last executing test programs: 2.685747075s ago: executing program 0 (id=2588): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 2.626428841s ago: executing program 0 (id=2590): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}}}, 0x84) 2.625922711s ago: executing program 0 (id=2592): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') syz_open_dev$evdev(0x0, 0x4, 0x201) fchdir(r0) exit(0xffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.941566099s ago: executing program 3 (id=2638): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0006}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 1.82133122s ago: executing program 3 (id=2643): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x41000, 0x68}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x603f) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.758086847s ago: executing program 0 (id=2644): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r2, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 1.757655696s ago: executing program 3 (id=2645): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x6, 0x2) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 1.670627765s ago: executing program 3 (id=2646): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000dfffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r1, &(0x7f0000000140)=""/68, 0x44) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 1.124059169s ago: executing program 4 (id=2666): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.123809869s ago: executing program 4 (id=2668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.123700769s ago: executing program 4 (id=2669): inotify_rm_watch(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x8) finit_module(0xffffffffffffffff, 0x0, 0x7) 1.01446363s ago: executing program 2 (id=2672): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.01433065s ago: executing program 2 (id=2673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) r1 = syz_open_pts(r0, 0x100) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0) 931.487188ms ago: executing program 0 (id=2674): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="c3aa004d2c01000071101a00000000009500"], &(0x7f0000000480)='syzkaller\x00', 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0xfffffffffffffe33, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) 915.143179ms ago: executing program 0 (id=2675): ptrace(0x4206, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x76) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)='B', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) 844.632926ms ago: executing program 3 (id=2676): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(0x0, 0x10800, 0x1d6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 631.656038ms ago: executing program 1 (id=2679): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xaf}, 0x40002102) 614.721129ms ago: executing program 1 (id=2680): socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x10) 593.062761ms ago: executing program 1 (id=2681): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="a271f2", 0x3}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) 573.293603ms ago: executing program 1 (id=2682): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 514.737939ms ago: executing program 1 (id=2683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000e80)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 514.616989ms ago: executing program 1 (id=2684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0xffffffffffffff88, 0x3000c891, 0x0, 0x0) 203.503039ms ago: executing program 4 (id=2685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000800032000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 179.015002ms ago: executing program 4 (id=2686): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioperm(0x9, 0x9, 0x7) 130.753756ms ago: executing program 2 (id=2687): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 130.506717ms ago: executing program 2 (id=2688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x804525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) 127.608877ms ago: executing program 2 (id=2689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 121.216537ms ago: executing program 4 (id=2690): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000400)=""/160, 0xa0}], 0x3, &(0x7f0000002200)=""/4096, 0x1000}, 0x12160) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 488.169µs ago: executing program 3 (id=2691): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_clone3(&(0x7f0000000440)={0x20080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 0s ago: executing program 2 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) kernel console output (not intermixed with test programs): 49.286587][ T4003] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 49.298958][ T4003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.119: bg 0: block 248: padding at end of block bitmap is not set [ 49.339718][ T4003] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.119: Failed to acquire dquot type 1 [ 49.375728][ T4003] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.431414][ T4011] bridge_slave_0: left allmulticast mode [ 49.431659][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.437235][ T4011] bridge_slave_0: left promiscuous mode [ 49.451900][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.468322][ T4011] bridge_slave_1: left allmulticast mode [ 49.474039][ T4011] bridge_slave_1: left promiscuous mode [ 49.479802][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.492885][ T4011] bond0: (slave bond_slave_0): Releasing backup interface [ 49.504356][ T4011] bond0: (slave bond_slave_1): Releasing backup interface [ 49.518358][ T4011] team0: Port device team_slave_0 removed [ 49.529257][ T4011] team0: Port device team_slave_1 removed [ 49.543311][ T4011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.573858][ T4016] syzkaller1: entered promiscuous mode [ 49.579388][ T4016] syzkaller1: entered allmulticast mode [ 49.623539][ T4023] veth0: entered promiscuous mode [ 49.632603][ T4023] loop3: detected capacity change from 0 to 512 [ 49.640014][ T4023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.647451][ T4023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.658976][ T4023] EXT4-fs (loop3): 1 truncate cleaned up [ 49.665712][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.772762][ T4030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 49.804166][ T4029] netlink: 96 bytes leftover after parsing attributes in process `syz.3.122'. [ 49.843263][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 49.913302][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.946377][ T4033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.124'. [ 49.979227][ T4033] loop3: detected capacity change from 0 to 1024 [ 49.988294][ T4033] EXT4-fs: Ignoring removed orlov option [ 50.007624][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.042881][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.093438][ T4040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'. [ 50.134951][ T4041] siw: device registration error -23 [ 50.448315][ T4055] lo speed is unknown, defaulting to 1000 [ 50.787543][ T4060] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 50.841771][ T4080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4080 comm=syz.2.143 [ 50.959765][ T4089] syz.2.143 (4089): /proc/4079/oom_adj is deprecated, please use /proc/4079/oom_score_adj instead. [ 51.009493][ T3393] hid_parser_main: 34 callbacks suppressed [ 51.009510][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.022898][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.030429][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.037904][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.045424][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.048671][ T4098] x_tables: unsorted underflow at hook 2 [ 51.052834][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.063979][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 51.065993][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.066021][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.066046][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.066072][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.067770][ T3393] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 51.149142][ T4106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.154'. [ 51.158131][ T4106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.154'. [ 51.179066][ T4106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.154'. [ 51.493649][ T4141] lo speed is unknown, defaulting to 1000 [ 51.623776][ T4162] loop4: detected capacity change from 0 to 764 [ 51.651648][ T4162] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.698769][ T4162] Symlink component flag not implemented [ 51.717557][ T4162] Symlink component flag not implemented (7) [ 51.808488][ T4187] : renamed from vlan0 (while UP) [ 51.902655][ T4201] loop2: detected capacity change from 0 to 512 [ 51.930704][ T4201] EXT4-fs: Ignoring removed oldalloc option [ 51.975283][ T4201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.997993][ T4201] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.040137][ T4223] xt_cgroup: invalid path, errno=-2 [ 52.047523][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 52.047540][ T29] audit: type=1400 audit(1761452226.018:6217): avc: denied { rmdir } for pid=4200 comm="syz.2.199" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.048103][ T4201] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.199: invalid size [ 52.089078][ T4221] loop4: detected capacity change from 0 to 512 [ 52.094755][ T4228] loop3: detected capacity change from 0 to 1024 [ 52.102556][ T4221] EXT4-fs: Ignoring removed bh option [ 52.120558][ T4228] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.131645][ T4228] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.134338][ T4230] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 52.149335][ T4221] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.159829][ T4228] JBD2: no valid journal superblock found [ 52.165686][ T4228] EXT4-fs (loop3): Could not load journal inode [ 52.172583][ T4221] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 52.173268][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.180555][ T4221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 52.200259][ T4221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.206693][ T4221] EXT4-fs error (device loop4): ext4_quota_enable:7132: comm syz.4.207: Bad quota inum: 4294967291, type: 0 [ 52.218597][ T4221] EXT4-fs (loop4): Remounting filesystem read-only [ 52.225219][ T4221] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 52.240710][ T4221] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 52.251009][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.267358][ T4235] loop3: detected capacity change from 0 to 512 [ 52.279808][ T29] audit: type=1400 audit(1761452226.248:6218): avc: denied { append } for pid=4236 comm="syz.2.213" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.306962][ T4221] bridge_slave_1: left allmulticast mode [ 52.312694][ T4221] bridge_slave_1: left promiscuous mode [ 52.318431][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.327603][ T4221] bridge_slave_0: left allmulticast mode [ 52.333327][ T4221] bridge_slave_0: left promiscuous mode [ 52.339146][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.344105][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.363421][ T4235] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.397674][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.504296][ T29] audit: type=1400 audit(1761452226.478:6219): avc: denied { write } for pid=4251 comm="syz.3.221" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.541338][ T4252] : renamed from vlan0 (while UP) [ 52.572701][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.608435][ T4264] loop2: detected capacity change from 0 to 128 [ 52.635547][ T4264] syz.2.227: attempt to access beyond end of device [ 52.635547][ T4264] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 52.649044][ T29] audit: type=1400 audit(1761452226.608:6220): avc: denied { mount } for pid=4263 comm="syz.2.227" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.685900][ T29] audit: type=1400 audit(1761452226.658:6221): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.745834][ T4283] : renamed from vlan0 (while UP) [ 52.751643][ T29] audit: type=1326 audit(1761452226.668:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 52.775105][ T29] audit: type=1326 audit(1761452226.668:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 52.798663][ T29] audit: type=1326 audit(1761452226.668:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 52.822123][ T29] audit: type=1326 audit(1761452226.668:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 52.845754][ T29] audit: type=1326 audit(1761452226.668:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 52.996182][ T4298] program syz.3.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.038996][ T4304] loop2: detected capacity change from 0 to 128 [ 53.066133][ T4304] syz.2.249: attempt to access beyond end of device [ 53.066133][ T4304] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 53.147178][ T4325] syz.2.249: attempt to access beyond end of device [ 53.147178][ T4325] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 53.163483][ T4325] syz.2.249: attempt to access beyond end of device [ 53.163483][ T4325] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 53.182295][ T4325] syz.2.249: attempt to access beyond end of device [ 53.182295][ T4325] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 53.196001][ T4325] syz.2.249: attempt to access beyond end of device [ 53.196001][ T4325] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 53.209624][ T4325] syz.2.249: attempt to access beyond end of device [ 53.209624][ T4325] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 53.229045][ T4325] syz.2.249: attempt to access beyond end of device [ 53.229045][ T4325] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 53.254092][ T4325] syz.2.249: attempt to access beyond end of device [ 53.254092][ T4325] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 53.267775][ T4325] syz.2.249: attempt to access beyond end of device [ 53.267775][ T4325] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 53.399561][ T4361] qrtr: Invalid version 195 [ 53.639822][ T4401] : renamed from vlan0 (while UP) [ 53.663578][ T4405] loop4: detected capacity change from 0 to 512 [ 53.684239][ T4405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.697816][ T4405] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 53.705777][ T4405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 53.714061][ T4405] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.720528][ T4405] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.735236][ T4405] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 53.746034][ T4405] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.297: bg 0: block 40: padding at end of block bitmap is not set [ 53.761045][ T4405] EXT4-fs (loop4): Remounting filesystem read-only [ 53.768349][ T4405] EXT4-fs (loop4): 1 truncate cleaned up [ 53.774991][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.800798][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.894488][ T4436] siw: device registration error -23 [ 54.010839][ T4456] vhci_hcd: default hub control req: 400c v5000 i0007 l0 [ 54.032835][ T4458] loop2: detected capacity change from 0 to 1024 [ 54.047227][ T4460] tipc: Can't bind to reserved service type 3 [ 54.058230][ T4458] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 54.081338][ T4463] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 54.104081][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.156980][ T4458] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.321: missing EA_INODE flag [ 54.179218][ T4458] EXT4-fs (loop2): Remounting filesystem read-only [ 54.212478][ T4483] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 54.239498][ T4486] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.254419][ T4488] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 54.266986][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.279063][ T4492] netlink: 'syz.1.338': attribute type 2 has an invalid length. [ 54.528395][ T4537] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 54.581513][ T4547] loop4: detected capacity change from 0 to 512 [ 54.602320][ T4547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.610947][ T4547] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.654336][ T4547] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.366: Failed to acquire dquot type 1 [ 54.670179][ T4547] EXT4-fs (loop4): Remounting filesystem read-only [ 54.682354][ T4547] EXT4-fs (loop4): 1 truncate cleaned up [ 54.688602][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.743487][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.776211][ T4574] loop2: detected capacity change from 0 to 164 [ 54.783252][ T4575] __nla_validate_parse: 14 callbacks suppressed [ 54.783267][ T4575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.378'. [ 54.862042][ T4590] loop4: detected capacity change from 0 to 512 [ 54.868540][ T4587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 54.877451][ T4587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 54.970923][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 54.973942][ T4590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.011076][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.295619][ T4648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 55.419889][ T4670] IPv6: Can't replace route, no match found [ 55.666086][ T4692] bond0: (slave bond_slave_0): Releasing backup interface [ 55.683411][ T4692] bond0: (slave bond_slave_1): Releasing backup interface [ 55.704246][ T4692] team0: Port device team_slave_0 removed [ 55.731380][ T4692] team0: Port device team_slave_1 removed [ 55.748964][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.767660][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.793788][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.822747][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.841638][ T4692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.859481][ T4696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.875165][ T3421] lo speed is unknown, defaulting to 1000 [ 55.875589][ T3401] syz1: Port: 1 Link DOWN [ 55.880914][ T3421] syz0: Port: 1 Link DOWN [ 56.059635][ T4721] $H: renamed from bond0 (while UP) [ 56.071300][ T4723] netlink: 'syz.4.442': attribute type 10 has an invalid length. [ 56.085036][ T4721] $H: entered promiscuous mode [ 56.090132][ T4721] bond_slave_0: entered promiscuous mode [ 56.096014][ T4721] bond_slave_1: entered promiscuous mode [ 56.114684][ T4723] team0: Device dummy0 is up. Set it down before adding it as a team port [ 56.486437][ T4766] loop2: detected capacity change from 0 to 512 [ 56.566677][ T4778] loop4: detected capacity change from 0 to 512 [ 56.595656][ T4786] netlink: 68 bytes leftover after parsing attributes in process `syz.0.470'. [ 56.616221][ T4789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.472'. [ 56.629039][ T4778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.469: bg 0: block 5: invalid block bitmap [ 56.648030][ T4791] loop2: detected capacity change from 0 to 512 [ 56.661042][ T4778] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 56.666429][ T4791] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 56.679743][ T4795] loop3: detected capacity change from 0 to 1024 [ 56.690677][ T4778] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.469: invalid indirect mapped block 3 (level 2) [ 56.704083][ T4791] EXT4-fs (loop2): invalid journal inode [ 56.709762][ T4791] EXT4-fs (loop2): can't get journal size [ 56.720497][ T4778] EXT4-fs (loop4): 1 orphan inode deleted [ 56.720691][ T4795] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (46251!=20869) [ 56.726417][ T4778] EXT4-fs (loop4): 1 truncate cleaned up [ 56.750336][ T4778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.765863][ T4791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 56.767257][ T4778] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.469: path /103/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 56.775605][ T4795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 56.811360][ T4791] System zones: 1-12, 13-13 [ 56.817426][ T4791] EXT4-fs (loop2): 1 truncate cleaned up [ 56.822499][ T4795] EXT4-fs (loop3): failed to initialize system zone (-117) [ 56.833545][ T4791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.852429][ T4795] EXT4-fs (loop3): mount failed [ 56.874203][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.897313][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.926942][ T4807] loop2: detected capacity change from 0 to 512 [ 57.015249][ T4807] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.481: corrupted in-inode xattr: invalid ea_ino [ 57.036638][ T4817] loop4: detected capacity change from 0 to 512 [ 57.044203][ T4807] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.481: couldn't read orphan inode 15 (err -117) [ 57.079596][ T4817] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.485: corrupted xattr block 95: invalid header [ 57.094675][ T4807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.131530][ T4833] loop3: detected capacity change from 0 to 512 [ 57.140717][ T4817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.485: bg 0: block 7: invalid block bitmap [ 57.157510][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 57.157526][ T29] audit: type=1400 audit(1761452231.128:6303): avc: denied { setattr } for pid=4806 comm="syz.2.481" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.186392][ T4817] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 57.213202][ T4817] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.485: corrupted xattr block 95: invalid header [ 57.239160][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.242087][ T4817] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 57.262012][ T4817] EXT4-fs (loop4): 1 orphan inode deleted [ 57.269906][ T4817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.274225][ T4833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.314768][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.329979][ T29] audit: type=1400 audit(1761452231.278:6304): avc: denied { name_bind } for pid=4850 comm="syz.2.499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.363180][ T4833] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.403614][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.435606][ T29] audit: type=1326 audit(1761452231.398:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 57.459050][ T29] audit: type=1326 audit(1761452231.398:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 57.482449][ T29] audit: type=1326 audit(1761452231.408:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 57.505784][ T29] audit: type=1326 audit(1761452231.408:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 57.529166][ T29] audit: type=1326 audit(1761452231.408:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4860 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 57.590720][ T4881] loop4: detected capacity change from 0 to 128 [ 57.598150][ T4882] loop3: detected capacity change from 0 to 128 [ 57.693286][ T4889] bio_check_eod: 67 callbacks suppressed [ 57.693304][ T4889] syz.3.513: attempt to access beyond end of device [ 57.693304][ T4889] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 57.721950][ T4889] syz.3.513: attempt to access beyond end of device [ 57.721950][ T4889] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 57.741127][ T4889] syz.3.513: attempt to access beyond end of device [ 57.741127][ T4889] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 57.783755][ T4889] syz.3.513: attempt to access beyond end of device [ 57.783755][ T4889] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 57.824089][ T4889] syz.3.513: attempt to access beyond end of device [ 57.824089][ T4889] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 57.883533][ T4897] loop4: detected capacity change from 0 to 128 [ 57.893982][ T4889] syz.3.513: attempt to access beyond end of device [ 57.893982][ T4889] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 57.926123][ T4897] syz.4.520: attempt to access beyond end of device [ 57.926123][ T4897] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 57.956928][ T4889] syz.3.513: attempt to access beyond end of device [ 57.956928][ T4889] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 57.996491][ T4889] syz.3.513: attempt to access beyond end of device [ 57.996491][ T4889] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 58.028879][ T4897] syz.4.520: attempt to access beyond end of device [ 58.028879][ T4897] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 58.122683][ T29] audit: type=1326 audit(1761452231.548:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 58.146081][ T29] audit: type=1326 audit(1761452231.548:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 58.169551][ T29] audit: type=1400 audit(1761452231.848:6312): avc: denied { connect } for pid=4893 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.214511][ T4919] loop4: detected capacity change from 0 to 1024 [ 58.227620][ T4919] EXT4-fs: inline encryption not supported [ 58.233508][ T4919] EXT4-fs: Ignoring removed i_version option [ 58.254111][ T4919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.315985][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.465478][ T4953] loop3: detected capacity change from 0 to 512 [ 58.523260][ T4953] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.538900][ T4953] EXT4-fs (loop3): 1 truncate cleaned up [ 58.545457][ T4953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.596546][ T4966] capability: warning: `syz.4.550' uses 32-bit capabilities (legacy support in use) [ 58.629392][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.646613][ T4973] loop2: detected capacity change from 0 to 128 [ 58.663260][ T4973] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.761913][ T3421] hid_parser_main: 33 callbacks suppressed [ 58.761935][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.775368][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.782836][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.790282][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.797730][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.805215][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.812621][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.820067][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.827762][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.835269][ T3421] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.888561][ T3421] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.903175][ T4995] loop4: detected capacity change from 0 to 2048 [ 58.960416][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.991491][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.021168][ T5010] loop2: detected capacity change from 0 to 512 [ 59.049482][ T5010] EXT4-fs: Ignoring removed bh option [ 59.078435][ T5010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.570: missing EA_INODE flag [ 59.103771][ T5010] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.570: error while reading EA inode 11 err=-117 [ 59.127203][ T5026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.577'. [ 59.157742][ T5010] EXT4-fs (loop2): 1 orphan inode deleted [ 59.181587][ T5010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.242717][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.431137][ T5069] loop3: detected capacity change from 0 to 512 [ 59.491930][ T5077] netlink: 'syz.0.602': attribute type 21 has an invalid length. [ 59.499763][ T5077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.602'. [ 59.514090][ T5077] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 59.521790][ T5077] netlink: 3 bytes leftover after parsing attributes in process `syz.0.602'. [ 59.551474][ T5086] loop4: detected capacity change from 0 to 128 [ 59.565959][ T5086] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 59.580969][ T5086] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 59.590179][ T5086] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 59.590955][ T5086] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 59.610884][ T5086] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 60.151713][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 60.486511][ T5157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.639'. [ 60.500370][ T5159] : renamed from vlan0 (while UP) [ 60.519863][ T5161] xt_hashlimit: max too large, truncated to 1048576 [ 60.822057][ T5200] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 60.855839][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 61.190867][ T5243] loop4: detected capacity change from 0 to 512 [ 61.214416][ T5243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.246550][ T5243] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 61.279813][ T5243] EXT4-fs (loop4): 1 truncate cleaned up [ 61.286238][ T5243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.298531][ T5257] netlink: 64 bytes leftover after parsing attributes in process `syz.1.688'. [ 61.314010][ T5260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'. [ 61.332102][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.463463][ T5285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'. [ 61.506695][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 62.182957][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 62.182973][ T29] audit: type=1107 audit(1761452236.148:6469): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 62.236677][ T5387] loop2: detected capacity change from 0 to 128 [ 62.267080][ T29] audit: type=1400 audit(1761452236.238:6470): avc: denied { read } for pid=5393 comm="syz.0.751" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.318447][ T5396] loop2: detected capacity change from 0 to 1024 [ 62.347423][ T5397] random: crng reseeded on system resumption [ 62.382373][ T5397] lo speed is unknown, defaulting to 1000 [ 62.425728][ T29] audit: type=1400 audit(1761452236.318:6471): avc: denied { append } for pid=5380 comm="syz.1.745" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.448892][ T29] audit: type=1400 audit(1761452236.318:6472): avc: denied { ioctl } for pid=5380 comm="syz.1.745" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.679487][ T29] audit: type=1326 audit(1761452236.618:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 62.703003][ T29] audit: type=1326 audit(1761452236.618:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 62.726587][ T29] audit: type=1326 audit(1761452236.618:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 62.750214][ T29] audit: type=1326 audit(1761452236.618:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 62.773545][ T29] audit: type=1326 audit(1761452236.618:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 62.807414][ T5396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.826799][ T5396] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.850085][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.919487][ T29] audit: type=1326 audit(1761452236.888:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 63.250083][ T5439] random: crng reseeded on system resumption [ 63.283954][ T5439] lo speed is unknown, defaulting to 1000 [ 63.537871][ T5448] loop4: detected capacity change from 0 to 1024 [ 63.622640][ T5448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.667366][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 63.682803][ T5448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 63.707589][ T5448] System zones: 0-1, 3-36 [ 63.715863][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.751063][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.934008][ T5478] loop2: detected capacity change from 0 to 1024 [ 63.950069][ T5478] EXT4-fs: inline encryption not supported [ 63.984986][ T5478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.036947][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.056514][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 64.081988][ T5495] geneve0: entered allmulticast mode [ 64.227968][ T5521] syz.2.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.255253][ T5524] loop4: detected capacity change from 0 to 128 [ 64.306905][ T5524] bio_check_eod: 209 callbacks suppressed [ 64.306919][ T5524] syz.4.807: attempt to access beyond end of device [ 64.306919][ T5524] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 64.420585][ T5524] syz.4.807: attempt to access beyond end of device [ 64.420585][ T5524] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 64.455475][ T5524] syz.4.807: attempt to access beyond end of device [ 64.455475][ T5524] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 64.483539][ T5524] syz.4.807: attempt to access beyond end of device [ 64.483539][ T5524] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 64.509886][ T5560] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.513143][ T5524] syz.4.807: attempt to access beyond end of device [ 64.513143][ T5524] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 64.631591][ T5524] syz.4.807: attempt to access beyond end of device [ 64.631591][ T5524] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 64.653800][ T5524] syz.4.807: attempt to access beyond end of device [ 64.653800][ T5524] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 64.680387][ T5524] syz.4.807: attempt to access beyond end of device [ 64.680387][ T5524] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 64.694310][ T5524] syz.4.807: attempt to access beyond end of device [ 64.694310][ T5524] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 64.714710][ T5524] syz.4.807: attempt to access beyond end of device [ 64.714710][ T5524] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 65.414288][ T5640] random: crng reseeded on system resumption [ 65.448052][ T5640] lo speed is unknown, defaulting to 1000 [ 65.704697][ T5650] loop3: detected capacity change from 0 to 128 [ 65.897412][ T5661] loop2: detected capacity change from 0 to 512 [ 65.937404][ T5661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.988168][ T5661] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.002758][ T5676] 9pnet: Could not find request transport: r [ 66.019383][ T5661] SELinux: Context @ is not valid (left unmapped). [ 66.038758][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.238753][ T5704] loop2: detected capacity change from 0 to 128 [ 66.245511][ T5703] macvtap1: entered promiscuous mode [ 66.250847][ T5703] macvtap1: entered allmulticast mode [ 66.257149][ T5703] dummy0: entered promiscuous mode [ 66.262334][ T5703] dummy0: entered allmulticast mode [ 66.269713][ T5703] team0: Device macvtap1 failed to register rx_handler [ 66.277503][ T5703] dummy0: left allmulticast mode [ 66.283659][ T5703] dummy0: left promiscuous mode [ 66.349749][ T5710] random: crng reseeded on system resumption [ 66.445012][ T5710] lo speed is unknown, defaulting to 1000 [ 66.654181][ T5716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 66.744778][ T5716] IPVS: Error connecting to the multicast addr [ 66.819952][ T5729] 9pnet_fd: Insufficient options for proto=fd [ 66.874476][ T5737] loop2: detected capacity change from 0 to 128 [ 67.092510][ T5768] loop3: detected capacity change from 0 to 1764 [ 67.121558][ T5773] random: crng reseeded on system resumption [ 67.151165][ T5768] Invalid ELF header magic: != ELF [ 67.183250][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 67.183266][ T29] audit: type=1326 audit(1761452242.145:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 67.212885][ T29] audit: type=1326 audit(1761452242.145:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 67.236215][ T29] audit: type=1326 audit(1761452242.145:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 67.388626][ T29] audit: type=1326 audit(1761452242.275:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 67.412217][ T29] audit: type=1326 audit(1761452242.275:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 67.435608][ T29] audit: type=1326 audit(1761452242.275:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d0b4efc9 code=0x7ffc0000 [ 67.455427][ T5799] loop3: detected capacity change from 0 to 512 [ 67.466519][ T5790] random: crng reseeded on system resumption [ 67.498043][ T5790] lo speed is unknown, defaulting to 1000 [ 67.587530][ T5799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.600338][ T5799] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.663377][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.940141][ T29] audit: type=1326 audit(1761452242.905:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 67.974542][ T5841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.031309][ T29] audit: type=1326 audit(1761452242.945:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 68.054867][ T29] audit: type=1326 audit(1761452242.975:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5834 comm="syz.2.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 68.113380][ T5849] loop2: detected capacity change from 0 to 128 [ 68.158126][ T5849] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.195876][ T5859] loop3: detected capacity change from 0 to 512 [ 68.213619][ T5849] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.227277][ T29] audit: type=1326 audit(1761452243.175:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 68.253198][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.269915][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.293289][ T5859] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.351038][ T5859] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.944: corrupted inode contents [ 68.553259][ T5859] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.944: mark_inode_dirty error [ 68.580468][ T5859] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.944: corrupted inode contents [ 68.692311][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.745354][ T5902] Illegal XDP return value 4294967262 on prog (id 319) dev syz_tun, expect packet loss! [ 69.001166][ T5939] loop3: detected capacity change from 0 to 128 [ 69.318933][ T5984] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.420564][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1005'. [ 69.544538][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 69.572125][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 69.641196][ T6037] loop2: detected capacity change from 0 to 512 [ 69.665026][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.734393][ T6037] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.764411][ T6037] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1025: corrupted inode contents [ 69.787754][ T6037] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.1025: mark_inode_dirty error [ 69.850751][ T6037] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1025: corrupted inode contents [ 69.914791][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.954436][ T6081] loop2: detected capacity change from 0 to 512 [ 70.009509][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.022305][ T6081] ext4 filesystem being mounted at /171/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.049981][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.224012][ T6103] random: crng reseeded on system resumption [ 70.258787][ T6103] lo speed is unknown, defaulting to 1000 [ 70.695260][ T6118] loop2: detected capacity change from 0 to 1024 [ 70.704502][ T6118] EXT4-fs: inline encryption not supported [ 70.980878][ T6155] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.081947][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 71.249764][ T6199] loop3: detected capacity change from 0 to 512 [ 71.267595][ T6199] ext4 filesystem being mounted at /214/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.287188][ T6205] loop4: detected capacity change from 0 to 1024 [ 71.336773][ T6205] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 71.349176][ T6205] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.349176][ T6205] [ 71.358900][ T6205] EXT4-fs (loop4): Total free blocks count 0 [ 71.364949][ T6205] EXT4-fs (loop4): Free/Dirty block details [ 71.365295][ T6216] batadv1: entered promiscuous mode [ 71.370870][ T6205] EXT4-fs (loop4): free_blocks=0 [ 71.370894][ T6205] EXT4-fs (loop4): dirty_blocks=0 [ 71.376146][ T6216] batadv1: entered allmulticast mode [ 71.381030][ T6205] EXT4-fs (loop4): Block reservation details [ 71.397408][ T6205] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 71.440550][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 71.475267][ T6223] SELinux: failed to load policy [ 71.505841][ T6228] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1105'. [ 71.581594][ T6238] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.618741][ T6242] loop3: detected capacity change from 0 to 128 [ 71.630889][ T6244] loop2: detected capacity change from 0 to 512 [ 71.652690][ T6242] bio_check_eod: 142 callbacks suppressed [ 71.652730][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.652730][ T6242] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 71.682335][ T6244] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.760814][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.760814][ T6242] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 71.790082][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.790082][ T6242] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 71.809383][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.809383][ T6242] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 71.823162][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.823162][ T6242] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 71.837008][ T270] kworker/u8:4: attempt to access beyond end of device [ 71.837008][ T270] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 71.854416][ T270] kworker/u8:4: attempt to access beyond end of device [ 71.854416][ T270] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 71.867954][ T270] kworker/u8:4: attempt to access beyond end of device [ 71.867954][ T270] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 71.881446][ T6273] netlink: 'syz.1.1125': attribute type 2 has an invalid length. [ 71.881697][ T6242] syz.3.1112: attempt to access beyond end of device [ 71.881697][ T6242] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 71.902920][ T270] kworker/u8:4: attempt to access beyond end of device [ 71.902920][ T270] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 72.251891][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 72.251908][ T29] audit: type=1400 audit(1761452247.215:6909): avc: denied { map_create } for pid=6315 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.277354][ T29] audit: type=1400 audit(1761452247.215:6910): avc: denied { perfmon } for pid=6315 comm="syz.0.1145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.339817][ T6317] random: crng reseeded on system resumption [ 72.373786][ T6317] lo speed is unknown, defaulting to 1000 [ 72.623326][ T6327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1148'. [ 72.650570][ T29] audit: type=1400 audit(1761452247.275:6911): avc: denied { prog_load } for pid=6296 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.669704][ T29] audit: type=1400 audit(1761452247.275:6912): avc: denied { bpf } for pid=6296 comm="syz.4.1137" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.690549][ T29] audit: type=1400 audit(1761452247.275:6913): avc: denied { prog_run } for pid=6296 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.709551][ T29] audit: type=1400 audit(1761452247.275:6914): avc: denied { map_read map_write } for pid=6315 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.729544][ T29] audit: type=1400 audit(1761452247.295:6915): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.753841][ T29] audit: type=1400 audit(1761452247.295:6916): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.777976][ T29] audit: type=1400 audit(1761452247.295:6917): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.803660][ T29] audit: type=1400 audit(1761452247.305:6918): avc: denied { read append } for pid=6296 comm="syz.4.1137" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 72.957396][ T3562] printk: udevd: 2 output lines suppressed due to ratelimiting [ 73.071283][ T6369] loop2: detected capacity change from 0 to 128 [ 73.080580][ T6369] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.094939][ T6369] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.115941][ T6374] loop3: detected capacity change from 0 to 2048 [ 73.163535][ T6374] loop3: p1 < > p4 [ 73.170165][ T6374] loop3: p4 size 8388608 extends beyond EOD, truncated [ 73.182443][ T6386] IPv6: Can't replace route, no match found [ 73.196102][ T6388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.211656][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 73.292705][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 73.301827][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1186'. [ 73.398658][ T6422] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1193'. [ 73.406858][ T6420] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.811539][ T6455] IPv6: Can't replace route, no match found [ 73.835963][ T6459] xt_connbytes: Forcing CT accounting to be enabled [ 73.994427][ T6469] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1210'. [ 74.004816][ T6466] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1210'. [ 74.170551][ T6496] loop3: detected capacity change from 0 to 256 [ 74.184539][ T6496] FAT-fs (loop3): Directory bread(block 64) failed [ 74.191120][ T6496] FAT-fs (loop3): Directory bread(block 65) failed [ 74.197736][ T6496] FAT-fs (loop3): Directory bread(block 66) failed [ 74.204666][ T6496] FAT-fs (loop3): Directory bread(block 67) failed [ 74.211247][ T6496] FAT-fs (loop3): Directory bread(block 68) failed [ 74.217932][ T6496] FAT-fs (loop3): Directory bread(block 69) failed [ 74.224503][ T6496] FAT-fs (loop3): Directory bread(block 70) failed [ 74.231093][ T6496] FAT-fs (loop3): Directory bread(block 71) failed [ 74.237906][ T6496] FAT-fs (loop3): Directory bread(block 72) failed [ 74.244468][ T6496] FAT-fs (loop3): Directory bread(block 73) failed [ 74.418737][ T6504] SELinux: policydb version -632743018 does not match my version range 15-35 [ 74.429618][ T6504] SELinux: failed to load policy [ 74.439464][ T6506] loop3: detected capacity change from 0 to 1024 [ 74.447545][ T6506] EXT4-fs: Ignoring removed orlov option [ 74.466602][ T6506] EXT4-fs mount: 8 callbacks suppressed [ 74.466620][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.552628][ T6513] loop2: detected capacity change from 0 to 2048 [ 74.570094][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.588015][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.627661][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.704493][ T6537] loop4: detected capacity change from 0 to 128 [ 74.713129][ T6537] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.726218][ T6538] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1242'. [ 74.735297][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 74.973481][ T6560] random: crng reseeded on system resumption [ 75.007474][ T6560] lo speed is unknown, defaulting to 1000 [ 75.401913][ T6570] loop3: detected capacity change from 0 to 1024 [ 75.409125][ T6570] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.420132][ T6570] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.431184][ T6570] JBD2: no valid journal superblock found [ 75.436996][ T6570] EXT4-fs (loop3): Could not load journal inode [ 75.445904][ T6570] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 75.520528][ T6586] dvmrp0: entered allmulticast mode [ 75.591497][ T6600] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1264'. [ 75.664049][ T6610] loop4: detected capacity change from 0 to 256 [ 75.670881][ T6610] FAT-fs (loop4): bogus number of FAT sectors [ 75.677036][ T6610] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.819735][ T6632] $H: (slave bond_slave_0): Releasing backup interface [ 75.844393][ T6632] bond_slave_0: left promiscuous mode [ 75.862694][ T6632] $H: (slave bond_slave_1): Releasing backup interface [ 75.876948][ T6632] bond_slave_1: left promiscuous mode [ 75.882930][ T6647] program syz.0.1288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.901019][ T6632] team0: Port device team_slave_0 removed [ 75.916068][ T6632] team0: Port device team_slave_1 removed [ 75.923732][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.931162][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.941901][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.949345][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.964933][ T6632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.999510][ T6651] bridge0: entered promiscuous mode [ 76.009816][ T6651] macsec1: entered promiscuous mode [ 76.020307][ T6651] bridge0: port 3(macsec1) entered blocking state [ 76.026979][ T6651] bridge0: port 3(macsec1) entered disabled state [ 76.034350][ T6651] macsec1: entered allmulticast mode [ 76.039679][ T6651] bridge0: entered allmulticast mode [ 76.060740][ T6651] macsec1: left allmulticast mode [ 76.065906][ T6651] bridge0: left allmulticast mode [ 76.071909][ T6651] bridge0: left promiscuous mode [ 76.113836][ T6672] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.115861][ T6674] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 76.115861][ T6674] program syz.1.1300 not setting count and/or reply_len properly [ 76.183713][ T6684] netlink: 'syz.4.1305': attribute type 3 has an invalid length. [ 76.210392][ T6687] unsupported nla_type 52263 [ 76.296363][ T6704] loop2: detected capacity change from 0 to 256 [ 76.319199][ T6704] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.339992][ T6704] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.635074][ T3421] hid_parser_main: 33 callbacks suppressed [ 76.635095][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.646946][ T6772] binfmt_misc: register: failed to install interpreter file ./file2 [ 76.648374][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.663774][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.671183][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.678651][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.686212][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.693747][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.701151][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.708770][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.716567][ T3421] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 76.737327][ T3421] hid-generic 00A0:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 76.926722][ T6817] program syz.0.1366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.936481][ T6817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.072702][ T6893] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.072702][ T6893] program syz.0.1376 not setting count and/or reply_len properly [ 77.278862][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 77.278879][ T29] audit: type=1400 audit(1761452765.254:7330): avc: denied { setopt } for pid=6912 comm="syz.4.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.280375][ T6911] SELinux: failed to load policy [ 77.463543][ T6924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.463543][ T6924] program syz.4.1388 not setting count and/or reply_len properly [ 77.578970][ T6934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6934 comm=syz.4.1392 [ 77.640739][ T29] audit: type=1326 audit(1761452765.614:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f1d55e67 code=0x7ffc0000 [ 77.673188][ T29] audit: type=1326 audit(1761452765.614:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f1cfb099 code=0x7ffc0000 [ 77.696589][ T29] audit: type=1326 audit(1761452765.614:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f1d55e67 code=0x7ffc0000 [ 77.720029][ T29] audit: type=1326 audit(1761452765.614:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f1cfb099 code=0x7ffc0000 [ 77.743409][ T29] audit: type=1326 audit(1761452765.614:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 77.766840][ T29] audit: type=1326 audit(1761452765.614:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 77.790378][ T29] audit: type=1326 audit(1761452765.614:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f1d55e67 code=0x7ffc0000 [ 77.813796][ T29] audit: type=1326 audit(1761452765.614:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f1cfb099 code=0x7ffc0000 [ 77.837183][ T29] audit: type=1326 audit(1761452765.614:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3f1d55e67 code=0x7ffc0000 [ 77.920511][ T6945] bridge0: entered promiscuous mode [ 77.926419][ T6945] macsec1: entered promiscuous mode [ 77.932670][ T6945] bridge0: port 3(macsec1) entered blocking state [ 77.939231][ T6945] bridge0: port 3(macsec1) entered disabled state [ 77.960781][ T6945] macsec1: entered allmulticast mode [ 77.966136][ T6945] bridge0: entered allmulticast mode [ 77.973574][ T6945] macsec1: left allmulticast mode [ 77.978636][ T6945] bridge0: left allmulticast mode [ 77.998633][ T6945] bridge0: left promiscuous mode [ 78.051175][ T6963] IPv6: Can't replace route, no match found [ 78.265762][ T7001] bridge0: entered promiscuous mode [ 78.272880][ T7001] macsec1: entered promiscuous mode [ 78.278787][ T7001] bridge0: port 1(macsec1) entered blocking state [ 78.285454][ T7001] bridge0: port 1(macsec1) entered disabled state [ 78.292333][ T7001] macsec1: entered allmulticast mode [ 78.297735][ T7001] bridge0: entered allmulticast mode [ 78.304220][ T7001] macsec1: left allmulticast mode [ 78.309365][ T7001] bridge0: left allmulticast mode [ 78.315977][ T7001] bridge0: left promiscuous mode [ 78.680712][ T7056] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 78.705200][ T7059] macsec1: entered promiscuous mode [ 78.710447][ T7061] __nla_validate_parse: 9 callbacks suppressed [ 78.710464][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 78.716645][ T7059] bridge0: entered promiscuous mode [ 78.739070][ T7059] bridge0: port 1(macsec1) entered blocking state [ 78.745593][ T7059] bridge0: port 1(macsec1) entered disabled state [ 78.752276][ T7059] macsec1: entered allmulticast mode [ 78.757752][ T7059] bridge0: entered allmulticast mode [ 78.763964][ T7059] macsec1: left allmulticast mode [ 78.769032][ T7059] bridge0: left allmulticast mode [ 78.774734][ T7059] bridge0: left promiscuous mode [ 78.902324][ T7079] program syz.1.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.007764][ T7095] loop2: detected capacity change from 0 to 512 [ 79.016224][ T7095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.042702][ T7101] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 79.053519][ T7095] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1466: inode has both inline data and extents flags [ 79.072264][ T7095] EXT4-fs (loop2): get root inode failed [ 79.078020][ T7095] EXT4-fs (loop2): mount failed [ 79.104232][ T7095] 9pnet: Unknown protocol version צ'J˕rosPlDaӏҧڿ?t9;; ?".u˷w [ 79.223365][ T7125] bond0: invalid ARP target 0.0.0.0 specified for addition [ 79.230689][ T7125] bond0: option arp_ip_target: invalid value (0) [ 79.263628][ T7125] bond0 (unregistering): Released all slaves [ 79.316106][ T7138] loop4: detected capacity change from 0 to 1024 [ 79.324397][ T7138] EXT4-fs: Ignoring removed bh option [ 79.331641][ T7138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.362094][ T7138] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.387865][ T7138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 79.398842][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 79.401194][ T7138] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1486: lblock 2 mapped to illegal pblock 2 (length 1) [ 79.422525][ T7138] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1486: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.437457][ T7138] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1486: Failed to acquire dquot type 0 [ 79.449240][ T7138] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.463494][ T7138] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1486: mark_inode_dirty error [ 79.482133][ T7138] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 79.492675][ T7138] EXT4-fs (loop4): 1 orphan inode deleted [ 79.499091][ T7138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.512502][ T6835] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.544381][ T6835] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 0 [ 79.557318][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.566677][ T3313] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 79.579801][ T3313] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.589998][ T3313] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 79.629868][ T7166] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 79.651150][ T7169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7169 comm=syz.2.1498 [ 79.663782][ T7169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7169 comm=syz.2.1498 [ 79.817317][ T7205] loop0: detected capacity change from 0 to 1024 [ 79.848116][ T7205] EXT4-fs: Ignoring removed bh option [ 79.864397][ T7205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.879809][ T7205] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.899535][ T7205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 79.952318][ T7205] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1513: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.003089][ T7205] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1513: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.052382][ T7205] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1513: Failed to acquire dquot type 0 [ 80.088665][ T7205] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.103301][ T7205] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1513: mark_inode_dirty error [ 80.116351][ T7205] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 80.127113][ T7236] netlink: 32 bytes leftover after parsing attributes in process `wޣ'. [ 80.146005][ T7205] EXT4-fs (loop0): 1 orphan inode deleted [ 80.155481][ T7205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.171773][ T6828] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.204052][ T6828] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 80.235837][ T7240] hub 6-0:1.0: USB hub found [ 80.243110][ T7240] hub 6-0:1.0: 8 ports detected [ 80.244520][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.258015][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.272313][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 80.283338][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 80.296468][ T7246] ref_ctr_offset mismatch. inode: 0x658 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 80.526386][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1552'. [ 80.539205][ T7286] loop3: detected capacity change from 0 to 512 [ 80.547673][ T7286] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1551: inode has both inline data and extents flags [ 80.562063][ T7286] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1551: couldn't read orphan inode 15 (err -117) [ 80.583478][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.644887][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.725466][ T7314] vlan0: entered allmulticast mode [ 80.891247][ T7342] loop3: detected capacity change from 0 to 512 [ 80.898427][ T7342] EXT4-fs: Ignoring removed bh option [ 80.904337][ T7342] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.918829][ T7342] EXT4-fs (loop3): 1 truncate cleaned up [ 80.925217][ T7342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.959929][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.980543][ T7347] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1577'. [ 81.035589][ T7354] wireguard0: entered promiscuous mode [ 81.041163][ T7354] wireguard0: entered allmulticast mode [ 81.172332][ T7364] loop0: detected capacity change from 0 to 1024 [ 81.179174][ T7364] EXT4-fs: Ignoring removed orlov option [ 81.194720][ T7364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.218555][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.271620][ T7372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1586'. [ 81.298870][ T7374] loop0: detected capacity change from 0 to 512 [ 81.305748][ T7374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.317033][ T7374] EXT4-fs (loop0): 1 truncate cleaned up [ 81.323188][ T7374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.354663][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.630498][ T7385] random: crng reseeded on system resumption [ 81.662932][ T7385] lo speed is unknown, defaulting to 1000 [ 82.047330][ T7391] loop2: detected capacity change from 0 to 128 [ 82.058535][ T7391] bio_check_eod: 54 callbacks suppressed [ 82.058552][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.058552][ T7391] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 82.141012][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.141012][ T7391] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 82.159930][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.159930][ T7391] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 82.175853][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.175853][ T7391] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 82.195898][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.195898][ T7391] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 82.209782][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.209782][ T7391] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 82.223573][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.223573][ T7391] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 82.244198][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.244198][ T7391] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 82.258369][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.258369][ T7391] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 82.277389][ T7391] syz.2.1593: attempt to access beyond end of device [ 82.277389][ T7391] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 82.330806][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 82.330822][ T29] audit: type=1400 audit(1761452770.284:7600): avc: denied { execute } for pid=7401 comm="syz.0.1597" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.384473][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 82.420353][ T7409] loop0: detected capacity change from 0 to 1024 [ 82.436519][ T7409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.449781][ T29] audit: type=1400 audit(1761452770.424:7601): avc: denied { read write } for pid=7407 comm="syz.0.1600" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.468486][ T7409] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1600: Allocating blocks 449-513 which overlap fs metadata [ 82.472443][ T29] audit: type=1400 audit(1761452770.424:7602): avc: denied { open } for pid=7407 comm="syz.0.1600" path="/364/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.513323][ T7407] EXT4-fs (loop0): pa ffff888106e35770: logic 48, phys. 177, len 21 [ 82.521389][ T7407] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 82.541129][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.629503][ T7425] Cannot find set identified by id 0 to match [ 82.667603][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 82.676834][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 82.753771][ T7438] usb usb8: usbfs: process 7438 (syz.0.1613) did not claim interface 0 before use [ 82.799378][ T29] audit: type=1400 audit(1761452770.774:7603): avc: denied { mount } for pid=7443 comm="syz.0.1616" name="/" dev="ramfs" ino=17069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.863076][ T7446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7446 comm=syz.0.1617 [ 82.885890][ T29] audit: type=1400 audit(1761452770.864:7604): avc: denied { audit_write } for pid=7445 comm="syz.0.1617" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.907215][ T29] audit: type=1107 audit(1761452770.864:7605): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 82.948340][ T29] audit: type=1326 audit(1761452770.904:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 82.971882][ T29] audit: type=1326 audit(1761452770.904:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 82.995597][ T29] audit: type=1326 audit(1761452770.904:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 83.019026][ T29] audit: type=1326 audit(1761452770.904:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.2.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 83.093895][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1625'. [ 83.103068][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1625'. [ 83.114177][ T7360] Bluetooth: hci0: command 0x1003 tx timeout [ 83.114668][ T3517] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.203544][ T7468] loop0: detected capacity change from 0 to 128 [ 83.626393][ T7518] loop0: detected capacity change from 0 to 2048 [ 83.655240][ T7525] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 83.664994][ T7518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.689378][ T7529] tap0: tun_chr_ioctl cmd 2148553947 [ 83.986695][ T6831] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.001721][ T6831] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 84.014328][ T6831] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.014328][ T6831] [ 84.024001][ T6831] EXT4-fs (loop0): Total free blocks count 0 [ 84.030013][ T6831] EXT4-fs (loop0): Free/Dirty block details [ 84.035965][ T6831] EXT4-fs (loop0): free_blocks=2415919504 [ 84.041865][ T6831] EXT4-fs (loop0): dirty_blocks=8208 [ 84.047181][ T6831] EXT4-fs (loop0): Block reservation details [ 84.053214][ T6831] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 84.072934][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 84.091110][ T7570] __nla_validate_parse: 3 callbacks suppressed [ 84.091128][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 84.106235][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 84.115496][ T7570] netlink: 'syz.2.1675': attribute type 20 has an invalid length. [ 84.134205][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 84.134394][ T52] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.143221][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 84.160887][ T7570] netlink: 'syz.2.1675': attribute type 20 has an invalid length. [ 84.166957][ T52] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.179343][ T52] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.188201][ T52] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.360594][ T7602] loop2: detected capacity change from 0 to 128 [ 84.564686][ T7625] loop0: detected capacity change from 0 to 2048 [ 84.572443][ T7627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.579699][ T7627] IPv6: NLM_F_CREATE should be set when creating new route [ 84.586950][ T7627] IPv6: NLM_F_CREATE should be set when creating new route [ 84.594187][ T7627] IPv6: NLM_F_CREATE should be set when creating new route [ 84.606131][ T7629] loop2: detected capacity change from 0 to 512 [ 84.620494][ T7625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.643944][ T7629] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.686087][ T3312] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 84.728082][ T3312] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 84.742672][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.822898][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 84.832206][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 84.864043][ T7661] loop3: detected capacity change from 0 to 512 [ 84.871300][ T7661] EXT4-fs (loop3): can't read group descriptor 0 [ 84.880613][ T7661] ip6t_srh: unknown srh match flags 4000 [ 84.982826][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1715'. [ 85.049165][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 85.137045][ T7690] loop3: detected capacity change from 0 to 8192 [ 85.345742][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1729'. [ 85.354868][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1729'. [ 85.736643][ T7764] hub 9-0:1.0: USB hub found [ 85.750094][ T7764] hub 9-0:1.0: 8 ports detected [ 85.809595][ T7771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7771 comm=syz.0.1755 [ 85.935493][ T3401] hid_parser_main: 5 callbacks suppressed [ 85.935514][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.949138][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.956947][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.964784][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.972530][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.980343][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.988128][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 85.995965][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 86.003797][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 86.011616][ T3401] hid-generic 0003:80000004:0000.0006: unknown main item tag 0x0 [ 86.021382][ T3401] hid-generic 0003:80000004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 86.585225][ T7829] random: crng reseeded on system resumption [ 86.595667][ T7829] Restarting kernel threads ... [ 86.600923][ T7829] Done restarting kernel threads. [ 86.645201][ T7838] IPVS: Unknown mcast interface: [ 86.806643][ T7855] loop4: detected capacity change from 0 to 512 [ 86.813559][ T7855] EXT4-fs: Ignoring removed orlov option [ 86.819470][ T7855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.882630][ T7859] random: crng reseeded on system resumption [ 86.916413][ T7859] lo speed is unknown, defaulting to 1000 [ 87.014505][ T7855] EXT4-fs (loop4): 1 orphan inode deleted [ 87.020296][ T7855] EXT4-fs (loop4): 1 truncate cleaned up [ 87.148922][ T7855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.366625][ T7855] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.1792: path /342/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 87.388850][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 87.388867][ T29] audit: type=1326 audit(1761452775.354:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 87.418474][ T29] audit: type=1326 audit(1761452775.354:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 87.448261][ T7855] EXT4-fs (loop4): Remounting filesystem read-only [ 87.457405][ T29] audit: type=1400 audit(1761452775.394:7976): avc: denied { read append } for pid=7870 comm="syz.1.1796" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.480781][ T29] audit: type=1400 audit(1761452775.394:7977): avc: denied { open } for pid=7870 comm="syz.1.1796" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.504031][ T29] audit: type=1400 audit(1761452775.394:7978): avc: denied { ioctl } for pid=7870 comm="syz.1.1796" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.528684][ T29] audit: type=1400 audit(1761452775.404:7979): avc: denied { write } for pid=7870 comm="syz.1.1796" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.595430][ T7877] vhci_hcd: invalid port number 96 [ 87.600576][ T7877] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 87.609277][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.619208][ T29] audit: type=1400 audit(1761452775.504:7980): avc: denied { name_bind } for pid=7874 comm="syz.2.1797" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.661590][ T29] audit: type=1326 audit(1761452775.634:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 87.685090][ T29] audit: type=1326 audit(1761452775.634:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 87.711348][ T29] audit: type=1326 audit(1761452775.634:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bdcfefc9 code=0x7ffc0000 [ 87.741088][ T7888] hub 9-0:1.0: USB hub found [ 87.744956][ T7892] loop2: detected capacity change from 0 to 256 [ 87.746030][ T7888] hub 9-0:1.0: 8 ports detected [ 87.842032][ T7904] loop3: detected capacity change from 0 to 1024 [ 87.869356][ T7904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.881669][ T7911] loop4: detected capacity change from 0 to 2048 [ 87.906130][ T7911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.943755][ T7911] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 87.958998][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.013734][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.131842][ T7946] loop3: detected capacity change from 0 to 764 [ 88.152882][ T7946] Symlink component flag not implemented [ 88.158594][ T7946] Symlink component flag not implemented [ 88.167390][ T7946] Symlink component flag not implemented (129) [ 88.173640][ T7946] Symlink component flag not implemented (6) [ 88.180811][ T7951] usb usb8: usbfs: process 7951 (syz.4.1833) did not claim interface 0 before use [ 88.201428][ T7946] rock: directory entry would overflow storage [ 88.207658][ T7946] rock: sig=0x4f50, size=4, remaining=3 [ 88.213313][ T7946] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 88.405927][ T7990] syzkaller0: entered promiscuous mode [ 88.411534][ T7990] syzkaller0: entered allmulticast mode [ 88.418331][ T7993] loop3: detected capacity change from 0 to 256 [ 88.453870][ T7996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.848968][ T8014] sch_fq: defrate 4294967295 ignored. [ 88.912099][ T8052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8052 comm=syz.3.1878 [ 89.577704][ T8125] __nla_validate_parse: 16 callbacks suppressed [ 89.577784][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 89.595187][ T8125] IPVS: Error connecting to the multicast addr [ 89.668314][ T8135] loop3: detected capacity change from 0 to 512 [ 89.684183][ T8140] loop4: detected capacity change from 0 to 1024 [ 89.690742][ T8140] EXT4-fs: Ignoring removed orlov option [ 89.699518][ T8135] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1915: inode has both inline data and extents flags [ 89.718560][ T8135] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1915: couldn't read orphan inode 15 (err -117) [ 89.722629][ T8140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.731756][ T8135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.773535][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.775239][ T8140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.926229][ T8160] loop3: detected capacity change from 0 to 128 [ 89.941540][ T8163] vlan0: entered allmulticast mode [ 89.946768][ T8163] bridge_slave_0: entered allmulticast mode [ 90.006224][ T8165] random: crng reseeded on system resumption [ 90.116585][ T8160] bio_check_eod: 383 callbacks suppressed [ 90.116677][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.116677][ T8160] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 90.189470][ T8165] lo speed is unknown, defaulting to 1000 [ 90.433432][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.433432][ T8160] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 90.455219][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.455219][ T8160] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 90.468848][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.468848][ T8160] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 90.486132][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.486132][ T8160] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 90.499804][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.499804][ T8160] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 90.514786][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.514786][ T8160] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 90.528773][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.528773][ T8160] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 90.542580][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.542580][ T8160] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 90.556309][ T8160] syz.3.1921: attempt to access beyond end of device [ 90.556309][ T8160] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 90.821859][ T6835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.874177][ T8219] tmpfs: Too small a size for current use [ 90.989531][ T8234] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1954'. [ 91.183993][ T8251] bridge: RTM_NEWNEIGH with invalid ether address [ 91.277049][ T8258] loop2: detected capacity change from 0 to 128 [ 91.436777][ T8267] loop3: detected capacity change from 0 to 512 [ 91.535726][ T8267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.574951][ T8267] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.646819][ T8267] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1969: corrupted inode contents [ 91.661900][ T8267] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1969: mark_inode_dirty error [ 91.683203][ T8267] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1969: corrupted inode contents [ 91.705339][ T8267] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1969: mark_inode_dirty error [ 91.755846][ T8286] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.786269][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.813316][ T8286] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.822261][ T8288] SELinux: failed to load policy [ 91.882007][ T8296] loop2: detected capacity change from 0 to 128 [ 92.055060][ T8312] process 'syz.1.1987' launched './file0' with NULL argv: empty string added [ 92.218304][ T8334] loop3: detected capacity change from 0 to 256 [ 92.415537][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 92.415554][ T29] audit: type=1400 audit(1761452780.394:8228): avc: denied { create } for pid=8351 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.494567][ T8353] random: crng reseeded on system resumption [ 92.527483][ T8353] lo speed is unknown, defaulting to 1000 [ 92.757520][ T8358] loop3: detected capacity change from 0 to 512 [ 92.826800][ T8358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.878892][ T8358] ext4 filesystem being mounted at /388/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.895494][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 92.957132][ T29] audit: type=1400 audit(1761452780.634:8229): avc: denied { setopt } for pid=8351 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.010095][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.065920][ T29] audit: type=1400 audit(1761452781.034:8230): avc: denied { audit_write } for pid=8375 comm="syz.3.2011" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 93.087173][ T29] audit: type=1107 audit(1761452781.034:8231): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='\j' [ 93.333104][ T29] audit: type=1326 audit(1761452781.234:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.356550][ T29] audit: type=1326 audit(1761452781.234:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.380018][ T29] audit: type=1326 audit(1761452781.234:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.403499][ T29] audit: type=1326 audit(1761452781.234:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.426955][ T29] audit: type=1326 audit(1761452781.234:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.450561][ T29] audit: type=1326 audit(1761452781.234:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3f1d5efc9 code=0x7ffc0000 [ 93.495948][ T8406] netlink: 'syz.3.2025': attribute type 2 has an invalid length. [ 93.599221][ T8413] loop4: detected capacity change from 0 to 128 [ 93.675599][ T8417] tmpfs: Too small a size for current use [ 93.747410][ T8432] loop4: detected capacity change from 0 to 512 [ 93.754414][ T8432] EXT4-fs: Ignoring removed bh option [ 93.760094][ T8432] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 93.771716][ T8432] EXT4-fs (loop4): 1 truncate cleaned up [ 93.778176][ T8432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.796178][ T8432] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.821676][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.042730][ T8451] SELinux: failed to load policy [ 94.095805][ T8456] loop4: detected capacity change from 0 to 1024 [ 94.124201][ T8456] EXT4-fs: dax option not supported [ 94.169708][ T8463] bridge_slave_0: default FDB implementation only supports local addresses [ 94.171133][ T8464] loop3: detected capacity change from 0 to 512 [ 94.185514][ T8464] EXT4-fs: Ignoring removed bh option [ 94.191210][ T8464] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 94.202977][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 94.205296][ T8464] EXT4-fs (loop3): 1 truncate cleaned up [ 94.212005][ T8463] bridge_slave_0: default FDB implementation only supports local addresses [ 94.227347][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.254899][ T8464] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.338935][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.513442][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'. [ 94.648099][ T3401] hid_parser_main: 8 callbacks suppressed [ 94.648121][ T3401] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 94.661497][ T3401] hid-generic 0000:0003:0001.0007: unknown main item tag 0x0 [ 94.685638][ T3401] hid-generic 0000:0003:0001.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 94.760584][ T8507] loop4: detected capacity change from 0 to 2048 [ 94.805832][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.909227][ T8511] random: crng reseeded on system resumption [ 94.944010][ T8511] lo speed is unknown, defaulting to 1000 [ 95.069753][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 95.121569][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 95.193099][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.221140][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.717339][ T8542] loop3: detected capacity change from 0 to 128 [ 95.736112][ T8542] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.744034][ T8542] FAT-fs (loop3): Filesystem has been set read-only [ 95.750802][ T8534] loop2: detected capacity change from 0 to 8192 [ 95.752389][ T8542] bio_check_eod: 278 callbacks suppressed [ 95.752407][ T8542] syz.3.2084: attempt to access beyond end of device [ 95.752407][ T8542] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 95.777232][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 95.805631][ T8542] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.813630][ T8542] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.822404][ T8542] syz.3.2084: attempt to access beyond end of device [ 95.822404][ T8542] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.836050][ T8542] syz.3.2084: attempt to access beyond end of device [ 95.836050][ T8542] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.840505][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 95.920059][ T8550] netlink: '+}[@': attribute type 21 has an invalid length. [ 96.358043][ T8570] loop2: detected capacity change from 0 to 2048 [ 96.424692][ T8570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.567501][ T3318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 96.582479][ T3318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 96.630662][ T8563] Set syz1 is full, maxelem 65536 reached [ 96.666461][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.725858][ T8587] loop4: detected capacity change from 0 to 128 [ 96.780478][ T8587] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.788475][ T8587] FAT-fs (loop4): Filesystem has been set read-only [ 96.871245][ T8587] syz.4.2102: attempt to access beyond end of device [ 96.871245][ T8587] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 96.943633][ T8587] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.951505][ T8587] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.966847][ T8604] syz.4.2102: attempt to access beyond end of device [ 96.966847][ T8604] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 96.980265][ T8604] Buffer I/O error on dev loop4, logical block 2065, async page read [ 97.003468][ T8604] syz.4.2102: attempt to access beyond end of device [ 97.003468][ T8604] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 97.016939][ T8604] Buffer I/O error on dev loop4, logical block 2066, async page read [ 97.031167][ T8604] syz.4.2102: attempt to access beyond end of device [ 97.031167][ T8604] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 97.044727][ T8604] Buffer I/O error on dev loop4, logical block 2067, async page read [ 97.053610][ T8604] syz.4.2102: attempt to access beyond end of device [ 97.053610][ T8604] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 97.066884][ T8604] Buffer I/O error on dev loop4, logical block 2068, async page read [ 97.092849][ T8604] syz.4.2102: attempt to access beyond end of device [ 97.092849][ T8604] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 97.106144][ T8604] Buffer I/O error on dev loop4, logical block 2069, async page read [ 97.121158][ T8604] syz.4.2102: attempt to access beyond end of device [ 97.121158][ T8604] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 97.134614][ T8604] Buffer I/O error on dev loop4, logical block 2070, async page read [ 97.143324][ T8604] Buffer I/O error on dev loop4, logical block 2071, async page read [ 97.163201][ T8604] Buffer I/O error on dev loop4, logical block 2072, async page read [ 97.192482][ T8587] Buffer I/O error on dev loop4, logical block 2065, async page read [ 97.222338][ T8587] Buffer I/O error on dev loop4, logical block 2066, async page read [ 97.255428][ T8592] SELinux: failed to load policy [ 97.355069][ T8634] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2116'. [ 97.412410][ T8637] lo speed is unknown, defaulting to 1000 [ 97.466998][ T9] IPVS: starting estimator thread 0... [ 97.515424][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 97.515441][ T29] audit: type=1326 audit(1761452785.494:8398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.553179][ T29] audit: type=1326 audit(1761452785.524:8399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.576855][ T29] audit: type=1326 audit(1761452785.524:8400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.600306][ T29] audit: type=1326 audit(1761452785.524:8401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.624139][ T29] audit: type=1326 audit(1761452785.524:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.647635][ T29] audit: type=1326 audit(1761452785.524:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.671079][ T29] audit: type=1326 audit(1761452785.524:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.695208][ T29] audit: type=1326 audit(1761452785.524:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.703834][ T8643] IPVS: using max 2016 ests per chain, 100800 per kthread [ 97.871399][ T8658] loop4: detected capacity change from 0 to 512 [ 97.923391][ T29] audit: type=1326 audit(1761452785.714:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.947012][ T29] audit: type=1326 audit(1761452785.714:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a580efc9 code=0x7ffc0000 [ 97.999444][ T8658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.012104][ T8658] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.052359][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.267374][ T8687] loop2: detected capacity change from 0 to 512 [ 98.303487][ T8687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.316606][ T8687] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.344546][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.914557][ T8711] xt_hashlimit: max too large, truncated to 1048576 [ 99.017172][ T8717] lo speed is unknown, defaulting to 1000 [ 99.088030][ T3401] IPVS: starting estimator thread 0... [ 99.149549][ T8736] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 99.160241][ T8734] can0: slcan on ttyS3. [ 99.224923][ T6840] IPVS: stop unused estimator thread 0... [ 99.235433][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 99.245882][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 99.273168][ T8734] can0 (unregistered): slcan off ttyS3. [ 99.443242][ T8765] smc: net device bond0 applied user defined pnetid SYZ2 [ 99.575353][ T8783] loop4: detected capacity change from 0 to 512 [ 99.584777][ T8783] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2177: Failed to acquire dquot type 1 [ 99.598197][ T8783] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2177: Failed to acquire dquot type 1 [ 99.610243][ T8783] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2177: bg 0: block 248: padding at end of block bitmap is not set [ 99.625314][ T8783] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 99.634722][ T8783] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2177: Failed to acquire dquot type 1 [ 99.646347][ T8783] EXT4-fs (loop4): 1 orphan inode deleted [ 99.652624][ T8783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.665448][ T8783] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.690550][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.711494][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 99.728587][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 100.304833][ T8834] SELinux: failed to load policy [ 100.358811][ T8839] wg2: entered promiscuous mode [ 100.363769][ T8839] wg2: entered allmulticast mode [ 100.426439][ T8847] can0: slcan on ttyS3. [ 100.456738][ T8852] loop2: detected capacity change from 0 to 764 [ 100.473762][ T8847] can0 (unregistered): slcan off ttyS3. [ 100.480803][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 100.490596][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 100.612051][ T8872] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 100.621541][ T8871] IPVS: stopping master sync thread 8872 ... [ 100.679872][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2217'. [ 100.871648][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 100.938549][ T8903] loop2: detected capacity change from 0 to 512 [ 100.949235][ T8869] SELinux: failed to load policy [ 100.969141][ T8905] loop4: detected capacity change from 0 to 1024 [ 100.979167][ T8903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.992655][ T8905] EXT4-fs: Ignoring removed orlov option [ 100.993310][ T8903] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.018266][ T8905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.062586][ T8905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2229: bg 0: block 232: padding at end of block bitmap is not set [ 101.077566][ T8905] EXT4-fs (loop4): Remounting filesystem read-only [ 101.077878][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.085827][ T8905] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 101.123403][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.250581][ T8934] loop3: detected capacity change from 0 to 512 [ 101.270240][ T8934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.293542][ T8934] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.369682][ T8927] lo speed is unknown, defaulting to 1000 [ 101.392855][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.400349][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.407889][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.410432][ T8944] loop2: detected capacity change from 0 to 512 [ 101.415362][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.429021][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.436548][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.443979][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.451431][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.458876][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.466404][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 101.493098][ T8944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.506565][ T8944] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.523865][ T3393] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 101.595352][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.629586][ T8960] loop3: detected capacity change from 0 to 512 [ 101.638150][ T8960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 101.647114][ T8960] System zones: 1-12 [ 101.651565][ T8960] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.2248: corrupted in-inode xattr: e_value size too large [ 101.666438][ T8960] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2248: couldn't read orphan inode 15 (err -117) [ 101.681368][ T8960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.709244][ T8960] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.788451][ T8982] loop4: detected capacity change from 0 to 128 [ 101.802079][ T8982] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.823409][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 101.845112][ T8982] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.878066][ T6840] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.897332][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 101.906448][ T8995] netlink: 'syz.4.2264': attribute type 1 has an invalid length. [ 101.914353][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2264'. [ 101.988899][ T9005] Process accounting resumed [ 102.019804][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 102.167482][ T9035] loop2: detected capacity change from 0 to 1024 [ 102.818038][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 102.818056][ T29] audit: type=1400 audit(1761452790.794:8544): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.852721][ T29] audit: type=1400 audit(1761452790.824:8545): avc: denied { map_create } for pid=9052 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.872083][ T29] audit: type=1400 audit(1761452790.824:8546): avc: denied { prog_load } for pid=9053 comm="syz.2.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.891291][ T29] audit: type=1400 audit(1761452790.824:8547): avc: denied { prog_load } for pid=9052 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.910392][ T29] audit: type=1400 audit(1761452790.824:8548): avc: denied { create } for pid=9053 comm="syz.2.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 102.935628][ T29] audit: type=1400 audit(1761452790.824:8549): avc: denied { prog_load } for pid=9056 comm="syz.3.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.954791][ T29] audit: type=1400 audit(1761452790.824:8550): avc: denied { create } for pid=9053 comm="syz.2.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 102.974294][ T29] audit: type=1400 audit(1761452790.824:8551): avc: denied { prog_load } for pid=9052 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.993394][ T29] audit: type=1400 audit(1761452790.824:8552): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.017691][ T29] audit: type=1400 audit(1761452790.844:8553): avc: denied { create } for pid=9058 comm="syz.2.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 103.267528][ T9114] lo speed is unknown, defaulting to 1000 [ 103.720225][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 103.729182][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 104.207488][ T9230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2371'. [ 104.310581][ T9234] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 104.342055][ T9234] team0: Port device dummy0 added [ 104.378645][ T9242] serio: Serial port ptm0 [ 104.606731][ T9270] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2389'. [ 104.615856][ T9270] 0X: renamed from caif0 [ 104.624548][ T9270] 0X: entered allmulticast mode [ 104.630100][ T9270] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 104.713088][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.844752][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2406'. [ 104.855444][ T9305] bridge_slave_1: left allmulticast mode [ 104.861094][ T9305] bridge_slave_1: left promiscuous mode [ 104.866819][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.923720][ T9305] bridge_slave_0: left allmulticast mode [ 104.929623][ T9305] bridge_slave_0: left promiscuous mode [ 104.935440][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.847820][ T9419] ip6gre1: entered promiscuous mode [ 106.249872][ T9442] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 106.257880][ T9442] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 106.265636][ T9442] __nla_validate_parse: 1 callbacks suppressed [ 106.265677][ T9442] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2468'. [ 106.283524][ T9442] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 106.291310][ T9442] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 106.299167][ T9442] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2468'. [ 106.860528][ T9494] lo speed is unknown, defaulting to 1000 [ 107.833622][ T29] kauditd_printk_skb: 1131 callbacks suppressed [ 107.833640][ T29] audit: type=1326 audit(1761452795.814:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 107.863631][ T29] audit: type=1326 audit(1761452795.814:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 107.887212][ T29] audit: type=1326 audit(1761452795.814:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 107.910780][ T29] audit: type=1400 audit(1761452795.814:9688): avc: denied { map_create } for pid=9530 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.929994][ T29] audit: type=1326 audit(1761452795.814:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 107.953579][ T29] audit: type=1326 audit(1761452795.814:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 107.977073][ T29] audit: type=1326 audit(1761452795.814:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 108.001148][ T29] audit: type=1326 audit(1761452795.814:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 108.024794][ T29] audit: type=1326 audit(1761452795.814:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 108.048439][ T29] audit: type=1326 audit(1761452795.814:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9530 comm="syz.0.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73ccb7efc9 code=0x7ffc0000 [ 108.693550][ T9623] veth2: entered promiscuous mode [ 108.699295][ T9623] veth2: entered allmulticast mode [ 108.710930][ T9627] @0: renamed from bond_slave_1 [ 108.740701][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 108.750411][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2556'. [ 109.028473][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'. [ 109.443505][ T9693] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 109.466539][ T9693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.483761][ T9693] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2585'. [ 109.503169][ T9693] bond1: entered allmulticast mode [ 109.555437][ T9709] netlink: 'syz.3.2593': attribute type 30 has an invalid length. [ 109.585963][ T9713] lo speed is unknown, defaulting to 1000 [ 109.697918][ T9727] veth1_macvtap: left promiscuous mode [ 109.704111][ T9727] macsec0: entered promiscuous mode [ 110.908578][ T9853] ip6_vti0: mtu greater than device maximum [ 112.233212][ T9926] ================================================================== [ 112.241343][ T9926] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 112.249708][ T9926] [ 112.252038][ T9926] write to 0xffff8881046f5264 of 4 bytes by task 9925 on cpu 1: [ 112.259669][ T9926] inode_update_timestamps+0x147/0x270 [ 112.265147][ T9926] file_update_time+0x20e/0x2b0 [ 112.270022][ T9926] shmem_file_write_iter+0x9c/0xf0 [ 112.275233][ T9926] iter_file_splice_write+0x666/0xa60 [ 112.280614][ T9926] direct_splice_actor+0x156/0x2a0 [ 112.285734][ T9926] splice_direct_to_actor+0x312/0x680 [ 112.291114][ T9926] do_splice_direct+0xda/0x150 [ 112.295889][ T9926] do_sendfile+0x380/0x650 [ 112.300323][ T9926] __x64_sys_sendfile64+0x105/0x150 [ 112.305538][ T9926] x64_sys_call+0x2bb4/0x3000 [ 112.310227][ T9926] do_syscall_64+0xd2/0x200 [ 112.314734][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.320641][ T9926] [ 112.322968][ T9926] read to 0xffff8881046f5264 of 4 bytes by task 9926 on cpu 0: [ 112.330513][ T9926] atime_needs_update+0x2a8/0x3e0 [ 112.335561][ T9926] touch_atime+0x4a/0x340 [ 112.339910][ T9926] shmem_file_read_iter+0x477/0x540 [ 112.345119][ T9926] copy_splice_read+0x442/0x660 [ 112.349980][ T9926] splice_direct_to_actor+0x290/0x680 [ 112.355360][ T9926] do_splice_direct+0xda/0x150 [ 112.360223][ T9926] do_sendfile+0x380/0x650 [ 112.364657][ T9926] __x64_sys_sendfile64+0x105/0x150 [ 112.369873][ T9926] x64_sys_call+0x2bb4/0x3000 [ 112.374562][ T9926] do_syscall_64+0xd2/0x200 [ 112.379099][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.385006][ T9926] [ 112.387418][ T9926] value changed: 0x0c34df22 -> 0x0ccd75a2 [ 112.393220][ T9926] [ 112.395546][ T9926] Reported by Kernel Concurrency Sanitizer on: [ 112.401719][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.4.2690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.411452][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.421511][ T9926] ================================================================== [ 113.016661][ T29] kauditd_printk_skb: 1182 callbacks suppressed [ 113.016677][ T29] audit: type=1400 audit(1761452800.994:10877): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.993179][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!