last executing test programs: 1m39.675421853s ago: executing program 2 (id=1311): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 1m39.588202734s ago: executing program 2 (id=1317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) eventfd2(0x0, 0x80800) 1m39.527916174s ago: executing program 2 (id=1323): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000) 1m39.297105985s ago: executing program 2 (id=1338): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twrm'], 0xa) 1m39.254047055s ago: executing program 2 (id=1341): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) 1m39.194281116s ago: executing program 2 (id=1344): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m24.171708236s ago: executing program 32 (id=1344): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1.134922165s ago: executing program 1 (id=5522): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000003680)=[{&(0x7f0000001500)=""/215, 0xd7}], 0x3f) 1.047895215s ago: executing program 1 (id=5529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.047686286s ago: executing program 4 (id=5530): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x8905, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 1.033434996s ago: executing program 1 (id=5531): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 937.611036ms ago: executing program 1 (id=5535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1704b45a18104bf1dbde86dd66563cfd001021ffff01000000000000000000000000000120010000000000"], 0x0) 892.426386ms ago: executing program 1 (id=5540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x1, &(0x7f0000000900)) 860.232006ms ago: executing program 4 (id=5542): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) close(r1) 841.391867ms ago: executing program 1 (id=5544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x177f, &(0x7f0000000140)) rt_sigsuspend(&(0x7f00000000c0)={[0x27ccfee7]}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 792.751577ms ago: executing program 4 (id=5547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 721.189697ms ago: executing program 4 (id=5549): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200030000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 653.588367ms ago: executing program 4 (id=5554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 602.758218ms ago: executing program 4 (id=5556): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0xfffffffa, 0x22cd9dc, r2}}], 0x20, 0x2000}, 0x48016) 454.034488ms ago: executing program 0 (id=5561): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 444.304869ms ago: executing program 3 (id=5562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b330000000000ffff0015"], 0x2c}}, 0x0) 402.162199ms ago: executing program 0 (id=5565): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x8905, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 392.226449ms ago: executing program 3 (id=5566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 367.247839ms ago: executing program 3 (id=5568): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 232.31788ms ago: executing program 5 (id=5572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 228.383509ms ago: executing program 3 (id=5573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x40, @mcast1, 0x6}}, 0x0, 0x0, 0x4f, 0x0, "94e3eb40cbe96b61b2e792c61c3038a249c1152c63b4095ca1f9a1b57d5ce7c2ae5e75205c8dbb3f6b0fba2418e2d19f9d9764bc5b23642e8383db4cda59434ea2e72d41cc918cf8a2656daa512d621e"}, 0xd8) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) 227.075539ms ago: executing program 0 (id=5574): syz_io_uring_setup(0x75a7, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x192}, &(0x7f0000000000), &(0x7f0000000100)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x652, @time={0x65757100}}) 206.257409ms ago: executing program 5 (id=5575): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syncfs(0xffffffffffffffff) 153.642099ms ago: executing program 3 (id=5576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f00000003c0)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 153.38214ms ago: executing program 0 (id=5577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 153.255ms ago: executing program 5 (id=5578): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc015}, 0x48000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 116.23637ms ago: executing program 5 (id=5579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)=""/21) 110.20405ms ago: executing program 0 (id=5580): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 70.12039ms ago: executing program 5 (id=5581): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0x17}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 44.40392ms ago: executing program 0 (id=5582): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x4, @perf_bp={0x0, 0x1}, 0x1101a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, 0x0) 33.74647ms ago: executing program 3 (id=5583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000010004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000340)) 0s ago: executing program 5 (id=5584): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="syz.1.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 120.047398][ T29] audit: type=1326 audit(1732200760.519:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="syz.1.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 120.061186][T11203] syz.5.3380: attempt to access beyond end of device [ 120.061186][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.071514][ T29] audit: type=1326 audit(1732200760.579:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11204 comm="syz.1.3381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 120.114077][T11203] syz.5.3380: attempt to access beyond end of device [ 120.114077][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.127980][T11203] syz.5.3380: attempt to access beyond end of device [ 120.127980][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.143392][T11203] syz.5.3380: attempt to access beyond end of device [ 120.143392][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.157210][T11203] syz.5.3380: attempt to access beyond end of device [ 120.157210][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.179817][T11203] syz.5.3380: attempt to access beyond end of device [ 120.179817][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.194646][T11203] syz.5.3380: attempt to access beyond end of device [ 120.194646][T11203] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.289116][T11217] netlink: 17251 bytes leftover after parsing attributes in process `syz.0.3388'. [ 120.361843][T11225] loop0: detected capacity change from 0 to 764 [ 120.763823][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3410'. [ 120.763918][T11262] loop4: detected capacity change from 0 to 128 [ 120.773166][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'. [ 120.818264][T11270] rose0: tun_chr_ioctl cmd 1074025677 [ 120.824276][T11270] rose0: linktype set to 6 [ 120.859072][T11270] rose0: tun_chr_ioctl cmd 1074025677 [ 120.869612][T11270] rose0: linktype set to 1 [ 120.877693][T11262] ext4 filesystem being mounted at /699/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.970202][T11282] netlink: 'syz.5.3418': attribute type 3 has an invalid length. [ 120.977998][T11282] netlink: 'syz.5.3418': attribute type 3 has an invalid length. [ 121.018760][T11284] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.062965][T11284] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.081766][T11294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.113408][T11284] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.173146][T11284] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.224610][T11307] loop4: detected capacity change from 0 to 512 [ 121.226565][T11284] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.243136][T11284] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.255215][T11284] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.267432][T11284] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.358553][T11318] loop5: detected capacity change from 0 to 764 [ 121.682862][T11366] loop0: detected capacity change from 0 to 512 [ 121.694619][T11366] ext4 filesystem being mounted at /756/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.970681][T11389] infiniband syz1: set active [ 122.085485][T11396] syz.4.3471[11396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.085549][T11396] syz.4.3471[11396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.097384][T11396] syz.4.3471[11396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.684109][T11427] netlink: 'syz.4.3485': attribute type 3 has an invalid length. [ 122.703704][T11427] netlink: 'syz.4.3485': attribute type 3 has an invalid length. [ 122.722025][T11427] __nla_validate_parse: 6 callbacks suppressed [ 122.722046][T11427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3485'. [ 123.179075][T11466] wireguard0: entered promiscuous mode [ 123.184603][T11466] wireguard0: entered allmulticast mode [ 123.477993][T11474] lo speed is unknown, defaulting to 1000 [ 123.749735][T11486] netlink: 'syz.5.3513': attribute type 1 has an invalid length. [ 123.892308][T11497] loop1: detected capacity change from 0 to 512 [ 123.901244][T11497] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.910153][T11497] EXT4-fs (loop1): invalid journal inode [ 123.946689][T11497] EXT4-fs (loop1): can't get journal size [ 123.961693][T11497] EXT4-fs (loop1): 1 truncate cleaned up [ 123.972089][T11497] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1835363691 (only 1 groups) [ 124.002391][T11508] lo speed is unknown, defaulting to 1000 [ 124.128941][T11526] loop0: detected capacity change from 0 to 256 [ 124.156531][T11526] FAT-fs (loop0): Directory bread(block 64) failed [ 124.165684][T11526] FAT-fs (loop0): Directory bread(block 65) failed [ 124.173707][T11526] FAT-fs (loop0): Directory bread(block 66) failed [ 124.197418][T11526] FAT-fs (loop0): Directory bread(block 67) failed [ 124.206057][T11534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.216791][T11526] FAT-fs (loop0): Directory bread(block 68) failed [ 124.223572][T11526] FAT-fs (loop0): Directory bread(block 69) failed [ 124.237745][T11526] FAT-fs (loop0): Directory bread(block 70) failed [ 124.247283][T11535] loop4: detected capacity change from 0 to 128 [ 124.254763][T11526] FAT-fs (loop0): Directory bread(block 71) failed [ 124.261844][T11526] FAT-fs (loop0): Directory bread(block 72) failed [ 124.268529][T11526] FAT-fs (loop0): Directory bread(block 73) failed [ 124.276896][T11532] lo speed is unknown, defaulting to 1000 [ 124.285727][T11534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.367992][T11534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.417872][T11534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.480526][T11534] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.498066][T11534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.513508][T11534] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.533564][T11534] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.558818][T11559] loop1: detected capacity change from 0 to 1024 [ 124.566062][T11559] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 124.578541][T11559] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 124.590949][T11559] EXT4-fs (loop1): invalid journal inode [ 124.602856][T11559] EXT4-fs (loop1): can't get journal size [ 124.616454][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 124.616472][ T29] audit: type=1400 audit(1732200766.217:3614): avc: denied { sys_module } for pid=11561 comm="syz.3.3548" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.616768][T11562] Invalid ELF header magic: != ELF [ 124.622900][ T29] audit: type=1400 audit(1732200766.217:3615): avc: denied { module_load } for pid=11561 comm="syz.3.3548" path="/sys/kernel/notes" dev="sysfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 124.647255][T11559] 9pnet_fd: Insufficient options for proto=fd [ 124.649329][ T29] audit: type=1400 audit(1732200766.257:3616): avc: denied { mounton } for pid=11558 comm="syz.1.3547" path="/689/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.747227][T11573] wireguard0: entered promiscuous mode [ 124.752809][T11573] wireguard0: entered allmulticast mode [ 124.818636][ T29] audit: type=1400 audit(1732200766.417:3617): avc: denied { write } for pid=11578 comm="syz.3.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.825727][T11579] loop3: detected capacity change from 0 to 1024 [ 124.845348][T11579] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 124.857069][T11579] JBD2: no valid journal superblock found [ 124.862905][T11579] EXT4-fs (loop3): Could not load journal inode [ 125.001843][T11590] loop3: detected capacity change from 0 to 2048 [ 125.066361][ T29] audit: type=1400 audit(1732200766.667:3618): avc: denied { read write } for pid=11602 comm="syz.5.3563" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.081115][T11606] loop1: detected capacity change from 0 to 512 [ 125.090942][ T29] audit: type=1400 audit(1732200766.667:3619): avc: denied { open } for pid=11602 comm="syz.5.3563" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.103042][T11606] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3566: invalid block [ 125.132621][T11606] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3566: invalid indirect mapped block 4294967295 (level 1) [ 125.147342][T11606] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3566: invalid indirect mapped block 4294967295 (level 1) [ 125.158650][T11611] loop3: detected capacity change from 0 to 512 [ 125.163499][T11606] EXT4-fs (loop1): 2 truncates cleaned up [ 125.168131][T11611] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.180661][T11611] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 125.190504][T11611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 125.192789][ T29] audit: type=1400 audit(1732200766.797:3620): avc: denied { watch } for pid=11605 comm="syz.1.3566" path="/693/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.198476][T11611] System zones: 1-12 [ 125.198678][T11611] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3565: corrupted in-inode xattr: e_value size too large [ 125.225098][ T29] audit: type=1400 audit(1732200766.837:3621): avc: denied { create } for pid=11605 comm="syz.1.3566" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 125.226101][T11611] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3565: couldn't read orphan inode 15 (err -117) [ 125.312142][T11614] syz.5.3568[11614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.312293][T11614] syz.5.3568[11614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.328003][T11614] syz.5.3568[11614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.344320][ T29] audit: type=1400 audit(1732200766.947:3622): avc: denied { create } for pid=11615 comm="syz.1.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.382311][ T29] audit: type=1400 audit(1732200766.967:3623): avc: denied { getopt } for pid=11615 comm="syz.1.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.502711][T11630] team_slave_0: entered allmulticast mode [ 125.512029][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 125.546480][T11632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3576'. [ 125.607949][T11642] hub 9-0:1.0: USB hub found [ 125.625497][T11642] hub 9-0:1.0: 8 ports detected [ 125.804199][T11672] wireguard0: entered promiscuous mode [ 125.809820][T11672] wireguard0: entered allmulticast mode [ 125.825728][T11675] loop0: detected capacity change from 0 to 512 [ 125.863839][T11683] hub 9-0:1.0: USB hub found [ 125.869304][T11683] hub 9-0:1.0: 8 ports detected [ 125.875341][T11675] ext4 filesystem being mounted at /784/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.026474][T11705] bridge0: port 3(vlan2) entered blocking state [ 126.032871][T11705] bridge0: port 3(vlan2) entered disabled state [ 126.040801][T11705] vlan2: entered allmulticast mode [ 126.045973][T11705] xfrm0: entered allmulticast mode [ 126.051983][T11705] vlan2: entered promiscuous mode [ 126.057092][T11705] xfrm0: entered promiscuous mode [ 126.065064][T11705] bridge0: port 3(vlan2) entered blocking state [ 126.071465][T11705] bridge0: port 3(vlan2) entered forwarding state [ 126.217867][T11728] loop3: detected capacity change from 0 to 164 [ 126.253895][T11728] bio_check_eod: 7102 callbacks suppressed [ 126.253913][T11728] syz.3.3620: attempt to access beyond end of device [ 126.253913][T11728] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.287426][T11738] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 126.294902][T11728] syz.3.3620: attempt to access beyond end of device [ 126.294902][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.318850][T11728] syz.3.3620: attempt to access beyond end of device [ 126.318850][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.343132][T11741] lo speed is unknown, defaulting to 1000 [ 126.350352][T11744] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3630'. [ 126.359750][T11744] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.3630'. [ 126.370821][T11728] syz.3.3620: attempt to access beyond end of device [ 126.370821][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.394687][T11728] syz.3.3620: attempt to access beyond end of device [ 126.394687][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.405564][T11745] loop5: detected capacity change from 0 to 128 [ 126.414257][T11728] syz.3.3620: attempt to access beyond end of device [ 126.414257][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.427878][T11728] syz.3.3620: attempt to access beyond end of device [ 126.427878][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.451630][T11728] syz.3.3620: attempt to access beyond end of device [ 126.451630][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.466634][T11728] syz.3.3620: attempt to access beyond end of device [ 126.466634][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.482095][T11728] syz.3.3620: attempt to access beyond end of device [ 126.482095][T11728] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.506320][T11751] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.574183][T11751] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.576231][T11749] loop1: detected capacity change from 0 to 8192 [ 126.596056][T11749] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.657740][ T156] tipc: Subscription rejected, illegal request [ 126.722004][T11751] team0: Port device netdevsim1 removed [ 126.731926][T11751] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.816493][T11751] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.897309][T11751] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.915438][T11751] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.927555][T11751] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.942475][T11751] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.155750][T11783] hub 9-0:1.0: USB hub found [ 127.165805][T11785] wireguard0: entered promiscuous mode [ 127.167212][T11783] hub 9-0:1.0: 8 ports detected [ 127.172163][T11785] wireguard0: entered allmulticast mode [ 127.246842][T11793] loop1: detected capacity change from 0 to 1024 [ 127.254938][T11793] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.267300][T11793] JBD2: no valid journal superblock found [ 127.273147][T11793] EXT4-fs (loop1): Could not load journal inode [ 127.505990][T11825] loop5: detected capacity change from 0 to 1024 [ 127.513316][T11825] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.524591][T11825] JBD2: no valid journal superblock found [ 127.530453][T11825] EXT4-fs (loop5): Could not load journal inode [ 127.537360][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117088200: rx timeout, send abort [ 127.545666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888117088200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.711364][T11847] hub 9-0:1.0: USB hub found [ 127.716230][T11847] hub 9-0:1.0: 8 ports detected [ 127.716809][T11849] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.730750][T11849] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3677'. [ 127.744475][T11851] netlink: 'syz.5.3678': attribute type 1 has an invalid length. [ 127.788361][T11859] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 127.815879][T11861] loop5: detected capacity change from 0 to 2048 [ 127.844889][T11861] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.3682: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 127.851782][T11867] loop0: detected capacity change from 0 to 1024 [ 127.869840][T11867] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.880594][T11867] JBD2: no valid journal superblock found [ 127.886362][T11867] EXT4-fs (loop0): Could not load journal inode [ 127.906017][T11869] rdma_op ffff888100060d80 conn xmit_rdma 0000000000000000 [ 127.942845][T11873] lo speed is unknown, defaulting to 1000 [ 128.137972][T11889] loop0: detected capacity change from 0 to 764 [ 128.174041][T11891] loop5: detected capacity change from 0 to 164 [ 128.314701][T11910] hub 9-0:1.0: USB hub found [ 128.318526][ T1035] IPVS: starting estimator thread 0... [ 128.321955][T11910] hub 9-0:1.0: 8 ports detected [ 128.370484][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.383788][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.387007][T11919] loop5: detected capacity change from 0 to 1024 [ 128.398605][T11919] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 128.423581][T11919] EXT4-fs: error: could not find journal device path [ 128.424289][T11911] IPVS: using max 2352 ests per chain, 117600 per kthread [ 129.038317][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881171e1c00: rx timeout, send abort [ 129.046647][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881171e1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.079910][T11923] syz.0.3720[11923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.079999][T11923] syz.0.3720[11923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.100944][T11925] loop1: detected capacity change from 0 to 512 [ 129.110050][T11923] syz.0.3720[11923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.129194][T11925] EXT4-fs: Ignoring removed orlov option [ 129.155260][T11928] loop4: detected capacity change from 0 to 1024 [ 129.164435][T11925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.176122][T11928] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.187925][T11925] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.188019][T11928] JBD2: no valid journal superblock found [ 129.200177][T11928] EXT4-fs (loop4): Could not load journal inode [ 129.207972][T11925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3711: bg 0: block 248: padding at end of block bitmap is not set [ 129.222839][T11925] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3711: Failed to acquire dquot type 1 [ 129.234834][T11925] EXT4-fs (loop1): 1 truncate cleaned up [ 129.245732][T11925] EXT4-fs: Ignoring removed orlov option [ 129.252163][T11925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.281085][T11925] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 129.327416][T11948] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 129.359528][T11925] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.3711: Abort forced by user [ 129.376335][T11925] EXT4-fs (loop1): Remounting filesystem read-only [ 129.382981][T11925] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 129.404453][T11925] ext4 filesystem being remounted at /728/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.453516][T11969] loop4: detected capacity change from 0 to 128 [ 129.562388][T11982] loop1: detected capacity change from 0 to 1024 [ 129.630451][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 129.630464][ T29] audit: type=1400 audit(1732200771.237:3814): avc: denied { map } for pid=11981 comm="syz.1.3738" path="/731/file1/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.679992][ T29] audit: type=1400 audit(1732200771.237:3815): avc: denied { execute } for pid=11981 comm="syz.1.3738" path="/731/file1/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.764188][T11994] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 129.863094][ T29] audit: type=1400 audit(1732200771.467:3816): avc: denied { mounton } for pid=12005 comm="syz.5.3747" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 129.911795][T12008] serio: Serial port ptm0 [ 129.919511][ T29] audit: type=1326 audit(1732200771.527:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 129.946805][ T29] audit: type=1326 audit(1732200771.547:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 129.970481][ T29] audit: type=1326 audit(1732200771.547:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 129.993977][ T29] audit: type=1326 audit(1732200771.547:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 130.017596][ T29] audit: type=1326 audit(1732200771.547:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 130.035828][T12014] loop5: detected capacity change from 0 to 1024 [ 130.041114][ T29] audit: type=1326 audit(1732200771.547:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 130.041149][ T29] audit: type=1326 audit(1732200771.547:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 130.110226][T12014] EXT4-fs mount: 42 callbacks suppressed [ 130.110248][T12014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.160617][T12020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.171390][T12014] support for the xor transformation has been removed. [ 130.195633][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.223335][T12020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.273437][T12020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.320884][T12038] 9p: Unknown Cache mode or invalid value r [ 130.364989][T12020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.426154][T12020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.448139][T12020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.466566][T12020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.482058][T12020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.577074][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813d510400: rx timeout, send abort [ 130.586181][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813d510400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.664826][T12082] netlink: 'syz.1.3780': attribute type 3 has an invalid length. [ 130.724309][T12095] loop0: detected capacity change from 0 to 512 [ 130.733522][T12095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.766982][T12095] EXT4-fs (loop0): 1 truncate cleaned up [ 130.790271][T12095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.841384][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.864963][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'. [ 131.023114][T12145] netlink: 'syz.0.3810': attribute type 322 has an invalid length. [ 131.142601][T12160] SELinux: security policydb version 18 (MLS) not backwards compatible [ 131.151658][T12160] SELinux: failed to load policy [ 131.239555][T12176] 9p: Unknown Cache mode or invalid value r [ 131.247773][T12172] loop0: detected capacity change from 0 to 2048 [ 131.271440][T12172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.297767][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.581064][T12200] loop0: detected capacity change from 0 to 512 [ 131.589527][T12200] EXT4-fs error (device loop0): __ext4_iget:4984: inode #15: block 1803188595: comm syz.0.3835: invalid block [ 131.603786][T12200] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3835: couldn't read orphan inode 15 (err -117) [ 131.616917][T12200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.644746][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.695926][ T3396] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 131.703819][ T3396] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 131.712541][ T3396] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 131.721328][ T3396] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 131.766877][T12216] netlink: 'syz.5.3842': attribute type 10 has an invalid length. [ 131.778122][T12216] team0: Device hsr_slave_0 failed to register rx_handler [ 131.819700][T12220] xt_HMARK: spi-set and port-set can't be combined [ 131.960654][T12242] netlink: 'syz.3.3855': attribute type 10 has an invalid length. [ 131.971127][T12242] team0: Device hsr_slave_0 failed to register rx_handler [ 132.090301][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 132.099299][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3863'. [ 132.198754][T12271] netlink: 'syz.4.3869': attribute type 322 has an invalid length. [ 132.275952][T12279] 9pnet_fd: Insufficient options for proto=fd [ 132.513407][T12294] loop1: detected capacity change from 0 to 1024 [ 132.519766][T12296] loop0: detected capacity change from 0 to 512 [ 132.521636][T12296] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.3881: casefold flag without casefold feature [ 132.526340][T12294] ext4: Unknown parameter 'smackfstransmute' [ 132.541124][T12296] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3881: couldn't read orphan inode 15 (err -117) [ 132.557464][T12296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.602063][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.655839][T12309] vlan2: entered promiscuous mode [ 132.661007][T12309] macvtap0: entered promiscuous mode [ 132.668370][T12309] macvtap0: left promiscuous mode [ 132.699575][T12311] netlink: 'syz.1.3888': attribute type 322 has an invalid length. [ 132.731551][T12313] vhci_hcd: invalid port number 97 [ 132.736739][T12313] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 132.932463][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3904'. [ 132.961240][T12261] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 132.972088][T12261] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 133.263781][ T1035] kernel write not supported for file /snd/seq (pid: 1035 comm: kworker/0:2) [ 133.288061][T12374] loop0: detected capacity change from 0 to 512 [ 133.334291][T12374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.359196][T12374] ext4 filesystem being mounted at /856/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.448916][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.486894][T12400] loop5: detected capacity change from 0 to 164 [ 133.562992][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3927'. [ 133.579185][T12413] No such timeout policy "syz0" [ 133.629435][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3931'. [ 133.661338][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3931'. [ 133.683183][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3935'. [ 133.710997][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3931'. [ 133.731699][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3931'. [ 133.762584][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3937'. [ 133.772412][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3937'. [ 133.781438][T12430] vlan1: entered promiscuous mode [ 133.790127][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3931'. [ 133.907011][T12455] loop4: detected capacity change from 0 to 512 [ 133.914258][T12455] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.929561][T12455] EXT4-fs (loop4): 1 truncate cleaned up [ 133.935735][T12455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.987193][T12464] loop0: detected capacity change from 0 to 128 [ 134.025654][T12464] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.047201][T12464] ext4 filesystem being mounted at /862/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.049204][T12468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.068580][T12468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.085480][T12468] usb usb4: usbfs: process 12468 (syz.1.3954) did not claim interface 0 before use [ 134.106371][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.131378][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.141524][T12481] loop5: detected capacity change from 0 to 512 [ 134.155505][T12483] rdma_rxe: rxe_newlink: failed to add lo [ 134.162333][T12481] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.3962: casefold flag without casefold feature [ 134.175461][T12481] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3962: couldn't read orphan inode 15 (err -117) [ 134.196250][T12490] loop4: detected capacity change from 0 to 1024 [ 134.203794][T12481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.236534][T12490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.258168][T12490] netlink: 'syz.4.3964': attribute type 1 has an invalid length. [ 134.265984][T12490] netlink: 'syz.4.3964': attribute type 2 has an invalid length. [ 134.286147][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.326467][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.383333][T12508] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 134.453283][T12516] loop3: detected capacity change from 0 to 512 [ 134.483674][T12516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.504003][T12516] ext4 filesystem being mounted at /843/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.545597][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.612229][T12532] rdma_op ffff8881094bb980 conn xmit_rdma 0000000000000000 [ 134.647175][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 134.647193][ T29] audit: type=1400 audit(1732200776.247:4219): avc: denied { read write } for pid=12539 comm="syz.4.3985" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.677320][ T29] audit: type=1400 audit(1732200776.247:4220): avc: denied { open } for pid=12539 comm="syz.4.3985" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.700973][ T29] audit: type=1400 audit(1732200776.297:4221): avc: denied { setopt } for pid=12533 comm="syz.0.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.720845][ T29] audit: type=1400 audit(1732200776.297:4222): avc: denied { create } for pid=12542 comm="syz.5.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.745293][ T29] audit: type=1400 audit(1732200776.357:4223): avc: denied { write } for pid=12542 comm="syz.5.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.767760][ T29] audit: type=1400 audit(1732200776.377:4224): avc: denied { create } for pid=12546 comm="syz.3.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.787432][ T29] audit: type=1400 audit(1732200776.377:4225): avc: denied { connect } for pid=12546 comm="syz.3.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.807255][ T29] audit: type=1400 audit(1732200776.377:4226): avc: denied { write } for pid=12546 comm="syz.3.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.827922][ T29] audit: type=1400 audit(1732200776.427:4227): avc: denied { create } for pid=12551 comm="syz.5.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.850294][ T29] audit: type=1400 audit(1732200776.427:4228): avc: denied { setopt } for pid=12551 comm="syz.5.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.894097][T12558] loop3: detected capacity change from 0 to 164 [ 135.090661][T12576] loop5: detected capacity change from 0 to 1024 [ 135.097495][T12576] EXT4-fs: Ignoring removed oldalloc option [ 135.111353][T12576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.144395][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.164661][T12580] loop5: detected capacity change from 0 to 512 [ 135.171921][T12580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.181344][T12580] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 135.485780][T12594] syz.0.4008[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.485899][T12594] syz.0.4008[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.498085][T12594] syz.0.4008[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.568467][T12599] 9pnet_fd: p9_fd_create_tcp (12599): problem connecting socket to 127.0.0.1 [ 135.795829][T12633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 135.802439][T12633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.802603][T12633] vhci_hcd vhci_hcd.0: Device attached [ 135.819481][T12637] vhci_hcd: connection closed [ 135.822200][ T155] vhci_hcd: stop threads [ 135.828351][T12635] loop3: detected capacity change from 0 to 4096 [ 135.831234][ T155] vhci_hcd: release socket [ 135.831251][ T155] vhci_hcd: disconnect device [ 135.849696][T12635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.870012][T12635] EXT4-fs: Cannot change quota options when quota turned on [ 135.890424][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.970275][T12654] loop4: detected capacity change from 0 to 128 [ 135.979741][T12654] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.992536][T12654] ext4 filesystem being mounted at /851/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.009203][T12657] loop3: detected capacity change from 0 to 2048 [ 136.047752][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.050230][T12657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.083795][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.141023][T12669] syz.3.4041[12669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.141127][T12669] syz.3.4041[12669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.152793][T12669] syz.3.4041[12669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.195483][T12675] loop3: detected capacity change from 0 to 1024 [ 136.230776][T12675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.262176][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 136.270106][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.274432][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.277870][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 136.294270][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.301726][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.309190][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.316597][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.324018][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.331444][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.338933][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.346366][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.353793][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.377408][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.384961][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.392412][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.399961][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.407396][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.414829][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.422442][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.430000][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.437686][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.445328][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.453081][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.460609][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.468021][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.475452][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.482998][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.490538][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.497943][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.505560][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.513146][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.520609][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.528018][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.535476][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.546318][T12694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.556744][ T3394] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 136.602652][T12694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.652235][T12705] vlan2: entered promiscuous mode [ 136.657432][T12705] vlan2: entered allmulticast mode [ 136.662923][T12705] vlan0: entered allmulticast mode [ 136.668071][T12705] veth0_vlan: entered allmulticast mode [ 136.673773][T12705] vlan0: entered promiscuous mode [ 136.681334][T12705] team0: Port device vlan2 added [ 136.693996][T12694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.708021][T12711] syz.5.4060[12711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.708085][T12711] syz.5.4060[12711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.720281][T12711] syz.5.4060[12711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.753811][T12694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.804986][T12694] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.816026][T12694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.827147][T12694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.837770][T12694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.067986][T12734] syz.1.4070[12734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.129679][T12742] loop4: detected capacity change from 0 to 512 [ 137.148483][T12742] EXT4-fs: Ignoring removed orlov option [ 137.154936][T12742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.166491][T12742] EXT4-fs (loop4): orphan cleanup on readonly fs [ 137.173979][T12742] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4074: bg 0: block 248: padding at end of block bitmap is not set [ 137.188999][T12742] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4074: Failed to acquire dquot type 1 [ 137.201378][T12742] EXT4-fs (loop4): 1 truncate cleaned up [ 137.210181][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.249603][T12742] EXT4-fs: Ignoring removed orlov option [ 137.256018][T12742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.264777][T12742] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 137.280465][T12742] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.4074: Abort forced by user [ 137.291701][T12742] EXT4-fs (loop4): Remounting filesystem read-only [ 137.298462][T12742] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 137.309113][T12742] ext4 filesystem being remounted at /861/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.331580][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.356140][T12753] loop1: detected capacity change from 0 to 1024 [ 137.363417][T12753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.373700][T12753] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.385321][T12753] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.394831][T12753] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.401768][T12753] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4078: Invalid inode table block 0 in block_group 0 [ 137.415250][T12753] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 137.425639][T12753] EXT4-fs error (device loop1): ext4_quota_write:7310: inode #3: comm syz.1.4078: mark_inode_dirty error [ 137.437958][T12753] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4078: Failed to acquire dquot type 0 [ 137.451220][T12753] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4078: Invalid inode table block 0 in block_group 0 [ 137.464308][T12753] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 137.476485][T12753] EXT4-fs error (device loop1): ext4_ext_truncate:4457: inode #15: comm syz.1.4078: mark_inode_dirty error [ 137.488682][T12753] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4078: Invalid inode table block 0 in block_group 0 [ 137.501736][T12753] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 137.511578][T12753] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 137.521450][T12753] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz.1.4078: Invalid inode table block 0 in block_group 0 [ 137.535571][T12753] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 137.546948][T12753] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm syz.1.4078: mark_inode_dirty error [ 137.558547][T12753] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 137.572605][T12753] EXT4-fs (loop1): 1 truncate cleaned up [ 137.578757][T12753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.612319][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.775765][T12793] loop5: detected capacity change from 0 to 256 [ 137.832944][T12801] loop3: detected capacity change from 0 to 512 [ 137.845441][T12803] loop4: detected capacity change from 0 to 512 [ 137.871964][T12801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.884848][T12801] ext4 filesystem being mounted at /872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.885341][T12803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.917412][T12803] ext4 filesystem being mounted at /874/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.928702][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.014215][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.031730][T12815] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 138.041249][T12815] SELinux: failed to load policy [ 138.096035][T12828] __nla_validate_parse: 5 callbacks suppressed [ 138.096101][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'. [ 138.112570][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4113'. [ 138.112818][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'. [ 138.166825][ T9] IPVS: starting estimator thread 0... [ 138.196060][T12841] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4118'. [ 138.253482][T12847] loop5: detected capacity change from 0 to 764 [ 138.259791][T12837] IPVS: using max 2064 ests per chain, 103200 per kthread [ 138.433063][T12874] dvmrp1: entered allmulticast mode [ 138.443237][T12874] dvmrp1: left allmulticast mode [ 138.520281][T12885] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 138.692360][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 138.699887][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.707327][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.714776][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.722281][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.729841][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.737876][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.745384][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 138.752898][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.760346][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.767967][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.775737][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.783529][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.790980][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.798461][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.806099][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.813723][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.821184][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.827481][T12919] loop5: detected capacity change from 0 to 2048 [ 138.828576][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.842363][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.849898][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.857336][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.864743][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.872151][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.879609][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.887018][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.894418][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.901962][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.909388][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.916957][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.924452][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.931943][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.939399][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.946876][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.954311][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.961714][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.969170][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.976567][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.984030][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 138.993747][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 139.038646][T12921] vlan2: entered allmulticast mode [ 139.041796][T12919] Alternate GPT is invalid, using primary GPT. [ 139.050178][T12919] loop5: p2 p3 p7 [ 139.196037][T12942] loop4: detected capacity change from 0 to 128 [ 139.235936][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 139.265744][T12948] loop5: detected capacity change from 0 to 2048 [ 139.299460][T12948] loop5: p3 < > p4 < > [ 139.303718][T12948] loop5: partition table partially beyond EOD, truncated [ 139.314569][T12948] loop5: p3 start 4284289 is beyond EOD, truncated [ 139.408179][T12974] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4182'. [ 139.439825][T12981] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 139.526296][T12990] Cannot find del_set index 0 as target [ 139.529427][T12994] netlink: 'syz.0.4190': attribute type 322 has an invalid length. [ 139.568188][T12998] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4193'. [ 139.679491][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 139.679509][ T29] audit: type=1400 audit(1732200781.287:4547): avc: denied { read write } for pid=13013 comm="syz.0.4200" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.689186][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.713040][ T29] audit: type=1400 audit(1732200781.287:4548): avc: denied { open } for pid=13013 comm="syz.0.4200" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.719819][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.742011][ T29] audit: type=1400 audit(1732200781.287:4549): avc: denied { ioctl } for pid=13013 comm="syz.0.4200" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.784308][ T29] audit: type=1400 audit(1732200781.387:4550): avc: denied { module_request } for pid=13018 comm="syz.3.4202" kmod="ip6table_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 139.808070][T13022] loop5: detected capacity change from 0 to 164 [ 139.815091][T13022] iso9660: Unknown parameter '.' [ 140.005677][ T29] audit: type=1400 audit(1732200781.607:4551): avc: denied { mounton } for pid=13046 comm="syz.5.4215" path="/431/file0" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.123229][ T29] audit: type=1400 audit(1732200781.727:4552): avc: denied { create } for pid=13054 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.147299][ T29] audit: type=1400 audit(1732200781.757:4553): avc: denied { write } for pid=13054 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.168408][ T29] audit: type=1400 audit(1732200781.757:4554): avc: denied { nlmsg_write } for pid=13054 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.192900][T13062] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 140.285171][ T29] audit: type=1326 audit(1732200781.887:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.5.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 140.308743][ T29] audit: type=1326 audit(1732200781.887:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13072 comm="syz.5.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 140.381796][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4232'. [ 140.455732][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 140.596844][T13112] usb usb4: usbfs: process 13112 (syz.0.4246) did not claim interface 0 before use [ 140.607474][T13116] loop5: detected capacity change from 0 to 512 [ 140.614920][T13116] EXT4-fs: Ignoring removed orlov option [ 140.621379][T13116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.641268][T13116] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.653727][T13116] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4248: bg 0: block 248: padding at end of block bitmap is not set [ 140.670442][T13116] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.4248: Failed to acquire dquot type 1 [ 140.683085][T13116] EXT4-fs (loop5): 1 truncate cleaned up [ 140.692049][T13116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.720415][T13116] EXT4-fs: Ignoring removed orlov option [ 140.726728][T13116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.747125][T13116] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 140.787779][T13116] EXT4-fs error (device loop5): __ext4_remount:6749: comm syz.5.4248: Abort forced by user [ 140.812860][T13116] EXT4-fs (loop5): Remounting filesystem read-only [ 140.819454][T13116] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 140.830568][T13116] ext4 filesystem being remounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.875821][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.060419][T13177] loop5: detected capacity change from 0 to 1024 [ 141.067645][T13177] EXT4-fs: Ignoring removed orlov option [ 141.073574][T13177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.101641][T13177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.135593][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.217445][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 141.224970][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.232435][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.240787][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.248214][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.255676][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.263631][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.271919][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 141.279454][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.286844][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.294364][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.302411][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.309923][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.317319][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.324817][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.332885][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.340415][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.347883][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.355297][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.363334][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.370770][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.378253][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.385685][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.393691][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.401178][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.408611][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.416237][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.424375][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.432016][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.439502][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.446906][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.454943][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.462603][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.470025][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.477413][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.485471][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.492956][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.500448][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.507856][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.516669][ T24] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.543098][T13206] loop3: detected capacity change from 0 to 2048 [ 141.606171][T13206] Alternate GPT is invalid, using primary GPT. [ 141.612728][T13206] loop3: p2 p3 p7 [ 141.639223][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.649059][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.663178][T13224] loop5: detected capacity change from 0 to 512 [ 141.677855][T13224] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.690117][T13224] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.4298: bad orphan inode 131083 [ 141.701520][T13224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.726283][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.794148][T13241] loop5: detected capacity change from 0 to 512 [ 141.832513][T13241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.845260][T13241] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.869825][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.933509][T13257] vlan3: entered allmulticast mode [ 141.966792][T13261] loop5: detected capacity change from 0 to 736 [ 141.991863][T13261] Symlink component flag not implemented [ 141.997695][T13261] Symlink component flag not implemented (122) [ 142.007023][T13265] 9pnet: Could not find request transport: f [ 142.060097][T13278] SELinux: failed to load policy [ 142.168715][T13293] bpf_get_probe_write_proto: 8 callbacks suppressed [ 142.168732][T13293] syz.5.4330[13293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.189218][T13293] syz.5.4330[13293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.204798][T13293] syz.5.4330[13293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.296553][T13311] loop5: detected capacity change from 0 to 2048 [ 142.322081][T13311] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0) [ 142.381132][T13322] loop5: detected capacity change from 0 to 512 [ 142.388309][T13322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.397236][T13322] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 142.408675][T13324] SELinux: Context X!nzuj8)ĝL4;S]i^E;ϫTKp *p5+<=N}ow+ is not valid (left unmapped). [ 142.478756][T13332] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 142.647159][T13360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13360 comm=syz.3.4361 [ 142.741432][T13370] loop3: detected capacity change from 0 to 1024 [ 142.748207][T13370] EXT4-fs: Ignoring removed orlov option [ 142.754064][T13370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.782659][T13370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.820768][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.843548][T13375] loop3: detected capacity change from 0 to 1024 [ 142.850870][T13375] EXT4-fs: Invalid want_extra_isize 3894 [ 143.371238][T13415] loop5: detected capacity change from 0 to 8192 [ 143.378620][T13415] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.452262][T13431] syzkaller1: entered promiscuous mode [ 143.457800][T13431] syzkaller1: entered allmulticast mode [ 143.465367][T13427] __nla_validate_parse: 7 callbacks suppressed [ 143.465384][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4391'. [ 143.570346][T13444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4399'. [ 143.601642][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.620256][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.996762][T13494] loop3: detected capacity change from 0 to 2048 [ 144.003846][T13494] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 144.133865][T13504] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 144.173435][T13508] loop3: detected capacity change from 0 to 512 [ 144.272659][T13508] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.281916][T13508] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 144.291214][T13508] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 144.300309][T13508] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 144.308468][T13508] System zones: 0-2, 18-18, 34-34 [ 144.314326][T13508] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.329434][T13508] EXT4-fs (loop3): 1 truncate cleaned up [ 144.335446][T13508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.360990][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.428294][T13523] delete_channel: no stack [ 144.432833][T13523] delete_channel: no stack [ 144.457077][T13527] loop3: detected capacity change from 0 to 512 [ 144.465774][T13527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.487570][T13527] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.4438: bad orphan inode 131083 [ 144.499971][T13527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.526760][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.569811][T13538] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.577367][T13538] vhci_hcd: invalid port number 18 [ 144.582569][T13538] vhci_hcd: invalid port number 18 [ 144.710954][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 144.710968][ T29] audit: type=1400 audit(1732200786.317:4806): avc: denied { getopt } for pid=13557 comm="syz.5.4453" lport=56548 faddr=::ffff:172.30.0.6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.741881][ T29] audit: type=1326 audit(1732200786.327:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.765592][ T29] audit: type=1326 audit(1732200786.327:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.789844][ T29] audit: type=1326 audit(1732200786.327:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.813501][ T29] audit: type=1326 audit(1732200786.327:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.837807][ T29] audit: type=1326 audit(1732200786.327:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.862060][ T29] audit: type=1326 audit(1732200786.327:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.885754][ T29] audit: type=1326 audit(1732200786.327:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.910051][ T29] audit: type=1326 audit(1732200786.327:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 144.933940][ T29] audit: type=1326 audit(1732200786.327:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.1.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45a980e819 code=0x7ffc0000 [ 145.106468][T13590] loop5: detected capacity change from 0 to 512 [ 145.114986][T13592] tmpfs: Bad value for 'mpol' [ 145.114993][T13590] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.115011][T13590] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 145.422304][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4483'. [ 145.431988][T13624] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.549473][T13643] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 145.689261][T13661] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 145.714488][T13663] sd 0:0:1:0: device reset [ 145.740792][T13666] netlink: 'syz.5.4501': attribute type 10 has an invalid length. [ 145.750511][T13666] team0: Device hsr_slave_0 failed to register rx_handler [ 145.809748][T13673] netlink: 'syz.5.4505': attribute type 10 has an invalid length. [ 145.818151][T13673] team0: Device hsr_slave_0 failed to register rx_handler [ 145.941254][T13695] SELinux: policydb version 0 does not match my version range 15-33 [ 145.949564][T13695] SELinux: failed to load policy [ 145.961263][T13698] syz.5.4517[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.961379][T13698] syz.5.4517[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.974977][T13698] syz.5.4517[13698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.080182][T13711] 9pnet: Could not find request transport: 0x0000000000000006 [ 146.123487][T13722] syz.3.4528[13722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.123570][T13722] syz.3.4528[13722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.150550][T13722] syz.3.4528[13722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.203780][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4533'. [ 146.307890][T13746] netlink: 'syz.3.4537': attribute type 21 has an invalid length. [ 146.361175][T13753] syz.5.4542[13753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.172310][T13801] IPVS: Error joining to the multicast group [ 147.305461][T13817] loop5: detected capacity change from 0 to 128 [ 147.314063][T13817] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.330274][T13817] ext4 filesystem being mounted at /522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.397963][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 147.432157][ T7873] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.445634][T13834] IPVS: Error joining to the multicast group [ 147.455433][T13830] loop3: detected capacity change from 0 to 512 [ 147.488065][T13830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.509103][T13830] ext4 filesystem being mounted at /998/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.540093][T13844] vhci_hcd: invalid port number 157 [ 147.545525][T13844] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 147.577829][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.662600][T13866] loop5: detected capacity change from 0 to 512 [ 147.682469][T13866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.700920][T13866] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.727878][T13866] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 147.749680][T13878] loop3: detected capacity change from 0 to 1024 [ 147.758121][ T7873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.767186][T13878] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.769655][T13878] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.787654][T13878] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.794776][T13878] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 147.805711][T13878] EXT4-fs (loop3): Remounting filesystem read-only [ 147.818012][T13878] EXT4-fs (loop3): 1 orphan inode deleted [ 147.825688][T13878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.838207][T13878] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 147.848435][T13889] bpf_get_probe_write_proto: 8 callbacks suppressed [ 147.848454][T13889] syz.4.4603[13889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.857716][T13878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.879483][T13889] syz.4.4603[13889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.879684][T13889] syz.4.4603[13889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.915611][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4604'. [ 147.936166][T13892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4604'. [ 148.350376][T13936] syz.0.4625[13936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.350573][T13936] syz.0.4625[13936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.362301][T13936] syz.0.4625[13936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.471572][T13951] loop3: detected capacity change from 0 to 128 [ 148.515146][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4636'. [ 148.596460][T13968] bond1: entered promiscuous mode [ 148.601670][T13968] bond1: entered allmulticast mode [ 148.607160][T13968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.617867][T13968] bond1 (unregistering): Released all slaves [ 148.691659][T13976] IPVS: stopping master sync thread 7401 ... [ 148.752455][T13980] loop3: detected capacity change from 0 to 512 [ 148.760515][T13980] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 148.773719][T13980] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 15 (err -117) [ 148.785873][T13980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.813508][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.907190][T13993] netlink: 'syz.3.4652': attribute type 3 has an invalid length. [ 148.952556][T13997] loop3: detected capacity change from 0 to 128 [ 148.960817][T13997] ext4 filesystem being mounted at /1019/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.173949][T14016] SELinux: Context system_u:object_r:tmpfs_t:s0 is not valid (left unmapped). [ 149.277445][T14029] loop4: detected capacity change from 0 to 1024 [ 149.280497][T14030] loop5: detected capacity change from 0 to 512 [ 149.303443][T14030] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.331359][T14030] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.4669: corrupted inode contents [ 149.343922][ T3428] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 149.360022][T14030] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.4669: mark_inode_dirty error [ 149.371542][ T3428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 149.383924][ T3428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.383924][ T3428] [ 149.393673][ T3428] EXT4-fs (loop4): Total free blocks count 0 [ 149.394352][T14030] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.4669: corrupted inode contents [ 149.399690][ T3428] EXT4-fs (loop4): Free/Dirty block details [ 149.399707][ T3428] EXT4-fs (loop4): free_blocks=68451041280 [ 149.399754][ T3428] EXT4-fs (loop4): dirty_blocks=32 [ 149.428583][ T3428] EXT4-fs (loop4): Block reservation details [ 149.434938][ T3428] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 149.446138][ T3428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 149.458469][ T3428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.458469][ T3428] [ 149.491939][T14045] loop4: detected capacity change from 0 to 512 [ 149.527604][T14045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 149.537008][T14049] loop5: detected capacity change from 0 to 1024 [ 149.538823][T14045] System zones: 0-2, 18-18, 34-34 [ 149.550144][T14049] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.561846][T14049] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 149.570062][T14049] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.576614][T14045] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4673: bg 0: block 248: padding at end of block bitmap is not set [ 149.585407][T14049] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 149.592546][T14045] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4673: Failed to acquire dquot type 1 [ 149.613623][T14049] EXT4-fs (loop5): Remounting filesystem read-only [ 149.620596][T14045] EXT4-fs (loop4): 1 truncate cleaned up [ 149.626609][T14045] ext4 filesystem being mounted at /958/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.627637][T14049] EXT4-fs (loop5): 1 orphan inode deleted [ 149.644738][T14049] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 149.818384][T14069] 9pnet_fd: Insufficient options for proto=fd [ 149.852939][T14071] loop5: detected capacity change from 0 to 1024 [ 149.888983][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 149.889015][ T29] audit: type=1400 audit(1732200791.477:5153): avc: denied { create } for pid=14066 comm="syz.0.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.915098][ T29] audit: type=1400 audit(1732200791.477:5154): avc: denied { setopt } for pid=14066 comm="syz.0.4683" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.935573][ T29] audit: type=1400 audit(1732200791.477:5155): avc: denied { open } for pid=14072 comm="syz.4.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.955025][ T29] audit: type=1400 audit(1732200791.477:5156): avc: denied { kernel } for pid=14072 comm="syz.4.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.974627][ T29] audit: type=1400 audit(1732200791.477:5157): avc: denied { write } for pid=14072 comm="syz.4.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.996217][T14074] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 150.015359][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.024125][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.031902][ T29] audit: type=1400 audit(1732200791.617:5158): avc: denied { read write } for pid=14077 comm="syz.4.4686" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.055750][ T29] audit: type=1400 audit(1732200791.617:5159): avc: denied { open } for pid=14077 comm="syz.4.4686" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.075819][T14067] IPVS: stopping master sync thread 14074 ... [ 150.079277][ T29] audit: type=1400 audit(1732200791.617:5160): avc: denied { ioctl } for pid=14077 comm="syz.4.4686" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.086869][T14078] xt_TCPMSS: Only works on TCP SYN packets [ 150.128077][ T29] audit: type=1400 audit(1732200791.727:5161): avc: denied { mounton } for pid=14070 comm="syz.5.4685" path="/543/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.200476][ T29] audit: type=1400 audit(1732200791.797:5162): avc: denied { create } for pid=14079 comm="syz.3.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.260745][T14084] SELinux: failed to load policy [ 150.335003][T14093] loop3: detected capacity change from 0 to 512 [ 150.383663][T14093] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 150.395888][T14093] System zones: 0-2, 18-18, 34-34 [ 150.406577][T14093] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4692: bg 0: block 248: padding at end of block bitmap is not set [ 150.421984][T14109] can0: slcan on ttyS3. [ 150.427014][T14093] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4692: Failed to acquire dquot type 1 [ 150.441271][T14093] EXT4-fs (loop3): 1 truncate cleaned up [ 150.447305][T14093] ext4 filesystem being mounted at /1031/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.509145][T14108] can0 (unregistered): slcan off ttyS3. [ 150.657992][T14127] SELinux: policydb version -858998881 does not match my version range 15-33 [ 150.672572][T14127] SELinux: failed to load policy [ 150.734675][T14141] loop5: detected capacity change from 0 to 512 [ 150.832031][T14141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 150.842617][T14141] System zones: 0-2, 18-18, 34-34 [ 150.850397][T14141] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4716: bg 0: block 248: padding at end of block bitmap is not set [ 150.868026][T14141] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.4716: Failed to acquire dquot type 1 [ 150.887782][T14155] loop3: detected capacity change from 0 to 512 [ 150.895384][T14141] EXT4-fs (loop5): 1 truncate cleaned up [ 150.901815][T14141] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.940987][T14155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 150.967655][T14155] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 150.980744][T14155] EXT4-fs (loop3): 1 truncate cleaned up [ 150.987168][T14155] ext4 filesystem being mounted at /1035/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.035869][ T155] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 151.052905][T14173] lo speed is unknown, defaulting to 1000 [ 151.148471][T14191] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 151.158124][T14191] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 151.246548][T14202] can0: slcan on ttyS3. [ 151.311926][T14212] loop3: detected capacity change from 0 to 512 [ 151.319486][T14201] can0 (unregistered): slcan off ttyS3. [ 151.365551][T14217] loop4: detected capacity change from 0 to 512 [ 151.372821][T14217] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 151.382871][T14217] EXT4-fs (loop4): invalid journal inode [ 151.388875][T14217] EXT4-fs (loop4): can't get journal size [ 151.397108][T14217] EXT4-fs (loop4): 1 truncate cleaned up [ 151.710779][T14236] loop3: detected capacity change from 0 to 1024 [ 151.717463][T14236] EXT4-fs: Ignoring removed orlov option [ 151.723929][T14236] EXT4-fs: Ignoring removed orlov option [ 151.744021][T14236] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.4756: corrupted in-inode xattr: bad magic number in in-inode xattr [ 151.760463][T14236] EXT4-fs (loop3): Remounting filesystem read-only [ 151.768043][T14236] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 151.776933][T14236] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 151.786832][T14236] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 152.029721][T14256] syz.0.4764[14256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.029806][T14256] syz.0.4764[14256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.041581][T14256] syz.0.4764[14256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.143453][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4768'. [ 152.268298][T14281] syz.0.4776[14281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.285112][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4777'. [ 152.399740][T14295] syzkaller1: entered allmulticast mode [ 152.513109][T14317] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 152.521098][T14317] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 152.737124][T14346] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4806'. [ 152.826645][T14361] loop3: detected capacity change from 0 to 128 [ 152.839734][T14361] ext4 filesystem being mounted at /1051/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.947087][T14371] dccp_invalid_packet: P.Data Offset(10) too large [ 153.020304][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4818'. [ 153.024627][T14377] loop4: detected capacity change from 0 to 512 [ 153.029485][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4818'. [ 153.048620][T14377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4819: bg 0: block 393: padding at end of block bitmap is not set [ 153.063481][T14377] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 153.072516][T14377] EXT4-fs (loop4): 2 truncates cleaned up [ 153.209597][T14394] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 153.357099][T14411] loop4: detected capacity change from 0 to 2048 [ 153.415203][T14411] Alternate GPT is invalid, using primary GPT. [ 153.421642][T14411] loop4: p2 p3 p7 [ 153.436327][T14411] sctp: [Deprecated]: syz.4.4835 (pid 14411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.436327][T14411] Use struct sctp_sack_info instead [ 153.511204][T14424] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 153.626018][T14441] loop4: detected capacity change from 0 to 66 [ 153.783298][T14464] loop5: detected capacity change from 0 to 512 [ 153.790509][T14464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.801524][T14464] EXT4-fs (loop5): 1 truncate cleaned up [ 153.849447][T14469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4862'. [ 153.875730][T14478] usb usb7: usbfs: process 14478 (syz.3.4866) did not claim interface 0 before use [ 153.915342][T14486] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 153.925236][T14482] bio_check_eod: 14143 callbacks suppressed [ 153.925256][T14482] syz.5.4867: attempt to access beyond end of device [ 153.925256][T14482] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.934120][T14488] Process accounting resumed [ 153.975745][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4872'. [ 154.033885][T14502] bpf_get_probe_write_proto: 2 callbacks suppressed [ 154.033906][T14502] syz.5.4877[14502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.042524][T14502] syz.5.4877[14502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.064205][T14502] syz.5.4877[14502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.115584][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4884'. [ 154.181491][T14526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4889'. [ 154.339501][T14541] loop0: detected capacity change from 0 to 736 [ 154.361537][T14541] Symlink component flag not implemented [ 154.367714][T14541] Symlink component flag not implemented (122) [ 154.400941][T14544] lo speed is unknown, defaulting to 1000 [ 154.806936][T14591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.815873][T14591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.980899][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 154.980913][ T29] audit: type=1326 audit(1732200795.830:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.4.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.011372][ T29] audit: type=1326 audit(1732200795.840:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.4.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.035238][ T29] audit: type=1326 audit(1732200795.840:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14601 comm="syz.4.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.059455][ T29] audit: type=1326 audit(1732200795.840:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.083089][ T29] audit: type=1326 audit(1732200795.840:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.107482][ T29] audit: type=1326 audit(1732200795.840:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.131106][ T29] audit: type=1326 audit(1732200795.840:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.155624][ T29] audit: type=1326 audit(1732200795.840:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.180219][ T29] audit: type=1326 audit(1732200795.990:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.203881][ T29] audit: type=1326 audit(1732200795.990:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.4.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 155.285754][T14595] Set syz1 is full, maxelem 65536 reached [ 155.580102][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4936'. [ 155.589182][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4936'. [ 155.598220][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4936'. [ 155.702846][T14666] IPVS: Error connecting to the multicast addr [ 155.797510][T14675] loop4: detected capacity change from 0 to 2048 [ 155.888144][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4957'. [ 155.909955][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4957'. [ 155.921567][T14696] netlink: 'syz.3.4958': attribute type 10 has an invalid length. [ 155.942618][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4957'. [ 155.980659][T14704] loop0: detected capacity change from 0 to 164 [ 155.987904][T14706] xt_ecn: cannot match TCP bits for non-tcp packets [ 156.016265][T14704] Unable to read rock-ridge attributes [ 156.023423][T14704] Unable to read rock-ridge attributes [ 156.117544][T14720] 9pnet: Could not find request transport: xen [ 156.126224][T14727] loop5: detected capacity change from 0 to 1024 [ 156.181128][T14732] loop4: detected capacity change from 0 to 164 [ 156.313200][T14760] loop3: detected capacity change from 0 to 164 [ 156.365769][T14768] loop3: detected capacity change from 0 to 512 [ 156.386517][T14768] ext4 filesystem being mounted at /1075/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.603073][T14805] lo speed is unknown, defaulting to 1000 [ 156.755626][T14812] bond1: entered promiscuous mode [ 156.760819][T14812] bond1: entered allmulticast mode [ 156.770566][T14812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.792672][T14812] bond1 (unregistering): Released all slaves [ 157.012556][T14837] loop0: detected capacity change from 0 to 512 [ 157.014618][T14832] loop3: detected capacity change from 0 to 512 [ 157.027243][T14837] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5020: corrupted in-inode xattr: invalid ea_ino [ 157.042398][T14837] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5020: couldn't read orphan inode 15 (err -117) [ 157.056025][T14832] ext4 filesystem being mounted at /1084/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.360995][T14868] x_tables: duplicate underflow at hook 1 [ 157.393536][T14870] team0: Device ipvlan2 failed to register rx_handler [ 157.599047][T14896] loop4: detected capacity change from 0 to 512 [ 157.607588][T14896] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5047: corrupted in-inode xattr: invalid ea_ino [ 157.621950][T14896] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5047: couldn't read orphan inode 15 (err -117) [ 157.638343][T14896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5047: invalid indirect mapped block 234881024 (level 0) [ 157.873699][T14913] lo speed is unknown, defaulting to 1000 [ 157.930064][T14904] Set syz1 is full, maxelem 65536 reached [ 158.023395][T14923] bond3: entered promiscuous mode [ 158.028493][T14923] bond3: entered allmulticast mode [ 158.043417][T14923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.065148][T14923] bond3 (unregistering): Released all slaves [ 158.134967][T14936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.270536][T14954] ALSA: seq fatal error: cannot create timer (-22) [ 158.447544][T14982] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.521684][T14982] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.582438][T14982] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.606789][T15003] loop4: detected capacity change from 0 to 512 [ 158.616079][T15003] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.625242][T15003] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 158.636364][T14982] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.646716][T15003] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 158.657715][T15008] loop3: detected capacity change from 0 to 512 [ 158.666665][T15008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.666895][T15003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 158.686659][T15003] System zones: 0-2, 18-18, 34-34 [ 158.698393][T15003] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.714305][T15003] EXT4-fs (loop4): 1 truncate cleaned up [ 158.714787][T15008] EXT4-fs (loop3): 1 truncate cleaned up [ 158.728096][T15003] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 158.738341][T15003] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 158.747591][T15003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 158.756191][T15003] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 158.762164][T14982] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.787404][T14982] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.800733][T14982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.812721][T14982] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.817557][T15017] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 158.827636][T15017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.835889][T15017] vhci_hcd vhci_hcd.0: Device attached [ 158.849255][T15020] vhci_hcd: connection closed [ 158.850719][ T11] vhci_hcd: stop threads [ 158.859929][ T11] vhci_hcd: release socket [ 158.864433][ T11] vhci_hcd: disconnect device [ 158.952076][T15041] netlink: 'syz.0.5113': attribute type 2 has an invalid length. [ 158.956722][T15043] syz.4.5114[15043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.960016][T15043] syz.4.5114[15043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.972142][T15043] syz.4.5114[15043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.007187][T15046] __nla_validate_parse: 8 callbacks suppressed [ 159.007219][T15046] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5116'. [ 159.038312][T15047] 9pnet_fd: Insufficient options for proto=fd [ 159.322312][T15086] loop0: detected capacity change from 0 to 164 [ 159.329805][T15086] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 159.339086][T15086] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 159.454814][T15105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5143'. [ 159.455554][T15104] loop0: detected capacity change from 0 to 512 [ 159.473580][T15104] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5142: corrupted in-inode xattr: invalid ea_ino [ 159.487427][T15104] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5142: couldn't read orphan inode 15 (err -117) [ 159.507757][T15104] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5142: invalid indirect mapped block 234881024 (level 0) [ 159.546793][T15115] batadv_slave_1: entered promiscuous mode [ 159.553238][T15113] batadv_slave_1: left promiscuous mode [ 159.565607][T15116] loop0: detected capacity change from 0 to 1024 [ 159.575090][T15116] EXT4-fs: Ignoring removed bh option [ 159.928407][T15165] loop3: detected capacity change from 0 to 128 [ 160.078960][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 160.078977][ T29] audit: type=1400 audit(1732201056.918:5824): avc: denied { create } for pid=15170 comm="syz.3.5172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 160.105541][ T29] audit: type=1400 audit(1732201056.928:5825): avc: denied { getopt } for pid=15170 comm="syz.3.5172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 160.154200][ T29] audit: type=1326 audit(1732201057.008:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.181591][ T29] audit: type=1326 audit(1732201057.008:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.205952][ T29] audit: type=1326 audit(1732201057.008:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.230514][ T29] audit: type=1326 audit(1732201057.008:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.254526][ T29] audit: type=1326 audit(1732201057.008:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.278811][ T29] audit: type=1326 audit(1732201057.008:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.303424][ T29] audit: type=1326 audit(1732201057.008:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.327050][ T29] audit: type=1326 audit(1732201057.038:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15174 comm="syz.3.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6805e819 code=0x7ffc0000 [ 160.349301][T15182] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5177'. [ 160.506506][T15206] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5190'. [ 160.562356][T15214] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5193'. [ 160.640491][T15226] SELinux: failed to load policy [ 160.717085][T15237] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5204'. [ 160.754224][T15246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5207'. [ 160.786418][T15249] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.825058][T15254] bond1: entered promiscuous mode [ 160.830358][T15254] bond1: entered allmulticast mode [ 160.836110][T15254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.839059][T15257] syz.5.5209[15257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.849346][T15257] syz.5.5209[15257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.855025][T15254] bond1 (unregistering): Released all slaves [ 160.882491][T15257] syz.5.5209[15257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.884249][T15249] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.887768][T15259] SELinux: syz.1.5213 (15259) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 160.981208][T15249] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.041326][T15249] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.057673][T15273] netlink: 'syz.1.5220': attribute type 2 has an invalid length. [ 161.065595][T15273] netlink: 'syz.1.5220': attribute type 2 has an invalid length. [ 161.074216][T15273] netlink: 'syz.1.5220': attribute type 1 has an invalid length. [ 161.128069][T15249] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.160304][T15249] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.175709][T15249] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.191066][T15249] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.284983][T15292] loop5: detected capacity change from 0 to 256 [ 161.291998][T15292] vfat: Unknown parameter '0x0000000000000000' [ 161.358356][T15299] netlink: 'syz.5.5232': attribute type 39 has an invalid length. [ 161.509146][T15312] sctp: [Deprecated]: syz.4.5236 (pid 15312) Use of int in max_burst socket option deprecated. [ 161.509146][T15312] Use struct sctp_assoc_value instead [ 161.595464][T15323] lo speed is unknown, defaulting to 1000 [ 162.130508][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5257'. [ 162.229302][T15363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5262'. [ 162.486587][T15400] netlink: 'syz.0.5280': attribute type 21 has an invalid length. [ 162.611728][T15418] loop3: detected capacity change from 0 to 128 [ 162.682528][T15427] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.741895][T15427] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.896596][T15427] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.949148][T15428] Set syz1 is full, maxelem 65536 reached [ 163.003752][T15427] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.042176][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'. [ 163.065681][T15427] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.080598][T15427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.093070][T15427] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.120799][T15427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.213507][T15464] IPv6: sit1: Disabled Multicast RS [ 163.563907][T15512] loop3: detected capacity change from 0 to 1024 [ 163.582626][T15512] EXT4-fs mount: 48 callbacks suppressed [ 163.582722][T15512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.615245][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.782418][T15541] loop3: detected capacity change from 0 to 512 [ 163.789415][T15541] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.800005][T15541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 163.807933][T15541] System zones: 1-12 [ 163.812173][T15541] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.819261][T15541] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 163.833408][T15541] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 163.842893][T15541] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 163.856329][T15541] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 163.870381][T15541] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 163.883610][T15541] EXT4-fs (loop3): 1 truncate cleaned up [ 163.889644][T15541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 163.904848][T15541] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 163.923319][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 164.101597][T15550] No such timeout policy "syz0" [ 164.130913][T15554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 164.137473][T15554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.145182][T15554] vhci_hcd vhci_hcd.0: Device attached [ 164.153656][T15557] vhci_hcd: connection closed [ 164.153926][ T156] vhci_hcd: stop threads [ 164.163001][ T156] vhci_hcd: release socket [ 164.167431][ T156] vhci_hcd: disconnect device [ 164.186981][T15560] block device autoloading is deprecated and will be removed. [ 164.194627][T15560] syz.3.5352: attempt to access beyond end of device [ 164.194627][T15560] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 164.211061][T15564] geneve0: entered allmulticast mode [ 165.152191][T15610] loop0: detected capacity change from 0 to 8192 [ 165.189194][T15610] loop0: p2 p3 p4 [ 165.193035][T15610] loop0: p2 start 14935 is beyond EOD, truncated [ 165.199416][T15610] loop0: p3 size 196608 extends beyond EOD, truncated [ 165.206577][T15610] loop0: p4 start 4026530307 is beyond EOD, truncated [ 165.243199][T15612] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.254766][T15614] __nla_validate_parse: 2 callbacks suppressed [ 165.254783][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5378'. [ 165.282170][T15612] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.292183][T15616] syz.0.5377[15616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.292295][T15616] syz.0.5377[15616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.304174][T15616] syz.0.5377[15616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.331144][T15612] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.411932][T15612] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.424130][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 165.424153][ T29] audit: type=1400 audit(1732201062.278:6039): avc: denied { write } for pid=15621 comm="syz.3.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.463703][T15625] loop4: detected capacity change from 0 to 512 [ 165.472083][T15625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.492933][T15625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.505934][T15625] ext4 filesystem being mounted at /1106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.534825][T15612] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.547415][T15612] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.558961][T15612] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.571841][T15612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.631929][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.672835][ T29] audit: type=1326 audit(1732201062.528:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.4.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 165.696693][ T29] audit: type=1326 audit(1732201062.528:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.4.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 165.750897][ T29] audit: type=1326 audit(1732201062.528:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.4.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 165.774477][ T29] audit: type=1326 audit(1732201062.528:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.4.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 165.798778][ T29] audit: type=1326 audit(1732201062.528:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.4.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82edbce819 code=0x7ffc0000 [ 165.831897][ T29] audit: type=1400 audit(1732201062.688:6045): avc: denied { append } for pid=15641 comm="syz.0.5389" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.881797][ T29] audit: type=1400 audit(1732201062.738:6046): avc: denied { write } for pid=15643 comm="syz.3.5390" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.945320][T15653] loop3: detected capacity change from 0 to 128 [ 166.030293][ T29] audit: type=1400 audit(1732201062.888:6047): avc: denied { name_connect } for pid=15664 comm="syz.0.5400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 166.096821][ T29] audit: type=1326 audit(1732201062.948:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.5.5405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76196de819 code=0x7ffc0000 [ 166.279903][T15709] loop4: detected capacity change from 0 to 764 [ 166.289914][T15709] rock: directory entry would overflow storage [ 166.296166][T15709] rock: sig=0x4654, size=5, remaining=4 [ 166.325232][T15709] ISOFS: unable to read i-node block [ 166.325254][T15716] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 166.443619][T15730] rdma_op ffff8881138da980 conn xmit_rdma 0000000000000000 [ 166.516979][T15750] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 166.560837][T15756] loop4: detected capacity change from 0 to 512 [ 166.578526][T15756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.595919][T15756] EXT4-fs (loop4): 1 truncate cleaned up [ 166.605769][T15756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.621908][T15763] netlink: 'syz.3.5442': attribute type 3 has an invalid length. [ 166.687722][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.887333][T15792] loop3: detected capacity change from 0 to 512 [ 166.894503][T15792] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.921043][T15792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002] [ 166.930509][T15792] System zones: 0-2, 18-18, 34-35 [ 166.936501][T15792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.951322][T15792] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.5456: corrupted inode contents [ 166.963585][T15792] EXT4-fs (loop3): Remounting filesystem read-only [ 166.982776][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.986093][T15800] loop4: detected capacity change from 0 to 512 [ 166.998808][T15800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.019057][T15804] loop3: detected capacity change from 0 to 512 [ 167.021585][T15800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.025738][T15804] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.039505][T15800] ext4 filesystem being mounted at /1128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.045086][T15804] journal_path: Lookup failure for './file0' [ 167.061276][T15804] EXT4-fs: error: could not find journal device path [ 167.090963][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.126615][T15810] loop3: detected capacity change from 0 to 512 [ 167.134678][T15810] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5463: corrupted in-inode xattr: invalid ea_ino [ 167.149249][T15810] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5463: couldn't read orphan inode 15 (err -117) [ 167.161755][T15810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.190288][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.573164][T15783] 9pnet_fd: p9_fd_create_tcp (15783): problem connecting socket to 127.0.0.1 [ 167.837077][T15869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5489'. [ 167.879752][T15875] loop0: detected capacity change from 0 to 2048 [ 167.890529][T15875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.906741][T15875] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.933927][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.090703][T15907] loop0: detected capacity change from 0 to 512 [ 168.103246][T15907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.117638][T15907] EXT4-fs (loop0): 1 truncate cleaned up [ 168.123810][T15907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.162564][T15907] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 168.173392][T15917] loop4: detected capacity change from 0 to 512 [ 168.215795][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.234341][T15917] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5510: corrupted in-inode xattr: invalid ea_ino [ 168.250154][T15917] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5510: couldn't read orphan inode 15 (err -117) [ 168.264255][T15917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.292967][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.365062][T15940] syz.1.5521: attempt to access beyond end of device [ 168.365062][T15940] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 168.484709][T15955] netlink: 'syz.5.5528': attribute type 4 has an invalid length. [ 168.655442][T15979] loop0: detected capacity change from 0 to 4096 [ 168.693008][T15979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.742668][T15995] netlink: 'syz.5.5546': attribute type 21 has an invalid length. [ 168.743110][T15993] Invalid ELF header magic: != ELF [ 168.750778][T15995] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5546'. [ 168.910349][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.950925][T16017] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 169.089968][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5562'. [ 169.163643][T16042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16042 comm=syz.3.5568 [ 169.209650][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5569'. [ 169.343375][T16060] loop3: detected capacity change from 0 to 512 [ 169.358967][T16060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.375770][T16060] EXT4-fs (loop3): 1 truncate cleaned up [ 169.389292][T16060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.426222][T16069] loop0: detected capacity change from 0 to 512 [ 169.436620][T16069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.453273][T16060] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 169.480380][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.494636][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.532087][T16079] ================================================================== [ 169.540346][T16079] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 169.547829][T16079] [ 169.550167][T16079] read-write to 0xffffffff88bf22ec of 4 bytes by task 16073 on cpu 0: [ 169.558769][T16079] pcpu_free_area+0x4dc/0x570 [ 169.563471][T16079] free_percpu+0x1c6/0xb30 [ 169.568016][T16079] perf_trace_event_unreg+0xf1/0x1a0 [ 169.573492][T16079] perf_trace_destroy+0x6a/0xe0 [ 169.578383][T16079] tp_perf_event_destroy+0x15/0x20 [ 169.583538][T16079] _free_event+0x7ca/0xa10 [ 169.587998][T16079] perf_event_release_kernel+0x61a/0x670 [ 169.593665][T16079] perf_release+0x1f/0x30 [ 169.598012][T16079] __fput+0x17a/0x6d0 [ 169.602002][T16079] ____fput+0x1c/0x30 [ 169.606002][T16079] task_work_run+0x13a/0x1a0 [ 169.610626][T16079] syscall_exit_to_user_mode+0xa8/0x120 [ 169.616193][T16079] do_syscall_64+0xd6/0x1c0 [ 169.620721][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.626661][T16079] [ 169.628996][T16079] read to 0xffffffff88bf22ec of 4 bytes by task 16079 on cpu 1: [ 169.636659][T16079] pcpu_alloc_noprof+0x9b6/0x10a0 [ 169.641884][T16079] register_netdevice+0x40b/0xe30 [ 169.646930][T16079] ip6_tnl_create2+0x87/0x220 [ 169.651662][T16079] ip6_tnl_locate+0x384/0x420 [ 169.656362][T16079] ip6_tnl_siocdevprivate+0x4c0/0x770 [ 169.661845][T16079] dev_ifsioc+0x84e/0xa10 [ 169.666280][T16079] dev_ioctl+0x8e9/0xab0 [ 169.670552][T16079] sock_ioctl+0x5ba/0x640 [ 169.675027][T16079] __se_sys_ioctl+0xc9/0x140 [ 169.679810][T16079] __x64_sys_ioctl+0x43/0x50 [ 169.684415][T16079] x64_sys_call+0x1690/0x2dc0 [ 169.689120][T16079] do_syscall_64+0xc9/0x1c0 [ 169.693662][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.699694][T16079] [ 169.702028][T16079] value changed: 0x000000c7 -> 0x000000cb [ 169.707756][T16079] [ 169.710111][T16079] Reported by Kernel Concurrency Sanitizer on: [ 169.716294][T16079] CPU: 1 UID: 0 PID: 16079 Comm: syz.5.5584 Tainted: G W 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 169.728314][T16079] Tainted: [W]=WARN [ 169.732225][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 169.742326][T16079] ==================================================================