 122.792694][ T36] vhci_hcd: release socket [ 122.797151][ T36] vhci_hcd: disconnect device [ 123.478939][T11629] xt_hashlimit: max too large, truncated to 1048576 [ 123.898680][ T29] kauditd_printk_skb: 1374 callbacks suppressed [ 123.898697][ T29] audit: type=1400 audit(1733621212.577:5187): avc: denied { map_create } for pid=11707 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.925375][ T29] audit: type=1400 audit(1733621212.587:5188): avc: denied { prog_load } for pid=11707 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.944638][ T29] audit: type=1400 audit(1733621212.587:5189): avc: denied { create } for pid=11707 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 123.965695][ T29] audit: type=1400 audit(1733621212.617:5190): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.989937][ T29] audit: type=1400 audit(1733621212.617:5191): avc: denied { read } for pid=11711 comm="syz.4.3642" dev="nsfs" ino=4026532532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 124.011400][ T29] audit: type=1400 audit(1733621212.617:5192): avc: denied { create } for pid=11711 comm="syz.4.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 124.032029][ T29] audit: type=1400 audit(1733621212.617:5193): avc: denied { read } for pid=11711 comm="syz.4.3642" dev="nsfs" ino=4026532532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 124.053503][ T29] audit: type=1400 audit(1733621212.637:5194): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.077727][ T29] audit: type=1400 audit(1733621212.637:5195): avc: denied { create } for pid=11713 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 124.098242][ T29] audit: type=1400 audit(1733621212.657:5196): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.539397][T11794] xt_ipcomp: unknown flags 12 [ 125.961148][T12071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 125.967777][T12071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.975331][T12071] vhci_hcd vhci_hcd.0: Device attached [ 125.990829][T12071] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.013363][T12071] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 126.019987][T12071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.027668][T12071] vhci_hcd vhci_hcd.0: Device attached [ 126.050594][T12071] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 126.057166][T12071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.064664][T12071] vhci_hcd vhci_hcd.0: Device attached [ 126.085444][T12084] vhci_hcd: connection closed [ 126.085744][T12073] vhci_hcd: connection closed [ 126.095184][ T36] vhci_hcd: stop threads [ 126.096601][T12089] vhci_hcd: connection closed [ 126.099903][ T36] vhci_hcd: release socket [ 126.099921][ T36] vhci_hcd: disconnect device [ 126.127853][ T36] vhci_hcd: stop threads [ 126.132427][ T36] vhci_hcd: release socket [ 126.137096][ T36] vhci_hcd: disconnect device [ 126.150449][ T36] vhci_hcd: stop threads [ 126.154727][ T36] vhci_hcd: release socket [ 126.154967][ T3375] vhci_hcd: vhci_device speed not set [ 126.164544][ T36] vhci_hcd: disconnect device [ 126.254991][T12120] SELinux: syz.5.3839 (12120) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 127.185334][T12294] Process accounting resumed [ 127.507077][T12358] SELinux: syz.2.3954 (12358) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 128.003568][T12442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.028308][T12442] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 128.919857][ T29] kauditd_printk_skb: 1424 callbacks suppressed [ 128.919872][ T29] audit: type=1400 audit(1733621217.597:6621): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.950905][ T29] audit: type=1400 audit(1733621217.607:6622): avc: denied { map_create } for pid=12612 comm="syz.3.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.970279][ T29] audit: type=1400 audit(1733621217.607:6623): avc: denied { prog_load } for pid=12612 comm="syz.3.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.989576][ T29] audit: type=1400 audit(1733621217.607:6624): avc: denied { prog_load } for pid=12612 comm="syz.3.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.011215][ T29] audit: type=1400 audit(1733621217.617:6625): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.038455][ T29] audit: type=1400 audit(1733621217.637:6626): avc: denied { read write } for pid=6728 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.062729][ T29] audit: type=1400 audit(1733621217.647:6627): avc: denied { map_create } for pid=12616 comm="syz.5.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.082069][ T29] audit: type=1400 audit(1733621217.647:6628): avc: denied { prog_load } for pid=12616 comm="syz.5.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.101502][ T29] audit: type=1400 audit(1733621217.657:6629): avc: denied { read write } for pid=6728 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.125862][ T29] audit: type=1400 audit(1733621217.667:6630): avc: denied { prog_load } for pid=12618 comm="syz.5.4080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.377684][T12632] No such timeout policy "syz0" [ 130.384477][T12818] Process accounting resumed [ 131.045350][T12884] xt_hashlimit: max too large, truncated to 1048576 [ 132.827501][T13121] ================================================================== [ 132.835812][T13121] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 132.842271][T13121] [ 132.844594][T13121] write to 0xffffc9000f593bd0 of 4 bytes by task 13113 on cpu 1: [ 132.852322][T13121] pollwake+0xbe/0x110 [ 132.856411][T13121] __wake_up+0x65/0xb0 [ 132.860512][T13121] unix_dgram_peer_wake_relay+0xd4/0xf0 [ 132.866071][T13121] __wake_up_sync_key+0x51/0x80 [ 132.870966][T13121] __unix_dgram_recvmsg+0x3bc/0x860 [ 132.876185][T13121] unix_dgram_recvmsg+0x81/0x90 [ 132.881080][T13121] sock_recvmsg_nosec+0x107/0x140 [ 132.886124][T13121] ____sys_recvmsg+0x271/0x280 [ 132.890923][T13121] do_recvmmsg+0x2aa/0x6d0 [ 132.895349][T13121] __x64_sys_recvmmsg+0xe2/0x170 [ 132.900298][T13121] x64_sys_call+0x2a9a/0x2dc0 [ 132.904993][T13121] do_syscall_64+0xc9/0x1c0 [ 132.909510][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.915426][T13121] [ 132.917753][T13121] read to 0xffffc9000f593bd0 of 4 bytes by task 13121 on cpu 0: [ 132.925388][T13121] do_sys_poll+0x95d/0xc20 [ 132.929826][T13121] __se_sys_ppoll+0x1af/0x1f0 [ 132.934519][T13121] __x64_sys_ppoll+0x67/0x80 [ 132.939132][T13121] x64_sys_call+0x2acc/0x2dc0 [ 132.943815][T13121] do_syscall_64+0xc9/0x1c0 [ 132.948330][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.954244][T13121] [ 132.956572][T13121] value changed: 0x00000000 -> 0x00000001 [ 132.962288][T13121] [ 132.964622][T13121] Reported by Kernel Concurrency Sanitizer on: [ 132.970768][T13121] CPU: 0 UID: 0 PID: 13121 Comm: syz.1.4316 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 132.981536][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.991595][T13121] ==================================================================