last executing test programs: 1m15.338326238s ago: executing program 0 (id=2217): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m15.309324588s ago: executing program 0 (id=2219): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x10}) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.256989139s ago: executing program 0 (id=2233): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 1m15.220649659s ago: executing program 0 (id=2224): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1m15.18554309s ago: executing program 0 (id=2227): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x771, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 1m15.1477622s ago: executing program 0 (id=2229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 59.898462228s ago: executing program 32 (id=2229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 925.644505ms ago: executing program 5 (id=5185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 896.918256ms ago: executing program 5 (id=5188): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 865.037517ms ago: executing program 5 (id=5192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 813.695477ms ago: executing program 5 (id=5194): r0 = msgget$private(0x0, 0x480) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000900)={0x3, "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"}, 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 649.593669ms ago: executing program 5 (id=5209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2b}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) 606.101781ms ago: executing program 4 (id=5212): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x5, 0x58, 0xffffffffffffffff, 0x20078, 0x4, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x2, 0x8, 0x0, 0x805f, 0x0, 0x80000000000004, 0x400000002, 0x2, 0x8000000000000000, 0x8000, 0x955, 0x0, 0x800}) 588.485141ms ago: executing program 5 (id=5214): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 585.703731ms ago: executing program 4 (id=5215): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) personality(0x5000004) 544.524231ms ago: executing program 4 (id=5217): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x1}, 0x108000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc2, 0x0) 455.533203ms ago: executing program 4 (id=5226): eventfd2(0x52, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3004c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 416.473083ms ago: executing program 4 (id=5230): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r1, 0x0, 0x800000000000000}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) 379.673394ms ago: executing program 4 (id=5234): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 326.687384ms ago: executing program 3 (id=5235): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) finit_module(r0, 0x0, 0x2) 325.742654ms ago: executing program 3 (id=5239): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 293.627945ms ago: executing program 1 (id=5240): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 289.443025ms ago: executing program 3 (id=5241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 286.202605ms ago: executing program 1 (id=5242): unshare(0x2040400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, 0x0, 0x0) 251.279956ms ago: executing program 3 (id=5244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000d30000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) 250.772526ms ago: executing program 1 (id=5254): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 218.430946ms ago: executing program 2 (id=5245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) 123.800568ms ago: executing program 1 (id=5246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 91.405938ms ago: executing program 2 (id=5247): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 79.315308ms ago: executing program 3 (id=5248): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x0) 73.640029ms ago: executing program 2 (id=5249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 57.405759ms ago: executing program 1 (id=5250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 55.295669ms ago: executing program 2 (id=5251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='Dg}\x00', 0xfffffffffffffffd) 31.258099ms ago: executing program 1 (id=5252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) 28.630269ms ago: executing program 3 (id=5253): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 509.86µs ago: executing program 2 (id=5255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023484af53b607cc70700"], 0x2c}}, 0x0) 0s ago: executing program 2 (id=5256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) kernel console output (not intermixed with test programs): rom 0 to 512 [ 123.053455][T13272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.066556][T13272] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3187: invalid block [ 123.079035][T13272] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3187: invalid indirect mapped block 4294967295 (level 1) [ 123.101656][T13272] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3187: invalid indirect mapped block 4294967295 (level 1) [ 123.116109][T13272] EXT4-fs (loop3): 2 truncates cleaned up [ 123.123711][T13272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.152832][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.307725][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 123.307739][ T29] audit: type=1400 audit(2000000030.198:2004): avc: denied { override_creds } for pid=13300 comm="syz.2.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.354497][T13304] random: crng reseeded on system resumption [ 123.355140][ T29] audit: type=1400 audit(2000000030.254:2005): avc: denied { read append } for pid=13303 comm="syz.2.3197" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.384462][ T29] audit: type=1400 audit(2000000030.254:2006): avc: denied { ioctl open } for pid=13303 comm="syz.2.3197" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.428391][ T29] audit: type=1400 audit(2000000030.282:2007): avc: denied { firmware_load } for pid=12587 comm="kworker/u8:54" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 123.655361][T13315] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.720788][T13315] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.784868][T13315] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.849391][T13315] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.906166][T13315] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.920491][T13315] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.934333][T13315] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.947257][T13315] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.054286][ T29] audit: type=1400 audit(2000000030.900:2008): avc: denied { ioctl } for pid=13338 comm="syz.5.3207" path="socket:[28932]" dev="sockfs" ino=28932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.074229][T13311] syz.2.3201 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 124.090182][T13311] CPU: 1 UID: 0 PID: 13311 Comm: syz.2.3201 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 124.090209][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.090223][T13311] Call Trace: [ 124.090230][T13311] [ 124.090311][T13311] __dump_stack+0x1d/0x30 [ 124.090334][T13311] dump_stack_lvl+0xe8/0x140 [ 124.090355][T13311] dump_stack+0x15/0x1b [ 124.090426][T13311] dump_header+0x81/0x220 [ 124.090528][T13311] oom_kill_process+0x334/0x3f0 [ 124.090561][T13311] out_of_memory+0x979/0xb80 [ 124.090595][T13311] try_charge_memcg+0x5e6/0x9e0 [ 124.090723][T13311] charge_memcg+0x51/0xc0 [ 124.090756][T13311] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 124.090863][T13311] __read_swap_cache_async+0x1df/0x350 [ 124.090904][T13311] swap_cluster_readahead+0x277/0x3e0 [ 124.090945][T13311] swapin_readahead+0xde/0x6f0 [ 124.091004][T13311] ? __filemap_get_folio+0x4f7/0x6b0 [ 124.091039][T13311] ? swap_cache_get_folio+0x77/0x200 [ 124.091115][T13311] do_swap_page+0x301/0x2430 [ 124.091209][T13311] ? css_rstat_updated+0xcd/0x5b0 [ 124.091249][T13311] ? __pfx_default_wake_function+0x10/0x10 [ 124.091281][T13311] handle_mm_fault+0x9a5/0x2be0 [ 124.091307][T13311] ? mas_walk+0xf2/0x120 [ 124.091346][T13311] do_user_addr_fault+0x636/0x1090 [ 124.091450][T13311] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 124.091521][T13311] exc_page_fault+0x62/0xa0 [ 124.091557][T13311] asm_exc_page_fault+0x26/0x30 [ 124.091645][T13311] RIP: 0033:0x7f3a6a711213 [ 124.091664][T13311] Code: e7 08 00 48 8d 3d 56 e7 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 124.091687][T13311] RSP: 002b:00007ffdcc84fcf8 EFLAGS: 00010293 [ 124.091706][T13311] RAX: 00000000fffffffa RBX: 00007f3a6a905fa0 RCX: 0000000000000000 [ 124.091721][T13311] RDX: 00007ffdcc84fd10 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.091736][T13311] RBP: 00007f3a6a907ba0 R08: 000000002fa0e586 R09: 7fffffffffffffff [ 124.091766][T13311] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e0d4 [ 124.091781][T13311] R13: 00007ffdcc84fe30 R14: ffffffffffffffff R15: 00007ffdcc84fe50 [ 124.091804][T13311] [ 124.305613][T13311] memory: usage 307200kB, limit 307200kB, failcnt 190 [ 124.312409][T13311] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 124.320634][T13311] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 124.328046][T13311] Memory cgroup stats for /syz2: [ 124.347601][T13343] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 124.360551][T13343] pim6reg0: linktype set to 823 [ 124.368804][T13311] cache 0 [ 124.371868][T13311] rss 0 [ 124.372225][T13347] loop3: detected capacity change from 0 to 512 [ 124.374636][T13311] shmem 0 [ 124.374646][T13311] mapped_file 0 [ 124.387473][T13311] dirty 0 [ 124.390462][T13311] writeback 0 [ 124.391159][T13347] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.393798][T13311] workingset_refault_anon 1628 [ 124.410448][T13311] workingset_refault_file 438 [ 124.415234][T13311] swap 192512 [ 124.418634][T13311] swapcached 4096 [ 124.422297][T13311] pgpgin 94585 [ 124.425735][T13311] pgpgout 94583 [ 124.429256][T13311] pgfault 115288 [ 124.433455][T13311] pgmajfault 264 [ 124.437189][T13311] inactive_anon 0 [ 124.440873][T13311] active_anon 4096 [ 124.444634][T13311] inactive_file 0 [ 124.448285][T13311] active_file 4096 [ 124.452087][T13311] unevictable 0 [ 124.455663][T13311] hierarchical_memory_limit 314572800 [ 124.461270][T13311] hierarchical_memsw_limit 9223372036854771712 [ 124.467639][T13311] total_cache 0 [ 124.471114][T13311] total_rss 0 [ 124.474424][T13311] total_shmem 0 [ 124.478205][T13311] total_mapped_file 0 [ 124.482295][T13311] total_dirty 0 [ 124.485834][T13311] total_writeback 0 [ 124.489749][T13311] total_workingset_refault_anon 1628 [ 124.495033][T13311] total_workingset_refault_file 438 [ 124.500240][T13311] total_swap 192512 [ 124.504110][T13311] total_swapcached 4096 [ 124.508379][T13311] total_pgpgin 94585 [ 124.512321][T13311] total_pgpgout 94583 [ 124.516301][T13311] total_pgfault 115288 [ 124.520470][T13311] total_pgmajfault 264 [ 124.524666][T13311] total_inactive_anon 0 [ 124.528818][T13311] total_active_anon 4096 [ 124.533237][T13311] total_inactive_file 0 [ 124.537517][T13311] total_active_file 4096 [ 124.541774][T13311] total_unevictable 0 [ 124.545888][T13311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3201,pid=13311,uid=0 [ 124.560624][T13311] Memory cgroup out of memory: Killed process 13311 (syz.2.3201) total-vm:95676kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 124.617139][T10566] kernel write not supported for file /sg0 (pid: 10566 comm: kworker/0:13) [ 124.705563][T13369] loop3: detected capacity change from 0 to 1764 [ 124.743007][T13375] batadv_slave_0: entered promiscuous mode [ 124.750018][T13375] batadv_slave_0: left promiscuous mode [ 124.784437][T13385] loop3: detected capacity change from 0 to 1024 [ 124.796739][T13385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.820525][T13385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.847568][T13391] loop4: detected capacity change from 0 to 1024 [ 124.867979][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.893682][T13312] syz.2.3201 (13312) used greatest stack depth: 6688 bytes left [ 124.905629][ T29] audit: type=1400 audit(2000000031.704:2009): avc: denied { setattr } for pid=13390 comm="syz.4.3223" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.940434][ T29] audit: type=1400 audit(2000000031.732:2010): avc: denied { compute_member } for pid=13395 comm="syz.1.3225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.006167][ T29] audit: type=1400 audit(2000000031.788:2011): avc: denied { attach_queue } for pid=13408 comm="syz.1.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 125.107699][T13420] loop3: detected capacity change from 0 to 128 [ 125.240947][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 125.269871][T13438] Invalid ELF header magic: != ELF [ 125.441899][T13466] loop2: detected capacity change from 0 to 512 [ 125.454814][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3251'. [ 125.466537][T13466] EXT4-fs (loop2): 1 orphan inode deleted [ 125.473027][T13466] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.483827][T12587] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 125.489459][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 125.493717][T12587] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 1 [ 125.528728][T13475] lo speed is unknown, defaulting to 1000 [ 125.623412][T13510] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 125.638311][ T29] audit: type=1400 audit(2000000032.387:2012): avc: denied { listen } for pid=13512 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.668203][T13514] vhci_hcd: default hub control req: 600e v09fa i0008 l0 [ 125.762677][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.772723][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.939191][T13566] xt_hashlimit: max too large, truncated to 1048576 [ 125.981282][T13570] loop2: detected capacity change from 0 to 1024 [ 125.990435][T13570] EXT4-fs: inline encryption not supported [ 125.998395][T13570] EXT4-fs: Ignoring removed bh option [ 126.044530][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 126.063453][T13585] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3291'. [ 126.265851][T13620] loop5: detected capacity change from 0 to 512 [ 126.274068][T13620] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.280632][T13620] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 126.290474][T13620] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 126.306719][T13620] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3306: attempt to clear invalid blocks 2 len 1 [ 126.321616][T13620] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3306: invalid indirect mapped block 1819239214 (level 0) [ 126.349950][T13620] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3306: invalid indirect mapped block 1819239214 (level 1) [ 126.375797][T13620] EXT4-fs (loop5): 1 truncate cleaned up [ 126.386665][T13620] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 126.396242][T13620] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.3306: Abort forced by user [ 126.407780][T13620] EXT4-fs (loop5): Remounting filesystem read-only [ 126.414593][T13620] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 126.449053][T13642] ipvlan2: entered promiscuous mode [ 126.464717][T13642] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.480264][T13642] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.530574][T13651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.612686][T13670] netlink: 'syz.1.3327': attribute type 3 has an invalid length. [ 126.620948][T13671] netlink: 'syz.5.3326': attribute type 4 has an invalid length. [ 126.628902][T13671] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3326'. [ 126.670057][T13677] SELinux: syz.3.3329 (13677) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 126.744269][T13675] loop4: detected capacity change from 0 to 8192 [ 126.855870][T10532] Process accounting resumed [ 126.980260][T13718] SELinux: syz.3.3347 (13718) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 127.103210][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 127.189713][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 127.263449][T13750] Invalid ELF header magic: != ELF [ 127.332707][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.341982][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.351156][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.366702][T13769] hub 2-0:1.0: USB hub found [ 127.374002][T13769] hub 2-0:1.0: 8 ports detected [ 127.391657][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.395054][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3374'. [ 127.400829][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.418833][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.461681][T13770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3370'. [ 127.573612][T13811] loop2: detected capacity change from 0 to 512 [ 127.586341][T13811] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.592934][T13811] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 127.603081][T13811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 127.630284][T13811] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3386: attempt to clear invalid blocks 2 len 1 [ 127.653415][T13811] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3386: invalid indirect mapped block 1819239214 (level 0) [ 127.668012][T13811] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3386: invalid indirect mapped block 1819239214 (level 1) [ 127.690893][T13811] EXT4-fs (loop2): 1 truncate cleaned up [ 127.701927][T13811] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 127.713909][T13811] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3386: Abort forced by user [ 127.725007][T13811] EXT4-fs (loop2): Remounting filesystem read-only [ 127.731711][T13811] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 127.855467][T13851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.951507][T13869] SELinux: policydb table sizes (-1459191170,621020704) do not match mine (6,7) [ 127.960902][T13869] SELinux: failed to load policy [ 127.984380][T13875] SELinux: syz.2.3413 (13875) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 128.338624][T13932] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.350791][T13932] bond0: (slave lo): Error: Device can not be enslaved while up [ 128.390809][T13931] loop3: detected capacity change from 0 to 4096 [ 128.411145][T13931] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.3436: corrupted inode contents [ 128.433581][T13931] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #15: comm syz.3.3436: mark_inode_dirty error [ 128.472592][T13931] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.3436: corrupted inode contents [ 128.548155][T13931] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3436: mark_inode_dirty error [ 128.634640][T13931] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.3436: corrupted inode contents [ 128.668709][T13931] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.3436: mark_inode_dirty error [ 128.705773][T13931] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.3436: corrupted inode contents [ 128.748422][T13931] EXT4-fs error (device loop3): ext4_truncate:4597: inode #15: comm syz.3.3436: mark_inode_dirty error [ 128.790074][T13931] EXT4-fs error (device loop3) in ext4_setattr:5986: Corrupt filesystem [ 128.819697][T13942] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.3436: corrupted inode contents [ 128.869198][T11662] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 128.951681][T13953] ipvlan2: entered promiscuous mode [ 128.967763][T13953] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 128.986978][T13953] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.181373][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 129.181393][ T29] audit: type=1326 audit(2000000035.698:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.3.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7d77e9a9 code=0x7ffc0000 [ 129.211261][ T29] audit: type=1326 audit(2000000035.698:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.3.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7d77e9a9 code=0x7ffc0000 [ 129.281076][T13962] loop2: detected capacity change from 0 to 8192 [ 129.350294][ T29] audit: type=1326 audit(2000000035.698:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.3.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fae7d77e9a9 code=0x7ffc0000 [ 129.373836][ T29] audit: type=1326 audit(2000000035.698:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.3.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7d77e9a9 code=0x7ffc0000 [ 129.397421][ T29] audit: type=1326 audit(2000000035.698:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.3.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7d77e9a9 code=0x7ffc0000 [ 129.543249][T13981] hub 2-0:1.0: USB hub found [ 129.562211][T13981] hub 2-0:1.0: 8 ports detected [ 129.940754][ T29] audit: type=1326 audit(2000000036.400:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 129.964538][ T29] audit: type=1326 audit(2000000036.409:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 129.988226][ T29] audit: type=1326 audit(2000000036.409:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 130.055852][ T29] audit: type=1326 audit(2000000036.484:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 130.088158][ T29] audit: type=1400 audit(2000000036.540:2112): avc: denied { prog_load } for pid=14049 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.153800][T13936] syz.5.3439 (13936) used greatest stack depth: 5984 bytes left [ 130.301753][T14078] loop5: detected capacity change from 0 to 2048 [ 130.338373][T14078] EXT4-fs (loop5): failed to initialize system zone (-117) [ 130.375208][T14078] EXT4-fs (loop5): mount failed [ 130.458561][T14106] netlink: 'syz.2.3501': attribute type 1 has an invalid length. [ 130.489656][T14111] loop3: detected capacity change from 0 to 1024 [ 130.506283][T14111] EXT4-fs: Ignoring removed orlov option [ 130.543447][T14119] loop2: detected capacity change from 0 to 1024 [ 130.634063][T14119] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.743059][T14161] loop4: detected capacity change from 0 to 1024 [ 130.749870][T14161] EXT4-fs: inline encryption not supported [ 130.762458][T14161] EXT4-fs: Ignoring removed bh option [ 130.841715][T14172] loop5: detected capacity change from 0 to 2048 [ 130.866114][T14177] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 131.021364][T14205] SELinux: policydb version 51586048 does not match my version range 15-34 [ 131.039467][T14211] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 131.073834][T14205] SELinux: failed to load policy [ 131.146711][T14233] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 131.167790][T14233] team0: Port device geneve1 added [ 131.262035][T14248] binfmt_misc: register: failed to install interpreter file ./file2 [ 131.272290][T14250] random: crng reseeded on system resumption [ 131.351834][T14261] lo speed is unknown, defaulting to 1000 [ 131.366413][T14264] loop4: detected capacity change from 0 to 2048 [ 131.406369][T14264] EXT4-fs (loop4): failed to initialize system zone (-117) [ 131.413862][T14264] EXT4-fs (loop4): mount failed [ 131.462286][T14296] loop3: detected capacity change from 0 to 2048 [ 131.515268][T14305] loop4: detected capacity change from 0 to 128 [ 131.523380][T14305] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.537381][T14305] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.595743][T12587] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.653785][T14334] loop5: detected capacity change from 0 to 512 [ 131.675890][T14337] loop3: detected capacity change from 0 to 512 [ 131.678320][T14334] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.694740][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.712341][T14334] EXT4-fs (loop5): 1 truncate cleaned up [ 131.712323][T14337] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.721908][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.737808][T14337] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.747070][T14337] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.795337][T14337] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 131.816700][T14337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3581: bg 0: block 40: padding at end of block bitmap is not set [ 131.835552][T14356] netlink: 'syz.1.3589': attribute type 10 has an invalid length. [ 131.844229][T14356] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.852526][T14356] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.860805][T14356] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.861374][T14337] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 131.869042][T14356] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.874959][T14356] team0: Port device geneve1 added [ 131.894748][T14337] EXT4-fs (loop3): 1 truncate cleaned up [ 131.975779][T14375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.984245][T14375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.011867][T14377] netlink: 'syz.3.3595': attribute type 3 has an invalid length. [ 132.113053][T14394] loop2: detected capacity change from 0 to 512 [ 132.124362][T14394] EXT4-fs: Ignoring removed nobh option [ 132.143771][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3602: corrupted inode contents [ 132.180910][T14394] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3602: mark_inode_dirty error [ 132.215763][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3602: corrupted inode contents [ 132.242716][T14394] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3602: mark_inode_dirty error [ 132.270363][T14394] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3602: Failed to acquire dquot type 0 [ 132.295538][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3602: corrupted inode contents [ 132.308684][T14394] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3602: mark_inode_dirty error [ 132.324818][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3602: corrupted inode contents [ 132.349370][T14394] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3602: mark_inode_dirty error [ 132.375240][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3602: corrupted inode contents [ 132.401972][T14394] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 132.420994][T14394] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3602: corrupted inode contents [ 132.434455][T14394] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3602: mark_inode_dirty error [ 132.446111][T14394] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 132.457010][T14394] EXT4-fs (loop2): 1 truncate cleaned up [ 132.463343][T14394] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.628081][T14427] netlink: 'syz.2.3616': attribute type 21 has an invalid length. [ 132.636880][T14427] __nla_validate_parse: 8 callbacks suppressed [ 132.636897][T14427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3616'. [ 132.652474][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3616'. [ 132.715526][T14432] loop3: detected capacity change from 0 to 1024 [ 132.745739][T14434] loop2: detected capacity change from 0 to 2048 [ 132.759848][T14432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.790503][T14432] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.800513][T14446] lo speed is unknown, defaulting to 1000 [ 132.842352][T14434] EXT4-fs (loop2): shut down requested (0) [ 132.874081][T14434] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 132.885528][T14434] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 132.888261][T14432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 132.943068][T14432] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3618: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.958855][T14432] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.3618: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.988941][T14482] loop2: detected capacity change from 0 to 2048 [ 133.008535][T14432] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3618: Failed to acquire dquot type 0 [ 133.031920][T14432] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 133.041782][T14482] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3627: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 133.059058][T14432] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3618: mark_inode_dirty error [ 133.078126][T14432] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 133.079180][T14482] EXT4-fs (loop2): Remounting filesystem read-only [ 133.091836][T14432] EXT4-fs (loop3): 1 orphan inode deleted [ 133.102881][T14489] geneve1: entered promiscuous mode [ 133.109498][T12587] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.112503][T14489] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 133.131406][T12587] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 0 [ 133.147077][T14489] team0: Device macvtap1 is already an upper device of the team interface [ 133.158797][T14489] geneve1: left promiscuous mode [ 133.171632][T11662] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 133.187912][T11662] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 133.199189][T11662] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 133.248309][T14503] loop2: detected capacity change from 0 to 2048 [ 133.266270][T14503] EXT4-fs (loop2): failed to initialize system zone (-117) [ 133.287079][T14503] EXT4-fs (loop2): mount failed [ 133.309124][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 133.347854][T14523] loop5: detected capacity change from 0 to 512 [ 133.359679][T14523] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.385493][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'. [ 133.394786][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'. [ 133.406042][T14523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 133.414439][T14523] System zones: 1-12 [ 133.422370][T14523] EXT4-fs (loop5): 1 orphan inode deleted [ 133.425121][T14534] lo speed is unknown, defaulting to 1000 [ 133.428250][T14523] EXT4-fs (loop5): 1 truncate cleaned up [ 133.443365][T14538] usb usb1: usbfs: process 14538 (syz.3.3645) did not claim interface 0 before use [ 133.603085][T14581] loop2: detected capacity change from 0 to 512 [ 133.630674][T14581] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.658555][T14581] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.3653: bad orphan inode 13 [ 133.705851][T14581] ext4_test_bit(bit=12, block=18) = 1 [ 133.711305][T14581] is_bad_inode(inode)=0 [ 133.715645][T14581] NEXT_ORPHAN(inode)=2130706432 [ 133.720597][T14581] max_ino=32 [ 133.723879][T14581] i_nlink=1 [ 133.732737][T14581] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 133.748047][T14593] loop5: detected capacity change from 0 to 512 [ 133.755169][T14593] EXT4-fs: Ignoring removed nobh option [ 133.761386][T14581] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 133.771925][T14581] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 133.781840][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3658: corrupted inode contents [ 133.803326][T14593] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3658: mark_inode_dirty error [ 133.827976][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3658: corrupted inode contents [ 133.841610][T14593] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3658: mark_inode_dirty error [ 133.854574][T14593] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3658: Failed to acquire dquot type 0 [ 133.877776][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3658: corrupted inode contents [ 133.889919][T14593] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3658: mark_inode_dirty error [ 133.903254][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3658: corrupted inode contents [ 133.915457][T14593] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3658: mark_inode_dirty error [ 133.929556][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3658: corrupted inode contents [ 133.941775][T14593] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 133.951949][T14593] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3658: corrupted inode contents [ 133.964047][T14593] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3658: mark_inode_dirty error [ 133.977249][T14593] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 133.986718][T14593] EXT4-fs (loop5): 1 truncate cleaned up [ 133.994347][T14593] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.269262][T14632] Falling back ldisc for ttyS3. [ 134.329148][T14652] lo speed is unknown, defaulting to 1000 [ 134.361567][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 134.402694][T14689] loop4: detected capacity change from 0 to 512 [ 134.409657][T14689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.421469][T14689] EXT4-fs (loop4): 1 truncate cleaned up [ 134.488437][T14701] loop4: detected capacity change from 0 to 128 [ 134.498332][T14701] ext4 filesystem being mounted at /708/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.574410][T14709] C: entered promiscuous mode [ 134.579221][T14709] team_slave_1: entered promiscuous mode [ 134.587286][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 134.587302][ T29] audit: type=1326 audit(2000000040.749:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14712 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74118be9a9 code=0x7ffc0000 [ 134.595069][T14709] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 134.636754][T14709] team0: Device macvtap1 is already an upper device of the team interface [ 134.661560][ T29] audit: type=1326 audit(2000000040.787:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14712 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f74118be9a9 code=0x7ffc0000 [ 134.685097][ T29] audit: type=1326 audit(2000000040.787:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14712 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74118be9a9 code=0x7ffc0000 [ 134.708830][ T29] audit: type=1326 audit(2000000040.796:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14712 comm="syz.4.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74118be9a9 code=0x7ffc0000 [ 134.732719][ T29] audit: type=1326 audit(2000000040.871:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.756314][ T29] audit: type=1326 audit(2000000040.871:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.779924][ T29] audit: type=1326 audit(2000000040.880:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.803690][ T29] audit: type=1326 audit(2000000040.880:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.827330][ T29] audit: type=1326 audit(2000000040.880:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.851074][ T29] audit: type=1326 audit(2000000040.880:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.1.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 134.885695][T14709] C: left promiscuous mode [ 134.890274][T14709] team_slave_1: left promiscuous mode [ 134.930601][T14729] lo speed is unknown, defaulting to 1000 [ 134.989768][T14755] openvswitch: netlink: Message has 6 unknown bytes. [ 135.019807][T14758] SET target dimension over the limit! [ 135.075634][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 135.098385][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 135.171597][T14772] loop2: detected capacity change from 0 to 128 [ 135.275571][T14786] team_slave_0: entered promiscuous mode [ 135.281304][T14786] team_slave_1: entered promiscuous mode [ 135.288282][T14786] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 135.300445][T14786] team0: Device macvtap1 is already an upper device of the team interface [ 135.310938][T14786] team_slave_0: left promiscuous mode [ 135.316517][T14786] team_slave_1: left promiscuous mode [ 135.322314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.330578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.418481][T14792] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.428118][T14792] bridge0: left promiscuous mode [ 135.460188][T14792] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.478830][ T23] lo speed is unknown, defaulting to 1000 [ 135.484698][ T23] syz0: Port: 1 Link DOWN [ 135.500195][T14798] lo: entered promiscuous mode [ 135.519926][T14798] tunl0: entered promiscuous mode [ 135.539352][T14798] gre0: entered promiscuous mode [ 135.546621][T14798] gretap0: entered promiscuous mode [ 135.553668][T14798] erspan0: entered promiscuous mode [ 135.559849][T14798] ip_vti0: entered promiscuous mode [ 135.565795][T14798] ip6_vti0: entered promiscuous mode [ 135.571987][T14798] sit0: entered promiscuous mode [ 135.578942][T14798] ip6tnl0: entered promiscuous mode [ 135.584986][T14798] ip6gre0: entered promiscuous mode [ 135.591006][T14798] syz_tun: entered promiscuous mode [ 135.597165][T14798] ip6gretap0: entered promiscuous mode [ 135.603910][T14798] bridge0: entered promiscuous mode [ 135.609627][T14798] vcan0: entered promiscuous mode [ 135.615232][T14798] bond0: entered promiscuous mode [ 135.620379][T14798] bond_slave_0: entered promiscuous mode [ 135.626226][T14798] bond_slave_1: entered promiscuous mode [ 135.632096][T14798] dummy0: entered promiscuous mode [ 135.638321][T14798] team0: entered promiscuous mode [ 135.643386][T14798] C: entered promiscuous mode [ 135.648236][T14798] team_slave_1: entered promiscuous mode [ 135.654082][T14798] geneve1: entered promiscuous mode [ 135.660731][T14798] nlmon0: entered promiscuous mode [ 135.666361][T14798] caif0: entered promiscuous mode [ 135.672914][T14798] batadv0: entered promiscuous mode [ 135.678310][T14798] vxcan0: entered promiscuous mode [ 135.683771][T14798] vxcan1: entered promiscuous mode [ 135.689019][T14798] veth0: entered promiscuous mode [ 135.694324][T14798] veth1: entered promiscuous mode [ 135.699464][T14798] wg0: entered promiscuous mode [ 135.704536][T14798] wg1: entered promiscuous mode [ 135.709448][T14798] wg2: entered promiscuous mode [ 135.714580][T14798] veth0_to_bridge: entered promiscuous mode [ 135.720751][T14798] veth1_to_bridge: entered promiscuous mode [ 135.727027][T14798] veth0_to_bond: entered promiscuous mode [ 135.732898][T14798] veth1_to_bond: entered promiscuous mode [ 135.738943][T14798] veth0_to_team: entered promiscuous mode [ 135.745192][T14798] veth1_to_team: entered promiscuous mode [ 135.751090][T14798] veth0_to_batadv: entered promiscuous mode [ 135.757160][T14798] batadv_slave_0: entered promiscuous mode [ 135.763039][T14798] veth1_to_batadv: entered promiscuous mode [ 135.769228][T14798] batadv_slave_1: entered promiscuous mode [ 135.775159][T14798] xfrm0: entered promiscuous mode [ 135.780369][T14798] veth0_to_hsr: entered promiscuous mode [ 135.786329][T14798] veth1_to_hsr: entered promiscuous mode [ 135.792241][T14798] hsr0: entered promiscuous mode [ 135.797242][T14798] veth1_virt_wifi: entered promiscuous mode [ 135.803573][T14798] veth0_virt_wifi: entered promiscuous mode [ 135.810010][T14798] vlan1: entered promiscuous mode [ 135.815210][T14798] macvlan0: entered promiscuous mode [ 135.820621][T14798] macvlan1: entered promiscuous mode [ 135.826023][T14798] ipvlan0: entered promiscuous mode [ 135.831534][T14798] ipvlan1: entered promiscuous mode [ 135.836907][T14798] macvtap0: entered promiscuous mode [ 135.842368][T14798] macsec0: entered promiscuous mode [ 135.847827][T14798] geneve0: entered promiscuous mode [ 135.853386][T14798] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.862098][T14798] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.870533][T14798] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.879100][T14798] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.888381][T14798] macvlan2: entered promiscuous mode [ 135.893954][T14798] gtp0: entered promiscuous mode [ 135.898957][T14798] vxlan0: entered promiscuous mode [ 135.904247][T14798] macvlan3: entered promiscuous mode [ 135.909743][T14798] netdevsim netdevsim1 eth0: entered promiscuous mode [ 135.916830][T14798] netdevsim netdevsim1 eth1: entered promiscuous mode [ 135.923723][T14798] netdevsim netdevsim1 eth2: entered promiscuous mode [ 135.930686][T14798] netdevsim netdevsim1 eth3: entered promiscuous mode [ 135.954194][T14800] lo speed is unknown, defaulting to 1000 [ 136.004636][T14846] netlink: 'syz.2.3727': attribute type 2 has an invalid length. [ 136.012485][T14846] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 136.020350][T14846] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3727'. [ 136.081283][T14850] loop5: detected capacity change from 0 to 2048 [ 136.113953][T14850] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3729: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 136.141646][T14850] EXT4-fs (loop5): Remounting filesystem read-only [ 136.244551][T14864] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 136.260743][T14864] team0: Device macvtap1 is already an upper device of the team interface [ 136.343342][T14882] loop2: detected capacity change from 0 to 1024 [ 136.364195][T14882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.394669][T14894] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3744'. [ 136.431287][T14882] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.467407][T14882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 136.485131][T14882] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3738: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.551199][T14882] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.3738: lblock 0 mapped to illegal pblock 48 (length 1) [ 136.633980][T14882] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3738: Failed to acquire dquot type 0 [ 136.648133][T14882] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 136.671316][T14882] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3738: mark_inode_dirty error [ 136.702468][T14882] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 136.714468][T14882] EXT4-fs (loop2): 1 orphan inode deleted [ 136.729114][ T158] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.776212][T14926] team_slave_0: entered promiscuous mode [ 136.781970][T14926] team_slave_1: entered promiscuous mode [ 136.787694][T14926] geneve1: entered promiscuous mode [ 136.795960][ T158] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 136.815384][ T9748] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.834362][T14926] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 136.842930][ T9748] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 136.859145][ T9748] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 136.863513][T14926] team0: Device macvtap1 is already an upper device of the team interface [ 136.903576][T14926] team_slave_0: left promiscuous mode [ 136.909220][T14926] team_slave_1: left promiscuous mode [ 136.914661][T14926] geneve1: left promiscuous mode [ 137.082730][T14956] loop3: detected capacity change from 0 to 1024 [ 137.156568][T14956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 137.203185][T14967] lo: left promiscuous mode [ 137.210309][T14956] EXT4-fs (loop3): Remounting filesystem read-only [ 137.216978][T14956] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 137.219698][T14967] tunl0: left promiscuous mode [ 137.248742][T14967] gre0: left promiscuous mode [ 137.253982][T14967] gretap0: left promiscuous mode [ 137.260742][T14967] erspan0: left promiscuous mode [ 137.265984][T14967] ip_vti0: left promiscuous mode [ 137.271139][T14967] ip6_vti0: left promiscuous mode [ 137.276645][T14967] sit0: left promiscuous mode [ 137.302540][T14967] ip6tnl0: left promiscuous mode [ 137.352652][T14967] ip6gre0: left promiscuous mode [ 137.366740][T14967] syz_tun: left promiscuous mode [ 137.373246][T14983] loop5: detected capacity change from 0 to 2048 [ 137.379838][T14967] ip6gretap0: left promiscuous mode [ 137.382121][T14987] program syz.2.3780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.391010][T14983] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.394494][T14987] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 137.409378][T14967] bridge0: left promiscuous mode [ 137.424309][T14967] vcan0: left promiscuous mode [ 137.443891][T14967] bond0: left promiscuous mode [ 137.454804][T14967] team0: left promiscuous mode [ 137.474463][T14967] dummy0: left promiscuous mode [ 137.479564][T14967] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 137.530780][T14997] netlink: 'syz.4.3787': attribute type 3 has an invalid length. [ 137.551996][T11044] EXT4-fs unmount: 47 callbacks suppressed [ 137.552012][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.725295][T15026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.743297][T15026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.967454][T15054] tipc: Started in network mode [ 137.972460][T15054] tipc: Node identity ac141413, cluster identity 4711 [ 137.989499][T15054] tipc: New replicast peer: 10.1.1.2 [ 137.995090][T15054] tipc: Enabled bearer , priority 10 [ 138.007484][T15056] loop3: detected capacity change from 0 to 1024 [ 138.024217][T15056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.045756][T15056] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.066990][T15056] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3810: path /184/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 138.124222][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.213941][T15068] netlink: 'syz.1.3813': attribute type 2 has an invalid length. [ 138.221893][T15068] netlink: 'syz.1.3813': attribute type 1 has an invalid length. [ 138.229686][T15068] __nla_validate_parse: 9 callbacks suppressed [ 138.229702][T15068] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3813'. [ 138.315081][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3815'. [ 138.360090][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3815'. [ 138.665891][T15076] lo speed is unknown, defaulting to 1000 [ 138.772024][T15112] lo speed is unknown, defaulting to 1000 [ 138.916605][T15147] lo speed is unknown, defaulting to 1000 [ 138.985460][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3831'. [ 139.119673][T15120] loop2: detected capacity change from 0 to 32768 [ 139.154751][T15189] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 139.162334][T15120] loop2: p1 p2 p3 < p5 p6 p7 > [ 139.168584][T15189] team0: Device macvtap1 is already an upper device of the team interface [ 139.178266][T15120] loop2: p2 size 16775168 extends beyond EOD, truncated [ 139.186819][T10566] tipc: Node number set to 2886997011 [ 139.196413][T15120] loop2: p5 start 4294970168 is beyond EOD, truncated [ 139.205843][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3838'. [ 139.258548][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3839'. [ 139.268829][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3839'. [ 139.530267][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3852'. [ 139.543161][T15245] lo: entered promiscuous mode [ 139.548982][T15245] tunl0: entered promiscuous mode [ 139.549122][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3852'. [ 139.558801][T15245] gre0: entered promiscuous mode [ 139.583501][T15245] gretap0: entered promiscuous mode [ 139.596210][T15245] erspan0: entered promiscuous mode [ 139.606928][T15245] ip_vti0: entered promiscuous mode [ 139.616413][T15245] ip6_vti0: entered promiscuous mode [ 139.624434][T15245] sit0: entered promiscuous mode [ 139.633820][T15245] ip6tnl0: entered promiscuous mode [ 139.642736][T15245] ip6gre0: entered promiscuous mode [ 139.654645][T15245] syz_tun: entered promiscuous mode [ 139.670643][T15245] ip6gretap0: entered promiscuous mode [ 139.681888][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.689227][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.698902][T15245] bridge0: entered promiscuous mode [ 139.709345][T15245] vcan0: entered promiscuous mode [ 139.717343][T15245] bond0: entered promiscuous mode [ 139.722499][T15245] bond_slave_0: entered promiscuous mode [ 139.728352][T15245] bond_slave_1: entered promiscuous mode [ 139.736114][T15245] team0: entered promiscuous mode [ 139.741317][T15245] team_slave_0: entered promiscuous mode [ 139.747270][T15245] team_slave_1: entered promiscuous mode [ 139.758722][T15245] dummy0: entered promiscuous mode [ 139.765010][T15269] netlink: 'syz.3.3864': attribute type 10 has an invalid length. [ 139.772998][T15245] nlmon0: entered promiscuous mode [ 139.779345][T15245] caif0: entered promiscuous mode [ 139.784507][T15245] batadv0: entered promiscuous mode [ 139.791617][T15245] vxcan0: entered promiscuous mode [ 139.797567][T15245] vxcan1: entered promiscuous mode [ 139.803417][T15245] veth0: entered promiscuous mode [ 139.810548][T15245] veth1: entered promiscuous mode [ 139.817706][T15245] wg0: entered promiscuous mode [ 139.824148][T15245] wg1: entered promiscuous mode [ 139.830413][T15245] wg2: entered promiscuous mode [ 139.836466][T15245] veth0_to_bridge: entered promiscuous mode [ 139.845362][T15245] veth1_to_bridge: entered promiscuous mode [ 139.854521][T15245] veth0_to_bond: entered promiscuous mode [ 139.862214][T15245] veth1_to_bond: entered promiscuous mode [ 139.869631][T15245] veth0_to_team: entered promiscuous mode [ 139.878305][T15245] veth1_to_team: entered promiscuous mode [ 139.886141][T15245] veth0_to_batadv: entered promiscuous mode [ 139.893307][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.900822][T15245] batadv_slave_0: entered promiscuous mode [ 139.908029][T15245] veth1_to_batadv: entered promiscuous mode [ 139.915353][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.922791][T15245] batadv_slave_1: entered promiscuous mode [ 139.930033][T15245] xfrm0: entered promiscuous mode [ 139.937557][T15245] veth0_to_hsr: entered promiscuous mode [ 139.945110][T15245] veth1_to_hsr: entered promiscuous mode [ 139.952745][T15245] hsr0: entered promiscuous mode [ 139.958744][T15245] veth1_virt_wifi: entered promiscuous mode [ 139.965868][T15245] veth0_virt_wifi: entered promiscuous mode [ 139.977266][T15245] vlan0: entered promiscuous mode [ 139.982724][T15245] vlan1: entered promiscuous mode [ 139.988152][T15245] macvlan0: entered promiscuous mode [ 139.994613][T15245] macvlan1: entered promiscuous mode [ 140.000879][T15245] ipvlan0: entered promiscuous mode [ 140.006209][T15245] ipvlan1: entered promiscuous mode [ 140.013793][T15245] macvtap0: entered promiscuous mode [ 140.020113][T15245] macsec0: entered promiscuous mode [ 140.026769][T15245] geneve0: entered promiscuous mode [ 140.033395][T15245] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.041958][T15245] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.050588][T15245] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.059085][T15245] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.067819][T15245] geneve1: entered promiscuous mode [ 140.074232][T15245] netdevsim netdevsim5 eth0: entered promiscuous mode [ 140.081099][T15245] netdevsim netdevsim5 eth1: entered promiscuous mode [ 140.088315][T15245] netdevsim netdevsim5 eth2: entered promiscuous mode [ 140.095430][T15245] netdevsim netdevsim5 eth3: entered promiscuous mode [ 140.104933][T15269] team0: Device hsr_slave_0 failed to register rx_handler [ 140.130777][T15267] lo speed is unknown, defaulting to 1000 [ 140.168042][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3867'. [ 140.170859][T15290] loop2: detected capacity change from 0 to 512 [ 140.230840][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 140.230857][ T29] audit: type=1400 audit(2000000046.034:2455): avc: denied { map } for pid=15300 comm="syz.4.3871" path="socket:[34183]" dev="sockfs" ino=34183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.260639][ T29] audit: type=1400 audit(2000000046.034:2456): avc: denied { read } for pid=15300 comm="syz.4.3871" path="socket:[34183]" dev="sockfs" ino=34183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.286716][T15307] loop3: detected capacity change from 0 to 256 [ 140.293400][T15290] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 140.317726][ T29] audit: type=1400 audit(2000000046.109:2457): avc: denied { mount } for pid=15305 comm="syz.3.3873" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 140.323102][T15290] EXT4-fs (loop2): mount failed [ 140.342217][ T29] audit: type=1400 audit(2000000046.109:2458): avc: denied { unmount } for pid=11662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 140.411227][ T29] audit: type=1400 audit(2000000046.203:2459): avc: denied { create } for pid=15324 comm="syz.5.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.431183][ T29] audit: type=1400 audit(2000000046.203:2460): avc: denied { ioctl } for pid=15324 comm="syz.5.3877" path="socket:[33267]" dev="sockfs" ino=33267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.486704][ T29] audit: type=1400 audit(2000000046.203:2461): avc: denied { create } for pid=15328 comm="syz.5.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.506374][ T29] audit: type=1400 audit(2000000046.203:2462): avc: denied { connect } for pid=15328 comm="syz.5.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.526010][ T29] audit: type=1400 audit(2000000046.203:2463): avc: denied { read } for pid=15328 comm="syz.5.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.545469][ T29] audit: type=1400 audit(2000000046.203:2464): avc: denied { create } for pid=15325 comm="syz.3.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.648554][T15346] lo speed is unknown, defaulting to 1000 [ 140.665420][T15349] loop4: detected capacity change from 0 to 2048 [ 140.715969][T15349] loop4: p1 < > p4 [ 140.727587][T15349] loop4: p4 size 8388608 extends beyond EOD, truncated [ 140.770158][T10566] kernel write not supported for file /sg0 (pid: 10566 comm: kworker/0:13) [ 140.968475][T15422] lo speed is unknown, defaulting to 1000 [ 141.139718][T15443] infiniband syz1: set down [ 141.144421][T15443] infiniband syz1: added bridge0 [ 141.168835][T15443] RDS/IB: syz1: added [ 141.185651][T15443] smc: adding ib device syz1 with port count 1 [ 141.191914][T15443] smc: ib device syz1 port 1 has pnetid [ 141.454983][T15492] loop5: detected capacity change from 0 to 1024 [ 141.461839][T15492] EXT4-fs: Ignoring removed orlov option [ 141.487417][T15492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.517436][T15492] EXT4-fs: Ignoring sb option on remount [ 141.523168][T15492] EXT4-fs: Ignoring removed orlov option [ 141.529415][T15492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.536306][T15492] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 141.544493][T15492] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 141.572295][T15510] netlink: 'syz.1.3937': attribute type 10 has an invalid length. [ 141.589197][T15510] team0: Device hsr_slave_0 failed to register rx_handler [ 141.589555][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.920641][T15574] IPv6: Can't replace route, no match found [ 142.023770][T10532] kernel write not supported for file /sg0 (pid: 10532 comm: kworker/1:5) [ 142.149571][T15615] loop5: detected capacity change from 0 to 512 [ 142.182530][T15620] random: crng reseeded on system resumption [ 142.191379][T15615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.218229][T15615] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.243376][T15615] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3985: bg 0: block 217: padding at end of block bitmap is not set [ 142.360898][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.404144][T15639] loop4: detected capacity change from 0 to 1024 [ 142.429785][T15639] EXT4-fs: Ignoring removed orlov option [ 142.462146][T15639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.548060][T15639] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3992: Allocating blocks 257-513 which overlap fs metadata [ 142.565109][T15650] netlink: 'syz.2.3996': attribute type 21 has an invalid length. [ 142.598805][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.728338][T15679] lo: entered promiscuous mode [ 142.734275][T15679] tunl0: entered promiscuous mode [ 142.743631][T15679] gre0: entered promiscuous mode [ 142.750519][T15679] gretap0: entered promiscuous mode [ 142.751190][T15683] netlink: 'syz.5.4009': attribute type 4 has an invalid length. [ 142.764539][T15679] ip_vti0: entered promiscuous mode [ 142.771050][T15679] ip6_vti0: entered promiscuous mode [ 142.777283][T15679] sit0: entered promiscuous mode [ 142.786107][T15679] ip6tnl0: entered promiscuous mode [ 142.792451][T15679] ip6gre0: entered promiscuous mode [ 142.798662][T15679] syz_tun: entered promiscuous mode [ 142.806601][T15679] ip6gretap0: entered promiscuous mode [ 142.818960][T15679] bridge0: entered promiscuous mode [ 142.826524][T15679] vcan0: entered promiscuous mode [ 142.832762][T15679] bond0: entered promiscuous mode [ 142.837942][T15679] bond_slave_0: entered promiscuous mode [ 142.843800][T15679] bond_slave_1: entered promiscuous mode [ 142.851875][T15679] team0: entered promiscuous mode [ 142.857370][T15679] C: entered promiscuous mode [ 142.862214][T15679] team_slave_1: entered promiscuous mode [ 142.871538][T15679] dummy0: entered promiscuous mode [ 142.882432][T15691] loop5: detected capacity change from 0 to 2048 [ 142.888967][T15679] nlmon0: entered promiscuous mode [ 142.894756][T15679] caif0: entered promiscuous mode [ 142.902103][T15679] batadv0: entered promiscuous mode [ 142.907587][T15679] vxcan0: entered promiscuous mode [ 142.912834][T15679] vxcan1: entered promiscuous mode [ 142.919988][T15679] veth0: entered promiscuous mode [ 142.925216][T15679] veth1: entered promiscuous mode [ 142.930996][T15679] wg0: entered promiscuous mode [ 142.931243][T15691] loop5: p1 < > p4 [ 142.936045][T15679] wg1: entered promiscuous mode [ 142.943011][T15691] loop5: p4 size 8388608 extends beyond EOD, truncated [ 142.947287][T15679] wg2: entered promiscuous mode [ 142.957405][T15679] veth0_to_bridge: entered promiscuous mode [ 142.965068][T15679] veth1_to_bridge: entered promiscuous mode [ 142.971337][T15679] veth0_to_bond: entered promiscuous mode [ 142.977970][T15679] veth1_to_bond: entered promiscuous mode [ 142.985372][T15679] veth0_to_team: entered promiscuous mode [ 142.991293][T15679] veth1_to_team: entered promiscuous mode [ 142.997273][T15679] veth0_to_batadv: entered promiscuous mode [ 143.003756][T15679] batadv_slave_0: entered promiscuous mode [ 143.009704][T15679] veth1_to_batadv: entered promiscuous mode [ 143.015789][T15679] batadv_slave_1: entered promiscuous mode [ 143.021736][T15679] xfrm0: entered promiscuous mode [ 143.028461][T15679] veth0_to_hsr: entered promiscuous mode [ 143.034361][T15679] veth1_to_hsr: entered promiscuous mode [ 143.040241][T15679] hsr0: entered promiscuous mode [ 143.045432][T15679] veth1_virt_wifi: entered promiscuous mode [ 143.051548][T15679] veth0_virt_wifi: entered promiscuous mode [ 143.057808][T15679] @: entered promiscuous mode [ 143.062670][T15679] vlan1: entered promiscuous mode [ 143.069717][T15679] macvlan0: entered promiscuous mode [ 143.075112][T15679] macvlan1: entered promiscuous mode [ 143.080599][T15679] ipvlan0: entered promiscuous mode [ 143.085913][T15679] ipvlan1: entered promiscuous mode [ 143.091475][T15679] macvtap0: entered promiscuous mode [ 143.097118][T15679] macsec0: entered promiscuous mode [ 143.102531][T15679] geneve0: entered promiscuous mode [ 143.107961][T15679] geneve1: entered promiscuous mode [ 143.115063][T15679] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 143.122655][T15679] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 143.130230][T15679] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 143.137833][T15679] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 143.145346][T15679] macsec1: entered promiscuous mode [ 143.150700][T15679] macvlan2: entered promiscuous mode [ 143.156676][T15679] ip6tnl1: entered promiscuous mode [ 143.162363][T15679] macsec2: entered promiscuous mode [ 143.186682][T15714] loop3: detected capacity change from 0 to 1024 [ 143.193658][T15714] EXT4-fs: Ignoring removed orlov option [ 143.224767][T15714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.257861][T15714] EXT4-fs: Ignoring sb option on remount [ 143.259161][T15727] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 143.263842][T15714] EXT4-fs: Ignoring removed orlov option [ 143.292185][T15714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.298880][T15714] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 143.310770][T15714] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 143.351187][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.421000][T15750] rdma_rxe: rxe_newlink: failed to add bridge0 [ 143.543544][T15769] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 143.720939][T15784] loop4: detected capacity change from 0 to 1024 [ 143.763445][T15784] EXT4-fs: Ignoring removed orlov option [ 143.794272][T15784] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.827774][T15784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.898636][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.949720][T15810] __nla_validate_parse: 8 callbacks suppressed [ 143.949741][T15810] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4062'. [ 143.984615][T15818] random: crng reseeded on system resumption [ 144.109451][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 144.153705][T15832] loop4: detected capacity change from 0 to 512 [ 144.175903][T15832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.191206][T15838] lo: entered promiscuous mode [ 144.196168][T15838] tunl0: entered promiscuous mode [ 144.201524][T15838] gre0: entered promiscuous mode [ 144.206555][T15838] gretap0: entered promiscuous mode [ 144.212074][T15838] erspan0: entered promiscuous mode [ 144.220775][T15838] ip_vti0: entered promiscuous mode [ 144.226610][T15838] ip6_vti0: entered promiscuous mode [ 144.232332][T15838] sit0: entered promiscuous mode [ 144.237557][T15832] EXT4-fs (loop4): 1 truncate cleaned up [ 144.243809][T15832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.256388][T15838] ip6tnl0: entered promiscuous mode [ 144.261942][T15838] ip6gre0: entered promiscuous mode [ 144.275565][T15838] syz_tun: entered promiscuous mode [ 144.281072][T15838] ip6gretap0: entered promiscuous mode [ 144.286720][T15838] bridge0: entered promiscuous mode [ 144.292206][T15838] vcan0: entered promiscuous mode [ 144.297622][T15838] bond0: entered promiscuous mode [ 144.302681][T15838] bond_slave_0: entered promiscuous mode [ 144.308474][T15838] bond_slave_1: entered promiscuous mode [ 144.324146][T15838] team0: entered promiscuous mode [ 144.329315][T15838] C: entered promiscuous mode [ 144.334086][T15838] team_slave_1: entered promiscuous mode [ 144.340137][T15838] dummy0: entered promiscuous mode [ 144.340371][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.345351][T15838] nlmon0: entered promiscuous mode [ 144.359607][T15838] caif0: entered promiscuous mode [ 144.364899][T15838] batadv0: entered promiscuous mode [ 144.370242][T15838] vxcan0: entered promiscuous mode [ 144.375865][T15838] vxcan1: entered promiscuous mode [ 144.381089][T15838] veth0: entered promiscuous mode [ 144.387620][T15838] veth1: entered promiscuous mode [ 144.394585][T15838] wg0: entered promiscuous mode [ 144.399636][T15838] wg1: entered promiscuous mode [ 144.416124][T15847] netlink: 'syz.4.4075': attribute type 1 has an invalid length. [ 144.434430][T15838] wg2: entered promiscuous mode [ 144.444737][T15838] veth0_to_bridge: entered promiscuous mode [ 144.453617][T15838] veth1_to_bridge: entered promiscuous mode [ 144.476477][T15838] veth0_to_bond: entered promiscuous mode [ 144.485478][T15838] veth1_to_bond: entered promiscuous mode [ 144.493844][T15838] veth0_to_team: entered promiscuous mode [ 144.502166][T15838] veth1_to_team: entered promiscuous mode [ 144.510698][T15838] veth0_to_batadv: entered promiscuous mode [ 144.517848][T15838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.525454][T15838] batadv_slave_0: entered promiscuous mode [ 144.534399][T15838] veth1_to_batadv: entered promiscuous mode [ 144.541680][T15838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.549384][T15838] batadv_slave_1: entered promiscuous mode [ 144.557260][T15838] xfrm0: entered promiscuous mode [ 144.563568][T15838] veth0_to_hsr: entered promiscuous mode [ 144.571687][T15838] veth1_to_hsr: entered promiscuous mode [ 144.580446][T15838] hsr0: entered promiscuous mode [ 144.586712][T15838] veth1_virt_wifi: entered promiscuous mode [ 144.593807][T15838] veth0_virt_wifi: entered promiscuous mode [ 144.606344][T15838] vlan0: entered promiscuous mode [ 144.612150][T15838] vlan1: entered promiscuous mode [ 144.619137][T15838] macvlan0: entered promiscuous mode [ 144.630546][T15838] macvlan1: entered promiscuous mode [ 144.645203][T15838] ipvlan0: entered promiscuous mode [ 144.656504][T15838] ipvlan1: entered promiscuous mode [ 144.668201][T15838] macvtap0: entered promiscuous mode [ 144.681064][T15838] macsec0: entered promiscuous mode [ 144.688809][T15838] geneve0: entered promiscuous mode [ 144.700059][T15838] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.709101][T15838] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.718085][T15838] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.727048][T15838] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.736156][T15838] geneve1: entered promiscuous mode [ 144.743001][T15838] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.752674][T15838] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 144.760997][T15838] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 144.771896][T15838] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 144.790191][T15852] team0: Device gtp0 is of different type [ 144.871745][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4091'. [ 144.898040][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 144.907088][T15883] macvlan0: left promiscuous mode [ 144.912389][T15883] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 144.920288][T15883] netlink: 'syz.2.4089': attribute type 2 has an invalid length. [ 144.956231][T15889] random: crng reseeded on system resumption [ 144.977289][T15891] loop5: detected capacity change from 0 to 512 [ 144.994127][T15891] EXT4-fs: Ignoring removed orlov option [ 145.010985][T15891] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.033123][T15891] EXT4-fs (loop5): 1 orphan inode deleted [ 145.038953][T15891] EXT4-fs (loop5): 1 truncate cleaned up [ 145.047079][T15891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.089645][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.107699][T15914] netlink: 'syz.1.4105': attribute type 6 has an invalid length. [ 145.217340][T15934] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 145.223974][T15934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.231578][T15934] vhci_hcd vhci_hcd.0: Device attached [ 145.255449][T15937] geneve1: left promiscuous mode [ 145.262118][T15935] vhci_hcd: connection closed [ 145.265016][T12539] vhci_hcd: stop threads [ 145.274059][T12539] vhci_hcd: release socket [ 145.278562][T12539] vhci_hcd: disconnect device [ 145.288605][T15943] netlink: 'syz.3.4116': attribute type 10 has an invalid length. [ 145.309266][T15943] veth0_macvtap: left promiscuous mode [ 145.317541][T15943] veth0_macvtap: entered promiscuous mode [ 145.327809][T15943] team0: Device macvtap0 failed to register rx_handler [ 145.338026][T15943] veth0_macvtap: left promiscuous mode [ 145.359720][T15953] 9pnet: Could not find request transport: r [ 145.401177][T15959] loop5: detected capacity change from 0 to 512 [ 145.442998][T15959] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.461888][T15959] EXT4-fs (loop5): mount failed [ 145.634542][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 145.634561][ T29] audit: type=1326 audit(2000000051.095:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.696293][ T29] audit: type=1326 audit(2000000051.095:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.720449][ T29] audit: type=1326 audit(2000000051.123:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.744053][ T29] audit: type=1326 audit(2000000051.123:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.767719][ T29] audit: type=1326 audit(2000000051.123:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.791823][ T29] audit: type=1326 audit(2000000051.132:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.815466][ T29] audit: type=1326 audit(2000000051.132:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.839278][ T29] audit: type=1326 audit(2000000051.132:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.863059][ T29] audit: type=1326 audit(2000000051.142:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.886589][ T29] audit: type=1326 audit(2000000051.142:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.2.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 145.979177][T16016] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4144'. [ 146.082089][T16039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16039 comm=syz.1.4153 [ 146.117563][T16041] erspan0: left promiscuous mode [ 146.122683][T16041] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4155'. [ 146.191570][T16053] netlink: 'syz.5.4160': attribute type 3 has an invalid length. [ 146.199382][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4160'. [ 146.235764][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4162'. [ 146.394704][T16095] loop4: detected capacity change from 0 to 512 [ 146.410987][T16095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.426119][T16095] ext4 filesystem being mounted at /806/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.482369][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.482983][T16117] loop5: detected capacity change from 0 to 256 [ 146.522654][T16124] loop4: detected capacity change from 0 to 512 [ 146.533534][T16117] FAT-fs (loop5): Directory bread(block 64) failed [ 146.542704][T16117] FAT-fs (loop5): Directory bread(block 65) failed [ 146.550907][T16117] FAT-fs (loop5): Directory bread(block 66) failed [ 146.557901][T16117] FAT-fs (loop5): Directory bread(block 67) failed [ 146.564736][T16117] FAT-fs (loop5): Directory bread(block 68) failed [ 146.571606][T16117] FAT-fs (loop5): Directory bread(block 69) failed [ 146.578833][T16117] FAT-fs (loop5): Directory bread(block 70) failed [ 146.585710][T16117] FAT-fs (loop5): Directory bread(block 71) failed [ 146.590469][T16124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.592466][T16117] FAT-fs (loop5): Directory bread(block 72) failed [ 146.613713][T16124] ext4 filesystem being mounted at /807/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.625263][T16117] FAT-fs (loop5): Directory bread(block 73) failed [ 146.661799][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.780061][T16117] bio_check_eod: 22192 callbacks suppressed [ 146.780081][T16117] syz.5.4184: attempt to access beyond end of device [ 146.780081][T16117] loop5: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 146.819034][T16117] syz.5.4184: attempt to access beyond end of device [ 146.819034][T16117] loop5: rw=2051, sector=1864, nr_sectors = 31936 limit=256 [ 146.825772][T16162] program syz.3.4202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.884868][T16169] loop2: detected capacity change from 0 to 512 [ 146.902843][T16169] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 147.003194][T16205] loop2: detected capacity change from 0 to 512 [ 147.012638][T16205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.025629][T16205] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.060042][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.083253][T16218] loop2: detected capacity change from 0 to 512 [ 147.251387][T16245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4231'. [ 147.289121][T16247] tap0: tun_chr_ioctl cmd 2147767521 [ 147.365898][T10566] IPVS: starting estimator thread 0... [ 147.415846][T16278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4245'. [ 147.453288][T16282] loop2: detected capacity change from 0 to 164 [ 147.464425][T16269] IPVS: using max 2592 ests per chain, 129600 per kthread [ 147.473941][T16282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.502768][T16282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.511507][T16282] Symlink component flag not implemented [ 147.517294][T16282] Symlink component flag not implemented [ 147.529720][T16282] Symlink component flag not implemented (7) [ 147.535823][T16282] Symlink component flag not implemented (116) [ 147.551082][T16304] loop4: detected capacity change from 0 to 512 [ 147.558547][T16304] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 147.584903][T16304] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 147.652336][T16325] loop4: detected capacity change from 0 to 4096 [ 147.662907][T16325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.696445][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.774514][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.799169][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.001473][T16383] loop2: detected capacity change from 0 to 512 [ 148.018880][T16383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.031870][T16383] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.055051][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.486547][T16407] openvswitch: netlink: Message has 6 unknown bytes. [ 148.744644][T16438] loop4: detected capacity change from 0 to 256 [ 148.931067][T16457] loop3: detected capacity change from 0 to 4096 [ 148.971128][T16457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.130038][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.219318][T16482] loop5: detected capacity change from 0 to 1024 [ 149.249088][T16485] loop3: detected capacity change from 0 to 128 [ 149.259852][T16482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.272470][T16482] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.307357][T16482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 149.355848][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.385360][T16500] xt_CT: No such helper "pptp" [ 149.483244][T16526] loop4: detected capacity change from 0 to 1024 [ 149.515679][T16526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.530592][T16526] ext4 filesystem being mounted at /847/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.547676][T16526] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.4339: lblock 3 mapped to illegal pblock 3 (length 13) [ 149.564187][T16526] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 149.576714][T16526] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.576714][T16526] [ 149.590602][T16526] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.4339: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.605971][T16526] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 7: comm syz.4.4339: lblock 7 mapped to illegal pblock 7 (length 1) [ 149.621993][T16526] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4339: Freeing blocks not in datazone - block = 4, count = 3 [ 149.660077][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.817506][T16571] loop4: detected capacity change from 0 to 764 [ 149.839049][T16571] Symlink component flag not implemented [ 149.844738][T16571] Symlink component flag not implemented [ 149.854684][T16568] lo speed is unknown, defaulting to 1000 [ 149.860922][T16571] Symlink component flag not implemented (128) [ 149.867174][T16571] Symlink component flag not implemented (122) [ 149.972815][T16590] loop2: detected capacity change from 0 to 512 [ 149.974024][T16596] __nla_validate_parse: 9 callbacks suppressed [ 149.974041][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4365'. [ 149.999605][T16590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.051864][T16590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 150.109302][T16590] EXT4-fs (loop2): 1 truncate cleaned up [ 150.123274][T16590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.167306][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.204640][T16633] loop4: detected capacity change from 0 to 512 [ 150.231269][T16633] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.4377: iget: bad extended attribute block 1 [ 150.260452][T16633] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4377: couldn't read orphan inode 15 (err -117) [ 150.273943][T16633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.336053][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.423808][T16672] netlink: 'syz.1.4392': attribute type 10 has an invalid length. [ 150.432344][T16672] batadv0: left promiscuous mode [ 150.439569][T16672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.448316][T16672] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 150.460864][T16672] netlink: 'syz.1.4392': attribute type 10 has an invalid length. [ 150.468783][T16672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4392'. [ 150.481217][T16672] batadv0: entered promiscuous mode [ 150.486725][T16672] batadv0: entered allmulticast mode [ 150.494493][T16672] bond0: (slave batadv0): Releasing backup interface [ 150.504763][T16672] bridge0: port 3(batadv0) entered blocking state [ 150.511351][T16672] bridge0: port 3(batadv0) entered disabled state [ 150.521997][T16676] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4393'. [ 150.531212][T16676] netem: unknown loss type 12 [ 150.535923][T16676] netem: change failed [ 150.617292][T16694] netlink: 'syz.2.4402': attribute type 1 has an invalid length. [ 150.670519][T16700] loop2: detected capacity change from 0 to 512 [ 150.683946][T16700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.708123][T16700] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.741407][T16700] EXT4-fs (loop2): shut down requested (0) [ 150.770999][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.780592][T12579] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.789967][T12579] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.802478][T16715] netlink: 'syz.1.4409': attribute type 6 has an invalid length. [ 150.923513][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 151.056344][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 151.056361][ T29] audit: type=1400 audit(2000000057.164:2935): avc: denied { create } for pid=16753 comm="syz.5.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.140927][ T29] audit: type=1400 audit(2000000057.238:2936): avc: denied { create } for pid=16759 comm="syz.2.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.164419][ T29] audit: type=1400 audit(2000000057.238:2937): avc: denied { setopt } for pid=16759 comm="syz.2.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.191848][T16764] lo speed is unknown, defaulting to 1000 [ 151.243796][ T29] audit: type=1400 audit(2000000057.332:2938): avc: denied { ioctl } for pid=16777 comm="syz.2.4433" path="socket:[37260]" dev="sockfs" ino=37260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.311544][ T29] audit: type=1400 audit(2000000057.379:2939): avc: denied { write } for pid=16783 comm="syz.4.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.450490][ T29] audit: type=1400 audit(2000000057.528:2940): avc: denied { getopt } for pid=16815 comm="syz.3.4441" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.476565][T16818] sd 0:0:1:0: device reset [ 151.498787][T16821] loop3: detected capacity change from 0 to 512 [ 151.512934][ T29] audit: type=1400 audit(2000000057.556:2941): avc: denied { read } for pid=16817 comm="syz.2.4443" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.536699][ T29] audit: type=1400 audit(2000000057.556:2942): avc: denied { open } for pid=16817 comm="syz.2.4443" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.560997][ T29] audit: type=1400 audit(2000000057.556:2943): avc: denied { ioctl } for pid=16817 comm="syz.2.4443" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.675051][T16821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.690901][T16821] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.748258][ T29] audit: type=1400 audit(2000000057.715:2944): avc: denied { create } for pid=16826 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.771556][T16834] random: crng reseeded on system resumption [ 151.830615][T16821] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 18: comm syz.3.4444: lblock 23 mapped to illegal pblock 18 (length 1) [ 151.887072][T16835] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.4444: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 151.934195][T16821] EXT4-fs (loop3): Remounting filesystem read-only [ 151.936353][T16835] EXT4-fs (loop3): Remounting filesystem read-only [ 151.950604][T16851] macvtap1: entered allmulticast mode [ 151.956181][T16851] veth0_macvtap: entered allmulticast mode [ 151.963049][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4456'. [ 151.987450][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.041311][T16872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4462'. [ 152.130338][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.150972][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.168013][T16874] batman_adv: batadv0: Adding interface: ipvlan2 [ 152.174485][T16874] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.199934][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.210470][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.222769][T16874] batman_adv: batadv0: Interface activated: ipvlan2 [ 152.368524][T16891] support for cryptoloop has been removed. Use dm-crypt instead. [ 152.555257][T16928] sd 0:0:1:0: device reset [ 152.562885][T16930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4483'. [ 152.775016][T16960] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4499'. [ 152.839450][T16973] batman_adv: batadv0: Adding interface: ipvlan2 [ 152.845894][T16973] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.857810][T16978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16978 comm=syz.5.4506 [ 152.871308][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.894318][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.911030][T16973] batman_adv: batadv0: Interface activated: ipvlan2 [ 152.973731][T16994] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4513'. [ 153.007603][T16999] netlink: 'syz.4.4517': attribute type 3 has an invalid length. [ 153.015436][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'. [ 153.056817][T17005] loop4: detected capacity change from 0 to 512 [ 153.089910][T17005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.102816][T17005] ext4 filesystem being mounted at /878/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.117272][T17017] netlink: 'syz.1.4524': attribute type 10 has an invalid length. [ 153.126072][T17017] team0: Device macvtap0 failed to register rx_handler [ 153.161301][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.181707][T17023] loop3: detected capacity change from 0 to 1756 [ 153.236390][T17034] loop3: detected capacity change from 0 to 1024 [ 153.257206][T17034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.270956][T17034] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.287834][T17047] loop2: detected capacity change from 0 to 1024 [ 153.294635][T17047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.313294][T17047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.329879][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.373550][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.455945][T17078] loop2: detected capacity change from 0 to 512 [ 153.470173][T17078] EXT4-fs (loop2): too many log groups per flexible block group [ 153.477934][T17078] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 153.484934][T17078] EXT4-fs (loop2): mount failed [ 153.741431][T17108] vhci_hcd: invalid port number 96 [ 153.746628][T17108] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.097945][T17164] loop2: detected capacity change from 0 to 512 [ 154.123006][T17164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 154.135669][T17164] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.163708][ T9748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 154.343336][T17204] loop3: detected capacity change from 0 to 512 [ 154.365935][T17204] EXT4-fs (loop3): too many log groups per flexible block group [ 154.374001][T17204] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 154.381048][T17204] EXT4-fs (loop3): mount failed [ 154.454501][T17218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 154.461130][T17218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.468786][T17218] vhci_hcd vhci_hcd.0: Device attached [ 154.477019][T17219] vhci_hcd: connection closed [ 154.477240][ T158] vhci_hcd: stop threads [ 154.486284][ T158] vhci_hcd: release socket [ 154.490724][ T158] vhci_hcd: disconnect device [ 155.033360][T17260] loop4: detected capacity change from 0 to 1024 [ 155.041863][T17262] netlink: 'syz.2.4612': attribute type 12 has an invalid length. [ 155.050398][T17260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.083797][T17260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.175471][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.272436][T17298] loop2: detected capacity change from 0 to 512 [ 155.279841][T17298] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 155.306809][T17298] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 155.411419][T17326] program syz.5.4632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.528910][T17349] __nla_validate_parse: 4 callbacks suppressed [ 155.528941][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4636'. [ 155.544514][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4636'. [ 155.812809][T17392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4657'. [ 156.157335][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.164987][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.172494][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.176814][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.179944][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.187390][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.194670][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.202058][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.209466][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.220110][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.224223][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.231723][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.239164][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.246573][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.254049][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.261407][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.268785][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.276218][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.283618][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.291078][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.298542][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.305963][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.313372][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.320901][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.328349][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.335905][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.343275][T10566] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 156.350666][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.363528][T10566] hid-generic 00A0:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 156.365463][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.419740][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.427185][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.434648][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.442209][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.449660][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.457175][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.464682][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.472159][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.479683][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.487129][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.494586][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.502078][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.509531][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.517065][T10532] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.526762][T10532] hid-generic 0000:0000:0000.0006: hidraw1: HID v8.00 Device [syz1] on syz0 [ 156.607824][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 156.607842][ T29] audit: type=1400 audit(2000000063.351:3049): avc: denied { append } for pid=17470 comm="syz.5.4688" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.640312][ T29] audit: type=1400 audit(2000000063.361:3050): avc: denied { ioctl } for pid=17470 comm="syz.5.4688" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.769668][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4712'. [ 156.804841][ T29] audit: type=1107 audit(2000000063.529:3051): pid=17504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 156.888812][ T29] audit: type=1400 audit(2000000063.613:3052): avc: denied { write } for pid=17521 comm="syz.4.4710" name="softnet_stat" dev="proc" ino=4026532752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 156.913465][T17524] loop4: detected capacity change from 0 to 4096 [ 156.954585][T17524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.003979][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.028817][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.036412][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.043872][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.051501][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.058961][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.066578][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.074075][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.081578][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.089027][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.096567][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.104097][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.111528][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.118963][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.126516][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.135309][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.142805][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.150313][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.155940][T17550] loop4: detected capacity change from 0 to 512 [ 157.157791][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.171537][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.179023][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.186544][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.194048][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.201505][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.208999][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.216571][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.224009][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.231438][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.238873][T10566] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.246961][T10566] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz1] on syz0 [ 157.315365][T17566] lo speed is unknown, defaulting to 1000 [ 157.365422][ T29] audit: type=1326 audit(2000000064.062:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.394245][ T29] audit: type=1326 audit(2000000064.062:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.417936][ T29] audit: type=1326 audit(2000000064.090:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.445367][ T29] audit: type=1326 audit(2000000064.090:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.469151][ T29] audit: type=1326 audit(2000000064.090:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.492795][ T29] audit: type=1326 audit(2000000064.137:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 157.624683][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.632334][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.639909][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.647773][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.655235][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.662746][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.670236][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.677699][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.685234][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.692747][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.700170][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.707636][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.715160][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.722616][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.730169][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.737618][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.745204][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.752652][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.760155][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.767605][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.775065][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.782607][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.790148][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.797591][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.805029][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.812465][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.819966][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.827485][T10567] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.835265][T10567] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz1] on syz0 [ 157.927989][T17644] loop5: detected capacity change from 0 to 512 [ 157.940926][T17644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.955259][T17644] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.009590][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.055047][T17661] loop5: detected capacity change from 0 to 4096 [ 158.065432][T17661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.114704][T11044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.196181][T17677] netlink: 'syz.3.4759': attribute type 6 has an invalid length. [ 158.342886][T17691] loop4: detected capacity change from 0 to 512 [ 158.355950][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 158.375930][T17691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.406061][T17701] loop3: detected capacity change from 0 to 512 [ 158.428913][T17701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.454661][T17691] ext4 filesystem being mounted at /916/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.479690][T17701] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 158.510488][T17691] EXT4-fs (loop4): shut down requested (0) [ 158.529671][T17701] EXT4-fs (loop3): 1 truncate cleaned up [ 158.535911][T17701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.554429][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.601290][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.748395][T17738] loop3: detected capacity change from 0 to 512 [ 158.765512][T17738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.797444][T17738] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.871536][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.922330][T17754] loop3: detected capacity change from 0 to 128 [ 159.023510][T17765] netlink: 'syz.4.4792': attribute type 10 has an invalid length. [ 159.039470][T17765] batadv0: left promiscuous mode [ 159.045310][T17765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.054649][T17765] batadv0: entered promiscuous mode [ 159.060321][T17765] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.081145][T17765] netlink: 'syz.4.4792': attribute type 10 has an invalid length. [ 159.089075][T17765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4792'. [ 159.107120][T17765] batadv0: entered allmulticast mode [ 159.113696][T17765] bond0: (slave batadv0): Releasing backup interface [ 159.130814][T17765] bridge0: port 3(batadv0) entered blocking state [ 159.137447][T17765] bridge0: port 3(batadv0) entered disabled state [ 159.158153][T12574] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.167666][T12574] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.467877][T17791] lo speed is unknown, defaulting to 1000 [ 160.093200][T17880] loop2: detected capacity change from 0 to 1024 [ 160.103768][T17880] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 160.136079][T17880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.274115][T17899] lo speed is unknown, defaulting to 1000 [ 160.377089][T17914] loop2: detected capacity change from 0 to 8192 [ 160.505815][T17952] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4854'. [ 160.967023][T18009] loop5: detected capacity change from 0 to 512 [ 160.982487][T18009] EXT4-fs: Ignoring removed oldalloc option [ 161.005661][T18009] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4877: Parent and EA inode have the same ino 15 [ 161.023968][T18009] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4877: Parent and EA inode have the same ino 15 [ 161.038310][T18009] EXT4-fs (loop5): 1 orphan inode deleted [ 161.068638][T18036] lo speed is unknown, defaulting to 1000 [ 162.104013][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 162.104030][ T29] audit: type=1326 audit(2000000068.496:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.133917][ T29] audit: type=1326 audit(2000000068.496:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.162959][ T29] audit: type=1326 audit(2000000068.552:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.186575][ T29] audit: type=1326 audit(2000000068.552:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.210483][ T29] audit: type=1326 audit(2000000068.552:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.234888][ T29] audit: type=1326 audit(2000000068.618:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.258541][ T29] audit: type=1326 audit(2000000068.618:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.282201][ T29] audit: type=1326 audit(2000000068.618:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18100 comm="syz.5.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438385e9a9 code=0x7ffc0000 [ 162.390948][ T29] audit: type=1326 audit(2000000068.758:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.1.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 162.414852][ T29] audit: type=1326 audit(2000000068.758:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.1.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7471e9a9 code=0x7ffc0000 [ 162.464345][T18135] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4920'. [ 162.483381][T18137] SELinux: security_context_str_to_sid () failed with errno=-22 [ 162.558152][T18147] loop5: detected capacity change from 0 to 128 [ 162.568803][T18147] syz.5.4926: attempt to access beyond end of device [ 162.568803][T18147] loop5: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 162.627369][T18161] C: renamed from team_slave_0 (while UP) [ 162.653947][T18161] netlink: 'syz.3.4930': attribute type 4 has an invalid length. [ 162.661789][T18161] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4930'. [ 162.674898][T18161] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 162.683062][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 162.699524][T18167] bridge0: port 3(batadv0) entered disabled state [ 162.715013][T18167] bridge_slave_1: left allmulticast mode [ 162.720995][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.735574][T18167] bridge_slave_0: left allmulticast mode [ 162.741418][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.751828][T18173] sg_read: process 2273 (syz.1.4937) changed security contexts after opening file descriptor, this is not allowed. [ 162.769623][ T158] smc: removing ib device syz1 [ 162.836724][T18197] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4942'. [ 162.890085][T18201] loop3: detected capacity change from 0 to 1024 [ 162.972119][T18211] netlink: 'syz.3.4947': attribute type 1 has an invalid length. [ 163.045534][T18212] loop5: detected capacity change from 0 to 8192 [ 163.277880][T18284] syz_tun: entered promiscuous mode [ 163.353852][T18296] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4970'. [ 163.381958][T18308] loop5: detected capacity change from 0 to 512 [ 163.397106][T18308] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.415638][T18308] EXT4-fs (loop5): 1 truncate cleaned up [ 163.454545][T18320] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 163.482599][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4979'. [ 163.492093][T18324] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4979'. [ 163.537353][T18330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.568082][T18333] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4982'. [ 163.615247][T18343] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 163.676756][T18348] loop3: detected capacity change from 0 to 164 [ 163.783800][T18367] loop5: detected capacity change from 0 to 512 [ 163.810581][T18367] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.817440][T18367] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.4995: bad orphan inode 13 [ 163.863854][T18367] ext4_test_bit(bit=12, block=18) = 1 [ 163.869376][T18367] is_bad_inode(inode)=0 [ 163.873676][T18367] NEXT_ORPHAN(inode)=2130706432 [ 163.878634][T18367] max_ino=32 [ 163.882024][T18367] i_nlink=1 [ 163.949808][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 164.134797][T18418] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 164.141388][T18418] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.149109][T18418] vhci_hcd vhci_hcd.0: Device attached [ 164.165425][T18419] vhci_hcd: connection closed [ 164.165533][T12539] vhci_hcd: stop threads [ 164.174569][T12539] vhci_hcd: release socket [ 164.179070][T12539] vhci_hcd: disconnect device [ 164.302921][T18452] netlink: 'syz.2.5033': attribute type 1 has an invalid length. [ 164.310834][T18452] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5033'. [ 164.442186][T18471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.472486][T18482] netlink: 'syz.4.5047': attribute type 1 has an invalid length. [ 164.641803][T18511] bridge0: port 3(batadv0) entered disabled state [ 164.649001][T18511] bridge_slave_1: left allmulticast mode [ 164.655035][T18511] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.665269][T18511] bridge_slave_0: left allmulticast mode [ 164.671114][T18511] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.712122][T18519] loop4: detected capacity change from 0 to 512 [ 164.722991][T18519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.732521][T18519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5075: bg 0: block 248: padding at end of block bitmap is not set [ 164.758676][T18519] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5075: Failed to acquire dquot type 1 [ 164.793226][T18519] EXT4-fs (loop4): 1 truncate cleaned up [ 164.820799][T18519] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 164.846710][T18519] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 165.107583][T18574] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 165.123138][T18578] loop5: detected capacity change from 0 to 512 [ 165.139268][T18578] EXT4-fs (loop5): orphan cleanup on readonly fs [ 165.154974][T18578] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5087: bg 0: block 248: padding at end of block bitmap is not set [ 165.170943][T18578] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5087: Failed to acquire dquot type 1 [ 165.182911][T18578] EXT4-fs (loop5): 1 truncate cleaned up [ 165.196834][T18578] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 165.242317][T18578] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 165.381781][T18612] bond1: entered promiscuous mode [ 165.386886][T18612] bond1: entered allmulticast mode [ 165.392442][T18612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.401709][T18612] bond1 (unregistering): Released all slaves [ 165.424827][T18682] tun0: tun_chr_ioctl cmd 1074025677 [ 165.430424][T18682] tun0: linktype set to 774 [ 165.491589][T18696] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 165.743359][T18739] netem: change failed [ 165.769254][T18746] netlink: 'syz.3.5128': attribute type 1 has an invalid length. [ 166.033214][T18791] team0: Device gtp1 is of different type [ 166.041907][T18795] netlink: 'syz.4.5150': attribute type 6 has an invalid length. [ 166.156596][T18806] loop4: detected capacity change from 0 to 512 [ 166.183042][T18806] ext4 filesystem being mounted at /998/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.586253][T18854] netlink: 'syz.2.5174': attribute type 1 has an invalid length. [ 166.656260][T18857] bond2: entered promiscuous mode [ 166.661520][T18857] bond2: entered allmulticast mode [ 166.667312][T18857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.749792][T18909] loop4: detected capacity change from 0 to 256 [ 166.849078][T18928] loop5: detected capacity change from 0 to 764 [ 166.909254][T18946] serio: Serial port ttyS3 [ 166.914568][T18944] Invalid ELF header magic: != ELF [ 167.012554][T18969] loop9: detected capacity change from 0 to 7 [ 167.019433][T18969] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.027684][T18969] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.035605][T18969] loop9: unable to read partition table [ 167.061349][T18969] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 167.061349][T18969] ) failed (rc=-5) [ 167.118673][T18984] loop2: detected capacity change from 0 to 512 [ 167.133543][T18990] xt_hashlimit: max too large, truncated to 1048576 [ 167.216906][T19009] loop3: detected capacity change from 0 to 256 [ 167.351026][T19041] Invalid ELF header magic: != ELF [ 167.377330][T19054] loop2: detected capacity change from 0 to 256 [ 167.453626][T19071] serio: Serial port ttyS3 [ 167.472198][T19070] bond1: entered promiscuous mode [ 167.477606][T19070] bond1: entered allmulticast mode [ 167.483419][T19070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.491164][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 167.491181][ T29] audit: type=1326 audit(2000000073.529:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.2.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 167.521829][ T29] audit: type=1326 audit(2000000073.566:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.2.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 167.545336][ T29] audit: type=1326 audit(2000000073.566:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.2.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 167.568980][ T29] audit: type=1326 audit(2000000073.566:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.2.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a6de9a9 code=0x7ffc0000 [ 167.704483][ T3296] ================================================================== [ 167.712628][ T3296] BUG: KCSAN: data-race in do_select / pollwake [ 167.718915][ T3296] [ 167.721260][ T3296] write to 0xffffc9000113f9e0 of 4 bytes by task 19127 on cpu 1: [ 167.729009][ T3296] pollwake+0xb6/0x100 [ 167.733117][ T3296] __wake_up_sync_key+0x52/0x80 [ 167.738000][ T3296] anon_pipe_write+0x8ba/0xaa0 [ 167.742791][ T3296] io_write+0x612/0xd40 [ 167.746993][ T3296] __io_issue_sqe+0xfb/0x2e0 [ 167.751611][ T3296] io_issue_sqe+0x53/0x970 [ 167.756144][ T3296] io_submit_sqes+0x667/0xfd0 [ 167.760853][ T3296] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 167.766452][ T3296] __x64_sys_io_uring_enter+0x78/0x90 [ 167.772124][ T3296] x64_sys_call+0x28c8/0x2fb0 [ 167.776833][ T3296] do_syscall_64+0xd2/0x200 [ 167.781356][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.787288][ T3296] [ 167.789713][ T3296] read to 0xffffc9000113f9e0 of 4 bytes by task 3296 on cpu 0: [ 167.797280][ T3296] do_select+0xe48/0xf50 [ 167.801560][ T3296] core_sys_select+0x3d7/0x6e0 [ 167.806447][ T3296] __se_sys_pselect6+0x216/0x280 [ 167.811430][ T3296] __x64_sys_pselect6+0x78/0x90 [ 167.816336][ T3296] x64_sys_call+0x1caa/0x2fb0 [ 167.821041][ T3296] do_syscall_64+0xd2/0x200 [ 167.825654][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.831570][ T3296] [ 167.833906][ T3296] value changed: 0x00000000 -> 0x00000001 [ 167.839662][ T3296] [ 167.841996][ T3296] Reported by Kernel Concurrency Sanitizer on: [ 167.848163][ T3296] CPU: 0 UID: 0 PID: 3296 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 167.859035][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.869125][ T3296] ================================================================== [ 167.914782][T19131] xt_hashlimit: max too large, truncated to 1048576