last executing test programs: 1.078094387s ago: executing program 3 (id=4715): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0xa, 0x4, @broadcast}}, 0xffff, 0x7}, 0x90) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.017969462s ago: executing program 3 (id=4721): r0 = timerfd_create(0x1, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000280)) 973.443277ms ago: executing program 3 (id=4725): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) 930.505721ms ago: executing program 3 (id=4729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) 887.406385ms ago: executing program 3 (id=4731): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x5e5b) shutdown(r0, 0x0) 436.737338ms ago: executing program 2 (id=4759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d33f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) 354.024036ms ago: executing program 2 (id=4765): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) 310.23253ms ago: executing program 4 (id=4769): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') getdents(r0, &(0x7f0000000500)=""/201, 0xc9) 293.119102ms ago: executing program 2 (id=4771): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 268.682904ms ago: executing program 1 (id=4773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) 261.946195ms ago: executing program 4 (id=4774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 260.772345ms ago: executing program 2 (id=4775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 232.689547ms ago: executing program 0 (id=4776): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 232.193378ms ago: executing program 4 (id=4777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000700000008000a0004000100080017"], 0x3c}}, 0x0) 221.091429ms ago: executing program 1 (id=4778): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 183.157482ms ago: executing program 4 (id=4779): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 182.664342ms ago: executing program 2 (id=4780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000010000000900faec3c000380140002007663616e30000000000000000000000008000300000000000800010001000000140006"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 182.242702ms ago: executing program 1 (id=4781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "14"}]}], {0x14}}, 0x74}}, 0x0) 127.829597ms ago: executing program 0 (id=4782): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x8) 127.529657ms ago: executing program 4 (id=4783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xe, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 127.157617ms ago: executing program 0 (id=4784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x3}, @sack={0x5, 0x12, [0x4800, 0x62, 0x5, 0x9]}]}}}}}}}, 0x0) 126.830797ms ago: executing program 1 (id=4785): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="03040000b50000000100feff0000feff"], 0xc8) 126.555248ms ago: executing program 2 (id=4786): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000740)={[{@delalloc}, {@nolazytime}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb, 0x5}}, 0x0) 121.705278ms ago: executing program 1 (id=4787): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) 104.68657ms ago: executing program 0 (id=4788): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) 59.855704ms ago: executing program 4 (id=4789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x8f}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 59.546794ms ago: executing program 0 (id=4790): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 45.407825ms ago: executing program 1 (id=4791): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$msr(r0, 0x0, 0x0) 13.086108ms ago: executing program 3 (id=4792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x7f, 0x7}, &(0x7f0000000180), 0x0) 0s ago: executing program 0 (id=4793): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): t=0 ip=0x7efc819df749 code=0x7ffc0000 [ 38.236520][ T29] audit: type=1326 audit(1766457150.909:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 38.332439][ T29] audit: type=1326 audit(1766457151.009:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.2.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf2bff749 code=0x0 [ 38.391210][ T5185] __nla_validate_parse: 13 callbacks suppressed [ 38.391226][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 38.406308][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 38.422696][ T29] audit: type=1400 audit(1766457151.129:286): avc: denied { name_bind } for pid=5182 comm="syz.4.804" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.520251][ T5206] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 38.535566][ T5207] erspan1: entered promiscuous mode [ 38.615656][ T5225] bridge_slave_0: left allmulticast mode [ 38.621463][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.654930][ T5225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 38.721686][ T29] audit: type=1400 audit(1766457151.469:287): avc: denied { ioctl } for pid=5242 comm="syz.4.832" path="socket:[10159]" dev="sockfs" ino=10159 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.784675][ T5254] loop2: detected capacity change from 0 to 512 [ 38.794143][ T5254] EXT4-fs: Ignoring removed orlov option [ 38.799839][ T5254] EXT4-fs: Ignoring removed i_version option [ 38.800040][ T29] audit: type=1400 audit(1766457151.509:288): avc: denied { execute } for pid=5248 comm="syz.0.838" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.842709][ T5254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.890813][ T5274] 9p: Bad value for 'rfdno' [ 38.896744][ T5254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.929224][ T5254] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.929905][ T5284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.849'. [ 38.948627][ T5284] netlink: 43 bytes leftover after parsing attributes in process `syz.3.849'. [ 38.954129][ T5254] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.835: corrupted inode contents [ 38.957583][ T5284] netlink: 'syz.3.849': attribute type 5 has an invalid length. [ 38.970098][ T5254] EXT4-fs (loop2): Remounting filesystem read-only [ 38.977081][ T5284] netlink: 43 bytes leftover after parsing attributes in process `syz.3.849'. [ 39.012325][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.055921][ T5290] netlink: 'syz.4.855': attribute type 30 has an invalid length. [ 39.183542][ T5322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 39.239931][ T5327] mmap: syz.0.871 (5327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.326537][ T5343] loop1: detected capacity change from 0 to 1024 [ 39.340597][ T5343] EXT4-fs: Ignoring removed orlov option [ 39.346279][ T5343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.391570][ T5343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.418281][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.437622][ T5366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.889'. [ 39.450409][ T5363] SELinux: policydb version 0 does not match my version range 15-35 [ 39.483320][ T5363] SELinux: failed to load policy [ 39.561937][ T5386] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 39.601863][ T5395] Option ' ' to dns_resolver key: bad/missing value [ 39.936238][ T5469] xt_connbytes: Forcing CT accounting to be enabled [ 39.978357][ T5469] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.009048][ T5484] tmpfs: Bad value for 'mpol' [ 40.044429][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 40.078169][ T5491] bond1: (slave sit0): Device is not bonding slave [ 40.084842][ T5491] bond1: option active_slave: invalid value (sit0) [ 40.093596][ T5491] bond1 (unregistering): Released all slaves [ 40.103084][ T5498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.955'. [ 40.147271][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 40.221209][ T5520] netlink: 'syz.2.966': attribute type 3 has an invalid length. [ 40.438478][ T5576] netlink: 'syz.3.994': attribute type 21 has an invalid length. [ 40.448522][ T5575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.534981][ T5590] netlink: 'syz.4.1000': attribute type 5 has an invalid length. [ 40.722857][ T5622] loop3: detected capacity change from 0 to 1764 [ 40.830535][ T5646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.980522][ T5677] netlink: 'syz.3.1041': attribute type 28 has an invalid length. [ 40.988405][ T5677] netlink: 'syz.3.1041': attribute type 3 has an invalid length. [ 41.051546][ T5692] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1051' sets config #0 [ 41.264350][ T5732] autofs4:pid:5732:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.252), cmd(0xc0189375) [ 41.277707][ T5732] autofs4:pid:5732:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 41.367957][ T5749] loop4: detected capacity change from 0 to 512 [ 41.374403][ T5752] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 41.399388][ T5749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.434487][ T5760] bond1: option ad_select: invalid value (4) [ 41.451433][ T5760] bond1 (unregistering): Released all slaves [ 41.458828][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.471761][ T5749] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.496564][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.508782][ T5771] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 41.535127][ T5775] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 41.789426][ T5812] binfmt_misc: register: failed to install interpreter file ./file0 [ 42.043931][ T5869] x_tables: duplicate underflow at hook 2 [ 42.133469][ T5888] netlink: 'syz.0.1146': attribute type 17 has an invalid length. [ 42.141406][ T5888] netlink: 'syz.0.1146': attribute type 16 has an invalid length. [ 42.268169][ T5907] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 42.286576][ T5907] bond1 (unregistering): Released all slaves [ 42.403326][ T5935] loop2: detected capacity change from 0 to 736 [ 42.414913][ T5941] loop3: detected capacity change from 0 to 512 [ 42.445989][ T5941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.480159][ T5941] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.524132][ T5941] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1168: Failed to acquire dquot type 0 [ 42.545341][ T5962] loop2: detected capacity change from 0 to 128 [ 42.553246][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.605109][ T5962] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 42.612737][ T5962] FAT-fs (loop2): Filesystem has been set read-only [ 42.628329][ T5974] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 42.776073][ T6000] loop1: detected capacity change from 0 to 512 [ 42.783329][ T6000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.805056][ T6000] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1199: bad orphan inode 16 [ 42.816735][ T6000] ext4_test_bit(bit=15, block=4) = 0 [ 42.822137][ T6000] EXT4-fs (loop1): 1 orphan inode deleted [ 42.828715][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.862120][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.905010][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.939855][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.950147][ T6017] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 43.152521][ T6061] loop1: detected capacity change from 0 to 512 [ 43.157133][ T6062] IPv6: sit1: Disabled Multicast RS [ 43.160159][ T6061] EXT4-fs: inline encryption not supported [ 43.169821][ T6061] EXT4-fs: Ignoring removed i_version option [ 43.210776][ T6061] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1239: inode has both inline data and extents flags [ 43.220893][ T6069] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.239200][ T6061] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1239: couldn't read orphan inode 15 (err -117) [ 43.262644][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.295255][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.478187][ T6109] No such timeout policy "syz1" [ 43.566643][ T6125] usb usb7: usbfs: process 6125 (syz.3.1261) did not claim interface 0 before use [ 43.567296][ T6126] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 43.706605][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 43.706620][ T29] audit: type=1326 audit(1766457156.449:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2bff749 code=0x7ffc0000 [ 43.752626][ T29] audit: type=1326 audit(1766457156.479:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7faaf2bff749 code=0x7ffc0000 [ 43.776268][ T29] audit: type=1326 audit(1766457156.479:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2bff749 code=0x7ffc0000 [ 43.799607][ T29] audit: type=1326 audit(1766457156.479:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2bff749 code=0x7ffc0000 [ 44.135506][ T6194] loop0: detected capacity change from 0 to 1024 [ 44.172221][ T6194] EXT4-fs: Ignoring removed orlov option [ 44.177959][ T6194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.283319][ T6194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.300254][ T6220] __nla_validate_parse: 15 callbacks suppressed [ 44.300268][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1305'. [ 44.329656][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.428447][ T6239] validate_nla: 6 callbacks suppressed [ 44.428463][ T6239] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 44.466315][ T6244] tmpfs: Bad value for 'mpol' [ 44.514409][ T6250] raw_sendmsg: syz.4.1319 forgot to set AF_INET. Fix it! [ 44.534006][ T6252] loop1: detected capacity change from 0 to 764 [ 44.545276][ T6248] loop2: detected capacity change from 0 to 1024 [ 44.570891][ T6252] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 44.579258][ T6248] EXT4-fs: Ignoring removed orlov option [ 44.584990][ T6248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.612627][ T29] audit: type=1326 audit(1766457157.359:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.0.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cd299f749 code=0x0 [ 44.640379][ T6252] Symlink component flag not implemented [ 44.651912][ T6248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.673041][ T6252] Symlink component flag not implemented (7) [ 44.695025][ T29] audit: type=1400 audit(1766457157.439:336): avc: denied { read write } for pid=6262 comm="syz.3.1325" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.719334][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.727750][ T29] audit: type=1400 audit(1766457157.439:337): avc: denied { open } for pid=6262 comm="syz.3.1325" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.727778][ T29] audit: type=1400 audit(1766457157.439:338): avc: denied { ioctl } for pid=6262 comm="syz.3.1325" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.777357][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.785148][ T29] audit: type=1400 audit(1766457157.519:339): avc: denied { write } for pid=6266 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 44.800200][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.896713][ T6285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 44.940879][ T6292] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.970703][ T6294] xt_limit: Overflow, try lower: 167772/2147483648 [ 45.068584][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1347'. [ 45.092444][ T6316] netlink: 'syz.0.1350': attribute type 21 has an invalid length. [ 45.095826][ T6315] tmpfs: Bad value for 'mpol' [ 45.102531][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 45.134825][ T29] audit: type=1400 audit(1766457157.879:340): avc: denied { setopt } for pid=6319 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.232333][ T6336] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 45.234850][ T6337] tmpfs: Bad value for 'mpol' [ 45.450426][ T6377] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1382'. [ 45.496986][ T6382] usb usb1: usbfs: process 6382 (syz.3.1383) did not claim interface 0 before use [ 45.512632][ T6388] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 45.613200][ T6404] ip6gre3: entered promiscuous mode [ 45.635652][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1397'. [ 45.670743][ T6416] xt_TCPMSS: Only works on TCP SYN packets [ 45.730567][ T6422] usb usb8: check_ctrlrecip: process 6422 (syz.1.1403) requesting ep 01 but needs 81 [ 45.740098][ T6422] usb usb8: usbfs: process 6422 (syz.1.1403) did not claim interface 0 before use [ 45.758499][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1408'. [ 45.768451][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1406'. [ 45.831018][ T6438] loop2: detected capacity change from 0 to 1024 [ 45.854246][ T6438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.910245][ T6438] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1410: missing EA_INODE flag [ 45.938480][ T6438] EXT4-fs (loop2): Remounting filesystem read-only [ 45.952945][ T6438] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.056124][ T6480] netlink: 'syz.4.1431': attribute type 21 has an invalid length. [ 46.064077][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 46.073460][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.113874][ T6483] bond1: entered promiscuous mode [ 46.118948][ T6483] bond1: entered allmulticast mode [ 46.134312][ T6483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.261640][ T6513] ipvlan1: entered promiscuous mode [ 46.266862][ T6513] ipvlan1: entered allmulticast mode [ 46.272318][ T6513] veth0_vlan: entered allmulticast mode [ 46.342986][ T6524] netlink: 'syz.0.1452': attribute type 2 has an invalid length. [ 46.466193][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 46.481108][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 46.546843][ T6563] netlink: 'syz.0.1471': attribute type 19 has an invalid length. [ 46.596478][ T6573] loop1: detected capacity change from 0 to 128 [ 46.684166][ T6591] ipt_REJECT: TCP_RESET invalid for non-tcp [ 46.724574][ T6597] bond1: entered allmulticast mode [ 46.754901][ T6604] x_tables: duplicate underflow at hook 4 [ 46.951388][ T6644] loop2: detected capacity change from 0 to 1024 [ 46.958141][ T6644] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 46.990230][ T6647] loop3: detected capacity change from 0 to 2048 [ 47.045717][ T6647] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.057569][ T6647] EXT4-fs (loop3): mount failed [ 47.180412][ T6683] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 47.191499][ T6673] bond1 (unregistering): Released all slaves [ 47.216099][ T6691] netlink: 'syz.4.1533': attribute type 3 has an invalid length. [ 47.357675][ T6703] bridge_slave_0: left allmulticast mode [ 47.363434][ T6703] bridge_slave_0: left promiscuous mode [ 47.369272][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.383182][ T6703] bridge_slave_1: left allmulticast mode [ 47.388852][ T6703] bridge_slave_1: left promiscuous mode [ 47.394531][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.406086][ T6703] bond0: (slave bond_slave_0): Releasing backup interface [ 47.427720][ T6724] xt_TCPMSS: Only works on TCP SYN packets [ 47.447446][ T6703] bond0: (slave bond_slave_1): Releasing backup interface [ 47.472682][ T6703] team0: Port device team_slave_0 removed [ 47.495110][ T6703] team0: Port device team_slave_1 removed [ 47.506895][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.514554][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.523413][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.530876][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.540629][ T6703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.808380][ T6783] loop0: detected capacity change from 0 to 128 [ 47.828225][ T6783] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 47.835846][ T6783] FAT-fs (loop0): Filesystem has been set read-only [ 47.902512][ T6796] netlink: 'syz.3.1583': attribute type 21 has an invalid length. [ 47.993379][ T6817] loop0: detected capacity change from 0 to 512 [ 48.022827][ T6822] loop4: detected capacity change from 0 to 736 [ 48.033480][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.075903][ T6817] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.111068][ T6817] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1593: Failed to acquire dquot type 0 [ 48.140434][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.194686][ T6847] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 48.308546][ T6868] loop4: detected capacity change from 0 to 512 [ 48.339335][ T6868] EXT4-fs: Ignoring removed orlov option [ 48.345070][ T6868] EXT4-fs: Ignoring removed i_version option [ 48.369266][ T6868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.434605][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.467491][ T6868] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.510874][ T6868] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.1615: corrupted inode contents [ 48.523702][ T6868] EXT4-fs (loop4): Remounting filesystem read-only [ 48.548823][ T6910] tmpfs: Bad value for 'mpol' [ 48.558797][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.607532][ T6912] xt_l2tp: unknown flags: 17 [ 48.627476][ T6924] IPv6: sit1: Disabled Multicast RS [ 48.782418][ T6954] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 49.210144][ T7034] usb usb7: usbfs: process 7034 (syz.2.1708) did not claim interface 0 before use [ 49.259269][ T7043] lo: entered promiscuous mode [ 49.276079][ T7043] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 49.288486][ T7046] dummy0: entered promiscuous mode [ 49.298932][ T7046] bridge0: port 3(dummy0) entered blocking state [ 49.305384][ T7046] bridge0: port 3(dummy0) entered disabled state [ 49.326001][ T7046] dummy0: entered allmulticast mode [ 49.340189][ T7046] bridge0: port 3(dummy0) entered blocking state [ 49.346647][ T7046] bridge0: port 3(dummy0) entered forwarding state [ 49.360680][ T7048] macvtap0: refused to change device tx_queue_len [ 49.454200][ T7070] veth2: entered allmulticast mode [ 49.484428][ T7079] validate_nla: 3 callbacks suppressed [ 49.484441][ T7079] netlink: 'syz.4.1721': attribute type 27 has an invalid length. [ 49.599841][ T7098] __nla_validate_parse: 15 callbacks suppressed [ 49.599855][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'. [ 49.615165][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 49.670304][ T7113] SET target dimension over the limit! [ 49.732267][ T7126] netlink: 'syz.1.1745': attribute type 3 has an invalid length. [ 49.740696][ T7124] netlink: 'syz.4.1742': attribute type 21 has an invalid length. [ 49.750845][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 49.759874][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 49.768804][ T7129] netlink: 'syz.2.1744': attribute type 6 has an invalid length. [ 49.868713][ T7152] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 49.919631][ T7162] syz.3.1760 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.974503][ T7172] loop3: detected capacity change from 0 to 1024 [ 49.991535][ T7172] EXT4-fs: inline encryption not supported [ 49.997409][ T7172] EXT4-fs: Ignoring removed orlov option [ 50.003156][ T7172] EXT4-fs: Ignoring removed oldalloc option [ 50.013413][ T7172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.035521][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 50.035651][ T29] audit: type=1326 audit(1766457163.782:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 50.067426][ T7172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.089072][ T29] audit: type=1326 audit(1766457163.812:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 50.112492][ T29] audit: type=1326 audit(1766457163.812:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 50.136011][ T29] audit: type=1326 audit(1766457163.812:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 50.144373][ T7172] EXT4-fs error (device loop3): ext4_xattr_set_entry:1669: inode #13: comm syz.3.1768: corrupted xattr entries [ 50.159694][ T29] audit: type=1326 audit(1766457163.812:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 50.174074][ T7190] netlink: 'syz.2.1777': attribute type 7 has an invalid length. [ 50.202281][ T7190] netlink: 'syz.2.1777': attribute type 8 has an invalid length. [ 50.236116][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 50.259420][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'. [ 50.268534][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'. [ 50.287139][ T29] audit: type=1400 audit(1766457164.012:361): avc: denied { append } for pid=7201 comm="syz.1.1782" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.345174][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.388069][ T7216] bridge1: entered allmulticast mode [ 50.505021][ T7242] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 50.512952][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 50.538123][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 50.540547][ T7248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 50.556373][ T7248] unsupported nlmsg_type 40 [ 50.567176][ T7252] netlink: 'syz.3.1806': attribute type 62 has an invalid length. [ 50.619365][ T7261] ipvlan1: entered promiscuous mode [ 50.624666][ T7261] ipvlan1: entered allmulticast mode [ 50.629980][ T7261] veth0_vlan: entered allmulticast mode [ 50.645267][ T803] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.720467][ T7276] usb usb8: check_ctrlrecip: process 7276 (syz.4.1818) requesting ep 01 but needs 81 [ 50.727647][ T7285] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 50.730061][ T7276] usb usb8: usbfs: process 7276 (syz.4.1818) did not claim interface 0 before use [ 50.801369][ T7294] loop3: detected capacity change from 0 to 764 [ 50.821223][ T7296] bond1: entered promiscuous mode [ 50.826283][ T7296] bond1: entered allmulticast mode [ 50.832929][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.875950][ T7294] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.910684][ T7294] Symlink component flag not implemented [ 50.916435][ T7294] Symlink component flag not implemented (7) [ 50.920201][ T7312] ip6gre1: entered promiscuous mode [ 50.960330][ T7323] ipt_REJECT: TCP_RESET invalid for non-tcp [ 51.075208][ T7345] loop0: detected capacity change from 0 to 764 [ 51.094377][ T7345] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.104584][ T7349] loop4: detected capacity change from 0 to 512 [ 51.132765][ T7349] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 51.166719][ T7345] Symlink component flag not implemented [ 51.176866][ T7345] Symlink component flag not implemented (7) [ 51.190175][ T7349] EXT4-fs (loop4): Remounting filesystem read-only [ 51.208280][ T7360] ip6gre1: entered promiscuous mode [ 51.214073][ T7349] EXT4-fs (loop4): 1 truncate cleaned up [ 51.239994][ T7349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.256429][ T29] audit: type=1400 audit(1766457165.002:362): avc: denied { remount } for pid=7348 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.278258][ T7349] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 51.316075][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.434716][ T7396] loop4: detected capacity change from 0 to 764 [ 51.447407][ T7396] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.474090][ T7396] Symlink component flag not implemented [ 51.492479][ T7396] Symlink component flag not implemented (7) [ 51.577853][ T29] audit: type=1400 audit(1766457165.322:363): avc: denied { write } for pid=7411 comm="syz.4.1881" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.602349][ T7413] program syz.4.1881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.699812][ T7431] bridge_slave_0: entered promiscuous mode [ 51.716808][ T7431] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 51.736739][ T7434] loop2: detected capacity change from 0 to 764 [ 51.758097][ T7434] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.802307][ T7434] Symlink component flag not implemented [ 51.808056][ T7434] Symlink component flag not implemented (7) [ 51.816806][ T7446] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.965623][ T29] audit: type=1326 audit(1766457165.712:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd299f749 code=0x7ffc0000 [ 52.037298][ T29] audit: type=1326 audit(1766457165.712:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd299f749 code=0x7ffc0000 [ 52.059398][ T7493] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 52.168611][ T7505] dummy0: left allmulticast mode [ 52.184274][ T7505] bridge0: port 3(dummy0) entered disabled state [ 52.208443][ T7505] bridge_slave_0: left allmulticast mode [ 52.214197][ T7505] bridge_slave_0: left promiscuous mode [ 52.220019][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.235572][ T7505] bridge_slave_1: left allmulticast mode [ 52.241290][ T7505] bridge_slave_1: left promiscuous mode [ 52.247125][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.272908][ T7505] bond0: (slave bond_slave_0): Releasing backup interface [ 52.309065][ T7505] bond0: (slave bond_slave_1): Releasing backup interface [ 52.337738][ T7505] team0: Port device team_slave_0 removed [ 52.367590][ T7505] team0: Port device team_slave_1 removed [ 52.382032][ T7557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.391969][ T7505] bond0: (slave batadv_slave_0): Releasing backup interface [ 52.416133][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.423581][ T7505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.431575][ T7565] loop2: detected capacity change from 0 to 512 [ 52.448390][ T7505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.473219][ T7565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.499710][ T7565] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.504892][ T7572] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 52.521829][ T7572] bond1 (unregistering): Released all slaves [ 52.535922][ T7565] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1947: Failed to acquire dquot type 0 [ 52.592451][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.634393][ T7657] loop0: detected capacity change from 0 to 736 [ 52.845293][ T7711] xfrm0: entered promiscuous mode [ 52.850480][ T7711] xfrm0: entered allmulticast mode [ 52.919432][ T7719] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 52.954197][ T7719] bond1 (unregistering): Released all slaves [ 53.153714][ T7844] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 53.172166][ T7843] ieee802154 phy1 wpan1: encryption failed: -22 [ 53.194612][ T7847] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 53.219879][ T7847] bond2 (unregistering): Released all slaves [ 53.241208][ T7909] loop2: detected capacity change from 0 to 1024 [ 53.248642][ T7909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.259951][ T7909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 53.282872][ T7909] System zones: 0-1, 3-36 [ 53.288746][ T7909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.354173][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.657743][ T8035] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.678268][ T8027] vhci_hcd vhci_hcd.3: invalid port number 60 [ 53.684426][ T8027] vhci_hcd vhci_hcd.3: invalid port number 60 [ 53.857664][ T8079] bridge_slave_1: left allmulticast mode [ 53.863402][ T8079] bridge_slave_1: left promiscuous mode [ 53.869090][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.888954][ T8079] bond0: (slave bond_slave_0): Releasing backup interface [ 53.915725][ T8079] bond0: (slave bond_slave_1): Releasing backup interface [ 53.929291][ T8079] team0: Port device team_slave_0 removed [ 53.939764][ T8079] team0: Port device team_slave_1 removed [ 53.946902][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.954457][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.964327][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.971758][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.983125][ T8079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.167271][ T8146] SET target dimension over the limit! [ 54.253509][ T8171] loop2: detected capacity change from 0 to 164 [ 54.469973][ T8209] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 54.489340][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.507120][ T8209] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.514694][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.540555][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.552546][ T8209] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 54.567128][ T8209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.574186][ T8209] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2103: Inode bitmap for bg 0 marked uninitialized [ 54.581534][ T8226] validate_nla: 12 callbacks suppressed [ 54.581550][ T8226] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 54.612578][ T8209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.636541][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.699826][ T8246] SET target dimension over the limit! [ 54.730340][ T8257] netlink: 'syz.3.2120': attribute type 4 has an invalid length. [ 54.764095][ T8266] __nla_validate_parse: 16 callbacks suppressed [ 54.764137][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 54.779564][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 54.788853][ T8267] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 54.898763][ T8302] mmap: syz.3.2136 (8302): VmData 29081600 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 54.918424][ T8306] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 54.978445][ T8306] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.2138: iget: bad i_size value: 12154757448730 [ 54.996548][ T8328] xt_TCPMSS: Only works on TCP SYN packets [ 55.013394][ T8306] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2138: couldn't read orphan inode 13 (err -117) [ 55.026015][ T8306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.053412][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.147963][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2157'. [ 55.197586][ T8363] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 55.207914][ T8386] bond0: option xmit_hash_policy: invalid value (9) [ 55.359907][ T8425] geneve3: entered promiscuous mode [ 55.450206][ T8454] netlink: 'syz.0.2183': attribute type 46 has an invalid length. [ 55.516038][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 55.516051][ T29] audit: type=1400 audit(1766457169.262:405): avc: denied { bind } for pid=8468 comm="syz.4.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.520312][ T8470] bond2 (unregistering): Released all slaves [ 55.535954][ T8485] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 55.633435][ T29] audit: type=1400 audit(1766457169.382:406): avc: denied { shutdown } for pid=8563 comm="syz.3.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.670076][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 55.678949][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 55.786372][ T8595] xt_CT: No such helper "netbios-ns" [ 55.877932][ T8622] macsec0: entered promiscuous mode [ 55.883253][ T8622] macsec0: entered allmulticast mode [ 55.888540][ T8622] veth1_macvtap: entered allmulticast mode [ 55.894489][ T8623] set_capacity_and_notify: 2 callbacks suppressed [ 55.894563][ T8623] loop0: detected capacity change from 0 to 256 [ 55.925147][ T8623] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 55.964823][ T53] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 56.047014][ T8659] tc_dump_action: action bad kind [ 56.178303][ T8688] netlink: 'syz.0.2241': attribute type 21 has an invalid length. [ 56.235873][ T8699] netlink: 'syz.0.2245': attribute type 21 has an invalid length. [ 56.264978][ T8699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2245'. [ 56.380461][ T8733] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2256'. [ 56.443607][ T8745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.598348][ T29] audit: type=1400 audit(1766457170.342:407): avc: denied { setcurrent } for pid=8771 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.670350][ T8785] xt_cgroup: path and classid specified [ 56.699842][ T8790] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2276'. [ 56.760060][ T8804] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.798973][ T8812] netlink: 'syz.0.2284': attribute type 21 has an invalid length. [ 56.806889][ T8812] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 56.814861][ T8812] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2284'. [ 56.839454][ T29] audit: type=1400 audit(1766457170.582:408): avc: denied { setopt } for pid=8814 comm="syz.4.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.929872][ T29] audit: type=1400 audit(1766457170.622:409): avc: denied { audit_read } for pid=8824 comm="syz.2.2290" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.977175][ T8845] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2297'. [ 56.981279][ T29] audit: type=1400 audit(1766457170.712:410): avc: denied { bind } for pid=8839 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.067987][ T8863] netlink: 'syz.1.2304': attribute type 5 has an invalid length. [ 57.156206][ T8891] netlink: 'syz.3.2316': attribute type 2 has an invalid length. [ 57.289669][ T8926] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.301229][ T29] audit: type=1400 audit(1766457171.052:411): avc: denied { name_bind } for pid=8925 comm="syz.4.2328" src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 57.337925][ T29] audit: type=1400 audit(1766457171.052:412): avc: denied { view } for pid=8929 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.432095][ T8961] netlink: 'syz.0.2340': attribute type 2 has an invalid length. [ 57.517061][ T8979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.640230][ T8998] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 57.663975][ T9006] SELinux: failed to load policy [ 57.704118][ T9012] __vm_enough_memory: pid: 9012, comm: syz.4.2362, bytes: 4503599627366400 not enough memory for the allocation [ 57.716716][ T9010] dummy0: left promiscuous mode [ 57.725630][ T9010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.844434][ T29] audit: type=1400 audit(1766457171.582:413): avc: denied { write } for pid=9039 comm="syz.2.2372" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.867279][ T29] audit: type=1400 audit(1766457171.582:414): avc: denied { open } for pid=9039 comm="syz.2.2372" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.142446][ T9124] team0: Device dummy0 is up. Set it down before adding it as a team port [ 58.186871][ T9133] vhci_hcd vhci_hcd.4: default hub control req: c50a v0303 i0004 l0 [ 58.257959][ T9149] loop3: detected capacity change from 0 to 512 [ 58.300411][ T9149] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.318370][ T9149] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.323295][ T9167] xt_hashlimit: size too large, truncated to 1048576 [ 58.327368][ T9149] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2416: corrupted inode contents [ 58.343678][ T9149] EXT4-fs (loop3): Remounting filesystem read-only [ 58.350603][ T9149] EXT4-fs (loop3): 1 truncate cleaned up [ 58.356418][ T53] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.367010][ T53] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.386085][ T53] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.404470][ T9149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.428392][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.591861][ T9218] ip6t_rpfilter: unknown options [ 58.797042][ T9271] sctp: [Deprecated]: syz.2.2461 (pid 9271) Use of int in max_burst socket option. [ 58.797042][ T9271] Use struct sctp_assoc_value instead [ 58.797408][ T9268] openvswitch: netlink: Message has 5672 unknown bytes. [ 59.010040][ T9322] xt_ecn: cannot match TCP bits for non-tcp packets [ 59.083180][ T9339] bridge1: entered promiscuous mode [ 59.088447][ T9339] bridge1: entered allmulticast mode [ 59.095900][ T9345] ip6t_srh: unknown srh match flags FF3F [ 59.273629][ T9408] hsr_slave_0: left promiscuous mode [ 59.289960][ T9408] hsr_slave_1: left promiscuous mode [ 59.307316][ T9415] loop1: detected capacity change from 0 to 1024 [ 59.346669][ T9415] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 59.360874][ T9415] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.378504][ T9415] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.390004][ T9415] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.396591][ T9415] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.2505: Inode bitmap for bg 0 marked uninitialized [ 59.410029][ T9415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.474122][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.632031][ T9493] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.825799][ T9535] validate_nla: 7 callbacks suppressed [ 59.825824][ T9535] netlink: 'syz.2.2547': attribute type 13 has an invalid length. [ 59.930512][ T9535] bridge0: port 3(dummy0) entered disabled state [ 59.937062][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.944265][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.962043][ T9557] __nla_validate_parse: 20 callbacks suppressed [ 59.962057][ T9557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2555'. [ 60.068554][ T9571] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 60.080202][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.127413][ T9535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.253189][ T2322] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.279807][ T2322] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.292290][ T2322] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.321092][ T9603] geneve3: entered promiscuous mode [ 60.342068][ T2322] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.399764][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2576'. [ 60.436115][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2578'. [ 60.486662][ T9621] ip6tnl2: entered allmulticast mode [ 60.545292][ T9663] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 60.596569][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2591'. [ 60.668391][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'. [ 60.714200][ T9701] loop2: detected capacity change from 0 to 1764 [ 60.722791][ T9706] netlink: 'syz.4.2601': attribute type 21 has an invalid length. [ 60.829669][ T9726] xt_CT: No such helper "netbios-ns" [ 60.856465][ T9733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.963038][ T9769] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2618'. [ 61.055312][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 61.102312][ T9794] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2628'. [ 61.157127][ T9811] netlink: 'syz.2.2632': attribute type 10 has an invalid length. [ 61.170258][ T9814] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 61.191457][ T9811] ipvlan0: entered allmulticast mode [ 61.196776][ T9811] veth0_vlan: entered allmulticast mode [ 61.208718][ T9811] team0: Device ipvlan0 failed to register rx_handler [ 61.351140][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 61.351155][ T29] audit: type=1400 audit(1766457175.102:425): avc: denied { setopt } for pid=9861 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.391026][ T9869] netlink: 'syz.2.2655': attribute type 30 has an invalid length. [ 61.465106][ T9888] netlink: 'syz.2.2663': attribute type 5 has an invalid length. [ 61.472976][ T9888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2663'. [ 61.493518][ T29] audit: type=1326 audit(1766457175.232:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 61.516900][ T29] audit: type=1326 audit(1766457175.232:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 61.533778][ T9896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.540226][ T29] audit: type=1326 audit(1766457175.232:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 61.547390][ T9896] IPv6: NLM_F_CREATE should be set when creating new route [ 61.547400][ T9896] IPv6: NLM_F_CREATE should be set when creating new route [ 61.547409][ T9896] IPv6: NLM_F_CREATE should be set when creating new route [ 61.570774][ T29] audit: type=1326 audit(1766457175.232:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 61.615636][ T29] audit: type=1326 audit(1766457175.232:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 61.638943][ T29] audit: type=1400 audit(1766457175.242:431): avc: denied { connect } for pid=9889 comm="syz.4.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.720441][ T9922] SELinux: Context ›Y7»ôj [ 61.720441][ T9922] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 61.720441][ T9922] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 61.778513][ T9922] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 61.787065][ T9922] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 61.922063][ T9922] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 61.949334][ T9922] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI> is not valid (left unmapped). [ 61.972725][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 62.047218][ T9988] loop0: detected capacity change from 0 to 164 [ 62.054783][ T9988] rock: directory entry would overflow storage [ 62.061000][ T9988] rock: sig=0x4543, size=28, remaining=18 [ 62.144108][T10008] 9p: Bad value for 'rfdno' [ 62.265338][ T29] audit: type=1400 audit(1766457176.012:432): avc: denied { read } for pid=10043 comm="syz.2.2715" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.324253][T10061] netlink: 'syz.3.2721': attribute type 13 has an invalid length. [ 62.402509][T10072] x_tables: ip_tables: osf match: only valid for protocol 6 [ 62.505437][T10061] veth1_macvtap: left allmulticast mode [ 62.554294][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.584352][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.603188][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.631864][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.642887][ T29] audit: type=1326 audit(1766457176.392:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd299f749 code=0x7ffc0000 [ 62.815478][ T29] audit: type=1326 audit(1766457176.392:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.0.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd299f749 code=0x7ffc0000 [ 63.254725][T10194] bond2: Unable to set down delay as MII monitoring is disabled [ 63.281143][T10194] bond2 (unregistering): Released all slaves [ 63.410453][T10279] netlink: 'syz.1.2783': attribute type 13 has an invalid length. [ 63.654015][T10338] xt_l2tp: v2 doesn't support IP mode [ 63.668097][T10340] TCP: TCP_TX_DELAY enabled [ 63.749629][T10359] netlink: 'syz.0.2813': attribute type 17 has an invalid length. [ 63.770370][T10359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.881484][T10392] openvswitch: netlink: Message has 5672 unknown bytes. [ 63.977826][T10414] loop0: detected capacity change from 0 to 512 [ 63.985942][T10413] x_tables: unsorted underflow at hook 3 [ 64.000148][T10414] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.2835: inode #1792: comm syz.0.2835: iget: illegal inode # [ 64.044924][T10414] EXT4-fs (loop0): Remounting filesystem read-only [ 64.051515][T10414] EXT4-fs (loop0): no journal found [ 64.056705][T10414] EXT4-fs (loop0): can't get journal size [ 64.063089][T10414] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.073514][T10414] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 64.081712][T10414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.109474][T10414] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 64.151942][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.180249][T10437] loop3: detected capacity change from 0 to 8192 [ 64.188130][T10437] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.319581][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.328062][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.389217][T10500] loop0: detected capacity change from 0 to 4096 [ 64.398122][T10500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.460265][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.094078][T10684] loop1: detected capacity change from 0 to 128 [ 65.101351][T10679] loop3: detected capacity change from 0 to 2048 [ 65.121572][T10684] EXT4-fs: Ignoring removed nobh option [ 65.137370][T10684] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.153271][T10700] __nla_validate_parse: 18 callbacks suppressed [ 65.153296][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 65.169224][T10684] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.192362][ T3803] loop3: unable to read partition table [ 65.194678][T10700] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2925'. [ 65.207225][ T3803] loop3: partition table beyond EOD, truncated [ 65.228682][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.264517][T10679] loop3: unable to read partition table [ 65.270413][T10679] loop3: partition table beyond EOD, truncated [ 65.276775][T10679] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 65.314542][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 65.351678][ T3005] loop3: unable to read partition table [ 65.359580][ T3005] loop3: partition table beyond EOD, truncated [ 65.397582][T10739] loop3: detected capacity change from 0 to 512 [ 65.425658][T10746] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 65.436751][T10745] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.2941'. [ 65.451383][T10739] EXT4-fs (loop3): 1 truncate cleaned up [ 65.457555][T10739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.507476][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.591243][T10780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2950'. [ 65.673104][T10797] netlink: 'syz.0.2957': attribute type 5 has an invalid length. [ 65.681000][T10797] netlink: 'syz.0.2957': attribute type 4 has an invalid length. [ 65.688718][T10797] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 65.696520][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2957'. [ 65.717744][T10802] loop2: detected capacity change from 0 to 512 [ 65.737344][T10802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.754878][T10802] EXT4-fs (loop2): 1 truncate cleaned up [ 65.762282][T10802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.799400][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.833128][T10824] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 65.927871][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'. [ 65.963407][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 65.978969][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 66.043208][T10873] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2984'. [ 66.065508][T10882] loop2: detected capacity change from 0 to 512 [ 66.085420][T10882] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2985: invalid indirect mapped block 4294967295 (level 1) [ 66.102452][T10882] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2985: invalid indirect mapped block 4294967295 (level 1) [ 66.117053][T10882] EXT4-fs (loop2): 2 truncates cleaned up [ 66.125256][T10882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.151605][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.375783][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 66.375797][ T29] audit: type=1400 audit(1766457180.122:489): avc: denied { connect } for pid=10952 comm="syz.2.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.425956][ T29] audit: type=1400 audit(1766457180.152:490): avc: denied { read } for pid=10954 comm="syz.4.3012" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.450189][ T29] audit: type=1400 audit(1766457180.152:491): avc: denied { open } for pid=10954 comm="syz.4.3012" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.474824][ T29] audit: type=1400 audit(1766457180.152:492): avc: denied { ioctl } for pid=10954 comm="syz.4.3012" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.546564][ T29] audit: type=1400 audit(1766457180.292:493): avc: denied { write } for pid=10980 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.662424][ T29] audit: type=1400 audit(1766457180.412:494): avc: denied { map } for pid=10998 comm="syz.1.3027" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.686220][ T29] audit: type=1400 audit(1766457180.412:495): avc: denied { execute } for pid=10998 comm="syz.1.3027" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.718627][T10996] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.729691][T10996] EXT4-fs (loop2): 1 truncate cleaned up [ 66.736066][T10996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.762504][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.769808][ T29] audit: type=1400 audit(1766457180.462:496): avc: denied { ioctl } for pid=10998 comm="syz.1.3027" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.796910][ T29] audit: type=1400 audit(1766457180.502:497): avc: denied { remove_name } for pid=10995 comm="syz.2.3026" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.819571][ T29] audit: type=1400 audit(1766457180.502:498): avc: denied { rename } for pid=10995 comm="syz.2.3026" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.091584][T11070] tipc: Enabling of bearer rejected, failed to enable media [ 67.123328][T11078] set_capacity_and_notify: 2 callbacks suppressed [ 67.123344][T11078] loop2: detected capacity change from 0 to 1024 [ 67.203292][T11097] loop3: detected capacity change from 0 to 164 [ 67.210383][T11078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 67.220699][T11097] rock: directory entry would overflow storage [ 67.226862][T11097] rock: sig=0x4543, size=28, remaining=18 [ 67.240836][T11078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.290003][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.471492][T11153] loop4: detected capacity change from 0 to 128 [ 67.491671][T11153] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.527595][T11153] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.601870][T11181] loop3: detected capacity change from 0 to 128 [ 67.610409][T11182] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 67.642057][T11181] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.769612][T11215] loop3: detected capacity change from 0 to 512 [ 67.786791][T11215] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3100: invalid indirect mapped block 4294967295 (level 1) [ 67.827487][T11215] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3100: invalid indirect mapped block 4294967295 (level 1) [ 67.863902][T11215] EXT4-fs (loop3): 2 truncates cleaned up [ 67.866093][T11223] loop2: detected capacity change from 0 to 512 [ 67.879175][T11215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.892124][T11223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.904161][T11223] EXT4-fs (loop2): 1 truncate cleaned up [ 67.915258][T11223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.961685][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.971276][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.178652][T11277] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 68.356001][T11304] loop2: detected capacity change from 0 to 128 [ 68.530976][T11317] loop4: detected capacity change from 0 to 8192 [ 68.541830][T11317] syz.4.3132: attempt to access beyond end of device [ 68.541830][T11317] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 68.541855][T11317] Buffer I/O error on dev loop4, logical block 57847, async page read [ 68.734519][T11380] netlink: 'syz.1.3143': attribute type 1 has an invalid length. [ 68.959683][T11419] netlink: 'syz.0.3155': attribute type 21 has an invalid length. [ 68.959753][T11419] netlink: 'syz.0.3155': attribute type 1 has an invalid length. [ 69.050098][T11438] netlink: 'syz.0.3161': attribute type 1 has an invalid length. [ 69.177092][T11469] loop1: detected capacity change from 0 to 512 [ 69.196431][T11469] ------------[ cut here ]------------ [ 69.197072][T11477] xt_l2tp: v2 doesn't support IP mode [ 69.201951][T11469] EA inode 11 i_nlink=2 [ 69.201962][T11469] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.1.3173/11469 [ 69.222284][T11469] Modules linked in: [ 69.226206][T11469] CPU: 1 UID: 0 PID: 11469 Comm: syz.1.3173 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.236263][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.246398][T11469] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 69.253018][T11469] Code: 81 e2 9c ff 4c 8d 2d 3a f1 20 05 49 8d 7e 40 e8 81 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 95 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 8c ad ba 03 66 66 66 2e 0f 1f 84 [ 69.272705][T11469] RSP: 0018:ffffc90011e435a0 EFLAGS: 00010246 [ 69.278778][T11469] RAX: ffff88810aa03c10 RBX: ffff888107e2baf0 RCX: ffffffff81bb1c6b [ 69.286781][T11469] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d90 [ 69.294772][T11469] RBP: 000000000000000b R08: 0001888107e2baa3 R09: 0000000000000000 [ 69.302791][T11469] R10: ffffc90011e434d0 R11: 0001c90011e434d0 R12: ffff888107e2baa0 [ 69.310797][T11469] R13: ffffffff86dc0d90 R14: ffff888107e2ba58 R15: 0000000000000001 [ 69.318838][T11469] FS: 00007fbdabcbf6c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 69.327807][T11469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.334446][T11469] CR2: 0000000000000000 CR3: 0000000123d84000 CR4: 00000000003506f0 [ 69.342520][T11469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.350554][T11469] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 69.358529][T11469] Call Trace: [ 69.361843][T11469] [ 69.364773][T11469] ext4_xattr_set_entry+0x77f/0x1020 [ 69.370178][T11469] ext4_xattr_ibody_set+0x184/0x3c0 [ 69.375508][T11469] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 69.381396][T11469] __ext4_expand_extra_isize+0x246/0x280 [ 69.387040][T11469] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 69.392633][T11469] ext4_evict_inode+0x7c4/0xd40 [ 69.397494][T11469] ? __pfx_ext4_evict_inode+0x10/0x10 [ 69.402885][T11469] evict+0x2af/0x510 [ 69.406789][T11469] ? __dquot_initialize+0x146/0x7c0 [ 69.412525][T11469] iput+0x4bd/0x650 [ 69.416333][T11469] ext4_process_orphan+0x1a9/0x1c0 [ 69.421512][T11469] ext4_orphan_cleanup+0x6a8/0xa00 [ 69.426690][T11469] ext4_fill_super+0x3411/0x37a0 [ 69.431701][T11469] ? set_blocksize+0x1a8/0x310 [ 69.436528][T11469] ? sb_set_blocksize+0xfc/0x170 [ 69.441536][T11469] ? setup_bdev_super+0x30e/0x370 [ 69.446609][T11469] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.451981][T11469] get_tree_bdev_flags+0x291/0x300 [ 69.457230][T11469] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.462593][T11469] get_tree_bdev+0x1f/0x30 [ 69.467005][T11469] ext4_get_tree+0x1c/0x30 [ 69.471477][T11469] vfs_get_tree+0x57/0x1d0 [ 69.475890][T11469] do_new_mount+0x24d/0x6a0 [ 69.480410][T11469] path_mount+0x4ab/0xb80 [ 69.484736][T11469] ? user_path_at+0xbf/0x130 [ 69.489314][T11469] __se_sys_mount+0x28c/0x2e0 [ 69.494006][T11469] __x64_sys_mount+0x67/0x80 [ 69.498651][T11469] x64_sys_call+0x2cca/0x3000 [ 69.503415][T11469] do_syscall_64+0xca/0x2b0 [ 69.507938][T11469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.513846][T11469] RIP: 0033:0x7fbdad260eea [ 69.518336][T11469] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.537957][T11469] RSP: 002b:00007fbdabcbee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.547867][T11469] RAX: ffffffffffffffda RBX: 00007fbdabcbeef0 RCX: 00007fbdad260eea [ 69.555851][T11469] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fbdabcbeeb0 [ 69.563829][T11469] RBP: 0000200000000180 R08: 00007fbdabcbeef0 R09: 0000000000800718 [ 69.571808][T11469] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 69.579854][T11469] R13: 00007fbdabcbeeb0 R14: 000000000000046f R15: 0000200000000200 [ 69.587885][T11469] [ 69.591167][T11469] ---[ end trace 0000000000000000 ]--- [ 69.596948][T11469] EXT4-fs (loop1): 1 orphan inode deleted [ 69.617082][T11469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.695918][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.886671][T11575] loop1: detected capacity change from 0 to 512 [ 69.913055][T11575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.947494][T11575] ext4 filesystem being mounted at /644/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.017875][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.328018][T11632] Zero length message leads to an empty skb [ 70.459619][T11654] netlink: 'syz.2.3224': attribute type 29 has an invalid length. [ 70.488924][T11654] netlink: 'syz.2.3224': attribute type 29 has an invalid length. [ 70.661200][T11675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.734921][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.940871][T11756] EXT4-fs (loop1): 1 truncate cleaned up [ 70.955504][T11756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.022153][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.118444][T11791] __nla_validate_parse: 16 callbacks suppressed [ 71.118460][T11791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3269'. [ 71.311347][T11845] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3280'. [ 71.380366][T11857] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 71.420526][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 71.420541][ T29] audit: type=1400 audit(1766457185.172:574): avc: denied { watch } for pid=11858 comm="syz.2.3284" path="/670" dev="tmpfs" ino=3400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.786766][ T29] audit: type=1400 audit(1766457185.532:575): avc: denied { ioctl } for pid=11891 comm="syz.0.3297" path="/677/file0" dev="tmpfs" ino=3432 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.841885][ T29] audit: type=1400 audit(1766457185.592:576): avc: denied { create } for pid=11893 comm="syz.0.3298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 71.877230][T11897] tipc: Enabling not permitted [ 71.882819][T11897] tipc: Enabling of bearer rejected, failed to enable media [ 72.135974][T11946] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3317'. [ 72.148753][T11946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3317'. [ 72.288223][T11975] set_capacity_and_notify: 2 callbacks suppressed [ 72.288243][T11975] loop3: detected capacity change from 0 to 4096 [ 72.307797][T11975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.309735][ T29] audit: type=1400 audit(1766457186.052:577): avc: denied { execute } for pid=11977 comm="syz.0.3327" name="file0" dev="tmpfs" ino=3478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.353276][ T29] audit: type=1400 audit(1766457186.102:578): avc: denied { rename } for pid=11974 comm="syz.3.3336" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.384296][ T29] audit: type=1400 audit(1766457186.122:579): avc: denied { setattr } for pid=11974 comm="syz.3.3336" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.408861][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.418816][T11983] loop2: detected capacity change from 0 to 2048 [ 72.487150][ T29] audit: type=1400 audit(1766457186.232:580): avc: denied { mounton } for pid=11997 comm="syz.0.3334" path="/proc/1395/ns" dev="proc" ino=28097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.521286][T11983] loop2: unable to read partition table [ 72.528626][T11983] loop2: partition table beyond EOD, truncated [ 72.534900][T11983] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 72.567516][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'. [ 72.589408][ T3005] loop2: unable to read partition table [ 72.597443][ T3005] loop2: partition table beyond EOD, truncated [ 72.618223][ T29] audit: type=1400 audit(1766457186.362:581): avc: denied { write } for pid=12022 comm="syz.2.3341" path="socket:[27126]" dev="sockfs" ino=27126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.670097][T12016] loop3: detected capacity change from 0 to 128 [ 72.690952][T12034] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3344'. [ 72.698085][ T29] audit: type=1400 audit(1766457186.412:582): avc: denied { write } for pid=12025 comm="syz.0.3342" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.735680][T12016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.769799][T12044] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3347'. [ 72.779338][T12016] ext4 filesystem being mounted at /649/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.802369][T12046] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 72.817295][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.950581][ T29] audit: type=1326 audit(1766457186.702:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf2bff749 code=0x7ffc0000 [ 73.002435][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 73.224165][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'. [ 73.238252][T12133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.308355][T12144] loop1: detected capacity change from 0 to 1024 [ 73.355983][T12144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 73.382215][T12144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.464346][T12161] tipc: Enabling of bearer rejected, failed to enable media [ 73.491673][T12165] loop2: detected capacity change from 0 to 1024 [ 73.498690][T12165] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.505533][T12165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.520787][T12165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.540265][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.577446][T12172] netlink: 'syz.0.3391': attribute type 10 has an invalid length. [ 73.591420][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.700930][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.718406][T12206] lo: left promiscuous mode [ 73.739913][T12204] loop1: detected capacity change from 0 to 128 [ 73.769811][T12206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.777957][T12204] EXT4-fs: Ignoring removed nobh option [ 73.795435][T12206] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.810802][T12204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.825951][T12206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.842922][T12204] ext4 filesystem being mounted at /681/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.876606][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.914049][T12236] loop1: detected capacity change from 0 to 256 [ 73.938246][T12236] FAT-fs (loop1): Directory bread(block 1285) failed [ 73.976014][T12236] FAT-fs (loop1): Directory bread(block 1286) failed [ 74.007950][T12236] FAT-fs (loop1): Directory bread(block 1287) failed [ 74.015479][T12236] FAT-fs (loop1): Directory bread(block 1288) failed [ 74.032095][T12236] FAT-fs (loop1): Directory bread(block 1285) failed [ 74.049548][T12236] FAT-fs (loop1): Directory bread(block 1286) failed [ 74.073607][T12236] FAT-fs (loop1): Directory bread(block 1287) failed [ 74.085696][T12236] FAT-fs (loop1): Directory bread(block 1288) failed [ 74.098827][T12236] FAT-fs (loop1): Directory bread(block 1285) failed [ 74.105988][T12236] FAT-fs (loop1): Directory bread(block 1286) failed [ 74.162000][T12290] loop2: detected capacity change from 0 to 512 [ 74.170481][T12290] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.211911][T12290] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.3431: inode has both inline data and extents flags [ 74.239286][T12290] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3431: couldn't read orphan inode 17 (err -117) [ 74.270533][T12290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.357703][T12336] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 74.383548][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.524163][T12375] loop1: detected capacity change from 0 to 1024 [ 74.561794][T12375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.581450][T12375] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 74.608161][T12389] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 74.623753][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.740857][T12409] __vm_enough_memory: pid: 12409, comm: syz.2.3468, bytes: 21200309788672 not enough memory for the allocation [ 74.971156][T12473] netlink: 'syz.1.3492': attribute type 3 has an invalid length. [ 75.110154][T12505] loop1: detected capacity change from 0 to 128 [ 75.268300][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'. [ 75.396693][T12561] FAT-fs (loop1): Directory bread(block 32) failed [ 75.409878][T12561] FAT-fs (loop1): Directory bread(block 33) failed [ 75.429628][T12561] FAT-fs (loop1): Directory bread(block 34) failed [ 75.436221][T12561] FAT-fs (loop1): Directory bread(block 35) failed [ 75.451512][T12572] SELinux: failed to load policy [ 75.459721][T12561] FAT-fs (loop1): Directory bread(block 36) failed [ 75.466248][T12561] FAT-fs (loop1): Directory bread(block 37) failed [ 75.489968][T12561] FAT-fs (loop1): Directory bread(block 38) failed [ 75.496732][T12561] FAT-fs (loop1): Directory bread(block 39) failed [ 75.511084][T12579] EXT4-fs: Ignoring removed nobh option [ 75.539993][T12579] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.542353][T12561] FAT-fs (loop1): Directory bread(block 40) failed [ 75.559116][T12561] FAT-fs (loop1): Directory bread(block 41) failed [ 75.578800][T12579] ext4 filesystem being mounted at /677/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.603669][T12561] syz.1.3510: attempt to access beyond end of device [ 75.603669][T12561] loop1: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 75.617483][T12561] Buffer I/O error on dev loop1, logical block 1027, async page read [ 75.629327][T12561] syz.1.3510: attempt to access beyond end of device [ 75.629327][T12561] loop1: rw=8388608, sector=4600, nr_sectors = 4 limit=128 [ 75.630561][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.643129][T12561] Buffer I/O error on dev loop1, logical block 1150, async page read [ 75.660511][T12561] syz.1.3510: attempt to access beyond end of device [ 75.660511][T12561] loop1: rw=8388608, sector=4108, nr_sectors = 4 limit=128 [ 75.674290][T12561] Buffer I/O error on dev loop1, logical block 1027, async page read [ 75.682822][T12561] syz.1.3510: attempt to access beyond end of device [ 75.682822][T12561] loop1: rw=8388608, sector=4600, nr_sectors = 4 limit=128 [ 75.696586][T12561] Buffer I/O error on dev loop1, logical block 1150, async page read [ 75.828816][ T3374] IPVS: starting estimator thread 0... [ 75.925068][T12649] atomic_op ffff88813ec5b528 conn xmit_atomic 0000000000000000 [ 75.933235][T12632] IPVS: using max 2928 ests per chain, 146400 per kthread [ 76.156820][T12681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.156882][T12681] ext4 filesystem being mounted at /690/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.194266][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.301115][T12712] tipc: Started in network mode [ 76.306057][T12712] tipc: Node identity , cluster identity 4711 [ 76.306069][T12712] tipc: Failed to obtain node identity [ 76.306075][T12712] tipc: Enabling of bearer rejected, failed to enable media [ 76.446260][T12732] EXT4-fs: Ignoring removed orlov option [ 76.452386][T12732] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 76.480333][T12732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.494620][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.551625][T12745] __nla_validate_parse: 1 callbacks suppressed [ 76.551635][T12745] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3571'. [ 76.611968][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3574'. [ 76.612372][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3574'. [ 76.800884][T12785] EXT4-fs (loop4): 1 orphan inode deleted [ 76.829340][T12785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.894678][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.974039][T12828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.985307][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 76.985322][ T29] audit: type=1400 audit(1766457190.732:615): avc: denied { write } for pid=12826 comm="syz.4.3597" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.010534][T12829] random: crng reseeded on system resumption [ 77.085133][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3603'. [ 77.102061][T12846] rdma_op ffff88813ec5b580 conn xmit_rdma 0000000000000000 [ 77.138539][T12863] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 77.172533][T12863] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.190429][ T29] audit: type=1400 audit(1766457190.942:616): avc: denied { setattr } for pid=12859 comm="syz.4.3606" path="/685/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.281770][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.305284][ T29] audit: type=1400 audit(1766457191.052:617): avc: denied { write } for pid=12911 comm="syz.2.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.366772][T12933] set_capacity_and_notify: 8 callbacks suppressed [ 77.366788][T12933] loop4: detected capacity change from 0 to 1024 [ 77.417329][ T29] audit: type=1326 audit(1766457191.162:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbdad2565e7 code=0x7ffc0000 [ 77.467099][T12933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.474315][ T29] audit: type=1326 audit(1766457191.192:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdad1fb829 code=0x7ffc0000 [ 77.502554][ T29] audit: type=1326 audit(1766457191.192:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbdad2565e7 code=0x7ffc0000 [ 77.525907][ T29] audit: type=1326 audit(1766457191.192:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdad1fb829 code=0x7ffc0000 [ 77.549377][ T29] audit: type=1326 audit(1766457191.192:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 77.572900][ T29] audit: type=1326 audit(1766457191.192:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 77.596720][ T29] audit: type=1326 audit(1766457191.192:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12948 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdad25f749 code=0x7ffc0000 [ 77.695331][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.767040][T13000] tipc: Failed to obtain node identity [ 77.772572][T13000] tipc: Enabling of bearer rejected, failed to enable media [ 77.849550][T13031] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 77.883129][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3636'. [ 77.929284][T13039] loop2: detected capacity change from 0 to 2048 [ 77.947934][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'. [ 77.971937][T13039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.046464][T13039] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 2: comm syz.2.3635: invalid block [ 78.092689][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.755618][T13215] loop4: detected capacity change from 0 to 4096 [ 78.792828][T13215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.825265][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.870820][T13254] random: crng reseeded on system resumption [ 78.931746][T13272] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3697'. [ 79.236611][T13345] loop4: detected capacity change from 0 to 512 [ 79.250980][T13341] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3720'. [ 79.259981][T13341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3720'. [ 79.269104][T13341] tipc: MTU too low for tipc bearer [ 79.278719][T13345] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.322320][T13345] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 79.607698][T13440] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3757'. [ 79.642336][T13446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.663224][T13450] vhci_hcd vhci_hcd.1: default hub control req: a100 vfdfe i0000 l0 [ 79.748271][T13472] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 79.802254][T13479] loop2: detected capacity change from 0 to 512 [ 79.809709][T13479] journal_path: Non-blockdev passed as './bus' [ 79.815899][T13479] EXT4-fs: error: could not find journal device path [ 79.962492][T13518] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 80.309448][T13539] loop1: detected capacity change from 0 to 1764 [ 80.321965][T13541] loop4: detected capacity change from 0 to 512 [ 80.410442][T13541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.429726][T13541] ext4 filesystem being mounted at /737/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.511766][T13541] syz.4.3795 (13541) used greatest stack depth: 10320 bytes left [ 80.629165][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.701489][T13602] vlan0: entered promiscuous mode [ 80.706743][T13602] geneve1: entered promiscuous mode [ 80.712067][T13602] vlan0: entered allmulticast mode [ 80.717175][T13602] geneve1: entered allmulticast mode [ 81.002155][T13669] tipc: Enabling of bearer rejected, failed to enable media [ 81.196965][T13725] program syz.4.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.229808][T13728] loop3: detected capacity change from 0 to 256 [ 81.274218][T13728] syz.3.3846: attempt to access beyond end of device [ 81.274218][T13728] loop3: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 81.349661][T13753] netlink: 'syz.3.3854': attribute type 29 has an invalid length. [ 81.676533][T13824] loop3: detected capacity change from 0 to 164 [ 81.737294][T13836] loop3: detected capacity change from 0 to 1764 [ 81.840522][T13863] __nla_validate_parse: 4 callbacks suppressed [ 81.840535][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 81.873246][T13869] EXT4-fs: inline encryption not supported [ 81.890541][T13869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.912268][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.038620][T13909] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 82.087544][T13925] program syz.1.3893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.259690][T13957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3915'. [ 82.372210][ T3374] Process accounting resumed [ 82.439047][T13999] tipc: Started in network mode [ 82.444038][T13999] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 82.451291][T13999] tipc: Enabled bearer , priority 27 [ 82.463692][T14000] netlink: 'syz.4.3918': attribute type 16 has an invalid length. [ 82.471547][T14000] netlink: 'syz.4.3918': attribute type 3 has an invalid length. [ 82.479259][T14000] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3918'. [ 82.523260][T14010] sch_fq: defrate 4294967295 ignored. [ 82.606258][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 82.606271][ T29] audit: type=1400 audit(1766457196.352:645): avc: denied { create } for pid=14021 comm="syz.4.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.679713][ T29] audit: type=1400 audit(1766457196.362:646): avc: denied { setopt } for pid=14021 comm="syz.4.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.707997][T14042] rdma_op ffff88813ed3c980 conn xmit_rdma 0000000000000000 [ 82.749084][T14053] tipc: Started in network mode [ 82.754017][T14053] tipc: Node identity ac14140f, cluster identity 4711 [ 82.783172][T14053] tipc: New replicast peer: 255.255.255.255 [ 82.789334][T14053] tipc: Enabled bearer , priority 1 [ 82.857963][ T29] audit: type=1400 audit(1766457196.602:647): avc: denied { connect } for pid=14075 comm="syz.3.3948" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.019420][T14100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3957'. [ 83.063675][T14100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3957'. [ 83.508575][ T29] audit: type=1400 audit(1766457197.249:648): avc: denied { connect } for pid=14135 comm="syz.0.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.563179][T14140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3976'. [ 83.582964][ T3374] tipc: Node number set to 8432298 [ 83.912359][T14178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3984'. [ 83.916334][ T3374] tipc: Node number set to 2886997007 [ 83.995242][T14189] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 84.136201][T14212] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 84.175361][T14212] team0: Port device dummy0 added [ 84.180939][T14220] set_capacity_and_notify: 4 callbacks suppressed [ 84.180992][T14220] loop4: detected capacity change from 0 to 512 [ 84.200053][T14222] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 84.215496][T14222] team0: Port device dummy0 removed [ 84.223457][T14222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.232356][T14220] EXT4-fs: Ignoring removed i_version option [ 84.238362][T14220] EXT4-fs: Ignoring removed bh option [ 84.287872][T14220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.319468][T14220] ext4 filesystem being mounted at /777/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.343812][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.453980][T14257] caif0: entered promiscuous mode [ 84.459092][T14257] caif0: entered allmulticast mode [ 84.490718][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 84.494371][ T29] audit: type=1400 audit(1766457198.229:649): avc: denied { create } for pid=14263 comm="syz.2.4014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1 [ 84.605481][ T29] audit: type=1400 audit(1766457198.279:650): avc: denied { write } for pid=14268 comm="syz.2.4017" path="socket:[33145]" dev="sockfs" ino=33145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.749937][ T29] audit: type=1400 audit(1766457198.499:651): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 84.787753][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 84.812304][ T29] audit: type=1400 audit(1766457198.499:652): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 85.609580][ T29] audit: type=1400 audit(1766457199.349:653): avc: denied { read } for pid=14411 comm="syz.4.4065" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.901253][T14445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4067'. [ 86.150694][T14484] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 86.190244][T14489] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 86.198809][ T3423] IPVS: starting estimator thread 0... [ 86.219542][T14496] random: crng reseeded on system resumption [ 86.289531][T14493] IPVS: using max 2352 ests per chain, 117600 per kthread [ 86.411183][ T29] audit: type=1400 audit(1766457200.159:654): avc: denied { write } for pid=14546 comm="syz.1.4107" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 86.855959][T14612] tipc: Enabling of bearer rejected, failed to enable media [ 86.990114][T14643] __nla_validate_parse: 1 callbacks suppressed [ 86.990127][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4143'. [ 87.059876][T14656] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 87.338502][T14703] tmpfs: Bad value for 'mpol' [ 87.542592][T14735] loop2: detected capacity change from 0 to 256 [ 87.563537][ T3423] hid-generic 0008:0001:0005.0001: item fetching failed at offset 0/1 [ 87.585186][ T3423] hid-generic 0008:0001:0005.0001: probe with driver hid-generic failed with error -22 [ 87.603630][T14735] syz.2.4184: attempt to access beyond end of device [ 87.603630][T14735] loop2: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 87.649520][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 87.649535][ T29] audit: type=1400 audit(1766457201.389:659): avc: denied { ioctl } for pid=14754 comm="syz.3.4190" path="socket:[32575]" dev="sockfs" ino=32575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.659884][T14751] loop4: detected capacity change from 0 to 1024 [ 87.719718][T14751] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.730840][T14751] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.769263][T14751] JBD2: no valid journal superblock found [ 87.775128][T14751] EXT4-fs (loop4): Could not load journal inode [ 88.108140][ T29] audit: type=1400 audit(1766457201.849:660): avc: denied { create } for pid=14839 comm="syz.1.4224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 88.164020][T14851] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 88.171810][T14851] netlink: 630 bytes leftover after parsing attributes in process `syz.0.4230'. [ 88.343642][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4252'. [ 88.390298][ T29] audit: type=1400 audit(1766457202.139:661): avc: denied { create } for pid=14889 comm="syz.2.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.422523][ T29] audit: type=1400 audit(1766457202.169:662): avc: denied { bind } for pid=14889 comm="syz.2.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.539789][T14916] tipc: Enabling of bearer rejected, failed to enable media [ 88.621427][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4259'. [ 88.734167][ T29] audit: type=1326 audit(1766457202.479:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.757666][ T29] audit: type=1326 audit(1766457202.479:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.781175][ T29] audit: type=1326 audit(1766457202.479:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.808463][ T29] audit: type=1326 audit(1766457202.529:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.831976][ T29] audit: type=1326 audit(1766457202.529:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.855486][ T29] audit: type=1326 audit(1766457202.529:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.3.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 88.896270][T14977] tipc: Started in network mode [ 88.901218][T14977] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 88.908343][T14977] tipc: Enabled bearer , priority 27 [ 88.989035][T14985] loop3: detected capacity change from 0 to 2048 [ 89.031583][T14985] loop3: p1 < > [ 89.266266][T15051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4294'. [ 89.289714][T15051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4294'. [ 89.346214][T15062] netlink: 'syz.0.4297': attribute type 11 has an invalid length. [ 89.912038][ T3423] tipc: Node number set to 8432298 [ 89.913506][ T3323] block device autoloading is deprecated and will be removed. [ 89.928135][T15102] block device autoloading is deprecated and will be removed. [ 89.996372][T15120] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4320'. [ 90.029322][T15126] pim6reg: entered allmulticast mode [ 90.044719][T15126] pim6reg: left allmulticast mode [ 90.128237][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 90.317542][T15199] block device autoloading is deprecated and will be removed. [ 90.390577][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4352'. [ 90.438907][T15224] loop1: detected capacity change from 0 to 2048 [ 90.480460][T15224] loop1: p1 < > [ 90.520598][T15241] loop4: detected capacity change from 0 to 2048 [ 90.551658][T15241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.565703][T15241] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.4360: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.637696][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.671781][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.679318][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.686813][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.694257][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.701669][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.709055][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.716550][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.723968][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.731361][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.738746][ T3423] hid-generic 0081:0005:1303.0002: unknown main item tag 0x0 [ 90.761323][ T3423] hid-generic 0081:0005:1303.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 90.811772][T15295] fido_id[15295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.846807][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4377'. [ 90.888417][T15317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 90.894958][T15317] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.902416][T15317] vhci_hcd vhci_hcd.0: Device attached [ 90.917778][T15323] vhci_hcd: connection closed [ 90.923399][T12916] vhci_hcd vhci_hcd.2: stop threads [ 90.933398][T12916] vhci_hcd vhci_hcd.2: release socket [ 90.938774][T12916] vhci_hcd vhci_hcd.2: disconnect device [ 91.038719][T15352] GUP no longer grows the stack in syz.3.4387 (15352): 200000006000-200000008000 (200000004000) [ 91.049327][T15352] CPU: 1 UID: 0 PID: 15352 Comm: syz.3.4387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.049393][T15352] Tainted: [W]=WARN [ 91.049397][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.049404][T15352] Call Trace: [ 91.049409][T15352] [ 91.049414][T15352] __dump_stack+0x1d/0x30 [ 91.049429][T15352] dump_stack_lvl+0x95/0xd0 [ 91.049441][T15352] dump_stack+0x15/0x1b [ 91.049464][T15352] fixup_user_fault+0x50e/0x560 [ 91.049534][T15352] fault_in_user_writeable+0x5d/0xd0 [ 91.049585][T15352] futex_lock_pi+0x597/0x780 [ 91.049660][T15352] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.049855][T15352] do_futex+0x21f/0x380 [ 91.049878][T15352] __se_sys_futex+0x2ed/0x360 [ 91.049892][T15352] ? xfd_validate_state+0x45/0xf0 [ 91.049907][T15352] __x64_sys_futex+0x78/0x90 [ 91.050000][T15352] x64_sys_call+0x2bc2/0x3000 [ 91.050013][T15352] do_syscall_64+0xca/0x2b0 [ 91.050051][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.050064][T15352] RIP: 0033:0x7f154735f749 [ 91.050073][T15352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.050140][T15352] RSP: 002b:00007f1545dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.050152][T15352] RAX: ffffffffffffffda RBX: 00007f15475b5fa0 RCX: 00007f154735f749 [ 91.050159][T15352] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 91.050165][T15352] RBP: 00007f15473e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.050172][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.050179][T15352] R13: 00007f15475b6038 R14: 00007f15475b5fa0 R15: 00007fffb8980048 [ 91.050189][T15352] [ 91.301501][T15371] loop1: detected capacity change from 0 to 512 [ 91.308149][T15371] EXT4-fs: inline encryption not supported [ 91.321749][T15371] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4395: bad orphan inode 15 [ 91.332116][T15371] ext4_test_bit(bit=14, block=5) = 0 [ 91.337659][T15371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.352413][T15371] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #11: block 14: comm syz.1.4395: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=196860, size=1024 fake=1 [ 91.379850][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.456756][T15388] loop2: detected capacity change from 0 to 512 [ 91.466970][T15388] EXT4-fs: Ignoring removed i_version option [ 91.473022][T15388] EXT4-fs: Ignoring removed bh option [ 91.492855][T15388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.506883][T15388] ext4 filesystem being mounted at /843/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.528501][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.548040][T15400] loop2: detected capacity change from 0 to 512 [ 91.558117][T15400] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 91.566997][T15400] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.4402: iget: bad i_size value: 12154757448730 [ 91.579912][T15400] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4402: couldn't read orphan inode 13 (err -117) [ 91.592411][T15400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.956348][T15465] loop4: detected capacity change from 0 to 512 [ 91.988527][T15465] ext4 filesystem being mounted at /845/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.049238][T15488] tipc: Invalid UDP bearer configuration [ 92.049251][T15488] tipc: Enabling of bearer rejected, failed to enable media [ 92.091298][T15495] netlink: 'syz.4.4430': attribute type 1 has an invalid length. [ 92.099098][T15495] netlink: 'syz.4.4430': attribute type 2 has an invalid length. [ 92.232343][T15521] loop2: detected capacity change from 0 to 2048 [ 92.257614][T15521] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4438: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 92.325605][T15540] loop1: detected capacity change from 0 to 512 [ 92.357959][T15553] __nla_validate_parse: 2 callbacks suppressed [ 92.357975][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4442'. [ 92.377870][T15540] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4443: bad orphan inode 13 [ 92.392287][T15540] ext4_test_bit(bit=12, block=4) = 1 [ 92.397710][T15540] is_bad_inode(inode)=0 [ 92.401927][T15540] NEXT_ORPHAN(inode)=0 [ 92.406085][T15540] max_ino=32 [ 92.409278][T15540] i_nlink=1 [ 92.495451][T15582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4454'. [ 92.575600][T15604] SELinux: failed to load policy [ 92.680397][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 92.680413][ T29] audit: type=1326 audit(1766457206.429:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.3.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 92.726026][ T29] audit: type=1326 audit(1766457206.429:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.3.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 92.802255][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.811251][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.841511][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.865786][T15651] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.865786][T15651] The task syz.2.4472 (15651) triggered the difference, watch for misbehavior. [ 92.892181][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.901226][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.943988][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 92.982635][ T29] audit: type=1326 audit(1766457206.729:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15473565e7 code=0x7ffc0000 [ 93.006085][ T29] audit: type=1326 audit(1766457206.729:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15472fb829 code=0x7ffc0000 [ 93.029601][ T29] audit: type=1326 audit(1766457206.729:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15473565e7 code=0x7ffc0000 [ 93.052980][ T29] audit: type=1326 audit(1766457206.729:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15472fb829 code=0x7ffc0000 [ 93.076504][ T29] audit: type=1326 audit(1766457206.729:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 93.132302][ T29] audit: type=1326 audit(1766457206.849:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 93.155876][ T29] audit: type=1326 audit(1766457206.849:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 93.179450][ T29] audit: type=1326 audit(1766457206.849:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.3.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154735f749 code=0x7ffc0000 [ 93.238348][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 93.247397][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 93.578473][T15732] loop4: detected capacity change from 0 to 128 [ 93.596604][T15732] ext4 filesystem being mounted at /871/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.706877][T15758] tipc: Enabling of bearer rejected, failed to enable media [ 93.973569][T15823] loop2: detected capacity change from 0 to 128 [ 94.051846][ T3423] hid-generic 0008:0001:0005.0003: item fetching failed at offset 0/1 [ 94.062932][ T3423] hid-generic 0008:0001:0005.0003: probe with driver hid-generic failed with error -22 [ 94.063755][T15845] vlan0: entered promiscuous mode [ 94.077821][T15845] bridge0: entered promiscuous mode [ 94.352013][T15908] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.360450][T15908] System zones: 0-2, 18-18, 34-34 [ 94.363356][T15925] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 94.380441][T15908] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4566: bg 0: block 248: padding at end of block bitmap is not set [ 94.400486][T15908] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4566: Failed to acquire dquot type 1 [ 94.420220][T15908] EXT4-fs (loop3): 1 truncate cleaned up [ 94.427380][T15908] ext4 filesystem being mounted at /896/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.444385][T15936] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 94.480636][T15908] syz.3.4566 (15908) used greatest stack depth: 9184 bytes left [ 94.507078][T12943] tipc: Subscription rejected, illegal request [ 95.069980][T16036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.219351][T16036] ext4 filesystem being mounted at /948/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.518333][T16160] set_capacity_and_notify: 2 callbacks suppressed [ 96.518347][T16160] loop3: detected capacity change from 0 to 256 [ 96.884701][T16211] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 97.146456][T16249] loop2: detected capacity change from 0 to 1024 [ 97.173930][T16249] EXT4-fs mount: 13 callbacks suppressed [ 97.173956][T16249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.223337][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.261403][T16274] loop3: detected capacity change from 0 to 512 [ 97.309228][T16274] EXT4-fs (loop3): 1 truncate cleaned up [ 97.316615][T16274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.380890][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.433133][T16303] loop4: detected capacity change from 0 to 512 [ 97.494559][T16303] EXT4-fs (loop4): too many log groups per flexible block group [ 97.519600][T16303] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 97.539809][T16303] EXT4-fs (loop4): mount failed [ 97.702166][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 97.702190][ T29] audit: type=1326 audit(1766457211.449:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.768121][ T29] audit: type=1326 audit(1766457211.449:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.791632][ T29] audit: type=1326 audit(1766457211.449:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.815088][ T29] audit: type=1326 audit(1766457211.449:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.838583][ T29] audit: type=1326 audit(1766457211.449:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.850031][T16369] __nla_validate_parse: 13 callbacks suppressed [ 97.850045][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4697'. [ 97.862341][ T29] audit: type=1326 audit(1766457211.449:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.900705][ T29] audit: type=1326 audit(1766457211.499:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.924319][ T29] audit: type=1326 audit(1766457211.499:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.947995][ T29] audit: type=1326 audit(1766457211.499:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 97.971513][ T29] audit: type=1326 audit(1766457211.499:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.4.4693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc819df749 code=0x7ffc0000 [ 98.071924][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4705'. [ 98.220042][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 98.324467][T16469] loop1: detected capacity change from 0 to 512 [ 98.334643][T16469] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 98.351030][T16469] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.4730: iget: bad i_size value: 12154757448730 [ 98.375014][T16469] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4730: couldn't read orphan inode 13 (err -117) [ 98.390374][T16469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.440503][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.610413][T16529] loop2: detected capacity change from 0 to 512 [ 98.618913][T16529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.634844][T16529] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4748: invalid indirect mapped block 4294967295 (level 1) [ 98.649455][T16529] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4748: invalid indirect mapped block 4294967295 (level 1) [ 98.653376][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4750'. [ 98.673103][T16529] EXT4-fs (loop2): 2 truncates cleaned up [ 98.679581][T16529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.704434][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.760776][T16547] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4752'. [ 98.769916][T16547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4752'. [ 98.784793][T16547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4752'. [ 99.040854][T16618] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4779' sets config #1 [ 99.117662][T16637] loop2: detected capacity change from 0 to 512 [ 99.131591][T16637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.153788][T16637] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4786: iget: bad extended attribute block 262144 [ 99.155678][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4789'. [ 99.175838][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4789'. [ 99.184819][T16648] netlink: 'syz.4.4789': attribute type 14 has an invalid length. [ 99.192744][T16648] netlink: 'syz.4.4789': attribute type 12 has an invalid length. [ 99.201443][T16637] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4786: couldn't read orphan inode 15 (err -117) [ 99.230245][ T3005] ================================================================== [ 99.238353][ T3005] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 99.245916][ T3005] [ 99.248237][ T3005] write to 0xffff8881006833c0 of 4 bytes by task 3515 on cpu 0: [ 99.248504][ T3423] kernel read not supported for file /rfkill (pid: 3423 comm: kworker/0:6) [ 99.255853][ T3005] d_make_discardable+0x4f/0xa0 [ 99.255878][ T3005] simple_unlink+0x68/0x80 [ 99.273667][ T3005] shmem_unlink+0x12d/0x140 [ 99.278168][ T3005] vfs_unlink+0x28b/0x440 [ 99.282484][ T3005] do_unlinkat+0x1cd/0x4b0 [ 99.286886][ T3005] __x64_sys_unlink+0x2e/0x40 [ 99.291552][ T3005] x64_sys_call+0x2f48/0x3000 [ 99.296220][ T3005] do_syscall_64+0xca/0x2b0 [ 99.300713][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.306592][ T3005] [ 99.308898][ T3005] read to 0xffff8881006833c0 of 4 bytes by task 3005 on cpu 1: [ 99.316421][ T3005] path_lookupat+0x1d8/0x500 [ 99.320999][ T3005] filename_lookup+0x147/0x340 [ 99.325752][ T3005] do_readlinkat+0x7d/0x320 [ 99.330243][ T3005] __x64_sys_readlink+0x47/0x60 [ 99.335082][ T3005] x64_sys_call+0x2af1/0x3000 [ 99.339749][ T3005] do_syscall_64+0xca/0x2b0 [ 99.344246][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.350124][ T3005] [ 99.352442][ T3005] value changed: 0x08300080 -> 0x00004080 [ 99.358222][ T3005] [ 99.360528][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 99.366659][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.377492][ T3005] Tainted: [W]=WARN [ 99.381276][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.391311][ T3005] ================================================================== [ 99.401212][T16637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.434622][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.