last executing test programs: 4.258256199s ago: executing program 3 (id=2304): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000680)={[{@bh}, {@commit={'commit', 0x3d, 0x6}}, {@nombcache}]}, 0xff, 0x558, &(0x7f0000001880)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x50}}, 0x4000010) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d0000000000080022"], 0x148}}, 0x20000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) 3.373727087s ago: executing program 3 (id=2328): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) 3.183831275s ago: executing program 3 (id=2335): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setresuid(0xee00, 0xee00, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000009c0)=0x1, 0x4) 3.099784388s ago: executing program 3 (id=2339): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000680)={[{@bh}, {@commit={'commit', 0x3d, 0x6}}, {@nombcache}]}, 0xff, 0x558, &(0x7f0000001880)="$eJzs3U9vHGcZAPBn1l7HSezaBQ5QqaWiRUkFWcc1bS0OpUgITpUQ5R6MvbGsrL2RvW5jqwLnEyAhBEg9wYULEh8ACUXiwhEhRYIzSEUgBClIcCgZNLOzsdnM2ktY7ybr308azzt/n+d1MuN5Z17NBHBmPR8Rb0TE/TRNX4qIuWJ+pRjioD1k631w793VbEgiTd/6axJJMS9bLU3TtLPPi8Vm0xHxta9EfDM5EnC6GO/t31hpNOrbxeRCa/Pmws7e/pWNzZX1+np9a2lp8dXl15ZfWb46kHrORsTrX/rj97/zky+//ovPvvOHa3++/K0srZlieacej2DyuIXtqlfPTXdtsP2IwR5HWX2qHxYT5/vb5vZpJgQAQE/ZNf5HIuJTEfFSzMXE8ZezAAAAwBMo/cJMfJi0n9+VmOoxHwAAAHiCVPI+sEmlVvQFmIlKpVZr9+H9WFyoNJo7rc9cb+5urbX7ys5HtXJ9o1G/WvQVno9qkk0v5uXD6Ze7ppci4umI+N7c+Xy6ttpsrI365gcAAACcERe72v//mGu3/4+XDCc5AAAAYHDmR50AAAAAcOq0/wEAAGCsVUedAAAAAHDqvvrmm9mQdr5/vfb23u6N5ttX1uo7N2qbu6u11eb2zdp6s7mev7Nv86T9NZrNm5+Lrd1bC636Tmthdm//2mZzd6t1bSOmh1IhAAAA4CFPf/LO75KIOPj8+XzITI06KWAoJh+UOu/0LDn6f/9Ue/z+kJIChmKij3XeP1c+/73ZQWcDDNNk94wexzowfvT/B076okfPzju/bo8qA84HAAAYvEufKH/+f/L1/IFLfnjCOYjh7Op6/p/OjSoRYOjy5//9dvh1sQBjpdpXD0BgnP2/z/9Plqb/U0IAAMDAzeRDUqkVt/dmolKp1SJm888CVpPrG4361Yh4KiJ+O1c9l00v5lsmJ7YZAAAAAAAAAAAAAAAAAAAAAAAAAIC2NE0iBQAAAMZaROVPyS/b7/K/NPfiTPf9gankX/kngaci4p333vrBrZVWa3sxm/+3B/NbPyzmvzyKOxgAAABAt047PR//c9TZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBuPrj37mpn6GP184OK+5cvRsR8WfzJmM7H01GNiAt/T2LyyHZJREwMIP7B7Yj4eFn8JEvrQciy+IP4JRzcno40Vxo/5ovfQln8iwOID2fZnez880bZ8V+J5/Nx9/GX5j8nI/7reHxUvc9/8eD8N9Hj+J/tM8Yzd3+20DP+7YhnJrviT7UjdOInPeK/0Ff0anzj6/v7vZamP4q41Pn7k5/xjkY4LC20Nm8u7OztX9nYXFmvr9e3lpYWX11+bfmV5asL1zca9eJnaYzvPvvz+8fV/0Lp37+kyKZ3/V8s2d9ESf7/vnvr3kc7EwcPx7/8Qkn8X/24WOPh+JUizqeLcrb8Uqd80C4f9dxPf/PccfVfO6x/9Wj9T/r3v9xrp90eOlCe7e+/DgBwKnb29m+sNBr17bEtZK30xyCNRylMxWORxvgWvp0V7g5qh2ma5o3DkkV3IqKf/SQx4JpWyvM5LLTPALPte1DpkUWjPjMBAACDdtgeGHUmAAAAAAAAAAAAAAAAAAAAcHYN4y1r3TEPX4GcDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GfAAAA//92COC7") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x50}}, 0x4000010) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d0000000000080022"], 0x148}}, 0x20000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) 2.993471433s ago: executing program 2 (id=2342): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8006, 0x4}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) 2.976252303s ago: executing program 2 (id=2343): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x20008000) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0201000202000015"], 0x10}, 0x19}, 0x0) 2.950006015s ago: executing program 2 (id=2344): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x531500) 2.894751677s ago: executing program 2 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.894363197s ago: executing program 2 (id=2346): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e27, 0xa, @empty, 0x4}}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0xffffffffffffff5c, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x4f7, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0xfffffffffffffff2}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x4000080) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000200), &(0x7f00000002c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x6, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x8ec7}}, 0x20}, 0x1, 0x0, 0x0, 0x14000005}, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000140)=0x68) 2.230440965s ago: executing program 3 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 2.166753208s ago: executing program 1 (id=2365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) 843.471054ms ago: executing program 1 (id=2370): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x50}}, 0x4000010) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d0000000000080022"], 0x148}}, 0x20000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) 345.841535ms ago: executing program 1 (id=2376): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000011140143bcaf6c426a53162508000300010000000800"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 299.937077ms ago: executing program 4 (id=2378): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008010) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 276.843048ms ago: executing program 0 (id=2379): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x5000009) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x60000726) 270.772918ms ago: executing program 4 (id=2380): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=ANY=[], 0x300}}, {{0x0, 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24000010) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) 243.328629ms ago: executing program 4 (id=2381): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xfa, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 231.10186ms ago: executing program 1 (id=2382): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") pread64(r0, &(0x7f0000001180)=""/4110, 0x100e, 0x100000000) 221.15594ms ago: executing program 4 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, "88"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x44}}, 0x2008040) 219.57345ms ago: executing program 0 (id=2384): r0 = socket(0x2, 0x3, 0xff) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x0) 143.421893ms ago: executing program 0 (id=2385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 133.015274ms ago: executing program 4 (id=2386): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001d0001002cbd7000eddbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000000106000500010005000a0002"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040050) 102.102655ms ago: executing program 0 (id=2387): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 39.696148ms ago: executing program 1 (id=2388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 33.540848ms ago: executing program 0 (id=2389): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14) 23.334248ms ago: executing program 4 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 0 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000004c4c284210814c6180001801400020069705f76746930"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.185215][ T5616] bond2 (unregistering): Released all slaves [ 179.208711][ T5626] netlink: 'syz.0.463': attribute type 13 has an invalid length. [ 179.272665][ T5629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.300664][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5626 comm=syz.0.463 [ 179.361029][ T5637] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 179.361029][ T5637] The task syz.4.465 (5637) triggered the difference, watch for misbehavior. [ 179.408472][ T5637] lo speed is unknown, defaulting to 1000 [ 179.414816][ T5637] lo speed is unknown, defaulting to 1000 [ 179.420976][ T5637] dummy0 speed is unknown, defaulting to 1000 [ 179.460620][ T28] audit: type=1400 audit(1774650160.245:822): avc: denied { write } for pid=5627 comm="syz.4.465" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.495938][ T5641] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 179.540244][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 179.618053][ T5650] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 179.671037][ T5653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5653 comm=syz.3.475 [ 179.685245][ T5653] batadv_slave_0: Caught tx_queue_len zero misconfig [ 179.896535][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 179.935183][ T5662] loop1: detected capacity change from 0 to 512 [ 179.982319][ T5662] EXT4-fs: Ignoring removed bh option [ 179.995864][ T5653] loop3: detected capacity change from 0 to 764 [ 180.028223][ T5662] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.144815][ T5662] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 180.380378][ T5653] Symlink component flag not implemented [ 180.402716][ T5653] Symlink component flag not implemented (116) [ 180.671698][ T5674] lo speed is unknown, defaulting to 1000 [ 180.678256][ T5674] lo speed is unknown, defaulting to 1000 [ 180.684469][ T5674] dummy0 speed is unknown, defaulting to 1000 [ 181.039978][ T5677] lo speed is unknown, defaulting to 1000 [ 181.046395][ T5677] lo speed is unknown, defaulting to 1000 [ 181.053156][ T5677] dummy0 speed is unknown, defaulting to 1000 [ 182.681083][ T3379] hid_parser_main: 6 callbacks suppressed [ 182.681103][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.697317][ T5690] netlink: 'syz.4.483': attribute type 13 has an invalid length. [ 182.741553][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.811374][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.845552][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.882761][ T5689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5689 comm=syz.4.483 [ 182.903346][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.930024][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.946238][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 182.976245][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 183.010427][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 183.036147][ T5708] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 183.047326][ T5687] loop0: detected capacity change from 0 to 1024 [ 183.054601][ T3379] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 183.097226][ T3379] hid-generic 0000:0000:0004.0015: hidraw0: HID v0.03 Device [syz0] on syz1 [ 183.145212][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.186454][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.270226][ T5715] netlink: 'syz.3.489': attribute type 13 has an invalid length. [ 183.282680][ T5717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5717 comm=syz.1.490 [ 183.346089][ T5717] batadv_slave_0: Caught tx_queue_len zero misconfig [ 183.375005][ T5715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5715 comm=syz.3.489 [ 183.452535][ T5719] loop0: detected capacity change from 0 to 1024 [ 183.463420][ T5719] EXT4-fs: Ignoring removed orlov option [ 183.535891][ T5725] netlink: 88 bytes leftover after parsing attributes in process `syz.3.492'. [ 183.736630][ T5719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.766556][ T5717] loop1: detected capacity change from 0 to 764 [ 183.792155][ T28] audit: type=1400 audit(1774650164.565:823): avc: denied { create } for pid=5730 comm="syz.3.493" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.931385][ T28] audit: type=1400 audit(1774650164.565:824): avc: denied { create } for pid=5730 comm="syz.3.493" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.962015][ T28] audit: type=1400 audit(1774650164.575:825): avc: denied { rename } for pid=5730 comm="syz.3.493" name="file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.985944][ T28] audit: type=1400 audit(1774650164.575:826): avc: denied { unlink } for pid=5730 comm="syz.3.493" name="file7" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 183.997594][ T5738] loop3: detected capacity change from 0 to 512 [ 184.008435][ T28] audit: type=1400 audit(1774650164.575:827): avc: denied { rename } for pid=5730 comm="syz.3.493" name="file5" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.053913][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 184.065582][ T28] audit: type=1400 audit(1774650164.575:828): avc: denied { unlink } for pid=5730 comm="syz.3.493" name="file7" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.066379][ T5719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 184.089693][ T5738] EXT4-fs: Ignoring removed bh option [ 184.119879][ T28] audit: type=1326 audit(1774650164.895:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441115c799 code=0x7ffc0000 [ 184.121931][ T5719] lo: Caught tx_queue_len zero misconfig [ 184.163423][ T28] audit: type=1326 audit(1774650164.895:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f441115c799 code=0x7ffc0000 [ 184.201728][ T5738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.211255][ T28] audit: type=1326 audit(1774650164.895:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441115c799 code=0x7ffc0000 [ 184.242527][ T28] audit: type=1326 audit(1774650164.905:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f441115c799 code=0x7ffc0000 [ 184.290043][ T5748] netlink: 'syz.4.497': attribute type 13 has an invalid length. [ 184.314067][ T5738] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 184.638098][ T5717] Symlink component flag not implemented [ 184.644982][ T5717] Symlink component flag not implemented (116) [ 184.653017][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5759 comm=syz.4.497 [ 184.764491][ T5746] batman_adv: batadv0: Adding interface: dummy0 [ 184.770907][ T5746] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.799030][ T5746] batman_adv: batadv0: Interface activated: dummy0 [ 184.871035][ T5741] batadv0: mtu less than device minimum [ 184.880432][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.896150][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.908232][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.921651][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.934322][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.946374][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.958408][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.971089][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.983639][ T5741] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.117698][ T5761] lo speed is unknown, defaulting to 1000 [ 186.124756][ T5761] lo speed is unknown, defaulting to 1000 [ 186.130809][ T5761] dummy0 speed is unknown, defaulting to 1000 [ 187.191092][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.280134][ T5782] netlink: 'syz.0.503': attribute type 13 has an invalid length. [ 187.406646][ T5786] lo speed is unknown, defaulting to 1000 [ 187.412765][ T5786] lo speed is unknown, defaulting to 1000 [ 187.418867][ T5786] dummy0 speed is unknown, defaulting to 1000 [ 187.449373][ T5786] loop3: detected capacity change from 0 to 1024 [ 187.456188][ T5786] EXT4-fs: Ignoring removed nobh option [ 187.461823][ T5786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.487112][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.584182][ T5797] loop1: detected capacity change from 0 to 1024 [ 187.815166][ T3541] hid_parser_main: 91 callbacks suppressed [ 187.815187][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.838704][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.853364][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.872108][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.882868][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.890319][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.945942][ T5803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.956650][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.956915][ T5797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.978215][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.985700][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 187.993328][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 188.000713][ T3541] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 188.012193][ T3541] hid-generic 0000:0000:0004.0016: hidraw0: HID v0.03 Device [syz0] on syz1 [ 188.030174][ T5805] loop3: detected capacity change from 0 to 512 [ 188.037669][ T5805] EXT4-fs: Ignoring removed bh option [ 188.058134][ T5805] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.111143][ T5811] netlink: 'syz.0.510': attribute type 13 has an invalid length. [ 188.124068][ T5805] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 188.156783][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.169276][ T5811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5811 comm=syz.0.510 [ 188.217520][ T5820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.377935][ T5818] tipc: Enabling of bearer rejected, failed to enable media [ 188.423043][ T5831] netlink: 'syz.0.516': attribute type 6 has an invalid length. [ 188.508645][ T5834] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 188.580867][ T5837] lo speed is unknown, defaulting to 1000 [ 188.586955][ T5837] lo speed is unknown, defaulting to 1000 [ 188.595404][ T5837] dummy0 speed is unknown, defaulting to 1000 [ 188.621174][ T5837] loop1: detected capacity change from 0 to 1024 [ 188.628000][ T5837] EXT4-fs: Ignoring removed nobh option [ 188.633644][ T5837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.643553][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.657611][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 188.760147][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.782699][ T5844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.935239][ T5848] netlink: 'syz.4.521': attribute type 13 has an invalid length. [ 188.938967][ T5846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.997411][ T5848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5848 comm=syz.4.521 [ 189.028473][ T3379] hid-generic 0000:0000:0004.0017: hidraw0: HID v0.03 Device [syz0] on syz1 [ 189.078098][ T5863] netlink: 'syz.2.526': attribute type 13 has an invalid length. [ 189.151300][ T5854] loop1: detected capacity change from 0 to 1024 [ 189.178910][ T5863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5863 comm=syz.2.526 [ 189.192794][ T5872] netlink: 'syz.4.528': attribute type 6 has an invalid length. [ 189.320475][ T5876] lo speed is unknown, defaulting to 1000 [ 189.326607][ T5876] lo speed is unknown, defaulting to 1000 [ 189.332600][ T5876] dummy0 speed is unknown, defaulting to 1000 [ 189.367180][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 189.400034][ T5854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.849689][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.911937][ T5889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.236697][ T5897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.157285][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 191.493226][ T5917] netlink: 'syz.1.540': attribute type 13 has an invalid length. [ 191.521729][ T5917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5917 comm=syz.1.540 [ 191.522333][ T5919] netlink: 'syz.4.541': attribute type 13 has an invalid length. [ 191.586319][ T5920] loop0: detected capacity change from 0 to 512 [ 191.626342][ T5922] netlink: 'syz.3.542': attribute type 6 has an invalid length. [ 191.657212][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5919 comm=syz.4.541 [ 191.674447][ T5920] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.747158][ T5936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.787046][ T5939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.791594][ T5920] ------------[ cut here ]------------ [ 191.800775][ T5920] EA inode 11 i_nlink=2 [ 191.800797][ T5920] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.539/5920 [ 191.815688][ T5920] Modules linked in: [ 191.819630][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT(full) [ 191.828908][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.839082][ T5920] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 191.845872][ T5920] Code: e4 4a 99 ff 4c 8d 2d dd b5 5d 05 49 8d 7e 40 e8 34 df b5 ff 49 8b 6e 40 4c 89 e7 e8 68 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f b9 dd 03 66 66 66 66 66 66 2e [ 191.865566][ T5920] RSP: 0018:ffffc90001777778 EFLAGS: 00010246 [ 191.871702][ T5920] RAX: ffff888104e25e88 RBX: ffff88811bc44a68 RCX: ffffffff81c01628 [ 191.879689][ T5920] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcbf0 [ 191.887711][ T5920] RBP: 000000000000000b R08: 000188811bc44a1b R09: 0000000000000000 [ 191.895736][ T5920] R10: ffffc900017776a8 R11: 0001c900017776a8 R12: ffff88811bc44a18 [ 191.903821][ T5920] R13: ffffffff871dcbf0 R14: ffff88811bc449d0 R15: 0000000000000001 [ 191.911832][ T5920] FS: 00007f96a1dbe6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 191.920781][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.927406][ T5920] CR2: 00007ffeaf902000 CR3: 000000014e308000 CR4: 00000000003506f0 [ 191.935426][ T5920] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.943463][ T5920] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 191.951453][ T5920] Call Trace: [ 191.954733][ T5920] [ 191.957702][ T5920] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 191.963723][ T5920] ? errseq_check+0x2c/0x50 [ 191.968306][ T5920] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 191.973918][ T5920] ? ext4_truncate+0x92b/0xb00 [ 191.978706][ T5920] ext4_evict_inode+0xa1f/0xd60 [ 191.983632][ T5920] ? __pfx_ext4_evict_inode+0x10/0x10 [ 191.989062][ T5920] evict+0x2af/0x510 [ 191.993051][ T5920] ? __dquot_initialize+0x146/0x7c0 [ 191.998298][ T5920] iput+0x41a/0x580 [ 192.002148][ T5920] ext4_process_orphan+0x1a9/0x1c0 [ 192.007276][ T5920] ext4_orphan_cleanup+0x6a8/0xa00 [ 192.012476][ T5920] ext4_fill_super+0x3408/0x37c0 [ 192.017431][ T5920] ? set_blocksize+0x14c/0x270 [ 192.022226][ T5920] ? setup_bdev_super+0x30e/0x370 [ 192.027315][ T5920] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.032629][ T5920] get_tree_bdev_flags+0x291/0x300 [ 192.037762][ T5920] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.043090][ T5920] get_tree_bdev+0x1f/0x30 [ 192.047503][ T5920] ext4_get_tree+0x1c/0x30 [ 192.052033][ T5920] vfs_get_tree+0x57/0x1d0 [ 192.056463][ T5920] do_new_mount+0x288/0x8d0 [ 192.061061][ T5920] path_mount+0x4d0/0xbc0 [ 192.065433][ T5920] __se_sys_mount+0x28c/0x2e0 [ 192.070180][ T5920] __x64_sys_mount+0x67/0x80 [ 192.074815][ T5920] x64_sys_call+0x2d61/0x3020 [ 192.079554][ T5920] do_syscall_64+0x12c/0x370 [ 192.084332][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.090238][ T5920] RIP: 0033:0x7f96a338da0a [ 192.094685][ T5920] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.114373][ T5920] RSP: 002b:00007f96a1dbde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.122845][ T5920] RAX: ffffffffffffffda RBX: 00007f96a1dbdee0 RCX: 00007f96a338da0a [ 192.130882][ T5920] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f96a1dbdea0 [ 192.138909][ T5920] RBP: 00002000000009c0 R08: 00007f96a1dbdee0 R09: 0000000000800718 [ 192.146908][ T5920] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 192.154927][ T5920] R13: 00007f96a1dbdea0 R14: 000000000000048d R15: 0000200000000200 [ 192.163025][ T5920] [ 192.166042][ T5920] ---[ end trace 0000000000000000 ]--- [ 192.174503][ T5920] EXT4-fs (loop0): 1 orphan inode deleted [ 192.181436][ T5920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.291260][ T5951] lo speed is unknown, defaulting to 1000 [ 192.297389][ T5951] lo speed is unknown, defaulting to 1000 [ 192.303569][ T5951] dummy0 speed is unknown, defaulting to 1000 [ 192.457949][ T5954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.078287][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 193.511874][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.563122][ T5970] loop0: detected capacity change from 0 to 512 [ 193.679069][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.687006][ T5973] lo speed is unknown, defaulting to 1000 [ 193.697681][ T5973] lo speed is unknown, defaulting to 1000 [ 193.701379][ T5970] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.703769][ T5973] dummy0 speed is unknown, defaulting to 1000 [ 193.735726][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 193.901252][ T5980] netlink: 'syz.1.556': attribute type 13 has an invalid length. [ 193.911790][ T5982] netlink: 'syz.2.557': attribute type 13 has an invalid length. [ 194.036314][ T5980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5980 comm=syz.1.556 [ 194.070522][ T5982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5982 comm=syz.2.557 [ 194.138809][ T5992] netlink: 'syz.0.554': attribute type 13 has an invalid length. [ 194.211385][ T3379] hid_parser_main: 192 callbacks suppressed [ 194.211444][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.288675][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.366344][ T6000] loop1: detected capacity change from 0 to 1024 [ 194.523244][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.530651][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.538407][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.545946][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.553401][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.560883][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.568377][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.588330][ T3379] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 194.599157][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.610564][ T6002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.613857][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.642541][ T3379] hid-generic 0000:0000:0004.0018: hidraw0: HID v0.03 Device [syz0] on syz1 [ 194.705860][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 194.705876][ T28] audit: type=1400 audit(1774650175.495:853): avc: denied { read } for pid=6006 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.712654][ T6007] SET target dimension over the limit! [ 194.747998][ T6005] fido_id[6005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.748380][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.812149][ T6007] loop0: detected capacity change from 0 to 4096 [ 194.821728][ T6007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.831683][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.848346][ T6007] netlink: 108 bytes leftover after parsing attributes in process `syz.0.563'. [ 194.886501][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.720823][ T6022] lo speed is unknown, defaulting to 1000 [ 195.727037][ T6022] lo speed is unknown, defaulting to 1000 [ 195.733239][ T6022] dummy0 speed is unknown, defaulting to 1000 [ 195.769759][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 195.874794][ T6023] loop3: detected capacity change from 0 to 512 [ 195.886330][ T28] audit: type=1326 audit(1774650176.675:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 195.909783][ T28] audit: type=1326 audit(1774650176.675:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 196.881950][ T28] audit: type=1326 audit(1774650176.675:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 196.942429][ T28] audit: type=1326 audit(1774650176.675:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 196.965676][ T28] audit: type=1326 audit(1774650177.655:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 196.992706][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'. [ 197.005463][ T28] audit: type=1326 audit(1774650177.705:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 197.174410][ T6031] netlink: 'syz.1.569': attribute type 13 has an invalid length. [ 197.206180][ T6033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6033 comm=syz.0.570 [ 197.231893][ T28] audit: type=1326 audit(1774650178.015:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 197.345887][ T6023] EXT4-fs (loop3): 1 orphan inode deleted [ 197.391774][ T28] audit: type=1326 audit(1774650178.045:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 197.457317][ T6023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.470797][ T28] audit: type=1326 audit(1774650178.045:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924820c799 code=0x7ffc0000 [ 197.495152][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 197.504184][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 197.565712][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6042 comm=syz.1.569 [ 197.911080][ T6051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.964368][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.573'. [ 198.029389][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.059087][ T6065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.093982][ T3394] hid-generic 0000:0000:0004.0019: hidraw0: HID v0.03 Device [syz0] on syz1 [ 198.175544][ T6078] loop3: detected capacity change from 0 to 1024 [ 198.201119][ T6076] lo speed is unknown, defaulting to 1000 [ 198.207252][ T6076] lo speed is unknown, defaulting to 1000 [ 198.213381][ T6076] dummy0 speed is unknown, defaulting to 1000 [ 198.244949][ T6076] loop0: detected capacity change from 0 to 1024 [ 198.251731][ T6076] EXT4-fs: Ignoring removed nobh option [ 198.257305][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.297061][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.311576][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 198.345634][ T6085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6085 comm=syz.2.582 [ 198.387038][ T6078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.426078][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.519028][ T6098] SET target dimension over the limit! [ 198.549665][ T6100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.603470][ T6098] netlink: 108 bytes leftover after parsing attributes in process `syz.4.584'. [ 199.105030][ T6102] netlink: 'syz.3.583': attribute type 13 has an invalid length. [ 199.181216][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.195141][ T6106] loop1: detected capacity change from 0 to 512 [ 199.205793][ T6106] EXT4-fs: Ignoring removed bh option [ 199.211964][ T6106] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.237927][ T6106] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 199.255744][ T6102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6102 comm=syz.3.583 [ 199.555366][ T6128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6128 comm=syz.3.595 [ 200.367103][ T6139] batadv0: Caught tx_queue_len zero misconfig [ 200.501027][ T6141] lo speed is unknown, defaulting to 1000 [ 200.507106][ T6141] lo speed is unknown, defaulting to 1000 [ 200.513294][ T6141] dummy0 speed is unknown, defaulting to 1000 [ 200.910528][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 201.102329][ T6144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.396495][ T6146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.541204][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 201.541221][ T28] audit: type=1400 audit(1774650182.325:1036): avc: denied { write } for pid=6151 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.570586][ T28] audit: type=1326 audit(1774650182.355:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.595350][ T28] audit: type=1326 audit(1774650182.385:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.599637][ T6149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6149 comm=syz.4.604 [ 201.620822][ T28] audit: type=1326 audit(1774650182.385:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.665711][ T28] audit: type=1326 audit(1774650182.385:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.699654][ T28] audit: type=1326 audit(1774650182.385:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.723243][ T28] audit: type=1326 audit(1774650182.385:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.746843][ T28] audit: type=1326 audit(1774650182.385:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.770573][ T28] audit: type=1326 audit(1774650182.385:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.770605][ T28] audit: type=1326 audit(1774650182.385:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.0.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 201.798846][ T6165] loop0: detected capacity change from 0 to 128 [ 201.887284][ T6172] netlink: 'syz.4.611': attribute type 13 has an invalid length. [ 201.934820][ T6174] loop3: detected capacity change from 0 to 1024 [ 201.981864][ T6174] EXT4-fs: test_dummy_encryption option not supported [ 201.983770][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6172 comm=syz.4.611 [ 202.664687][ T6189] lo speed is unknown, defaulting to 1000 [ 203.129832][ T6189] lo speed is unknown, defaulting to 1000 [ 203.138302][ T6189] dummy0 speed is unknown, defaulting to 1000 [ 203.633152][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 203.870612][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 203.879782][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 204.100985][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6203 comm=syz.0.619 [ 204.150135][ T6200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.162558][ T6207] team0: entered allmulticast mode [ 204.170294][ T6207] team_slave_0: entered allmulticast mode [ 204.187455][ T6207] team_slave_1: entered allmulticast mode [ 204.205566][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.221254][ T6207] net_ratelimit: 10 callbacks suppressed [ 204.221268][ T6207] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.291449][ T6209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.339808][ T6217] netlink: 'syz.0.625': attribute type 13 has an invalid length. [ 204.392344][ T6218] loop1: detected capacity change from 0 to 512 [ 204.401636][ T6218] EXT4-fs: Ignoring removed bh option [ 204.436932][ T6211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.451843][ T6218] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.460366][ T6222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6222 comm=syz.0.625 [ 204.535306][ T6229] netlink: 'syz.3.628': attribute type 27 has an invalid length. [ 204.551673][ T6218] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 204.557835][ T6234] netlink: 64 bytes leftover after parsing attributes in process `syz.2.629'. [ 204.560604][ T6229] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 204.580433][ T6233] netlink: 'syz.0.630': attribute type 13 has an invalid length. [ 204.610446][ T6233] netlink: 'syz.0.630': attribute type 12 has an invalid length. [ 204.845361][ T3379] hid_parser_main: 192 callbacks suppressed [ 204.845383][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 204.859518][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 204.933113][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 204.942136][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 204.951664][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 204.960725][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 204.970058][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 205.253597][ T6258] loop3: detected capacity change from 0 to 1024 [ 205.396253][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.404158][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.411582][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.412159][ T6254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.418983][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.419011][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.419037][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.419067][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.419094][ T3379] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 205.420219][ T3379] hid-generic 0000:0000:0004.001A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 205.533946][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.579279][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.683237][ T6284] netlink: 'syz.3.648': attribute type 21 has an invalid length. [ 205.740989][ T6292] netlink: 'syz.3.652': attribute type 3 has an invalid length. [ 205.786150][ T6296] netlink: 'syz.2.654': attribute type 6 has an invalid length. [ 205.798648][ T6298] loop0: detected capacity change from 0 to 1024 [ 205.816542][ T6302] netlink: 'syz.3.657': attribute type 8 has an invalid length. [ 205.834324][ T6302] netlink: 'syz.3.657': attribute type 7 has an invalid length. [ 205.859952][ T6298] EXT4-fs: inline encryption not supported [ 205.890721][ T6298] EXT4-fs: Ignoring removed nobh option [ 205.905834][ T6300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.917856][ T6298] EXT4-fs: Ignoring removed bh option [ 205.945549][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.958663][ T6309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6309 comm=syz.3.660 [ 206.103285][ T6316] __nla_validate_parse: 5 callbacks suppressed [ 206.103303][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 207.142490][ T6325] erspan0: entered promiscuous mode [ 207.156689][ T6325] erspan0: entered allmulticast mode [ 208.175604][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.197711][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.206730][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.215924][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.224966][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.233946][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.242905][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 208.334952][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 208.450714][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6341 comm=syz.1.672 [ 208.463041][ T6345] loop0: detected capacity change from 0 to 1024 [ 208.469765][ T6339] tc_dump_action: action bad kind [ 208.469956][ T6345] EXT4-fs: test_dummy_encryption option not supported [ 208.498076][ T6347] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.636825][ T6355] team0: left allmulticast mode [ 208.647662][ T6351] SET target dimension over the limit! [ 208.653294][ T6355] team_slave_0: left allmulticast mode [ 208.658767][ T6355] team_slave_1: left allmulticast mode [ 208.788376][ T6358] loop0: detected capacity change from 0 to 512 [ 208.889997][ T6358] EXT4-fs (loop0): 1 orphan inode deleted [ 208.901381][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.917538][ T6358] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.951478][ T5915] __quota_error: 284 callbacks suppressed [ 208.951569][ T5915] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 208.980143][ T4263] IPVS: starting estimator thread 0... [ 209.117611][ T5915] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 209.129556][ T6364] IPVS: using max 2352 ests per chain, 117600 per kthread [ 209.236463][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 209.549159][ T6379] loop1: detected capacity change from 0 to 128 [ 209.569620][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.284949][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.398600][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6388 comm=syz.3.688 [ 210.741239][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 210.760176][ T6410] usb usb7: usbfs: process 6410 (syz.3.695) did not claim interface 0 before use [ 210.829828][ T6412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.837063][ T6412] IPv6: NLM_F_CREATE should be set when creating new route [ 210.844325][ T6412] IPv6: NLM_F_CREATE should be set when creating new route [ 211.018138][ T6414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.574603][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.583505][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.592649][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.601692][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.610783][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.619669][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 211.647307][ T28] audit: type=1400 audit(1774650192.435:1330): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 211.663844][ T6424] team0: entered allmulticast mode [ 211.699031][ T6424] team_slave_0: entered allmulticast mode [ 211.709340][ T6424] team_slave_1: entered allmulticast mode [ 211.715861][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.934706][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 211.993912][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 212.013330][ T6441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6441 comm=syz.0.709 [ 212.033779][ T6450] loop3: detected capacity change from 0 to 1024 [ 212.049521][ T6450] EXT4-fs: inline encryption not supported [ 212.070390][ T6450] EXT4-fs: Ignoring removed nobh option [ 212.087785][ T6450] EXT4-fs: Ignoring removed bh option [ 212.091030][ T6458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.121661][ T6450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.124542][ T10] hid_parser_main: 91 callbacks suppressed [ 212.124560][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.148416][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.148479][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.714'. [ 212.155975][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.172390][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.194233][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.199427][ T6471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6471 comm=syz.2.717 [ 212.202134][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.221724][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.229101][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.236600][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.244065][ T10] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 212.291751][ T10] hid-generic 0000:0000:0004.001B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 212.332739][ T6464] loop0: detected capacity change from 0 to 1024 [ 212.373040][ T6477] validate_nla: 2 callbacks suppressed [ 212.373056][ T6477] netlink: 'syz.1.718': attribute type 21 has an invalid length. [ 212.394105][ T6477] netlink: 128 bytes leftover after parsing attributes in process `syz.1.718'. [ 212.403475][ T6477] netlink: 'syz.1.718': attribute type 5 has an invalid length. [ 212.419257][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.631824][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.289343][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.434474][ T6497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.471479][ T6504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6504 comm=syz.3.728 [ 214.573295][ T6518] loop3: detected capacity change from 0 to 512 [ 214.605127][ T6518] EXT4-fs: Ignoring removed bh option [ 214.616986][ T6522] lo speed is unknown, defaulting to 1000 [ 214.632717][ T6518] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.647261][ T6522] lo speed is unknown, defaulting to 1000 [ 214.661544][ T6522] dummy0 speed is unknown, defaulting to 1000 [ 214.687777][ T6518] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 214.743479][ T6527] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 215.353720][ T6527] team0: entered promiscuous mode [ 215.557685][ T4266] hid-generic 0000:0000:0004.001C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 215.590373][ T6527] team_slave_0: entered promiscuous mode [ 215.606367][ T6527] team_slave_1: entered promiscuous mode [ 215.634610][ T6527] team0: entered allmulticast mode [ 215.657697][ T6527] team_slave_0: entered allmulticast mode [ 215.681255][ T6527] team_slave_1: entered allmulticast mode [ 215.715198][ T6527] bridge0: port 2(team0) entered blocking state [ 215.745472][ T6527] bridge0: port 2(team0) entered disabled state [ 215.768172][ T6527] bridge0: port 2(team0) entered blocking state [ 215.774457][ T6527] bridge0: port 2(team0) entered forwarding state [ 215.828576][ T6529] loop1: detected capacity change from 0 to 1024 [ 215.904482][ T6543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6543 comm=syz.0.740 [ 216.036662][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.124754][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.223707][ T6550] lo speed is unknown, defaulting to 1000 [ 216.267607][ T6554] loop3: detected capacity change from 0 to 1024 [ 216.348753][ T6550] lo speed is unknown, defaulting to 1000 [ 216.412069][ T6554] EXT4-fs: Ignoring removed nobh option [ 216.428447][ T6554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.434469][ T6550] dummy0 speed is unknown, defaulting to 1000 [ 216.501997][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.567192][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.670549][ T6554] __nla_validate_parse: 15 callbacks suppressed [ 216.670567][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 216.832200][ T6593] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 216.845435][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.762'. [ 216.861062][ T6593] netlink: 224 bytes leftover after parsing attributes in process `syz.0.761'. [ 217.010374][ T6611] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 217.095808][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.104888][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.114485][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.123630][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.132908][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.141834][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 217.710182][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 217.986709][ T6626] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.031541][ T6626] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 218.372846][ T28] audit: type=1400 audit(1774650199.165:1331): avc: denied { getopt } for pid=6651 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.429740][ T28] audit: type=1400 audit(1774650199.185:1332): avc: denied { getopt } for pid=6653 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.492025][ T6661] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 218.523000][ T6662] netlink: 'syz.0.792': attribute type 8 has an invalid length. [ 218.704987][ T3387] hid_parser_main: 192 callbacks suppressed [ 218.705005][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.192510][ T6676] loop1: detected capacity change from 0 to 1024 [ 219.211630][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.219041][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.226853][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.234365][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.241796][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.249301][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.256760][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.264162][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.271572][ T3387] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 219.280065][ T3387] hid-generic 0000:0000:0004.001D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 219.328233][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.356204][ T6686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6686 comm=syz.4.801 [ 219.402237][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.478730][ T28] audit: type=1400 audit(1774650200.265:1333): avc: denied { setopt } for pid=6691 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.546317][ T6698] netlink: 'syz.1.805': attribute type 13 has an invalid length. [ 219.572118][ T6698] gretap0: refused to change device tx_queue_len [ 219.588661][ T6698] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 219.714045][ T6698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6698 comm=syz.1.805 [ 220.044928][ T28] audit: type=1326 audit(1774650200.835:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.102346][ T28] audit: type=1326 audit(1774650200.855:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.125914][ T28] audit: type=1326 audit(1774650200.855:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.149461][ T28] audit: type=1326 audit(1774650200.855:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.184884][ T28] audit: type=1326 audit(1774650200.865:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.231770][ T28] audit: type=1326 audit(1774650200.865:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.299963][ T28] audit: type=1326 audit(1774650200.865:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.1.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 220.362400][ T6711] loop1: detected capacity change from 0 to 128 [ 220.423429][ T6713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.712699][ T6724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6724 comm=syz.1.814 [ 220.761056][ T6725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6725 comm=syz.4.815 [ 220.997731][ T6748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.084242][ T6766] loop0: detected capacity change from 0 to 512 [ 221.254334][ T6766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.070176][ T6766] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 222.080330][ T6766] FAT-fs (loop0): Filesystem has been set read-only [ 223.251711][ T6778] __nla_validate_parse: 29 callbacks suppressed [ 223.251728][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 223.278234][ T6782] netlink: 'syz.1.833': attribute type 13 has an invalid length. [ 223.282232][ T6778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6778 comm=syz.0.832 [ 223.286025][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 223.312834][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6782 comm=syz.1.833 [ 223.341201][ T6787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.837'. [ 223.374691][ T6791] set match dimension is over the limit! [ 223.442249][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 223.451245][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 223.469683][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.480685][ T6790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.497539][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 223.497551][ T28] audit: type=1400 audit(1774650204.285:1543): avc: denied { bind } for pid=6799 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.659641][ T28] audit: type=1400 audit(1774650204.445:1544): avc: denied { read } for pid=6819 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.731125][ T6832] tmpfs: Bad value for 'mpol' [ 223.812593][ T6842] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 223.868532][ T6844] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 223.929515][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 223.944321][ T28] audit: type=1400 audit(1774650204.735:1545): avc: denied { sqpoll } for pid=6873 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 224.006546][ T6884] netlink: 132 bytes leftover after parsing attributes in process `syz.0.879'. [ 224.092686][ T6905] netlink: 220 bytes leftover after parsing attributes in process `syz.0.885'. [ 224.184540][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6900 comm=syz.4.884 [ 224.192949][ T6896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.324619][ T28] audit: type=1400 audit(1774650205.105:1546): avc: denied { read } for pid=6947 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.365157][ T28] audit: type=1400 audit(1774650205.115:1547): avc: denied { bind } for pid=6949 comm="syz.0.895" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.418535][ T28] audit: type=1400 audit(1774650205.115:1548): avc: denied { name_bind } for pid=6949 comm="syz.0.895" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 224.483719][ T28] audit: type=1400 audit(1774650205.115:1549): avc: denied { node_bind } for pid=6949 comm="syz.0.895" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 224.576318][ T3387] hid_parser_main: 91 callbacks suppressed [ 224.576336][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.577003][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6980 comm=syz.0.903 [ 224.592351][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.662022][ T6985] loop3: detected capacity change from 0 to 1024 [ 224.747440][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.774108][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.807952][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.825238][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.862861][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.870270][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.916620][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.924357][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.936467][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.944352][ T3387] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 224.954948][ T3387] hid-generic 0000:0000:0004.001E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 224.977069][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.981224][ T7034] fido_id[7034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.028199][ T28] audit: type=1326 audit(1774650205.815:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebda4c799 code=0x7ffc0000 [ 225.084067][ T28] audit: type=1326 audit(1774650205.815:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebda4c799 code=0x7ffc0000 [ 225.143330][ T7042] netlink: 'syz.0.909': attribute type 13 has an invalid length. [ 225.158950][ T7042] gretap0: refused to change device tx_queue_len [ 225.168129][ T28] audit: type=1326 audit(1774650205.815:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebda4c799 code=0x7ffc0000 [ 225.193843][ T7042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.228464][ T7047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7047 comm=syz.0.909 [ 225.256909][ T7050] loop3: detected capacity change from 0 to 128 [ 225.335198][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 225.344170][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'. [ 225.432684][ T7061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7061 comm=syz.4.915 [ 225.558209][ T7065] netlink: 'syz.3.918': attribute type 3 has an invalid length. [ 225.625647][ T7065] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 225.714177][ T7065] NCSI netlink: No device for ifindex 252 [ 225.939628][ T7095] loop3: detected capacity change from 0 to 8192 [ 225.960899][ T7110] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 225.974147][ T7110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.018449][ T3394] hid-generic 0000:0000:0004.001F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 226.116470][ T7125] tipc: Trying to set illegal importance in message [ 226.146943][ T7127] netlink: 'syz.4.946': attribute type 13 has an invalid length. [ 226.188613][ T7114] loop0: detected capacity change from 0 to 1024 [ 226.209537][ T7127] gretap0: refused to change device tx_queue_len [ 226.228517][ T7127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 226.332735][ T7114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.412367][ T7150] loop1: detected capacity change from 0 to 1024 [ 226.418987][ T7150] EXT4-fs: Ignoring removed nobh option [ 226.421493][ T7151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7151 comm=syz.4.946 [ 226.424595][ T7150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.464171][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.474965][ T7150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.492230][ T7139] erspan0: left promiscuous mode [ 226.497588][ T7139] erspan0: left allmulticast mode [ 226.698919][ T7139] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.861229][ T7147] lo speed is unknown, defaulting to 1000 [ 226.867319][ T7147] lo speed is unknown, defaulting to 1000 [ 226.873421][ T7147] dummy0 speed is unknown, defaulting to 1000 [ 227.264795][ T4266] lo speed is unknown, defaulting to 1000 [ 227.270539][ T4266] syz2: Port: 1 Link DOWN [ 227.275418][ T1394] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.327816][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.343608][ T1394] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.357443][ T1394] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.385127][ T7179] loop1: detected capacity change from 0 to 512 [ 227.391502][ T1394] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.406514][ T7179] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.422392][ T7179] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.956: Failed to acquire dquot type 1 [ 227.438445][ T7179] loop1: lost filesystem error report for type 5 error -117 [ 227.438660][ T7179] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.956: Failed to acquire dquot type 1 [ 227.446036][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 227.446066][ C1] EXT4-fs (loop1): last error at time 1774650208: ext4_acquire_dquot:7001 [ 227.472321][ T7179] loop1: lost filesystem error report for type 5 error -117 [ 227.474285][ T7179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.956: bg 0: block 248: padding at end of block bitmap is not set [ 227.511800][ T7179] loop1: lost filesystem error report for type 5 error -117 [ 227.511969][ T7179] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 227.558176][ T7179] loop1: lost filesystem error report for type 5 error -117 [ 227.558433][ T7179] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.956: Failed to acquire dquot type 1 [ 227.607251][ T7179] loop1: lost filesystem error report for type 5 error -117 [ 227.607445][ T7179] EXT4-fs (loop1): 1 orphan inode deleted [ 227.640337][ T7179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.768951][ T7179] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 227.861799][ T7179] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 227.885321][ T7204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7204 comm=syz.4.967 [ 227.955067][ T7179] ext4 filesystem being remounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.117888][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.213714][ T7213] loop1: detected capacity change from 0 to 1024 [ 228.228088][ T7213] EXT4-fs: Ignoring removed bh option [ 228.244266][ T7213] EXT4-fs: Ignoring removed oldalloc option [ 228.251547][ T7213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.289681][ T7213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 228.297981][ T7213] System zones: 0-1, 3-36 [ 228.303105][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.330836][ T7213] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.971: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 228.380146][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.465881][ T7233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.473115][ T7233] IPv6: NLM_F_CREATE should be set when creating new route [ 228.480315][ T7233] IPv6: NLM_F_CREATE should be set when creating new route [ 228.528116][ T28] kauditd_printk_skb: 433 callbacks suppressed [ 228.528131][ T28] audit: type=1326 audit(1774650209.315:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f441115c799 code=0x7ffc0000 [ 228.587384][ T7246] netlink: 'syz.0.987': attribute type 13 has an invalid length. [ 228.601834][ T7250] loop3: detected capacity change from 0 to 128 [ 228.602605][ T7246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7246 comm=syz.0.987 [ 228.634984][ T7252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.674708][ T7252] __nla_validate_parse: 15 callbacks suppressed [ 228.674737][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.990'. [ 229.857010][ T7293] netlink: 140 bytes leftover after parsing attributes in process `syz.4.999'. [ 230.479006][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.487937][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.497074][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.505943][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.514836][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.523705][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 230.597679][ T7293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.999'. [ 230.857134][ T7309] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 230.882514][ T7325] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 230.920402][ T28] audit: type=1400 audit(1774650211.705:1981): avc: denied { relabelto } for pid=7323 comm="syz.3.1014" name="memfd:0000:00:10.0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 230.927371][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 230.953142][ T28] audit: type=1400 audit(1774650211.745:1982): avc: denied { associate } for pid=7323 comm="syz.3.1014" name="memfd:0000:00:10.0" dev="tmpfs" ino=244 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 231.047562][ T7340] loop1: detected capacity change from 0 to 512 [ 231.067916][ T7340] EXT4-fs: Ignoring removed bh option [ 231.076663][ T7340] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.220234][ T7347] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 231.260302][ T7340] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 231.593707][ T7370] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 231.669060][ T28] audit: type=1400 audit(1774650212.445:1983): avc: denied { create } for pid=7375 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 231.697920][ T28] audit: type=1400 audit(1774650212.445:1984): avc: denied { ioctl } for pid=7375 comm="syz.0.1035" path="socket:[18775]" dev="sockfs" ino=18775 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 231.734753][ T28] audit: type=1400 audit(1774650212.525:1985): avc: denied { ioctl } for pid=7379 comm="syz.0.1037" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.797890][ T7378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7378 comm=syz.4.1036 [ 231.952125][ T7415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7415 comm=syz.3.1052 [ 232.229106][ T7432] netlink: 'syz.0.1058': attribute type 13 has an invalid length. [ 232.415793][ T28] audit: type=1400 audit(1774650213.205:1986): avc: denied { append } for pid=7441 comm="syz.3.1062" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.467093][ T7432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7432 comm=syz.0.1058 [ 232.637469][ T7470] loop1: detected capacity change from 0 to 512 [ 232.647596][ T7470] EXT4-fs: Ignoring removed i_version option [ 232.657333][ T7470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.676606][ T7470] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 232.691179][ T7478] sctp: [Deprecated]: syz.0.1078 (pid 7478) Use of int in maxseg socket option. [ 232.691179][ T7478] Use struct sctp_assoc_value instead [ 232.705977][ T7470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c042e118, mo2=0002] [ 232.715352][ T7470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 232.722300][ T7470] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 232.750261][ T7470] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 232.794538][ T7482] netlink: 'syz.0.1081': attribute type 13 has an invalid length. [ 232.811668][ T7470] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 232.932768][ T7470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1075: bg 0: block 40: padding at end of block bitmap is not set [ 232.967260][ T7470] loop1: lost filesystem error report for type 5 error -117 [ 232.967648][ T7470] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 232.975053][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 232.975072][ C0] EXT4-fs (loop1): initial error at time 1774650213: ext4_validate_block_bitmap:441 [ 232.975093][ C0] EXT4-fs (loop1): last error at time 1774650213: ext4_validate_block_bitmap:441 [ 232.986703][ T7491] lo speed is unknown, defaulting to 1000 [ 233.014915][ T7491] lo speed is unknown, defaulting to 1000 [ 233.020488][ T7470] loop1: lost filesystem error report for type 5 error -117 [ 233.021016][ T7491] dummy0 speed is unknown, defaulting to 1000 [ 233.046197][ T7470] EXT4-fs (loop1): 1 truncate cleaned up [ 233.062952][ T7470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.241890][ T7489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7489 comm=syz.0.1081 [ 233.988641][ T7509] __nla_validate_parse: 26 callbacks suppressed [ 233.988707][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.003951][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.014081][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.023206][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.032317][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.041361][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 234.142315][ T7511] netlink: 'syz.3.1091': attribute type 13 has an invalid length. [ 234.152087][ T7511] netlink: 'syz.3.1091': attribute type 27 has an invalid length. [ 234.162831][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.182555][ T7511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7511 comm=syz.3.1091 [ 234.210585][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 234.234729][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1094'. [ 234.403129][ T7529] lo speed is unknown, defaulting to 1000 [ 234.409134][ T7529] lo speed is unknown, defaulting to 1000 [ 234.415151][ T7529] dummy0 speed is unknown, defaulting to 1000 [ 234.445823][ T7529] loop0: detected capacity change from 0 to 1024 [ 234.452456][ T7529] EXT4-fs: Ignoring removed nobh option [ 234.458037][ T7529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.473735][ T7529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.534525][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 235.121179][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.162298][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 235.312777][ T7558] netlink: 'syz.0.1109': attribute type 8 has an invalid length. [ 235.385612][ T28] audit: type=1400 audit(1774650216.175:1987): avc: denied { ioctl } for pid=7569 comm="syz.2.1115" path="socket:[19116]" dev="sockfs" ino=19116 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.538002][ T28] audit: type=1400 audit(1774650216.245:1988): avc: denied { getopt } for pid=7575 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.612612][ T28] audit: type=1400 audit(1774650216.345:1989): avc: denied { getopt } for pid=7593 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.617384][ T7605] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 235.650091][ T7606] loop3: detected capacity change from 0 to 256 [ 235.730743][ T7615] loop0: detected capacity change from 0 to 128 [ 235.904821][ T7622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.711131][ T7639] netlink: 'syz.4.1145': attribute type 13 has an invalid length. [ 236.746473][ T7639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7639 comm=syz.4.1145 [ 236.920312][ T7651] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 237.058742][ T7663] netlink: 'syz.3.1156': attribute type 13 has an invalid length. [ 237.091071][ T7663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7663 comm=syz.3.1156 [ 237.260768][ T7686] netlink: 'syz.3.1165': attribute type 13 has an invalid length. [ 237.388726][ T7692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7692 comm=syz.3.1165 [ 237.466735][ T7702] loop1: detected capacity change from 0 to 512 [ 237.474358][ T7702] EXT4-fs: Ignoring removed bh option [ 237.510094][ T7702] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.552977][ T7706] netlink: 'syz.3.1173': attribute type 13 has an invalid length. [ 237.561239][ T7702] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 237.571575][ T7706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7706 comm=syz.3.1173 [ 237.645730][ T7718] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 237.658700][ T28] audit: type=1400 audit(1774650218.445:1990): avc: denied { cpu } for pid=7720 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 237.845598][ T7737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.857065][ T7742] netlink: 'syz.0.1186': attribute type 13 has an invalid length. [ 237.898937][ T7742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7742 comm=syz.0.1186 [ 237.953573][ T7744] netlink: 'syz.2.1188': attribute type 13 has an invalid length. [ 237.963350][ T7744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7744 comm=syz.2.1188 [ 238.056829][ T7756] loop0: detected capacity change from 0 to 736 [ 238.156494][ T28] audit: type=1400 audit(1774650218.945:1991): avc: denied { nlmsg_read } for pid=7759 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.793455][ T7752] lo speed is unknown, defaulting to 1000 [ 239.024784][ T7752] lo speed is unknown, defaulting to 1000 [ 239.063295][ T7752] dummy0 speed is unknown, defaulting to 1000 [ 239.103904][ T7757] loop3: detected capacity change from 0 to 1024 [ 239.127255][ T7778] netlink: 'syz.0.1201': attribute type 13 has an invalid length. [ 239.144842][ T7757] EXT4-fs: Ignoring removed nobh option [ 239.164166][ T7757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.188598][ T7781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.238636][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.381710][ T7793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7793 comm=syz.0.1201 [ 239.439081][ T28] audit: type=1400 audit(1774650220.225:1992): avc: denied { map } for pid=7792 comm="syz.1.1205" path="socket:[20636]" dev="sockfs" ino=20636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.519916][ T28] audit: type=1400 audit(1774650220.225:1993): avc: denied { read } for pid=7792 comm="syz.1.1205" path="socket:[20636]" dev="sockfs" ino=20636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.583872][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.788585][ T28] audit: type=1400 audit(1774650220.575:1994): avc: denied { append } for pid=7812 comm="syz.0.1215" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.902591][ T28] audit: type=1400 audit(1774650220.695:1995): avc: denied { accept } for pid=7818 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.977997][ T7826] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 240.272255][ T7874] __nla_validate_parse: 11 callbacks suppressed [ 240.272270][ T7874] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1244'. [ 240.313785][ T7872] lo speed is unknown, defaulting to 1000 [ 240.319846][ T7872] lo speed is unknown, defaulting to 1000 [ 240.325931][ T7872] dummy0 speed is unknown, defaulting to 1000 [ 240.361665][ T7872] loop0: detected capacity change from 0 to 1024 [ 240.362527][ T7883] netlink: 'syz.2.1246': attribute type 13 has an invalid length. [ 240.368449][ T7872] EXT4-fs: Ignoring removed nobh option [ 240.381609][ T7872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.406617][ T7872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.472242][ T7883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7883 comm=syz.2.1246 [ 240.670435][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 240.680256][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 240.744031][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.766681][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7905 comm=syz.3.1252 [ 240.800739][ T7907] loop0: detected capacity change from 0 to 512 [ 240.837812][ T7907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.875121][ T7907] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.895719][ T28] audit: type=1400 audit(1774650221.685:1996): avc: denied { remove_name } for pid=7906 comm="syz.0.1249" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.924708][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.936621][ T28] audit: type=1400 audit(1774650221.685:1997): avc: denied { rmdir } for pid=7906 comm="syz.0.1249" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.966789][ T7920] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 240.982655][ T7927] program syz.1.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.077089][ T7929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7929 comm=syz.0.1259 [ 241.261707][ T7966] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.284770][ T28] audit: type=1400 audit(1774650222.075:1998): avc: denied { create } for pid=7967 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.333121][ T28] audit: type=1400 audit(1774650222.075:1999): avc: denied { write } for pid=7967 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.371047][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7976 comm=syz.1.1283 [ 241.428877][ T7979] lo speed is unknown, defaulting to 1000 [ 241.434919][ T7979] lo speed is unknown, defaulting to 1000 [ 241.440932][ T7979] dummy0 speed is unknown, defaulting to 1000 [ 241.474456][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 241.548610][ T7985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.621932][ T7989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.793263][ T8002] loop3: detected capacity change from 0 to 512 [ 241.806734][ T8002] EXT4-fs: Ignoring removed bh option [ 241.819747][ T8002] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.841651][ T8002] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 242.074481][ T28] audit: type=1400 audit(1774650222.865:2000): avc: denied { read } for pid=8004 comm="syz.0.1296" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 242.172667][ T28] audit: type=1326 audit(1774650222.965:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 242.220681][ T8013] validate_nla: 3 callbacks suppressed [ 242.220695][ T8013] netlink: 'syz.0.1300': attribute type 13 has an invalid length. [ 242.234359][ T28] audit: type=1326 audit(1774650222.985:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 242.274980][ T28] audit: type=1326 audit(1774650222.985:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 242.317023][ T8014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8014 comm=syz.0.1300 [ 242.332443][ T28] audit: type=1326 audit(1774650222.985:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 242.356639][ T28] audit: type=1326 audit(1774650222.985:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a338c799 code=0x7ffc0000 [ 242.500332][ T8025] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 242.643481][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1310'. [ 242.767298][ T8055] loop3: detected capacity change from 0 to 128 [ 242.783607][ T8057] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 242.837628][ T8062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.948440][ T8066] loop1: detected capacity change from 0 to 512 [ 242.956703][ T8066] EXT4-fs: Ignoring removed bh option [ 242.963525][ T8066] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.995311][ T8066] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 244.109533][ T8080] loop0: detected capacity change from 0 to 512 [ 244.176311][ T8080] EXT4-fs: Ignoring removed bh option [ 244.231704][ T8080] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.282533][ T8080] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 244.468992][ T8100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.682115][ T8126] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.1345'. [ 244.694822][ T8126] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.1345'. [ 244.827547][ T8148] sctp: [Deprecated]: syz.2.1351 (pid 8148) Use of int in maxseg socket option. [ 244.827547][ T8148] Use struct sctp_assoc_value instead [ 244.916942][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 245.120537][ T8184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1369'. [ 245.126713][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 245.160458][ T8190] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 245.266415][ T8207] netlink: 'syz.3.1379': attribute type 2 has an invalid length. [ 245.287309][ T8207] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 245.306160][ T8210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.423604][ T8228] __nla_validate_parse: 3 callbacks suppressed [ 245.423621][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 245.442902][ T8228] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1387'. [ 245.452221][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 245.484973][ T8233] loop1: detected capacity change from 0 to 256 [ 245.571147][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1398'. [ 245.613166][ T8254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.793010][ T8291] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 245.835566][ T8299] netlink: 'syz.4.1419': attribute type 13 has an invalid length. [ 245.893064][ T8306] netlink: 'syz.1.1422': attribute type 2 has an invalid length. [ 245.901128][ T8306] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 245.914505][ T8307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.962227][ T8299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8299 comm=syz.4.1419 [ 246.048438][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.057508][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.067189][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.076213][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.085408][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.094434][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.395301][ T8328] netlink: 'syz.3.1431': attribute type 13 has an invalid length. [ 246.411408][ T8325] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 246.553370][ T8330] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 246.591423][ T8328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8328 comm=syz.3.1431 [ 246.642582][ T8347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.651226][ T8349] loop0: detected capacity change from 0 to 512 [ 246.658077][ T8349] EXT4-fs: Ignoring removed bh option [ 246.664089][ T8349] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.683166][ T8349] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 246.817205][ T8365] loop3: detected capacity change from 0 to 128 [ 247.644339][ T8395] netlink: 'syz.1.1456': attribute type 32 has an invalid length. [ 247.964112][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 247.964126][ T28] audit: type=1400 audit(1774650228.755:2008): avc: denied { connect } for pid=8409 comm="syz.1.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.121663][ T8421] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 248.384659][ T8441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.750707][ T28] audit: type=1400 audit(1774650229.535:2009): avc: denied { getopt } for pid=8491 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.923966][ T28] audit: type=1400 audit(1774650229.715:2010): avc: denied { ioctl } for pid=8531 comm="syz.2.1518" path="socket:[22127]" dev="sockfs" ino=22127 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.975704][ T8538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.140395][ T8558] loop0: detected capacity change from 0 to 512 [ 249.157686][ T8558] EXT4-fs: Ignoring removed bh option [ 249.196546][ T8558] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.233584][ T8558] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 249.319744][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.517462][ T8592] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.583127][ T28] audit: type=1400 audit(1774650230.375:2011): avc: denied { getopt } for pid=8595 comm="syz.1.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.759690][ T8612] lo speed is unknown, defaulting to 1000 [ 249.766300][ T8612] lo speed is unknown, defaulting to 1000 [ 249.772778][ T8612] dummy0 speed is unknown, defaulting to 1000 [ 249.831259][ T28] audit: type=1400 audit(1774650230.605:2012): avc: denied { ioctl } for pid=8619 comm="syz.3.1556" path="socket:[23025]" dev="sockfs" ino=23025 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.888909][ T28] audit: type=1400 audit(1774650230.675:2013): avc: denied { append } for pid=8626 comm="syz.3.1559" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.020287][ T8632] netlink: 'syz.0.1562': attribute type 12 has an invalid length. [ 250.199698][ T8652] netlink: 'syz.3.1570': attribute type 2 has an invalid length. [ 250.348208][ T8660] blktrace: Concurrent blktraces are not allowed on sg0 [ 250.428059][ T8672] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.448388][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.455608][ T8672] IPv6: NLM_F_CREATE should be set when creating new route [ 250.491956][ T8680] __nla_validate_parse: 15 callbacks suppressed [ 250.491973][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 250.530183][ T8682] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 250.570257][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'. [ 250.625630][ T8688] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 250.669430][ T28] audit: type=1400 audit(1774650231.455:2014): avc: denied { create } for pid=8694 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.710401][ T28] audit: type=1400 audit(1774650231.485:2015): avc: denied { write } for pid=8694 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.739849][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'. [ 250.857655][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 250.866662][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 250.876042][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 250.885164][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 250.894319][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 250.903328][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 251.372780][ T8713] loop3: detected capacity change from 0 to 8192 [ 251.402353][ T8719] netlink: 'syz.0.1600': attribute type 13 has an invalid length. [ 251.436069][ T3303] loop3: p3 p4 < > [ 251.445241][ T3303] loop3: p3 size 218103808 extends beyond EOD, truncated [ 251.469605][ T8713] loop3: p3 p4 < > [ 251.474319][ T8724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8724 comm=syz.0.1600 [ 251.487081][ T8713] loop3: p3 size 218103808 extends beyond EOD, truncated [ 251.535694][ T28] audit: type=1400 audit(1774650232.315:2016): avc: denied { mounton } for pid=8712 comm="syz.3.1597" path="/dev/loop3p3" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.563025][ T28] audit: type=1400 audit(1774650232.315:2017): avc: denied { mount } for pid=8712 comm="syz.3.1597" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 251.611127][ T3730] udevd[3730]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 251.631904][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 251.674092][ T3730] udevd[3730]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 251.685350][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 251.784198][ T8753] netlink: 'syz.0.1615': attribute type 2 has an invalid length. [ 251.811360][ T8753] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 251.865806][ T8763] netlink: 'syz.1.1619': attribute type 13 has an invalid length. [ 251.883447][ T8767] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 251.886197][ T8763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8763 comm=syz.1.1619 [ 252.008980][ T8780] loop3: detected capacity change from 0 to 512 [ 252.026114][ T8780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.059876][ T8780] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1629: invalid indirect mapped block 4294967295 (level 1) [ 252.074289][ T8780] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.074999][ T8780] EXT4-fs (loop3): Remounting filesystem read-only [ 252.084151][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 252.084166][ C1] EXT4-fs (loop3): initial error at time 1774650232: ext4_free_branches:1023: inode 11 [ 252.084219][ C1] EXT4-fs (loop3): last error at time 1774650232: ext4_free_branches:1023: inode 11 [ 252.120213][ T8780] EXT4-fs (loop3): 2 truncates cleaned up [ 252.126525][ T8780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.242665][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.253316][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.303296][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1637'. [ 252.560993][ T8813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8813 comm=syz.3.1643 [ 252.650549][ T8833] loop3: detected capacity change from 0 to 128 [ 252.679358][ T8833] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.707578][ T8833] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.760752][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.788826][ T8858] validate_nla: 3 callbacks suppressed [ 252.788844][ T8858] netlink: 'syz.4.1664': attribute type 13 has an invalid length. [ 252.799804][ T8862] SET target dimension over the limit! [ 253.057881][ T8870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8870 comm=syz.4.1664 [ 253.111929][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 253.111949][ T28] audit: type=1400 audit(1774650233.905:2022): avc: denied { create } for pid=8873 comm="syz.3.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 253.326367][ T8883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.487292][ T8908] netlink: 'syz.1.1684': attribute type 13 has an invalid length. [ 253.502343][ T8908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8908 comm=syz.1.1684 [ 253.549604][ T8917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.891695][ T8933] netlink: 'syz.2.1694': attribute type 13 has an invalid length. [ 253.908327][ T8935] loop0: detected capacity change from 0 to 512 [ 254.057908][ T8942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8942 comm=syz.2.1694 [ 254.081920][ T8940] loop1: detected capacity change from 0 to 1024 [ 254.097755][ T8940] EXT4-fs: Ignoring removed bh option [ 254.123461][ T8940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.145144][ T8940] EXT4-fs error (device loop1): ext4_lookup:1777: inode #2: comm syz.1.1696: bad inode number: 15 [ 254.156354][ T8940] EXT4-fs (loop1): Remounting filesystem read-only [ 254.174187][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.224225][ T8957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.236628][ T8955] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 254.244734][ T8962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.294477][ T28] audit: type=1400 audit(1774650235.085:2023): avc: denied { write } for pid=8965 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.340893][ T8968] loop0: detected capacity change from 0 to 512 [ 254.364717][ T28] audit: type=1400 audit(1774650235.155:2024): avc: denied { getopt } for pid=8975 comm="syz.3.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.403132][ T8968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.427686][ T8968] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.459642][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.472720][ T8988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.499965][ T8992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.590230][ T9008] loop3: detected capacity change from 0 to 512 [ 254.630765][ T9011] loop1: detected capacity change from 0 to 512 [ 254.644263][ T9008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.657710][ T9011] EXT4-fs: Ignoring removed bh option [ 254.696883][ T9008] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.720419][ T9008] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1726: corrupted xattr block 33: invalid ea_ino [ 254.734585][ T9008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 254.744365][ T9008] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1726: corrupted xattr block 33: invalid ea_ino [ 254.758222][ T9008] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1726: corrupted xattr block 33: invalid ea_ino [ 254.772694][ T9008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 254.782777][ T28] audit: type=1400 audit(1774650235.575:2025): avc: denied { setattr } for pid=9006 comm="syz.3.1726" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.806888][ T9011] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.818001][ T9008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 254.892154][ T9011] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 254.920220][ T9008] Quota error (device loop3): write_blk: dquota write failed [ 254.972881][ T9008] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 255.048085][ T9008] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1726: Failed to acquire dquot type 0 [ 255.092653][ T9028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.125607][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.166514][ T9036] netlink: 'syz.0.1737': attribute type 13 has an invalid length. [ 255.228089][ T9036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9036 comm=syz.0.1737 [ 255.456078][ T9077] netlink: 'syz.1.1758': attribute type 13 has an invalid length. [ 255.482936][ T28] audit: type=1400 audit(1774650236.275:2026): avc: denied { append } for pid=9082 comm="syz.3.1760" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 255.547466][ T9077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9077 comm=syz.1.1758 [ 255.619881][ T9101] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 255.661961][ T9110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.676703][ T28] audit: type=1400 audit(1774650236.465:2027): avc: denied { write } for pid=9111 comm="syz.0.1772" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 255.700091][ T28] audit: type=1400 audit(1774650236.465:2028): avc: denied { open } for pid=9111 comm="syz.0.1772" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 255.772778][ T9123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.856329][ T9131] __nla_validate_parse: 19 callbacks suppressed [ 255.856344][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 255.871815][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 255.881650][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 255.890618][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 255.899903][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 255.908873][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 256.460714][ T9173] netlink: 'syz.3.1801': attribute type 13 has an invalid length. [ 256.478064][ T9176] loop1: detected capacity change from 0 to 512 [ 256.502386][ T9176] EXT4-fs: Ignoring removed bh option [ 256.534326][ T9176] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.553584][ T9176] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 256.562868][ T9173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9173 comm=syz.3.1801 [ 256.589038][ T9188] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 256.678362][ T9199] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 256.727734][ T9199] bond0: (slave bridge_slave_1): Releasing backup interface [ 256.775088][ T9199] team0: Port device bridge_slave_1 added [ 256.894785][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 256.903776][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 256.913587][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 256.922653][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 256.948659][ T9222] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 257.077956][ T9242] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 257.104654][ T9242] bond0: (slave bridge_slave_1): Releasing backup interface [ 257.133685][ T9242] bridge_slave_1: entered allmulticast mode [ 257.155930][ T9242] team0: Port device bridge_slave_1 added [ 257.597933][ T9306] lo speed is unknown, defaulting to 1000 [ 257.619423][ T9306] lo speed is unknown, defaulting to 1000 [ 257.666922][ T9306] dummy0 speed is unknown, defaulting to 1000 [ 257.850997][ T9320] netlink: 'syz.2.1867': attribute type 13 has an invalid length. [ 257.883237][ T9320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9320 comm=syz.2.1867 [ 258.452348][ T28] audit: type=1400 audit(1774650239.245:2029): avc: denied { setcheckreqprot } for pid=9331 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 258.612222][ T9351] loop1: detected capacity change from 0 to 512 [ 258.625297][ T9351] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.669285][ T9351] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 258.710633][ T9351] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1877: invalid indirect mapped block 33554432 (level 0) [ 258.725013][ T9351] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 258.726872][ T9351] EXT4-fs (loop1): Remounting filesystem read-only [ 258.736079][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 258.736124][ C0] EXT4-fs (loop1): initial error at time 1774650239: ext4_free_branches:1023: inode 13 [ 258.736154][ C0] EXT4-fs (loop1): last error at time 1774650239: ext4_free_branches:1023: inode 13 [ 258.771737][ T9351] EXT4-fs (loop1): 1 truncate cleaned up [ 258.773105][ T9370] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 258.777815][ T9351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.801596][ T9351] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 258.860392][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.941198][ T28] audit: type=1400 audit(1774650239.725:2030): avc: denied { module_load } for pid=9376 comm="syz.0.1892" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 258.966983][ T9377] kernel read not supported for file /policy (pid: 9377 comm: syz.0.1892) [ 259.298076][ T28] audit: type=1400 audit(1774650240.085:2031): avc: denied { write } for pid=9434 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 259.402104][ T9451] loop0: detected capacity change from 0 to 1024 [ 259.440923][ T9451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.510548][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.562863][ T9474] loop3: detected capacity change from 0 to 256 [ 259.582430][ T9474] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.614156][ T9479] xt_TCPMSS: Only works on TCP SYN packets [ 259.645606][ T9481] xt_ct_set_helper: 2 callbacks suppressed [ 259.645670][ T9481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.735758][ T9519] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 260.944599][ T9550] tmpfs: Bad value for 'mpol' [ 260.952868][ T9548] __nla_validate_parse: 35 callbacks suppressed [ 260.952882][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 261.008670][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 261.076842][ T9561] lo speed is unknown, defaulting to 1000 [ 261.083235][ T9561] lo speed is unknown, defaulting to 1000 [ 261.089469][ T9561] dummy0 speed is unknown, defaulting to 1000 [ 261.107297][ T9566] loop0: detected capacity change from 0 to 1024 [ 261.161026][ T9566] EXT4-fs: Ignoring removed nobh option [ 261.171650][ T9566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.217339][ T9566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.273811][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 261.419341][ T9606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.697189][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2008'. [ 261.742408][ T9630] loop3: detected capacity change from 0 to 128 [ 261.766741][ T9630] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.784114][ T9630] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.857068][ T9638] loop1: detected capacity change from 0 to 512 [ 261.889198][ T9638] EXT4-fs: Ignoring removed bh option [ 261.915485][ T9638] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.966275][ T9638] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 261.967733][ T9650] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 262.308810][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 262.322004][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2030'. [ 262.497661][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 262.515400][ T9689] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 262.522814][ T9694] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2037'. [ 262.623490][ T9706] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2043'. [ 262.826923][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 263.017968][ T9760] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 263.125011][ T9773] lo: entered allmulticast mode [ 263.131018][ T9773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.211420][ T28] audit: type=1400 audit(1774650243.985:2032): avc: denied { read } for pid=9781 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.273550][ T28] audit: type=1400 audit(1774650244.065:2033): avc: denied { accept } for pid=9794 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.410132][ T9811] netlink: 'syz.3.2091': attribute type 13 has an invalid length. [ 263.481896][ T9820] netlink: 'syz.4.2095': attribute type 4 has an invalid length. [ 263.539942][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9811 comm=syz.3.2091 [ 263.570680][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.650146][ T9857] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 264.751132][ T28] audit: type=1400 audit(1774650245.535:2034): avc: denied { read } for pid=9878 comm="syz.1.2120" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 264.773968][ T9882] loop0: detected capacity change from 0 to 512 [ 264.792026][ T9882] EXT4-fs: Ignoring removed bh option [ 264.821404][ T28] audit: type=1400 audit(1774650245.535:2035): avc: denied { open } for pid=9878 comm="syz.1.2120" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 264.845854][ T9882] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.862307][ T28] audit: type=1400 audit(1774650245.565:2036): avc: denied { ioctl } for pid=9878 comm="syz.1.2120" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 264.891482][ T9882] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 264.933882][ T28] audit: type=1400 audit(1774650245.725:2037): avc: denied { setopt } for pid=9895 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.010426][ T9910] netlink: 'syz.3.2134': attribute type 2 has an invalid length. [ 265.279332][ T9941] netlink: 'syz.4.2149': attribute type 13 has an invalid length. [ 265.362721][ T9953] netlink: 'syz.3.2154': attribute type 6 has an invalid length. [ 265.409044][ T9941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9941 comm=syz.4.2149 [ 265.511709][ T9969] delete_channel: no stack [ 265.511928][ T28] audit: type=1400 audit(1774650246.305:2038): avc: denied { accept } for pid=9969 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 265.637053][ T9988] netlink: 'syz.0.2167': attribute type 13 has an invalid length. [ 265.650437][ T9991] netlink: 'syz.3.2168': attribute type 32 has an invalid length. [ 265.737262][ T9988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9988 comm=syz.0.2167 [ 266.192185][T10054] __nla_validate_parse: 37 callbacks suppressed [ 266.192203][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 266.446156][T10080] netlink: 'syz.3.2202': attribute type 13 has an invalid length. [ 266.549361][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 266.558392][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 266.567422][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 266.576417][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 266.585414][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 266.594444][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 267.205238][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2204'. [ 267.214389][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2204'. [ 267.225431][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2204'. [ 267.379835][T10113] netlink: 'syz.4.2216': attribute type 2 has an invalid length. [ 267.460933][T10125] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 267.601423][T10133] lo speed is unknown, defaulting to 1000 [ 267.607574][T10133] lo speed is unknown, defaulting to 1000 [ 267.617810][T10139] loop1: detected capacity change from 0 to 1024 [ 267.631623][T10139] EXT4-fs: Ignoring removed nobh option [ 267.637280][T10139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.659077][T10133] dummy0 speed is unknown, defaulting to 1000 [ 267.691492][T10148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.698699][T10148] IPv6: NLM_F_CREATE should be set when creating new route [ 267.705922][T10148] IPv6: NLM_F_CREATE should be set when creating new route [ 268.231979][T10139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.842900][ T28] audit: type=1400 audit(1774650249.635:2039): avc: denied { read } for pid=10232 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 268.918035][T10247] netlink: 'syz.2.2287': attribute type 24 has an invalid length. [ 269.088774][T10274] netlink: 'syz.4.2290': attribute type 13 has an invalid length. [ 269.267841][T10299] loop0: detected capacity change from 0 to 512 [ 269.303770][T10299] EXT4-fs: Ignoring removed bh option [ 269.337887][T10299] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.391621][T10299] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 269.521966][T10319] loop3: detected capacity change from 0 to 512 [ 269.528510][T10319] EXT4-fs: Ignoring removed bh option [ 269.551898][T10319] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.571991][T10319] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 269.894312][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.243434][ T28] audit: type=1326 audit(1774650251.035:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.1.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 270.270113][ T28] audit: type=1326 audit(1774650251.035:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.1.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 270.316445][ T28] audit: type=1326 audit(1774650251.035:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.1.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 270.358166][T10370] loop3: detected capacity change from 0 to 512 [ 270.382246][T10370] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.391706][T10370] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 270.395706][ T28] audit: type=1326 audit(1774650251.055:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.1.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430240c799 code=0x7ffc0000 [ 270.428819][T10370] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 270.475131][T10382] netlink: 'syz.2.2333': attribute type 13 has an invalid length. [ 270.483414][T10370] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 270.494252][T10370] System zones: 0-2, 18-18, 34-35 [ 270.504903][T10370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.538569][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.573412][T10392] loop1: detected capacity change from 0 to 512 [ 270.580201][T10392] EXT4-fs: Ignoring removed bh option [ 270.596224][T10392] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.651723][T10392] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 270.692474][T10407] loop3: detected capacity change from 0 to 512 [ 270.711738][T10407] EXT4-fs: Ignoring removed bh option [ 270.719012][T10407] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.731702][T10407] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 270.949860][ T28] audit: type=1326 audit(1774650251.735:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.0.2348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a338c799 code=0x0 [ 271.394314][T10449] __nla_validate_parse: 17 callbacks suppressed [ 271.394332][T10449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2360'. [ 271.586491][T10462] lo speed is unknown, defaulting to 1000 [ 271.592528][T10462] lo speed is unknown, defaulting to 1000 [ 271.598662][T10462] dummy0 speed is unknown, defaulting to 1000 [ 271.631843][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 273.303390][T10483] loop3: detected capacity change from 0 to 512 [ 273.310036][T10483] EXT4-fs: Ignoring removed bh option [ 273.331666][T10483] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.342234][T10483] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 273.516097][ T28] audit: type=1400 audit(1774650254.295:2045): avc: denied { shutdown } for pid=10502 comm="syz.0.2384" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.516309][T10501] loop1: detected capacity change from 0 to 1024 [ 273.590723][T10501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 273.596027][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 273.601222][T10501] System zones: 0-1, 3-36 [ 273.624399][T10501] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2382: bad orphan inode 134217728 [ 273.635117][T10501] loop1: lost filesystem error report for type 5 error -117 [ 273.637363][T10501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.730265][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.755502][ T3002] ================================================================== [ 273.763599][ T3002] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 273.771079][ T3002] [ 273.773398][ T3002] write to 0xffff88811bc98000 of 4 bytes by task 3303 on cpu 0: [ 273.781023][ T3002] d_make_discardable+0x4f/0xa0 [ 273.785861][ T3002] simple_unlink+0x68/0x80 [ 273.790273][ T3002] shmem_unlink+0x12d/0x140 [ 273.794781][ T3002] vfs_unlink+0x1c7/0x490 [ 273.799100][ T3002] filename_unlinkat+0x1e2/0x410 [ 273.804028][ T3002] __se_sys_unlink+0x2b/0xe0 [ 273.808611][ T3002] __x64_sys_unlink+0x1f/0x30 [ 273.813369][ T3002] x64_sys_call+0x2eb6/0x3020 [ 273.818041][ T3002] do_syscall_64+0x12c/0x370 [ 273.822621][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.828530][ T3002] [ 273.830837][ T3002] read to 0xffff88811bc98000 of 4 bytes by task 3002 on cpu 1: [ 273.838364][ T3002] path_lookupat+0x1d8/0x500 [ 273.842947][ T3002] filename_lookup+0x190/0x390 [ 273.847705][ T3002] do_readlinkat+0x74/0x2f0 [ 273.852203][ T3002] __x64_sys_readlink+0x47/0x60 [ 273.857046][ T3002] x64_sys_call+0x2b51/0x3020 [ 273.861715][ T3002] do_syscall_64+0x12c/0x370 [ 273.866298][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.872178][ T3002] [ 273.874494][ T3002] value changed: 0x08300080 -> 0x00004080 [ 273.880191][ T3002] [ 273.882497][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 273.888632][ T3002] CPU: 1 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 273.899122][ T3002] Tainted: [W]=WARN [ 273.902904][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.912942][ T3002] ==================================================================