last executing test programs: 1m15.442616122s ago: executing program 1 (id=290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 1m15.399565463s ago: executing program 1 (id=293): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/4\x00') 1m15.363619963s ago: executing program 1 (id=295): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) timerfd_gettime(r0, 0x0) 1m15.319288684s ago: executing program 1 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 1m15.296440174s ago: executing program 1 (id=298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 1m15.098493797s ago: executing program 1 (id=302): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0xffff}, 0x1399c, 0x4011, 0x306e, 0x5, 0x401, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r0, 0x2000fff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000180)) 1m15.098183947s ago: executing program 32 (id=302): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0xffff}, 0x1399c, 0x4011, 0x306e, 0x5, 0x401, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r0, 0x2000fff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000180)) 1m0.038216476s ago: executing program 4 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x9004}, 0x4) close(r2) 59.989913867s ago: executing program 4 (id=709): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) 59.989331227s ago: executing program 4 (id=710): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x404}}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 59.971549657s ago: executing program 4 (id=711): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) 59.845862088s ago: executing program 4 (id=715): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572000400028014"], 0x118}}, 0x0) 59.604327981s ago: executing program 4 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 59.592506151s ago: executing program 33 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.013962067s ago: executing program 6 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 810.51357ms ago: executing program 6 (id=2999): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 803.84856ms ago: executing program 0 (id=3000): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 748.831721ms ago: executing program 6 (id=3004): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x7f00, 0xe, 0x0, 0x0) 718.697261ms ago: executing program 0 (id=3006): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 694.390461ms ago: executing program 0 (id=3009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 632.227482ms ago: executing program 0 (id=3013): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x36, "4d26768012e32aebcfd04983e65be50f7cee2e9a0197afd2fa0eafdcbac24ecfe110c450e683049cf6204ac6116cfd48e82636466721"}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) 600.609223ms ago: executing program 0 (id=3014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000400b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 478.544064ms ago: executing program 0 (id=3019): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 411.998525ms ago: executing program 5 (id=3023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) 388.122036ms ago: executing program 6 (id=3025): socket$rxrpc(0x21, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 383.485575ms ago: executing program 5 (id=3026): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 356.814786ms ago: executing program 3 (id=3028): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000c08a00b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) lsm_set_self_attr(0x68, 0x0, 0xc7, 0x0) 268.065287ms ago: executing program 5 (id=3031): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 267.290597ms ago: executing program 3 (id=3032): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 267.014997ms ago: executing program 5 (id=3033): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) openat(r2, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) 251.544407ms ago: executing program 3 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) 247.061797ms ago: executing program 2 (id=3036): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) 211.852007ms ago: executing program 5 (id=3037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x1000000}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) 211.431818ms ago: executing program 2 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 204.162138ms ago: executing program 3 (id=3039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 183.458428ms ago: executing program 5 (id=3040): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRESHEX], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)='\f', 0x1}], 0x1, 0xfffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 183.085948ms ago: executing program 2 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x352881db82f51b94, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0) 110.129779ms ago: executing program 2 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}}, 0x40) 50.29569ms ago: executing program 3 (id=3043): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbfd1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000380)='\f', 0x1}], 0x1) 50.08519ms ago: executing program 3 (id=3044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 49.73413ms ago: executing program 6 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="10208100", 0x5dc, 0x0, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3.27866ms ago: executing program 2 (id=3046): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) 2.86259ms ago: executing program 6 (id=3047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 2 (id=3048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): netdevsim3: renamed from eth3 [ 61.534323][ T5523] loop3: detected capacity change from 0 to 256 [ 61.541344][ T5523] FAT-fs (loop3): bogus number of FAT sectors [ 61.547541][ T5523] FAT-fs (loop3): Can't find a valid FAT filesystem [ 61.548978][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b4ce000: rx timeout, send abort [ 61.603859][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.626404][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.640037][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.647299][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.675072][ T4996] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.682234][ T4996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.706811][ T5537] loop5: detected capacity change from 0 to 512 [ 61.716600][ T5535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.729186][ T5537] EXT4-fs (loop5): orphan cleanup on readonly fs [ 61.746742][ T5537] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.767: bg 0: block 248: padding at end of block bitmap is not set [ 61.754104][ T5419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.761651][ T5537] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.767: Failed to acquire dquot type 1 [ 61.787717][ T5537] EXT4-fs (loop5): 1 truncate cleaned up [ 61.799650][ T5535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.828395][ T4988] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 61.837761][ T4988] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 61.852459][ T5537] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 61.858062][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.874891][ T5537] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.925813][ T5535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.999996][ T5535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.022965][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b4ce200: rx timeout, send abort [ 62.036463][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b4ce000: abort rx timeout. Force session deactivation [ 62.095845][ T5535] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.121306][ T5535] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.133576][ T5535] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.159247][ T5535] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.193072][ T5419] veth0_vlan: entered promiscuous mode [ 62.211490][ T5419] veth1_vlan: entered promiscuous mode [ 62.265875][ T5419] veth0_macvtap: entered promiscuous mode [ 62.308916][ T5419] veth1_macvtap: entered promiscuous mode [ 62.343043][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.363323][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.387110][ T5419] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.396450][ T5419] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.405391][ T5419] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.414383][ T5419] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.434755][ T5580] netlink: 'syz.0.778': attribute type 21 has an invalid length. [ 62.505474][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b4ce200: abort rx timeout. Force session deactivation [ 62.539661][ T5593] IPVS: Error connecting to the multicast addr [ 62.609354][ T5603] random: crng reseeded on system resumption [ 62.656200][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/0:2) [ 62.768846][ T5594] lo speed is unknown, defaulting to 1000 [ 62.851565][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 62.851586][ T29] audit: type=1400 audit(1748323602.930:984): avc: denied { write } for pid=5613 comm="syz.3.793" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.880583][ T29] audit: type=1400 audit(1748323602.930:985): avc: denied { open } for pid=5613 comm="syz.3.793" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.903748][ T29] audit: type=1400 audit(1748323602.930:986): avc: denied { ioctl } for pid=5613 comm="syz.3.793" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.973051][ T29] audit: type=1400 audit(1748323603.078:987): avc: denied { tracepoint } for pid=5615 comm="syz.6.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.999306][ T5618] loop3: detected capacity change from 0 to 512 [ 63.041396][ T5618] EXT4-fs: Ignoring removed nobh option [ 63.057822][ T5618] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.796: invalid indirect mapped block 256 (level 2) [ 63.139208][ T5618] EXT4-fs (loop3): 2 truncates cleaned up [ 63.183196][ T29] audit: type=1400 audit(1748323603.299:988): avc: denied { read write } for pid=5617 comm="syz.3.796" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.206129][ T29] audit: type=1400 audit(1748323603.299:989): avc: denied { open } for pid=5617 comm="syz.3.796" path="/179/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.233697][ T5618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.796: bg 0: block 5: invalid block bitmap [ 63.271707][ T5618] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 63.284379][ T5618] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.284379][ T5618] [ 63.284725][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 63.294079][ T5618] EXT4-fs (loop3): Total free blocks count 0 [ 63.308960][ T5618] EXT4-fs (loop3): Free/Dirty block details [ 63.314936][ T5618] EXT4-fs (loop3): free_blocks=0 [ 63.319927][ T5618] EXT4-fs (loop3): dirty_blocks=2 [ 63.325097][ T5618] EXT4-fs (loop3): Block reservation details [ 63.331110][ T5618] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 63.411795][ T29] audit: type=1400 audit(1748323603.552:990): avc: denied { create } for pid=5631 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.455961][ T29] audit: type=1400 audit(1748323603.574:991): avc: denied { write } for pid=5631 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.458919][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.475351][ T29] audit: type=1400 audit(1748323603.574:992): avc: denied { connect } for pid=5631 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.475381][ T29] audit: type=1400 audit(1748323603.574:993): avc: denied { name_connect } for pid=5631 comm="syz.5.801" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.509227][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.982746][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.017742][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.032487][ T5660] loop3: detected capacity change from 0 to 512 [ 64.046054][ T5660] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.053121][ T5660] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.815: bg 0: block 248: padding at end of block bitmap is not set [ 64.089782][ T5660] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.815: Failed to acquire dquot type 1 [ 64.107903][ T5660] EXT4-fs (loop3): 1 truncate cleaned up [ 64.173076][ T5660] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 64.184065][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 64.193122][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 64.206301][ T5660] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.267136][ T5674] 9pnet_fd: Insufficient options for proto=fd [ 64.481455][ T5696] loop6: detected capacity change from 0 to 128 [ 64.547373][ T5696] bio_check_eod: 6 callbacks suppressed [ 64.547418][ T5696] syz.6.830: attempt to access beyond end of device [ 64.547418][ T5696] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 64.590064][ T5013] kworker/u8:42: attempt to access beyond end of device [ 64.590064][ T5013] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 64.677024][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.684499][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.730526][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.741330][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.777614][ T5707] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.786640][ T5707] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.795747][ T5707] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.804923][ T5707] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.883805][ T5717] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.252123][ T5754] bridge0: port 3(vlan2) entered blocking state [ 65.258509][ T5754] bridge0: port 3(vlan2) entered disabled state [ 65.265196][ T5754] vlan2: entered allmulticast mode [ 65.270516][ T5754] bridge0: entered allmulticast mode [ 65.296030][ T5754] vlan2: left allmulticast mode [ 65.301006][ T5754] bridge0: left allmulticast mode [ 65.761475][ T5813] vhci_hcd: invalid port number 0 [ 65.856511][ T5831] loop6: detected capacity change from 0 to 128 [ 65.995403][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.004953][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.163437][ T5857] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.206544][ T5860] SELinux: syz.6.901 (5860) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.311111][ T5862] bridge0: port 4(batadv1) entered disabled state [ 66.317773][ T5862] bridge0: port 3(dummy0) entered disabled state [ 66.324249][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.477191][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.487966][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.552754][ T5889] loop6: detected capacity change from 0 to 128 [ 66.559609][ T5862] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.568291][ T5862] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.576843][ T5862] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.585292][ T5862] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.691035][ T5897] 9pnet_fd: p9_fd_create_unix (5897): problem connecting socket: ./file0: -111 [ 66.698074][ T5899] loop0: detected capacity change from 0 to 256 [ 66.833778][ T5918] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 66.841676][ T5918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.929'. [ 67.253923][ T5960] lo speed is unknown, defaulting to 1000 [ 67.442426][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.954'. [ 67.451434][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.954'. [ 67.458944][ T5975] loop3: detected capacity change from 0 to 1024 [ 67.482984][ T5975] EXT4-fs mount: 29 callbacks suppressed [ 67.483044][ T5975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.531020][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.610153][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 67.610172][ T29] audit: type=1400 audit(1748327702.966:1098): avc: denied { create } for pid=5991 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.644378][ T29] audit: type=1400 audit(1748327703.008:1099): avc: denied { connect } for pid=5991 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.664232][ T29] audit: type=1400 audit(1748327703.008:1100): avc: denied { ioctl } for pid=5991 comm="syz.3.963" path="socket:[12225]" dev="sockfs" ino=12225 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.689401][ T29] audit: type=1400 audit(1748327703.029:1101): avc: denied { unmount } for pid=5994 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.415244][ T29] audit: type=1326 audit(1748327703.796:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.425596][ T6005] loop5: detected capacity change from 0 to 2048 [ 68.438628][ T29] audit: type=1326 audit(1748327703.796:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.438666][ T29] audit: type=1326 audit(1748327703.806:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.491938][ T29] audit: type=1326 audit(1748327703.806:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.515401][ T29] audit: type=1326 audit(1748327703.806:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.538842][ T29] audit: type=1326 audit(1748327703.806:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 68.595083][ T6005] loop5: p1 < > p4 [ 68.600021][ T6005] loop5: p4 size 8388608 extends beyond EOD, truncated [ 68.770896][ T6026] ref_ctr_offset mismatch. inode: 0x253 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 68.805437][ T6030] netlink: 'syz.0.981': attribute type 10 has an invalid length. [ 68.850198][ T6030] bridge0: port 3(team0) entered disabled state [ 68.858222][ T6030] team0: left allmulticast mode [ 68.866082][ T6032] loop6: detected capacity change from 0 to 1024 [ 68.870692][ T6030] team_slave_0: left allmulticast mode [ 68.878011][ T6030] team_slave_1: left allmulticast mode [ 68.883683][ T6030] team0: left promiscuous mode [ 68.892832][ T6030] team_slave_0: left promiscuous mode [ 68.898492][ T6030] team_slave_1: left promiscuous mode [ 68.904328][ T6030] bridge0: port 3(team0) entered disabled state [ 68.913559][ T6030] batman_adv: batadv0: Adding interface: team0 [ 68.914211][ T6032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.919813][ T6030] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.957331][ T6030] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 68.973354][ T6036] netlink: 'syz.5.984': attribute type 39 has an invalid length. [ 68.976884][ T6032] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #19: comm syz.6.982: missing EA_INODE flag [ 69.000186][ T6032] EXT4-fs (loop6): Remounting filesystem read-only [ 69.017222][ T6032] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #20: comm syz.6.982: dec ref error=-30 [ 69.093130][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.139393][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 69.216511][ T6069] netlink: 'syz.6.998': attribute type 10 has an invalid length. [ 69.228057][ T6073] netlink: 'syz.3.999': attribute type 39 has an invalid length. [ 69.241639][ T6069] batman_adv: batadv0: Adding interface: team0 [ 69.248195][ T6069] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.254853][ T6079] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 69.274539][ T6069] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 69.333673][ T6079] bond1: entered promiscuous mode [ 69.340889][ T6079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.355518][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.383510][ T6089] bond1: (slave batadv1): making interface the new active one [ 69.391245][ T6089] batadv1: entered promiscuous mode [ 69.411210][ T6089] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 69.650381][ T6120] rdma_op ffff888118190180 conn xmit_rdma 0000000000000000 [ 69.711280][ T6124] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1022'. [ 69.788761][ T6127] loop3: detected capacity change from 0 to 1024 [ 69.837824][ T6127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.865388][ T6130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6130 comm=syz.0.1026 [ 69.874509][ T6127] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #19: comm syz.3.1023: missing EA_INODE flag [ 69.906027][ T6127] EXT4-fs (loop3): Remounting filesystem read-only [ 69.917562][ T6127] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #20: comm syz.3.1023: dec ref error=-30 [ 69.961334][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.972608][ T6142] bond1: entered promiscuous mode [ 69.977752][ T6142] bond1: entered allmulticast mode [ 69.983364][ T6142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.996574][ T6142] bond1 (unregistering): Released all slaves [ 70.048384][ T6151] netlink: 'syz.0.1034': attribute type 39 has an invalid length. [ 70.105538][ T6159] program syz.5.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.116894][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1040'. [ 70.179520][ T6171] loop5: detected capacity change from 0 to 2048 [ 70.202373][ T6171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.240753][ T6181] loop6: detected capacity change from 0 to 512 [ 70.248033][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.260393][ T6181] EXT4-fs (loop6): orphan cleanup on readonly fs [ 70.269252][ T6181] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1048: bg 0: block 248: padding at end of block bitmap is not set [ 70.299730][ T6181] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1048: Failed to acquire dquot type 1 [ 70.308076][ T6186] veth0: entered promiscuous mode [ 70.325202][ T6181] EXT4-fs (loop6): 1 truncate cleaned up [ 70.335465][ T6181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.348327][ T6184] No source specified [ 70.360691][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'. [ 70.430283][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.453014][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 70.549914][ T6211] loop6: detected capacity change from 0 to 512 [ 70.594944][ T6211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.607708][ T6211] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.613955][ T6215] loop0: detected capacity change from 0 to 512 [ 70.650172][ T6215] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 70.663629][ T6215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 70.671821][ T6215] System zones: 1-12 [ 70.675910][ T6215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.684369][ T6215] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.1063: Inode bitmap for bg 0 marked uninitialized [ 70.697317][ T6215] EXT4-fs (loop0): Remounting filesystem read-only [ 70.700108][ T6211] EXT4-fs (loop6): shut down requested (2) [ 70.705077][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.735575][ T6228] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 70.735575][ T6228] program syz.5.1077 not setting count and/or reply_len properly [ 70.742428][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.763795][ T6215] usb usb8: usbfs: process 6215 (syz.0.1063) did not claim interface 0 before use [ 70.789999][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.832158][ T6232] loop6: detected capacity change from 0 to 2048 [ 70.871312][ T6232] loop6: p1 < > p4 [ 70.876924][ T6232] loop6: p4 size 8388608 extends beyond EOD, truncated [ 70.894159][ T6242] loop3: detected capacity change from 0 to 128 [ 70.901826][ T6244] netlink: 'syz.5.1075': attribute type 1 has an invalid length. [ 70.915478][ T6242] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.928767][ T6242] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.939462][ T6247] loop5: detected capacity change from 0 to 128 [ 70.968712][ T6242] EXT4-fs error (device loop3): dx_make_map:1298: inode #2: block 20: comm syz.3.1074: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 70.987551][ T6242] EXT4-fs (loop3): Remounting filesystem read-only [ 71.009928][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.061857][ T6247] support for the xor transformation has been removed. [ 71.242738][ T6265] pimreg: entered allmulticast mode [ 71.261005][ T6249] lo speed is unknown, defaulting to 1000 [ 71.261792][ T6265] pimreg: left allmulticast mode [ 71.464186][ T6276] loop3: detected capacity change from 0 to 1024 [ 71.484852][ T6276] EXT4-fs: Ignoring removed oldalloc option [ 71.512394][ T6276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.587408][ T6276] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1090: Allocating blocks 449-513 which overlap fs metadata [ 71.624780][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 71.638256][ T6274] EXT4-fs (loop3): pa ffff888106e37690: logic 48, phys. 177, len 21 [ 71.646397][ T6274] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 71.658662][ T6287] loop5: detected capacity change from 0 to 128 [ 71.669544][ T6280] veth0: entered promiscuous mode [ 71.689307][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.731694][ T6289] loop6: detected capacity change from 0 to 2048 [ 71.765832][ T6289] No source specified [ 71.910716][ T6307] loop5: detected capacity change from 0 to 512 [ 71.940470][ T6307] EXT4-fs: Ignoring removed nobh option [ 71.995248][ T6307] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.057816][ T6307] EXT4-fs (loop5): 1 truncate cleaned up [ 72.065385][ T6307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.092813][ T6307] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.1101: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 72.130052][ T6307] EXT4-fs (loop5): Remounting filesystem read-only [ 72.183765][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.309304][ T6354] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 72.342120][ T6359] SELinux: syz.0.1124 (6359) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.403986][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 72.404007][ T29] audit: type=1400 audit(1748327708.005:1177): avc: denied { mount } for pid=6367 comm="syz.0.1128" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.531192][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 72.593266][ T29] audit: type=1400 audit(1748327708.205:1178): avc: denied { listen } for pid=6385 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.729233][ T6402] loop0: detected capacity change from 0 to 512 [ 72.735919][ T6402] EXT4-fs: Ignoring removed nobh option [ 72.742552][ T6402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.755209][ T6402] EXT4-fs (loop0): 1 truncate cleaned up [ 72.761840][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.790138][ T6402] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #12: block 7: comm syz.0.1145: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 72.831592][ T6402] EXT4-fs (loop0): Remounting filesystem read-only [ 72.842569][ T29] audit: type=1400 audit(1748327708.457:1179): avc: denied { read } for pid=6408 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.877000][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.943128][ T6416] usb usb1: check_ctrlrecip: process 6416 (syz.0.1148) requesting ep 01 but needs 81 [ 72.952853][ T6416] usb usb1: usbfs: process 6416 (syz.0.1148) did not claim interface 0 before use [ 73.017863][ T6426] loop0: detected capacity change from 0 to 512 [ 73.029440][ T29] audit: type=1400 audit(1748327708.656:1180): avc: denied { bind } for pid=6427 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.049694][ T6426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.063862][ T6431] vhci_hcd: invalid port number 96 [ 73.069085][ T6431] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.076341][ T29] audit: type=1400 audit(1748327708.688:1181): avc: denied { listen } for pid=6427 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.095995][ T29] audit: type=1400 audit(1748327708.698:1182): avc: denied { map } for pid=6430 comm="syz.3.1156" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.156887][ T6426] EXT4-fs (loop0): 1 truncate cleaned up [ 73.164583][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.181777][ T6426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.229331][ T29] audit: type=1400 audit(1748327708.856:1183): avc: denied { mount } for pid=6443 comm="syz.3.1162" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.251866][ T29] audit: type=1400 audit(1748327708.856:1184): avc: denied { read } for pid=6443 comm="syz.3.1162" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.275156][ T29] audit: type=1400 audit(1748327708.856:1185): avc: denied { open } for pid=6443 comm="syz.3.1162" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.298813][ T29] audit: type=1400 audit(1748327708.856:1186): avc: denied { ioctl } for pid=6443 comm="syz.3.1162" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.461359][ T6465] IPVS: Error connecting to the multicast addr [ 73.518114][ T6467] hub 9-0:1.0: USB hub found [ 73.524879][ T6467] hub 9-0:1.0: 8 ports detected [ 73.788902][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 73.799042][ T3395] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.005338][ T6515] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1194'. [ 74.053326][ T6523] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 74.080823][ T6523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.089033][ T6523] bond2: (slave bond3): making interface the new active one [ 74.097240][ T6523] bond2: (slave bond3): Enslaving as an active interface with an up link [ 74.309947][ T6558] loop3: detected capacity change from 0 to 256 [ 74.324376][ T6558] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 74.334662][ T6558] FAT-fs (loop3): Filesystem has been set read-only [ 74.366096][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 74.376065][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 74.445396][ T6574] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1220'. [ 74.446398][ T6568] vhci_hcd: invalid port number 96 [ 74.459912][ T6568] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 74.485448][ T6576] loop6: detected capacity change from 0 to 1024 [ 74.502126][ T6576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.514298][ T6576] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.558240][ T6583] batman_adv: batadv0: Adding interface: ip6gretap2 [ 74.564964][ T6583] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.606717][ T6583] batman_adv: batadv0: Interface activated: ip6gretap2 [ 74.680430][ T6592] loop5: detected capacity change from 0 to 1024 [ 74.711586][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.733657][ T6592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.748350][ T6592] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.762189][ T6604] loop6: detected capacity change from 0 to 512 [ 74.774433][ T6592] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1227: bg 0: block 393: padding at end of block bitmap is not set [ 74.798943][ T6606] loop0: detected capacity change from 0 to 1024 [ 74.807248][ T6604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.812426][ T6606] EXT4-fs: inline encryption not supported [ 74.822600][ T6606] journal_path: Lookup failure for './file0' [ 74.828687][ T6606] EXT4-fs: error: could not find journal device path [ 74.846901][ T6604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.863357][ T6604] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.876796][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.962139][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.123312][ T6657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27745 sclass=netlink_route_socket pid=6657 comm=syz.6.1253 [ 75.305685][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.313554][ T6685] batadv_slave_0: entered promiscuous mode [ 75.330077][ T6689] loop3: detected capacity change from 0 to 2048 [ 75.444987][ T6689] loop3: p1 < > p4 [ 75.450011][ T6689] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.587659][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.3.1279 [ 75.996639][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1287'. [ 76.149122][ T6731] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 76.228595][ T6731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.247889][ T6731] bond2: (slave bond3): making interface the new active one [ 76.255722][ T6731] bond2: (slave bond3): Enslaving as an active interface with an up link [ 76.281703][ T6739] xt_hashlimit: max too large, truncated to 1048576 [ 76.381426][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1303'. [ 76.395460][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1303'. [ 76.537169][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 76.554395][ T6782] bridge0: port 3(macvlan2) entered blocking state [ 76.561043][ T6782] bridge0: port 3(macvlan2) entered disabled state [ 76.569450][ T6782] macvlan2: entered allmulticast mode [ 76.574886][ T6782] bridge0: entered allmulticast mode [ 76.592134][ T6782] macvlan2: left allmulticast mode [ 76.597348][ T6782] bridge0: left allmulticast mode [ 76.727457][ T6809] loop0: detected capacity change from 0 to 512 [ 76.735219][ T6809] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.760895][ T6809] EXT4-fs (loop0): 1 truncate cleaned up [ 76.773979][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.799497][ T6809] EXT4-fs: Ignoring removed orlov option [ 76.810699][ T6809] EXT4-fs (loop0): can't enable nombcache during remount [ 76.830337][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.987859][ T6835] loop5: detected capacity change from 0 to 512 [ 76.995516][ T6835] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.010960][ T6835] EXT4-fs (loop5): 1 truncate cleaned up [ 77.018398][ T6835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.029921][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: reserved main item tag 0xe [ 77.049766][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.058051][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.066559][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.074925][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.083149][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.091467][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.099659][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.107867][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.115979][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.124131][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.132358][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.140572][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.148798][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.156922][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.165114][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.173220][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.181355][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.189799][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.197993][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.206257][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.214390][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.222583][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.230729][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.238896][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.247043][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.255216][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.263368][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.271458][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 77.280251][ T10] hid-generic FFFF:FFFFFFFC:20000001.0004: hidraw0: HID va0.69 Device [syz0] on syz1 [ 77.280953][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 77.280991][ T29] audit: type=1326 audit(1748327713.128:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 77.341264][ T29] audit: type=1400 audit(1748327713.139:1274): avc: denied { rename } for pid=6834 comm="syz.5.1338" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.363703][ T29] audit: type=1326 audit(1748327713.170:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 77.387372][ T29] audit: type=1326 audit(1748327713.170:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.2.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 77.422194][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.553012][ T6866] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.1350'. [ 78.258701][ T6910] loop0: detected capacity change from 0 to 512 [ 78.268392][ T6910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.281063][ T6910] EXT4-fs (loop0): 1 truncate cleaned up [ 78.289881][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.346009][ T29] audit: type=1326 audit(1748327714.241:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.369588][ T29] audit: type=1326 audit(1748327714.241:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.397431][ T29] audit: type=1326 audit(1748327714.241:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.421102][ T29] audit: type=1326 audit(1748327714.241:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.444624][ T29] audit: type=1326 audit(1748327714.241:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.468124][ T29] audit: type=1326 audit(1748327714.241:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 78.524637][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.580509][ T6929] loop0: detected capacity change from 0 to 512 [ 78.629335][ T6929] EXT4-fs: Ignoring removed bh option [ 78.635051][ T6929] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.697635][ T6929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.756536][ T6929] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.770995][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1386'. [ 78.875545][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.976560][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.986387][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.995160][ T6963] hub 9-0:1.0: USB hub found [ 79.002622][ T6963] hub 9-0:1.0: 8 ports detected [ 79.149723][ T6978] lo speed is unknown, defaulting to 1000 [ 79.155822][ T6972] loop6: detected capacity change from 0 to 8192 [ 79.200715][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.209639][ T6986] bond0: (slave bond1): Enslaving as an active interface with an up link [ 79.375440][ T7011] loop0: detected capacity change from 0 to 512 [ 79.382485][ T7011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.389307][ T7011] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.401417][ T7011] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 79.411234][ T7011] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 79.419544][ T7014] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.427877][ T7011] EXT4-fs (loop0): 1 truncate cleaned up [ 79.434091][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.440364][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 79.456371][ T7011] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 79.498082][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.553129][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: reserved main item tag 0xe [ 79.571243][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.579525][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.587702][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.595804][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.603939][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.612162][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.620529][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.628765][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.637050][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.645406][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.654297][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.662658][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.670806][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.678993][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.687154][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.695340][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.703642][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.711901][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.720037][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.728278][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.736592][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.744753][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.753080][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.756362][ T7044] batman_adv: batadv0: Removing interface: team0 [ 79.761520][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.761582][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.784277][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.792402][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.800663][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: unknown main item tag 0x0 [ 79.809536][ T3395] hid-generic FFFF:FFFFFFFC:20000001.0005: hidraw0: HID va0.69 Device [syz0] on syz1 [ 79.839218][ T7044] bridge_slave_0: left allmulticast mode [ 79.845057][ T7044] bridge_slave_0: left promiscuous mode [ 79.851079][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.863485][ T7044] bridge_slave_1: left allmulticast mode [ 79.869203][ T7044] bridge_slave_1: left promiscuous mode [ 79.875205][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.900081][ T7044] bond0: (slave bond_slave_0): Releasing backup interface [ 79.917933][ T7052] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 79.927633][ T7044] bond0: (slave bond_slave_1): Releasing backup interface [ 79.962439][ T7044] team0: Port device team_slave_0 removed [ 79.977619][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1439'. [ 79.989975][ T7044] team0: Port device team_slave_1 removed [ 79.996620][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.004208][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.013244][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.020812][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.039785][ T7044] bond1: (slave batadv1): Releasing backup interface [ 80.046751][ T7044] batadv1: left promiscuous mode [ 80.055720][ T7044] bond2: (slave bond3): Releasing backup interface [ 80.069214][ T1046] lo speed is unknown, defaulting to 1000 [ 80.075163][ T7042] netlink: 'syz.2.1432': attribute type 3 has an invalid length. [ 80.175174][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.184306][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.193398][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.228026][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.237230][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.246379][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.303588][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 80.663381][ T7081] lo speed is unknown, defaulting to 1000 [ 80.715550][ T7124] loop6: detected capacity change from 0 to 512 [ 80.750505][ T7124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.802684][ T7124] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.837126][ T7124] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 80.853924][ T7124] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 80.864265][ T7124] EXT4-fs (loop6): 1 truncate cleaned up [ 80.870402][ T7124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.893926][ T7124] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.956132][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.286252][ T7169] loop6: detected capacity change from 0 to 512 [ 81.337731][ T7169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.368131][ T7169] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.408111][ T7184] netlink: 'syz.2.1495': attribute type 21 has an invalid length. [ 81.495041][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.515283][ T7195] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 81.524691][ T7191] wireguard0: entered promiscuous mode [ 81.530388][ T7191] wireguard0: entered allmulticast mode [ 81.536154][ T7198] loop3: detected capacity change from 0 to 512 [ 81.551450][ T7198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.583177][ T7198] EXT4-fs (loop3): 1 truncate cleaned up [ 81.613842][ T7198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.693675][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.783918][ T7228] netlink: 'syz.5.1513': attribute type 3 has an invalid length. [ 81.818726][ T7230] loop0: detected capacity change from 0 to 1024 [ 81.896595][ T7220] lo speed is unknown, defaulting to 1000 [ 81.913798][ T7230] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 81.932130][ T7230] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.010319][ T7230] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #32: comm syz.0.1514: iget: special inode unallocated [ 82.040463][ T7230] EXT4-fs (loop0): Remounting filesystem read-only [ 82.047295][ T7230] EXT4-fs (loop0): no journal found [ 82.052573][ T7230] EXT4-fs (loop0): can't get journal size [ 82.073064][ T7230] EXT4-fs (loop0): failed to initialize system zone (-117) [ 82.082517][ T7230] EXT4-fs (loop0): mount failed [ 82.131958][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 82.131976][ T29] audit: type=1326 audit(1748327718.220:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.179646][ T29] audit: type=1326 audit(1748327718.251:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.203222][ T29] audit: type=1326 audit(1748327718.251:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.226740][ T29] audit: type=1326 audit(1748327718.251:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.250374][ T29] audit: type=1326 audit(1748327718.251:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.273919][ T29] audit: type=1326 audit(1748327718.251:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.297451][ T29] audit: type=1326 audit(1748327718.251:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 82.395894][ T7251] SELinux: ebitmap: truncated map [ 82.396603][ T29] audit: type=1326 audit(1748327718.472:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 82.424765][ T29] audit: type=1326 audit(1748327718.482:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 82.436240][ T7251] SELinux: failed to load policy [ 82.448228][ T29] audit: type=1326 audit(1748327718.493:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 82.622113][ T7267] loop3: detected capacity change from 0 to 164 [ 82.640210][ T7267] iso9660: Unknown parameter '' [ 82.680456][ T7275] hub 9-0:1.0: USB hub found [ 82.690042][ T7275] hub 9-0:1.0: 8 ports detected [ 82.713227][ T7279] loop0: detected capacity change from 0 to 256 [ 82.759020][ T7283] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 82.815387][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.823367][ T7279] FAT-fs (loop0): Filesystem has been set read-only [ 82.832650][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.840860][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.851284][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.859360][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.869727][ T7279] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 82.893419][ T7292] netem: incorrect gi model size [ 82.898571][ T7292] netem: change failed [ 83.182220][ T7327] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 83.229365][ T7331] loop5: detected capacity change from 0 to 256 [ 83.317106][ T7338] bridge_slave_0: default FDB implementation only supports local addresses [ 83.342398][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.350391][ T7331] FAT-fs (loop5): Filesystem has been set read-only [ 83.368891][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.376842][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.417332][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.431844][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.443050][ T7331] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 83.744073][ T7374] SELinux: security policydb version 18 (MLS) not backwards compatible [ 83.798964][ T7374] SELinux: failed to load policy [ 83.861285][ T7386] loop6: detected capacity change from 0 to 128 [ 83.901297][ T7386] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 83.909668][ T7386] FAT-fs (loop6): Filesystem has been set read-only [ 83.940557][ T7386] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 84.105493][ T7409] SELinux: failed to load policy [ 84.115001][ T7411] bridge0: port 3(syz_tun) entered blocking state [ 84.121564][ T7411] bridge0: port 3(syz_tun) entered disabled state [ 84.133066][ T7414] loop0: detected capacity change from 0 to 512 [ 84.139946][ T7411] syz_tun: entered allmulticast mode [ 84.145484][ T7414] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.159764][ T7411] syz_tun: entered promiscuous mode [ 84.184723][ T7411] syz_tun: left allmulticast mode [ 84.189873][ T7411] syz_tun: left promiscuous mode [ 84.195021][ T7411] bridge0: port 3(syz_tun) entered disabled state [ 84.205477][ T7411] batman_adv: batadv0: Removing interface: team0 [ 84.206535][ T7414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.235039][ T7411] bridge_slave_0: left allmulticast mode [ 84.240906][ T7411] bridge_slave_0: left promiscuous mode [ 84.246688][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.264728][ T7411] bridge_slave_1: left allmulticast mode [ 84.270759][ T7411] bridge_slave_1: left promiscuous mode [ 84.276569][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.287282][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.297767][ T7411] bond0: (slave bond_slave_0): Releasing backup interface [ 84.308027][ T7411] bond0: (slave bond_slave_1): Releasing backup interface [ 84.318331][ T7411] team0: Port device team_slave_0 removed [ 84.332248][ T7411] team0: Port device team_slave_1 removed [ 84.343728][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.362757][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.471283][ T7435] rdma_op ffff88812458c980 conn xmit_rdma 0000000000000000 [ 84.700228][ T7465] sd 0:0:1:0: device reset [ 84.788781][ T7477] loop0: detected capacity change from 0 to 512 [ 84.808915][ T7479] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.823898][ T7477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.837480][ T7477] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.911191][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #18: comm syz.0.1623: corrupted inode contents [ 84.925346][ T7477] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #18: comm syz.0.1623: mark_inode_dirty error [ 84.956320][ T7477] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #18: comm syz.0.1623: corrupted inode contents [ 84.971024][ T7477] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.1623: mark_inode_dirty error [ 84.983855][ T7477] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.1623: mark inode dirty (error -117) [ 85.012996][ T7477] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 85.047169][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.179709][ T7506] wireguard0: entered promiscuous mode [ 85.185357][ T7506] wireguard0: entered allmulticast mode [ 85.258962][ T7521] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 85.413241][ T7536] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 85.430317][ T7536] SELinux: failed to load policy [ 85.453250][ T7540] __nla_validate_parse: 15 callbacks suppressed [ 85.453271][ T7540] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1650'. [ 85.546338][ T7542] bond4: entered promiscuous mode [ 85.551632][ T7542] bond4: entered allmulticast mode [ 85.557217][ T7542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.577310][ T7542] bond4 (unregistering): Released all slaves [ 85.620272][ T7559] loop6: detected capacity change from 0 to 128 [ 85.820173][ T7590] lo speed is unknown, defaulting to 1000 [ 85.937318][ T7605] loop3: detected capacity change from 0 to 512 [ 85.959775][ T7605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.045818][ T7605] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1680: invalid block [ 86.055631][ T7611] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 86.067610][ T7605] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1680: invalid indirect mapped block 4294967295 (level 1) [ 86.083328][ T7605] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1680: invalid indirect mapped block 4294967295 (level 1) [ 86.098690][ T7605] EXT4-fs (loop3): 2 truncates cleaned up [ 86.108097][ T7605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.127930][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 86.136959][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 86.182788][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.266100][ T7623] loop6: detected capacity change from 0 to 512 [ 86.317099][ T7623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.339986][ T7623] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.752326][ T7654] ieee802154 phy1 wpan1: encryption failed: -22 [ 86.886322][ T7667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 86.892952][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.900828][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 86.913682][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 86.913723][ T29] audit: type=1326 audit(1748327723.238:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e45bad5ca code=0x7ffc0000 [ 86.913971][ T7668] vhci_hcd: connection closed [ 86.919961][ T29] audit: type=1326 audit(1748327723.238:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 86.971871][ T29] audit: type=1326 audit(1748327723.238:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 86.972168][ T4988] vhci_hcd: stop threads [ 86.999973][ T4988] vhci_hcd: release socket [ 87.004407][ T4988] vhci_hcd: disconnect device [ 87.062560][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.155538][ T7685] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1714'. [ 87.194614][ T7691] netlink: 'syz.0.1717': attribute type 18 has an invalid length. [ 87.212796][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.222488][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.510991][ T29] audit: type=1400 audit(1748327723.857:1585): avc: denied { append } for pid=7710 comm="syz.0.1726" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.629163][ T29] audit: type=1326 audit(1748327723.994:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.652829][ T29] audit: type=1326 audit(1748327723.994:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.676432][ T29] audit: type=1326 audit(1748327723.994:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.700231][ T29] audit: type=1326 audit(1748327723.994:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.723803][ T29] audit: type=1326 audit(1748327723.994:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.747268][ T29] audit: type=1326 audit(1748327723.994:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.5.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 87.820356][ T7723] loop3: detected capacity change from 0 to 512 [ 87.838156][ T7723] EXT4-fs: Ignoring removed oldalloc option [ 87.845514][ T7723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.866945][ T7723] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1731: invalid indirect mapped block 4294967295 (level 0) [ 87.882712][ T7723] EXT4-fs (loop3): Remounting filesystem read-only [ 87.893857][ T7723] EXT4-fs (loop3): 1 orphan inode deleted [ 87.899647][ T7723] EXT4-fs (loop3): 1 truncate cleaned up [ 87.905925][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.958589][ T7737] xt_hashlimit: max too large, truncated to 1048576 [ 87.970511][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.283189][ T7745] lo speed is unknown, defaulting to 1000 [ 88.360555][ T7783] xt_hashlimit: max too large, truncated to 1048576 [ 88.568794][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'. [ 88.638156][ T7800] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 88.775362][ T7821] pimreg: entered allmulticast mode [ 88.800937][ T7823] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1778'. [ 88.883814][ T36] hid (null): unknown global tag 0xd [ 88.890142][ T36] hid-generic 0002:FFFFFF16:0009.0006: unknown global tag 0xd [ 88.897742][ T36] hid-generic 0002:FFFFFF16:0009.0006: item 0 4 1 13 parsing failed [ 88.899310][ T7821] pimreg: left allmulticast mode [ 88.913010][ T36] hid-generic 0002:FFFFFF16:0009.0006: probe with driver hid-generic failed with error -22 [ 88.927484][ T7819] lo speed is unknown, defaulting to 1000 [ 89.034558][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1786'. [ 89.076055][ T7847] loop5: detected capacity change from 0 to 736 [ 89.095395][ T7847] rock: directory entry would overflow storage [ 89.101624][ T7847] rock: sig=0x5850, size=36, remaining=14 [ 89.252123][ T7854] Process accounting resumed [ 89.266141][ T7857] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 89.332875][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 89.354884][ T7862] loop5: detected capacity change from 0 to 2048 [ 89.405592][ T7862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.424408][ T7862] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 89.475220][ T4266] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 89.514169][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1800'. [ 89.523289][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1800'. [ 89.544634][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.707753][ T7895] tipc: Started in network mode [ 89.712768][ T7895] tipc: Node identity ac14140f, cluster identity 4711 [ 89.720434][ T7895] tipc: New replicast peer: 255.255.255.255 [ 89.726806][ T7895] tipc: Enabled bearer , priority 10 [ 89.774933][ T7902] loop5: detected capacity change from 0 to 1024 [ 89.793575][ T7902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.837733][ T7902] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1815: Allocating blocks 449-513 which overlap fs metadata [ 89.898445][ T7901] EXT4-fs (loop5): pa ffff888106e37620: logic 48, phys. 177, len 21 [ 89.906571][ T7901] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 90.017904][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.152270][ T7933] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 90.390423][ T7957] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 90.417386][ T7957] team0: Device dummy0 is up. Set it down before adding it as a team port [ 90.433995][ T7963] __nla_validate_parse: 1 callbacks suppressed [ 90.434014][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1842'. [ 90.449337][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1842'. [ 90.458326][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1842'. [ 90.504493][ T7967] 9pnet_fd: Insufficient options for proto=fd [ 90.532663][ T7969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1844'. [ 90.626020][ T7982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.686328][ T7982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.702011][ T7994] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 90.743866][ T7982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.789313][ T3395] tipc: Node number set to 2886997007 [ 90.796097][ T7982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.828317][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1862'. [ 90.852706][ T8005] hsr_slave_0: left promiscuous mode [ 90.859057][ T8005] hsr_slave_1: left promiscuous mode [ 90.886668][ T7982] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.911338][ T7982] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937546][ T7982] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.964744][ T7982] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.150096][ T8027] netlink: 'syz.0.1872': attribute type 5 has an invalid length. [ 91.342634][ T8055] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1884'. [ 91.384663][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 91.653869][ T8043] Set syz1 is full, maxelem 65536 reached [ 91.878684][ T8104] netem: incorrect gi model size [ 91.883702][ T8104] netem: change failed [ 91.977956][ T8099] lo speed is unknown, defaulting to 1000 [ 91.996914][ T8113] loop5: detected capacity change from 0 to 512 [ 92.053165][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1914'. [ 92.077525][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 92.089133][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 92.137860][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 92.137880][ T29] audit: type=1326 audit(1748327728.718:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.176569][ T29] audit: type=1326 audit(1748327728.718:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.200258][ T29] audit: type=1326 audit(1748327728.718:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.223807][ T29] audit: type=1326 audit(1748327728.718:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.247646][ T29] audit: type=1326 audit(1748327728.718:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.271348][ T29] audit: type=1326 audit(1748327728.718:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.295020][ T29] audit: type=1326 audit(1748327728.728:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.318546][ T29] audit: type=1326 audit(1748327728.728:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.342225][ T29] audit: type=1326 audit(1748327728.728:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.365587][ T29] audit: type=1326 audit(1748327728.728:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7ffc0000 [ 92.427725][ T8138] Q6\bY4: renamed from lo (while UP) [ 92.608279][ T8170] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8170 comm=syz.0.1936 [ 92.747853][ T8185] netlink: 'syz.0.1943': attribute type 21 has an invalid length. [ 92.928275][ T8215] SELinux: failed to load policy [ 93.081584][ T8231] Q6\bY4: renamed from lo [ 93.351867][ T8250] Q6\bY4 speed is unknown, defaulting to 1000 [ 93.656028][ T8291] raw_sendmsg: syz.6.1989 forgot to set AF_INET. Fix it! [ 93.868389][ T8305] Q6\bY4 speed is unknown, defaulting to 1000 [ 93.881830][ T8309] pim6reg1: entered promiscuous mode [ 93.887412][ T8309] pim6reg1: entered allmulticast mode [ 94.124304][ T8326] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.269032][ T8348] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 94.561278][ T8340] Set syz1 is full, maxelem 65536 reached [ 94.647218][ T8376] sd 0:0:1:0: device reset [ 94.664627][ T8378] loop3: detected capacity change from 0 to 2048 [ 95.042317][ T8423] loop6: detected capacity change from 0 to 1024 [ 95.067962][ T8423] EXT4-fs: Ignoring removed nobh option [ 95.073610][ T8423] EXT4-fs: Ignoring removed bh option [ 95.121205][ T8397] Set syz1 is full, maxelem 65536 reached [ 95.141347][ T8423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.243090][ T8446] SELinux: Context is not valid (left unmapped). [ 95.261640][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.297940][ T8448] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 95.313213][ T8456] SET target dimension over the limit! [ 95.332592][ T8460] Q6\bY4: entered allmulticast mode [ 95.355195][ T8464] sd 0:0:1:0: device reset [ 95.359315][ T8460] Q6\bY4: left allmulticast mode [ 95.406035][ T8470] 9pnet_fd: Insufficient options for proto=fd [ 95.450539][ T8478] __nla_validate_parse: 6 callbacks suppressed [ 95.450555][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 95.526873][ T8488] loop3: detected capacity change from 0 to 256 [ 95.541979][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 95.556577][ T8488] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 95.566832][ T8488] FAT-fs (loop3): Filesystem has been set read-only [ 95.585004][ T3321] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 95.610569][ T8497] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.646267][ T8497] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.690392][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 95.690699][ T36] kernel write not supported for file /vcsu (pid: 36 comm: kworker/1:1) [ 95.744065][ T8497] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.798156][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 95.809075][ T8497] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.845256][ T8497] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.861327][ T8497] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.875126][ T8497] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.912799][ T8497] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.042291][ T8543] loop3: detected capacity change from 0 to 128 [ 96.068902][ T8543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.081926][ T8543] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.123330][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.139638][ T8550] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2106'. [ 96.240433][ T8557] loop5: detected capacity change from 0 to 1024 [ 96.271629][ T8557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.316293][ T8557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #19: comm syz.5.2109: missing EA_INODE flag [ 96.340894][ T8557] EXT4-fs (loop5): Remounting filesystem read-only [ 96.347736][ T8557] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #20: comm syz.5.2109: dec ref error=-30 [ 96.399050][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.725734][ T8624] netlink: 'syz.6.2139': attribute type 21 has an invalid length. [ 96.734210][ T8624] netlink: 'syz.6.2139': attribute type 1 has an invalid length. [ 96.742008][ T8624] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2139'. [ 96.865388][ T8649] rdma_op ffff88810488f980 conn xmit_rdma 0000000000000000 [ 96.918633][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 96.918654][ T29] audit: type=1400 audit(1748327733.736:1950): avc: denied { unmount } for pid=4266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.950146][ T8660] sd 0:0:1:0: device reset [ 96.955177][ T29] audit: type=1400 audit(1748327733.778:1951): avc: denied { cpu } for pid=8659 comm="syz.5.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.041634][ T29] audit: type=1400 audit(1748327733.872:1952): avc: denied { ioctl } for pid=8672 comm="syz.3.2161" path="socket:[21925]" dev="sockfs" ino=21925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.268349][ T8707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2176'. [ 97.318631][ T29] audit: type=1400 audit(1748327734.156:1953): avc: denied { write } for pid=8714 comm="syz.3.2180" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.666023][ T29] audit: type=1400 audit(1748327734.523:1954): avc: denied { create } for pid=8720 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 97.698006][ T8722] Q6\bY4 speed is unknown, defaulting to 1000 [ 97.698837][ T29] audit: type=1400 audit(1748327734.555:1955): avc: denied { sys_admin } for pid=8720 comm="syz.2.2183" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.743061][ T29] audit: type=1400 audit(1748327734.597:1956): avc: denied { associate } for pid=8725 comm="syz.2.2183" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 97.783376][ T29] audit: type=1400 audit(1748327734.649:1957): avc: denied { sqpoll } for pid=8726 comm="syz.6.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.828421][ T29] audit: type=1400 audit(1748327734.649:1958): avc: denied { create } for pid=8726 comm="syz.6.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.848276][ T29] audit: type=1400 audit(1748327734.649:1959): avc: denied { bind } for pid=8726 comm="syz.6.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.094970][ T8756] loop5: detected capacity change from 0 to 128 [ 98.122012][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.122012][ T8756] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 98.141008][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.141008][ T8756] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 98.154516][ T8756] buffer_io_error: 311 callbacks suppressed [ 98.154597][ T8756] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 98.170089][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.170089][ T8756] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 98.183607][ T8756] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 98.192366][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.192366][ T8756] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 98.205835][ T8756] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 98.215455][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.215455][ T8756] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 98.229007][ T8756] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 98.237954][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.237954][ T8756] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 98.251443][ T8756] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 98.260456][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.260456][ T8756] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 98.273917][ T8756] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 98.295576][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.295576][ T8756] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 98.309138][ T8756] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 98.319531][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.319531][ T8756] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 98.333172][ T8756] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 98.341860][ T8756] syz.5.2197: attempt to access beyond end of device [ 98.341860][ T8756] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 98.355574][ T8756] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 98.364916][ T8756] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 98.395708][ T8763] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 98.629244][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 98.645215][ T8798] loop5: detected capacity change from 0 to 764 [ 98.776616][ T8817] loop5: detected capacity change from 0 to 1024 [ 98.783772][ T8817] EXT4-fs: Ignoring removed orlov option [ 98.789571][ T8817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.842730][ T8817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.904452][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 98.913508][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 98.938096][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.987007][ T8837] SELinux: ebitmap: truncated map [ 98.993567][ T8837] SELinux: failed to load policy [ 99.137249][ T8860] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.151660][ T8863] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 99.182763][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.191654][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.223820][ T8860] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.288244][ T8860] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.337540][ T8860] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.404445][ T8885] netlink: 'syz.5.2254': attribute type 10 has an invalid length. [ 99.414302][ T8885] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.633010][ T8901] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 99.711637][ T8860] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.748190][ T8860] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.804888][ T8860] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.826140][ T8860] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.853149][ T8929] loop6: detected capacity change from 0 to 256 [ 99.897351][ T8933] loop5: detected capacity change from 0 to 512 [ 100.020941][ T8946] program syz.6.2283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.059749][ T8954] loop6: detected capacity change from 0 to 512 [ 100.068992][ T8954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.092339][ T8954] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2287: invalid block [ 100.111181][ T8954] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2287: invalid indirect mapped block 4294967295 (level 1) [ 100.127189][ T8954] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2287: invalid indirect mapped block 4294967295 (level 1) [ 100.143424][ T8954] EXT4-fs (loop6): 2 truncates cleaned up [ 100.149786][ T8954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.167799][ T8966] sch_fq: defrate 0 ignored. [ 100.185455][ T8968] netlink: 'syz.2.2292': attribute type 10 has an invalid length. [ 100.194140][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.204225][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.216393][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.223613][ T8968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.242520][ T8968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.366698][ T8984] __nla_validate_parse: 2 callbacks suppressed [ 100.366720][ T8984] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2300'. [ 100.499173][ T8996] loop5: detected capacity change from 0 to 8192 [ 100.507358][ T8996] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.693406][ T9022] netlink: 'syz.5.2318': attribute type 4 has an invalid length. [ 100.701256][ T9022] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2318'. [ 100.830896][ T9038] 9pnet: Could not find request transport: fo [ 100.903848][ T9050] netlink: 'syz.2.2332': attribute type 3 has an invalid length. [ 101.126074][ T9072] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 101.179066][ T9072] team0: Device veth0_macvtap failed to register rx_handler [ 101.297029][ T9095] program syz.5.2353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.343395][ T9099] xt_hashlimit: max too large, truncated to 1048576 [ 101.355358][ T9103] loop5: detected capacity change from 0 to 512 [ 101.363257][ T9103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.393052][ T9103] EXT4-fs (loop5): 1 truncate cleaned up [ 101.399203][ T9103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.414257][ T9103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.557072][ T9126] SELinux: syz.5.2367 (9126) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.845106][ T9156] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2381'. [ 101.890305][ T9163] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 101.890305][ T9163] program syz.6.2385 not setting count and/or reply_len properly [ 101.930646][ T9170] loop6: detected capacity change from 0 to 128 [ 102.000968][ T9174] loop5: detected capacity change from 0 to 8192 [ 102.067296][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 102.067316][ T29] audit: type=1326 audit(1748327739.142:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f588941e969 code=0x7fc00000 [ 102.114617][ T29] audit: type=1400 audit(1748327739.195:2069): avc: denied { create } for pid=9181 comm="syz.0.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.134190][ T29] audit: type=1400 audit(1748327739.195:2070): avc: denied { write } for pid=9181 comm="syz.0.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.221443][ T9180] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 102.229260][ T9180] FAT-fs (loop5): Filesystem has been set read-only [ 102.261136][ T29] audit: type=1400 audit(1748327739.342:2071): avc: denied { block_suspend } for pid=9184 comm="syz.6.2394" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.359954][ T9206] IPv6: Can't replace route, no match found [ 102.431058][ T9215] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.441063][ T9215] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.497412][ T9215] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.507303][ T9215] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.547651][ T29] audit: type=1326 audit(1748327739.646:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.3.2404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f6ce81e5927 code=0x0 [ 102.571060][ T29] audit: type=1326 audit(1748327739.667:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e45bae969 code=0x7fc00000 [ 102.595787][ T9215] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.605787][ T9215] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.650303][ T9215] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.660239][ T9215] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.711726][ T9215] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.720067][ T9215] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.731474][ T9215] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.739737][ T9215] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.751570][ T9215] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.759873][ T9215] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.771343][ T9215] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.779605][ T9215] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.872440][ T9228] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2408'. [ 102.941724][ T9232] Q6\bY4 speed is unknown, defaulting to 1000 [ 103.038663][ T29] audit: type=1400 audit(1748327740.161:2074): avc: denied { setopt } for pid=9240 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.268725][ T29] audit: type=1326 audit(1748327740.402:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9216 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e45bae969 code=0x7fc00000 [ 103.326948][ T29] audit: type=1400 audit(1748327740.465:2076): avc: denied { read } for pid=9255 comm="syz.5.2421" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.498934][ T9264] xt_CT: No such helper "snmp_trap" [ 103.575864][ T9272] loop3: detected capacity change from 0 to 1024 [ 103.612128][ T9272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.626414][ T9272] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.642348][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 13) [ 103.657178][ T9272] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 103.669786][ T9272] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.669786][ T9272] [ 103.684589][ T29] audit: type=1400 audit(1748327740.843:2077): avc: denied { map } for pid=9271 comm="syz.3.2427" path="/486/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.684878][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.724154][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.738621][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.755356][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.770095][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.786386][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.802634][ T9271] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.817170][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.844348][ T9272] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.2427: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.973366][ T9297] Invalid ELF header magic: != ELF [ 104.202173][ T9315] Cannot find add_set index 0 as target [ 104.510429][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.551227][ T9350] syzkaller1: entered promiscuous mode [ 104.556848][ T9350] syzkaller1: entered allmulticast mode [ 104.799198][ T9365] loop5: detected capacity change from 0 to 8192 [ 105.032365][ T9378] infiniband syz!: set active [ 105.037146][ T9378] infiniband syz!: added team_slave_0 [ 105.064429][ T9378] RDS/IB: syz!: added [ 105.070907][ T9378] smc: adding ib device syz! with port count 1 [ 105.077264][ T9378] smc: ib device syz! port 1 has pnetid [ 105.247092][ T9392] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 105.417742][ T9409] veth0_macvtap: left promiscuous mode [ 105.434774][ T9409] macvtap0: refused to change device tx_queue_len [ 105.637085][ T9432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2501'. [ 105.807284][ T9459] loop5: detected capacity change from 0 to 2048 [ 105.840800][ T9459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.853161][ T9459] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.867259][ T9462] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.916315][ T9470] atomic_op ffff888127ed7d28 conn xmit_atomic 0000000000000000 [ 105.926684][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.002487][ T9477] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.002487][ T9477] program gtp not setting count and/or reply_len properly [ 106.067146][ T9493] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.110649][ T9497] loop5: detected capacity change from 0 to 128 [ 106.119100][ T9497] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.133034][ T9497] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.182745][ T4266] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.308222][ T9512] Invalid ELF header magic: != ELF [ 106.319502][ T9514] loop3: detected capacity change from 0 to 164 [ 106.328058][ T9514] bio_check_eod: 9 callbacks suppressed [ 106.328078][ T9514] syz.3.2537: attempt to access beyond end of device [ 106.328078][ T9514] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 106.352141][ T9514] syz.3.2537: attempt to access beyond end of device [ 106.352141][ T9514] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.581085][ T9540] SELinux: syz.6.2550 (9540) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.650836][ T9542] vhci_hcd: invalid port number 96 [ 106.656131][ T9542] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 106.688268][ T9547] vti0: entered promiscuous mode [ 106.921768][ T9571] loop6: detected capacity change from 0 to 2048 [ 106.931697][ T9567] smc: net device bond0 applied user defined pnetid SYZ2 [ 106.940125][ T9567] smc: net device bond0 erased user defined pnetid SYZ2 [ 106.950181][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 106.950222][ T29] audit: type=1400 audit(1748327744.265:2247): avc: denied { read } for pid=9572 comm="syz.0.2565" path="socket:[25008]" dev="sockfs" ino=25008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.999326][ T9571] EXT4-fs (loop6): failed to initialize system zone (-117) [ 107.007002][ T9571] EXT4-fs (loop6): mount failed [ 107.058508][ T9588] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2565'. [ 107.082603][ T29] audit: type=1400 audit(1748327744.412:2248): avc: denied { unmount } for pid=4266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.244898][ T9610] No source specified [ 107.460941][ T29] audit: type=1326 audit(1748327744.811:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.528744][ T29] audit: type=1326 audit(1748327744.811:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.552319][ T29] audit: type=1326 audit(1748327744.811:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.575808][ T29] audit: type=1326 audit(1748327744.811:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.599230][ T29] audit: type=1326 audit(1748327744.811:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.622720][ T29] audit: type=1326 audit(1748327744.811:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.646356][ T29] audit: type=1326 audit(1748327744.811:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.669944][ T29] audit: type=1326 audit(1748327744.811:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9621 comm="syz.0.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588941e969 code=0x7ffc0000 [ 107.771898][ T9620] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2581'. [ 107.920621][ T9655] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.967770][ T9655] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.025436][ T9655] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.042938][ T9668] loop6: detected capacity change from 0 to 164 [ 108.079934][ T9655] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.093440][ T9670] netlink: 'syz.6.2604': attribute type 6 has an invalid length. [ 108.133045][ T9655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.158323][ T9655] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172540][ T9655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.187524][ T9655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.256891][ T9688] xt_hashlimit: max too large, truncated to 1048576 [ 108.268564][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 108.533956][ T9726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2625'. [ 108.544013][ T9726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2625'. [ 108.787957][ T9751] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 108.908488][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2643'. [ 108.917620][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2643'. [ 108.926821][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2643'. [ 108.942185][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2643'. [ 108.951355][ T9765] netlink: 'syz.5.2643': attribute type 6 has an invalid length. [ 108.993784][ T9771] ip6t_rpfilter: unknown options [ 109.233516][ T9810] loop3: detected capacity change from 0 to 164 [ 109.247795][ T9810] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.260795][ T9814] loop6: detected capacity change from 0 to 512 [ 109.290601][ T9814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.303458][ T9814] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.348582][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.477319][ T9852] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iH [ 110.092225][ T9891] xt_hashlimit: size too large, truncated to 1048576 [ 110.315565][ T9904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9904 comm=syz.6.2700 [ 111.147476][ T9974] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.336301][ T9997] loop3: detected capacity change from 0 to 512 [ 111.346623][ T9997] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 111.371831][ T9997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 111.381596][ T9997] System zones: 1-12 [ 111.387878][ T9997] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2744: corrupted in-inode xattr: e_value size too large [ 111.407506][ T9997] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2744: couldn't read orphan inode 15 (err -117) [ 111.445303][ T9997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.554578][T10013] __nla_validate_parse: 4 callbacks suppressed [ 111.554637][T10013] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2751'. [ 111.589770][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.604700][T10015] smc: net device bond0 applied user defined pnetid SYZ2 [ 111.639082][T10019] loop6: detected capacity change from 0 to 512 [ 111.666242][T10019] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 111.690239][T10019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 111.709531][T10019] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.2756: corrupted in-inode xattr: e_value size too large [ 111.726644][T10019] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2756: couldn't read orphan inode 15 (err -117) [ 111.755076][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 111.755616][T10019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.822367][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 111.822383][ T29] audit: type=1326 audit(1748327749.378:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 111.852388][ T29] audit: type=1326 audit(1748327749.378:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 111.875953][ T29] audit: type=1326 audit(1748327749.378:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 111.899628][ T29] audit: type=1326 audit(1748327749.378:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 111.923266][ T29] audit: type=1326 audit(1748327749.388:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 111.958259][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.997688][T10055] loop3: detected capacity change from 0 to 512 [ 112.007407][ T29] audit: type=1326 audit(1748327749.525:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 112.014693][T10045] SELinux: syz.5.2765 (10045) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.031367][ T29] audit: type=1326 audit(1748327749.525:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10040 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce81ee969 code=0x7ffc0000 [ 112.109122][T10055] EXT4-fs (loop3): 1 orphan inode deleted [ 112.122095][T10055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.133117][ T5021] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.137598][T10055] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.144493][ T5021] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:49: Failed to release dquot type 1 [ 112.165049][ T29] audit: type=1400 audit(1748327749.745:2386): avc: denied { remount } for pid=10052 comm="syz.3.2771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.193137][T10068] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.2774'. [ 112.205880][T10070] loop5: detected capacity change from 0 to 512 [ 112.239519][T10055] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.264099][T10070] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 112.274995][T10070] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.292368][T10070] EXT4-fs (loop5): mount failed [ 112.302530][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.363509][T10095] loop6: detected capacity change from 0 to 512 [ 112.395573][T10095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.417099][T10095] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.432376][T10095] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.2786: corrupted inode contents [ 112.469512][T10095] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.2786: mark_inode_dirty error [ 112.526001][T10095] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.2786: corrupted inode contents [ 112.538420][T10095] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2786: mark_inode_dirty error [ 112.580657][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.641830][T10123] vhci_hcd: invalid port number 254 [ 112.647136][T10123] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 112.679531][T10125] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 112.773399][T10134] netlink: 'syz.6.2803': attribute type 21 has an invalid length. [ 112.804011][T10132] loop3: detected capacity change from 0 to 2048 [ 112.815576][T10136] Q6\bY4 speed is unknown, defaulting to 1000 [ 112.832625][T10132] loop3: p1 < > p4 [ 112.837565][T10132] loop3: p4 size 8388608 extends beyond EOD, truncated [ 113.331335][T10190] program syz.5.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.342452][T10183] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 113.378076][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2830'. [ 113.443795][T10203] xt_TCPMSS: Only works on TCP SYN packets [ 113.592388][T10224] rdma_op ffff888113fda980 conn xmit_rdma 0000000000000000 [ 113.628968][T10230] loop5: detected capacity change from 0 to 512 [ 113.652342][T10230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.666492][T10230] EXT4-fs (loop5): 1 truncate cleaned up [ 113.679243][T10230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.774977][T10246] netlink: 'syz.0.2852': attribute type 1 has an invalid length. [ 114.012932][T10261] netlink: '+}[@': attribute type 1 has an invalid length. [ 114.145147][ T4266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.310782][T10290] SELinux: Context system_u:object is not valid (left unmapped). [ 114.465277][T10311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2871'. [ 114.481821][T10311] batadv_slave_1: entered promiscuous mode [ 114.580806][T10324] sd 0:0:1:0: device reset [ 114.745693][T10346] Q6\bY4 speed is unknown, defaulting to 1000 [ 115.301663][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2889'. [ 115.525046][T10435] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 115.584369][T10441] loop6: detected capacity change from 0 to 512 [ 115.592044][T10439] Q6\bY4 speed is unknown, defaulting to 1000 [ 115.616155][T10441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.662599][T10441] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.873996][T10459] loop5: detected capacity change from 0 to 2048 [ 115.937799][T10459] EXT4-fs (loop5): failed to initialize system zone (-117) [ 115.959689][T10459] EXT4-fs (loop5): mount failed [ 116.012469][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 116.037082][T10473] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 116.046505][T10471] bridge_slave_1: left allmulticast mode [ 116.052233][T10471] bridge_slave_1: left promiscuous mode [ 116.058121][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.071139][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.105238][T10471] bond0: (slave bridge0): Releasing backup interface [ 116.235597][T10488] SET target dimension over the limit! [ 116.272869][T10481] Falling back ldisc for ttyS3. [ 116.364280][ T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 116.530117][ C1] dccp_invalid_packet: invalid packet type [ 116.536989][ C1] dccp_invalid_packet: invalid packet type [ 116.543075][ C1] dccp_invalid_packet: invalid packet type [ 116.552164][ C1] dccp_invalid_packet: invalid packet type [ 116.558768][ C1] dccp_invalid_packet: invalid packet type [ 116.564812][ C1] dccp_invalid_packet: invalid packet type [ 116.573068][ C1] dccp_invalid_packet: invalid packet type [ 116.579369][ C1] dccp_invalid_packet: invalid packet type [ 116.611797][ C1] dccp_invalid_packet: invalid packet type [ 116.617899][ C1] dccp_invalid_packet: invalid packet type [ 116.687796][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 116.687828][ T29] audit: type=1326 audit(1748327754.490:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.744834][ T29] audit: type=1326 audit(1748327754.511:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.768575][ T29] audit: type=1326 audit(1748327754.511:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.792235][ T29] audit: type=1326 audit(1748327754.511:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.815969][ T29] audit: type=1326 audit(1748327754.511:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.839533][ T29] audit: type=1326 audit(1748327754.511:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.863091][ T29] audit: type=1326 audit(1748327754.511:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.887170][ T29] audit: type=1326 audit(1748327754.511:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.911094][ T29] audit: type=1326 audit(1748327754.511:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 116.934670][ T29] audit: type=1326 audit(1748327754.511:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.2.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d19dfe969 code=0x7ffc0000 [ 117.063662][T10546] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 117.090009][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2945'. [ 117.126312][T10548] gretap0: entered promiscuous mode [ 117.142117][T10548] gretap0: left promiscuous mode [ 117.308348][T10551] SELinux: failed to load policy [ 117.613235][T10585] loop6: detected capacity change from 0 to 512 [ 117.622565][T10585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.655050][T10585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.675923][T10585] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.693297][T10585] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 117.723174][ T5419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.848699][T10603] netlink: 'syz.6.2967': attribute type 1 has an invalid length. [ 117.862341][T10603] bond1: entered promiscuous mode [ 117.867851][T10603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.887805][T10603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.895102][T10603] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.905362][T10603] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 117.917803][T10603] bond1: (slave vxcan3): making interface the new active one [ 117.925234][T10603] vxcan3: entered promiscuous mode [ 117.931731][T10603] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 118.177744][T10624] loop3: detected capacity change from 0 to 1024 [ 118.194048][T10624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.202952][T10624] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.214995][T10624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 118.233575][T10624] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2977: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.272141][T10624] EXT4-fs (loop3): Remounting filesystem read-only [ 118.303858][T10624] EXT4-fs (loop3): 1 orphan inode deleted [ 118.319966][T10624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.334530][T10624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.349033][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'. [ 118.366210][T10633] batadv1: left promiscuous mode [ 118.371426][T10633] bridge0: port 4(batadv1) entered disabled state [ 118.384550][T10633] dummy0: left allmulticast mode [ 118.394377][T10633] dummy0: left promiscuous mode [ 118.399459][T10624] loop3: detected capacity change from 0 to 512 [ 118.399581][T10633] bridge0: port 3(dummy0) entered disabled state [ 118.419734][T10633] bridge_slave_1: left allmulticast mode [ 118.425524][T10633] bridge_slave_1: left promiscuous mode [ 118.431349][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.450061][T10624] EXT4-fs (loop3): 1 orphan inode deleted [ 118.459882][T10624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.473680][T10633] bridge_slave_0: left allmulticast mode [ 118.479391][T10633] bridge_slave_0: left promiscuous mode [ 118.485121][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.486089][T10624] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.504385][ T5013] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:42: Failed to release dquot type 1 [ 118.529231][T10633] bond0: (slave bridge0): Releasing backup interface [ 118.540216][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.589368][T10653] netlink: 'syz.6.2989': attribute type 1 has an invalid length. [ 118.609861][T10653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.644643][T10653] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.653018][T10653] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.661276][T10653] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.669498][T10653] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.686973][T10653] bond2: (slave geneve2): making interface the new active one [ 118.697562][T10653] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 118.744013][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 118.812304][T10677] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 118.828624][T10677] SELinux: failed to load policy [ 118.923113][T10696] netlink: 'syz.2.3010': attribute type 1 has an invalid length. [ 118.973001][T10696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.002279][T10707] bond2: (slave geneve2): making interface the new active one [ 119.011713][T10707] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 119.142914][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 119.421339][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'. [ 119.430310][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'. [ 119.451153][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'. [ 119.497898][T10762] loop5: detected capacity change from 0 to 8192 [ 119.597567][T10762] ================================================================== [ 119.605732][T10762] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 119.612917][T10762] [ 119.615260][T10762] write to 0xffff88811df0980e of 2 bytes by task 10780 on cpu 0: [ 119.623011][T10762] fat16_ent_put+0x28/0x60 [ 119.627494][T10762] fat_alloc_clusters+0x4ce/0xa80 [ 119.632592][T10762] fat_get_block+0x258/0x5e0 [ 119.637211][T10762] __block_write_begin_int+0x3fd/0xf90 [ 119.642702][T10762] cont_write_begin+0x5fc/0x970 [ 119.647581][T10762] fat_write_begin+0x4f/0xe0 [ 119.652191][T10762] generic_perform_write+0x181/0x490 [ 119.657509][T10762] __generic_file_write_iter+0x9e/0x120 [ 119.663087][T10762] generic_file_write_iter+0x8d/0x2f0 [ 119.668488][T10762] vfs_write+0x4a0/0x8e0 [ 119.672757][T10762] ksys_write+0xda/0x1a0 [ 119.677026][T10762] __x64_sys_write+0x40/0x50 [ 119.681644][T10762] x64_sys_call+0x2cdd/0x2fb0 [ 119.686344][T10762] do_syscall_64+0xd0/0x1b0 [ 119.690866][T10762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.696776][T10762] [ 119.699107][T10762] read to 0xffff88811df09800 of 512 bytes by task 10762 on cpu 1: [ 119.706929][T10762] fat_mirror_bhs+0x1df/0x320 [ 119.711639][T10762] fat_alloc_clusters+0x98b/0xa80 [ 119.716709][T10762] fat_get_block+0x258/0x5e0 [ 119.721318][T10762] __block_write_begin_int+0x3fd/0xf90 [ 119.726804][T10762] cont_write_begin+0x5fc/0x970 [ 119.731681][T10762] fat_write_begin+0x4f/0xe0 [ 119.736288][T10762] cont_write_begin+0x1ad/0x970 [ 119.741165][T10762] fat_write_begin+0x4f/0xe0 [ 119.745777][T10762] generic_perform_write+0x181/0x490 [ 119.751094][T10762] __generic_file_write_iter+0x9e/0x120 [ 119.756669][T10762] generic_file_write_iter+0x8d/0x2f0 [ 119.762097][T10762] do_iter_readv_writev+0x3eb/0x4b0 [ 119.767325][T10762] vfs_writev+0x2c9/0x870 [ 119.771674][T10762] __se_sys_pwritev2+0xfc/0x1c0 [ 119.776642][T10762] __x64_sys_pwritev2+0x67/0x80 [ 119.781523][T10762] x64_sys_call+0x1cea/0x2fb0 [ 119.786219][T10762] do_syscall_64+0xd0/0x1b0 [ 119.790764][T10762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.796710][T10762] [ 119.799043][T10762] Reported by Kernel Concurrency Sanitizer on: [ 119.805226][T10762] CPU: 1 UID: 0 PID: 10762 Comm: syz.5.3040 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 119.817400][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.827537][T10762] ==================================================================