last executing test programs: 1m51.361664673s ago: executing program 4 (id=113): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x100, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7fff, 0x57ef1528, 0x9, 0x10001, 0x2, "1412f474413e5c7750524e68a52031c63b578a"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000002c0)={0xfffc, 0x4, 0x0, 0xa, 0xfd, "a059046951a6c331"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 1m51.272372774s ago: executing program 4 (id=117): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 1m51.092146636s ago: executing program 4 (id=126): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280"], 0x48}}, 0x40000) 1m50.506676984s ago: executing program 4 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) 1m50.367169816s ago: executing program 4 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) mount_setattr(r2, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) 1m50.300837707s ago: executing program 4 (id=144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x8a00) fsync(r2) 1m41.8784665s ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m41.87828s ago: executing program 2 (id=371): socket(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707d, 0x400, 0x3, 0x287}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m41.737227702s ago: executing program 2 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m41.736847982s ago: executing program 2 (id=378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m41.706502723s ago: executing program 2 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2004000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 1m41.533074095s ago: executing program 2 (id=397): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 1m35.23323482s ago: executing program 32 (id=144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x8a00) fsync(r2) 1m26.484814028s ago: executing program 33 (id=397): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 1.327636292s ago: executing program 5 (id=3807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.237193514s ago: executing program 5 (id=3808): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.212382144s ago: executing program 5 (id=3809): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r1, 0x12) 1.109467275s ago: executing program 5 (id=3810): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xbd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 1.006576387s ago: executing program 6 (id=3813): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 890.300738ms ago: executing program 5 (id=3814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x2, 0x3, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) 781.67026ms ago: executing program 5 (id=3817): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 762.62409ms ago: executing program 0 (id=3819): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 756.74744ms ago: executing program 6 (id=3820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) 673.955601ms ago: executing program 0 (id=3822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 528.764663ms ago: executing program 1 (id=3824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x373d, &(0x7f0000000500)={0x0, 0x4, 0x1, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 490.483014ms ago: executing program 3 (id=3825): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffd, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x7, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x8, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0xc, 0x5, 0x0, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0x49b1, 0x401, 0x8, 0xd0a, 0x401, 0x1, 0x200, 0xc5d, 0x2]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 473.711214ms ago: executing program 0 (id=3827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x40000000000000}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 455.110165ms ago: executing program 3 (id=3828): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 415.346815ms ago: executing program 1 (id=3829): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 402.483435ms ago: executing program 6 (id=3830): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x87, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 383.597355ms ago: executing program 1 (id=3831): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffffff00}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 380.266466ms ago: executing program 0 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 343.560816ms ago: executing program 6 (id=3833): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 319.131526ms ago: executing program 3 (id=3834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x4c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x4c}}, 0x0) 314.806626ms ago: executing program 1 (id=3835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x800, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 228.757407ms ago: executing program 6 (id=3836): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) 228.491927ms ago: executing program 3 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 102.852969ms ago: executing program 1 (id=3838): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffd, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x7, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x8, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0xc, 0x5, 0x0, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0x49b1, 0x401, 0x8, 0xd0a, 0x401, 0x1, 0x200, 0xc5d, 0x2]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 102.723489ms ago: executing program 3 (id=3839): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 87.033399ms ago: executing program 6 (id=3840): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 76.709449ms ago: executing program 1 (id=3841): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r0, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 42.46089ms ago: executing program 0 (id=3842): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 14.10158ms ago: executing program 3 (id=3843): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x2d) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 0s ago: executing program 0 (id=3844): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) splice(r1, &(0x7f0000000180), r0, 0x0, 0x4, 0x0) kernel console output (not intermixed with test programs): c: denied { read append } for pid=7303 comm="syz.3.1507" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.143390][ T29] audit: type=1400 audit(1747790807.889:1558): avc: denied { open } for pid=7303 comm="syz.3.1507" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.186465][ T29] audit: type=1400 audit(1747790807.959:1559): avc: denied { ioctl } for pid=7303 comm="syz.3.1507" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.299641][ T7309] loop6: detected capacity change from 0 to 512 [ 85.310155][ T7309] EXT4-fs: Ignoring removed i_version option [ 85.321371][ T7309] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 85.339559][ T7309] System zones: 0-2, 18-18, 34-35 [ 85.346857][ T7309] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.457057][ T7335] loop3: detected capacity change from 0 to 2048 [ 85.519884][ T7335] loop3: p1 < > p4 [ 85.529622][ T7335] loop3: p4 size 8388608 extends beyond EOD, truncated [ 85.615178][ T7349] loop3: detected capacity change from 0 to 512 [ 85.631984][ T7349] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1526: bad orphan inode 11862016 [ 85.644925][ T7349] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.676796][ T7349] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 85.688881][ T7349] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 85.785094][ T7349] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. [ 86.093290][ T7377] loop1: detected capacity change from 0 to 512 [ 86.109474][ T7377] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.150109][ T7377] EXT4-fs (loop1): 1 truncate cleaned up [ 86.184245][ T7377] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.344032][ T7390] loop5: detected capacity change from 0 to 512 [ 86.352978][ T7393] loop3: detected capacity change from 0 to 512 [ 86.384176][ T7390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.425373][ T7393] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.425556][ T7390] EXT4-fs (loop5): 1 truncate cleaned up [ 86.644211][ T7409] IPVS: stopping master sync thread 7413 ... [ 86.650659][ T7413] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 86.710491][ T7410] loop5: detected capacity change from 0 to 512 [ 86.746024][ T7410] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.844573][ T7432] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1558'. [ 87.051575][ T7456] loop5: detected capacity change from 0 to 256 [ 87.068933][ T7458] loop6: detected capacity change from 0 to 512 [ 87.071116][ T7460] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 87.083054][ T7460] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1571'. [ 87.103286][ T7458] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1569: bad orphan inode 11862016 [ 87.115600][ T7458] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.139382][ T7458] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 87.150726][ T7458] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 87.170514][ T7458] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. [ 87.194274][ T7468] loop5: detected capacity change from 0 to 2048 [ 87.258945][ T7482] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 87.258945][ T7482] program syz.6.1579 not setting count and/or reply_len properly [ 87.337140][ T7493] loop6: detected capacity change from 0 to 2048 [ 87.367787][ T7498] Driver unsupported XDP return value 0 on prog (id 1026) dev N/A, expect packet loss! [ 87.391998][ T7493] loop6: p1 < > p4 [ 87.396567][ T7493] loop6: p4 size 8388608 extends beyond EOD, truncated [ 87.470469][ T7504] Invalid ELF header magic: != ELF [ 87.479574][ T7506] loop6: detected capacity change from 0 to 512 [ 87.497184][ T7506] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.507127][ T7506] EXT4-fs (loop6): inodes count not valid: 0 vs 32 [ 87.690773][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1596'. [ 87.707942][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1596'. [ 87.815167][ T7543] loop6: detected capacity change from 0 to 512 [ 87.832983][ T7543] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.856906][ T7550] wireguard0: entered promiscuous mode [ 87.862496][ T7550] wireguard0: entered allmulticast mode [ 87.949019][ T7559] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1610'. [ 88.004868][ T7565] loop5: detected capacity change from 0 to 1024 [ 88.012154][ T7565] EXT4-fs: Ignoring removed orlov option [ 88.016208][ T7567] rdma_op ffff888118214580 conn xmit_rdma 0000000000000000 [ 88.053206][ T7573] loop3: detected capacity change from 0 to 2048 [ 88.090499][ T7573] loop3: p1 < > p4 [ 88.094897][ T7573] loop3: p4 size 8388608 extends beyond EOD, truncated [ 88.674049][ T7580] loop6: detected capacity change from 0 to 512 [ 88.685487][ T7580] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.697408][ T7580] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.713503][ T7580] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1620: Block bitmap for bg 0 marked uninitialized [ 88.732065][ T7580] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 88.742230][ T7580] EXT4-fs (loop6): 1 orphan inode deleted [ 88.773200][ T7580] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 88.801259][ T7598] loop1: detected capacity change from 0 to 128 [ 88.812628][ T7580] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.821679][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 88.833749][ T7598] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.845269][ T7580] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1620: Block bitmap for bg 0 marked uninitialized [ 88.871358][ T7580] EXT4-fs (loop6): Remounting filesystem read-only [ 88.891907][ T7609] xt_hashlimit: max too large, truncated to 1048576 [ 88.946055][ T7617] loop6: detected capacity change from 0 to 128 [ 88.953162][ T7617] EXT4-fs: Ignoring removed nobh option [ 88.966268][ T7617] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.132210][ T7644] loop5: detected capacity change from 0 to 128 [ 89.142185][ T7644] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.264299][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.273580][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.847910][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 89.847927][ T29] audit: type=1326 audit(1747790812.619:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.877843][ T29] audit: type=1326 audit(1747790812.619:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.901590][ T29] audit: type=1326 audit(1747790812.619:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.925113][ T29] audit: type=1326 audit(1747790812.619:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.948597][ T29] audit: type=1326 audit(1747790812.619:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.972027][ T29] audit: type=1326 audit(1747790812.619:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 89.995671][ T29] audit: type=1326 audit(1747790812.619:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 90.019175][ T29] audit: type=1326 audit(1747790812.629:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 90.042816][ T29] audit: type=1326 audit(1747790812.629:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 90.066291][ T29] audit: type=1326 audit(1747790812.629:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 90.112466][ T7689] loop5: detected capacity change from 0 to 512 [ 90.156656][ T7699] xt_hashlimit: max too large, truncated to 1048576 [ 90.165721][ T7689] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.206109][ T7704] tipc: Started in network mode [ 90.211179][ T7704] tipc: Node identity ac14140f, cluster identity 4711 [ 90.218501][ T7704] tipc: New replicast peer: 255.255.255.255 [ 90.224859][ T7704] tipc: Enabled bearer , priority 10 [ 90.438557][ T7729] xt_hashlimit: max too large, truncated to 1048576 [ 90.514092][ T7733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7733 comm=syz.6.1683 [ 90.762889][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 90.772296][ T7756] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 90.823656][ T7762] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 90.889101][ T7766] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1693'. [ 90.927843][ T7771] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.052608][ T23] IPVS: starting estimator thread 0... [ 91.058916][ T7789] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 91.140120][ T7800] IPVS: using max 1824 ests per chain, 91200 per kthread [ 91.152354][ T7812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7812 comm=syz.3.1710 [ 91.165064][ T7812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7812 comm=syz.3.1710 [ 91.312233][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.321252][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.333761][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.342682][ T10] tipc: Node number set to 2886997007 [ 91.356059][ T7830] loop1: detected capacity change from 0 to 512 [ 91.371674][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.380809][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.383230][ T7830] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.394730][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.449434][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.458546][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 91.522435][ T7849] rdma_op ffff888118216580 conn xmit_rdma 0000000000000000 [ 91.714410][ T7883] SELinux: failed to load policy [ 91.996889][ T7904] netlink: 'syz.0.1749': attribute type 21 has an invalid length. [ 92.703060][ T7962] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 92.720887][ T7960] vhci_hcd: invalid port number 96 [ 92.726294][ T7960] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 92.810789][ T7980] netlink: 'syz.5.1783': attribute type 4 has an invalid length. [ 92.834258][ T7984] loop6: detected capacity change from 0 to 1024 [ 92.866732][ T1039] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 92.866877][ T7984] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1784: inode #665234128: comm syz.6.1784: iget: illegal inode # [ 92.889627][ T1039] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.909795][ T7984] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1784: error while reading EA inode 665234128 err=-117 [ 93.297762][ T8019] binfmt_misc: register: failed to install interpreter file ./file2 [ 93.520484][ T8045] loop6: detected capacity change from 0 to 512 [ 93.551747][ T8045] EXT4-fs: Ignoring removed orlov option [ 93.572548][ T8045] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.1815: corrupted in-inode xattr: invalid ea_ino [ 93.607427][ T8051] netlink: 'syz.5.1818': attribute type 298 has an invalid length. [ 93.620816][ T8045] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1815: couldn't read orphan inode 15 (err -117) [ 93.633986][ T8053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8053 comm=syz.0.1817 [ 93.669791][ T8045] EXT4-fs: Ignoring removed orlov option [ 93.679799][ T8045] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.1815: Abort forced by user [ 93.701963][ T8045] EXT4-fs (loop6): Remounting filesystem read-only [ 93.708625][ T8045] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.006853][ T8101] loop1: detected capacity change from 0 to 256 [ 94.025286][ T8101] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.028731][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.035433][ T8101] FAT-fs (loop1): Filesystem has been set read-only [ 94.042825][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.056906][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.064560][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.072041][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.079443][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.086968][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.094416][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.101978][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.109597][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.117159][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.124624][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.132062][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.139467][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.147191][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.154626][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.162174][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.169575][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.177069][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.184607][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.192021][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.199485][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.206985][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.214398][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.221816][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.229208][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.236641][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.244086][ T1039] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 94.252163][ T1039] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 94.371698][ T8130] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 94.511926][ T8138] SELinux: failed to load policy [ 94.531770][ T8147] loop3: detected capacity change from 0 to 512 [ 94.534510][ T8149] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 94.534510][ T8149] C<+P5"k [ 94.561937][ T8152] unsupported nlmsg_type 40 [ 94.577535][ T8147] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.595438][ T8147] EXT4-fs (loop3): 1 truncate cleaned up [ 95.442654][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 95.442668][ T29] audit: type=1400 audit(1747790818.219:1935): avc: denied { bind } for pid=8192 comm="syz.6.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.489871][ T29] audit: type=1400 audit(1747790818.219:1936): avc: denied { name_bind } for pid=8192 comm="syz.6.1881" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.511895][ T29] audit: type=1400 audit(1747790818.219:1937): avc: denied { node_bind } for pid=8192 comm="syz.6.1881" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 95.533683][ T29] audit: type=1400 audit(1747790818.219:1938): avc: denied { write } for pid=8192 comm="syz.6.1881" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.555084][ T29] audit: type=1400 audit(1747790818.219:1939): avc: denied { name_connect } for pid=8192 comm="syz.6.1881" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.624973][ T29] audit: type=1400 audit(1747790818.269:1940): avc: denied { setopt } for pid=8196 comm="syz.6.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.709279][ T29] audit: type=1400 audit(1747790818.479:1941): avc: denied { setopt } for pid=8208 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.735214][ T29] audit: type=1400 audit(1747790818.479:1942): avc: denied { bind } for pid=8208 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.801864][ T8205] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 95.820273][ T8205] SELinux: failed to load policy [ 95.904493][ T8223] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 95.924366][ T8225] loop1: detected capacity change from 0 to 512 [ 95.935762][ T8225] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.944216][ T8225] EXT4-fs: inline encryption not supported [ 95.950950][ T8225] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.960123][ T8225] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 95.969095][ T8227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8227 comm=syz.5.1896 [ 95.983277][ T8225] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 95.983667][ T29] audit: type=1400 audit(1747790818.759:1943): avc: denied { connect } for pid=8228 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.011786][ T29] audit: type=1400 audit(1747790818.759:1944): avc: denied { name_connect } for pid=8228 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 96.021812][ T8225] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 96.087584][ T8225] System zones: 0-2, 18-18, 34-34 [ 96.098721][ T8234] loop5: detected capacity change from 0 to 512 [ 96.108862][ T8236] __nla_validate_parse: 9 callbacks suppressed [ 96.108876][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 96.126100][ T8225] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1898: couldn't read orphan inode 15 (err -116) [ 96.138676][ T8234] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.147464][ T8225] EXT4-fs (loop1): Remounting filesystem read-only [ 96.216462][ T8241] serio: Serial port ptm0 [ 96.323623][ T8249] SELinux: failed to load policy [ 96.413151][ T8265] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1913'. [ 96.450522][ T8270] loop5: detected capacity change from 0 to 256 [ 96.512381][ T8279] loop3: detected capacity change from 0 to 128 [ 96.519684][ T8279] FAT-fs (loop3): Directory bread(block 162) failed [ 96.528601][ T8279] FAT-fs (loop3): Directory bread(block 163) failed [ 96.535910][ T8279] FAT-fs (loop3): Directory bread(block 164) failed [ 96.544219][ T8279] FAT-fs (loop3): Directory bread(block 165) failed [ 96.552822][ T8279] FAT-fs (loop3): Directory bread(block 166) failed [ 96.559718][ T8279] FAT-fs (loop3): Directory bread(block 167) failed [ 96.566600][ T8279] FAT-fs (loop3): Directory bread(block 168) failed [ 96.573427][ T8279] FAT-fs (loop3): Directory bread(block 169) failed [ 96.590022][ T8279] FAT-fs (loop3): Directory bread(block 162) failed [ 96.602069][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.614166][ T8279] FAT-fs (loop3): Directory bread(block 163) failed [ 96.624749][ T8279] syz.3.1919: attempt to access beyond end of device [ 96.624749][ T8279] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 96.638486][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.647886][ T8279] syz.3.1919: attempt to access beyond end of device [ 96.647886][ T8279] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 96.663130][ T8291] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 96.670934][ T8291] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.1931'. [ 96.914540][ T8315] loop1: detected capacity change from 0 to 128 [ 97.389418][ T8358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8358 comm=syz.3.1952 [ 97.623299][ T8376] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 97.722167][ T8384] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1964'. [ 97.802870][ T8393] loop3: detected capacity change from 0 to 512 [ 97.822109][ T8393] EXT4-fs mount: 66 callbacks suppressed [ 97.822126][ T8393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.842357][ T8393] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.856327][ T8393] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1968: Failed to acquire dquot type 0 [ 97.882584][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.000012][ T8402] Falling back ldisc for ttyS3. [ 98.026187][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1971'. [ 98.299187][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 98.306984][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 98.313214][ T8423] loop6: detected capacity change from 0 to 512 [ 98.317784][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.328702][ T8423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.338635][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.341487][ T8423] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.1980: corrupted xattr entries [ 98.346367][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.360214][ T8423] EXT4-fs (loop6): Remounting filesystem read-only [ 98.365300][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.372188][ T8423] EXT4-fs (loop6): 1 truncate cleaned up [ 98.379407][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.385842][ T8423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.392741][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.412906][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.420647][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.428332][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.436103][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.443924][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.451724][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.459473][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.467195][ T3374] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 98.477716][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.493585][ T3374] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 98.554287][ T8437] bridge0: entered promiscuous mode [ 98.559602][ T8437] macvlan2: entered promiscuous mode [ 98.566575][ T8437] bridge0: port 3(macvlan2) entered blocking state [ 98.573275][ T8437] bridge0: port 3(macvlan2) entered disabled state [ 98.580407][ T8437] macvlan2: entered allmulticast mode [ 98.585791][ T8437] bridge0: entered allmulticast mode [ 98.592271][ T8437] macvlan2: left allmulticast mode [ 98.597440][ T8437] bridge0: left allmulticast mode [ 98.605104][ T8437] bridge0: left promiscuous mode [ 99.182181][ T8480] loop5: detected capacity change from 0 to 512 [ 99.226732][ T8480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.250022][ T8480] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.287695][ T8480] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2005: Failed to acquire dquot type 0 [ 99.300847][ T8488] ALSA: seq fatal error: cannot create timer (-19) [ 99.414101][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.642034][ T8512] can0: slcan on ttyS3. [ 99.700060][ T8510] can0 (unregistered): slcan off ttyS3. [ 99.762606][ T8525] loop6: detected capacity change from 0 to 512 [ 99.822309][ T8525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.839959][ T8525] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.870676][ T8525] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2023: Failed to acquire dquot type 0 [ 99.953163][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.474321][ T8569] xt_limit: Overflow, try lower: 324382443/4166662530 [ 100.551171][ T8572] x_tables: ip_tables: udp match: only valid for protocol 17 [ 100.714534][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 100.714548][ T29] audit: type=1400 audit(1747790823.489:2047): avc: denied { shutdown } for pid=8576 comm="syz.5.2048" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.843192][ T8587] loop6: detected capacity change from 0 to 1024 [ 100.891306][ T8587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.935055][ T29] audit: type=1400 audit(1747790823.709:2048): avc: denied { read } for pid=8586 comm="syz.6.2053" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.939717][ T8587] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2053: Allocating blocks 497-513 which overlap fs metadata [ 100.971244][ T29] audit: type=1400 audit(1747790823.709:2049): avc: denied { open } for pid=8586 comm="syz.6.2053" path="/236/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.067188][ T8586] EXT4-fs (loop6): pa ffff8881071f37e0: logic 16, phys. 145, len 23 [ 101.075388][ T8586] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 101.176841][ T29] audit: type=1400 audit(1747790823.949:2050): avc: denied { read write } for pid=8601 comm="syz.5.2059" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.201822][ T29] audit: type=1400 audit(1747790823.949:2051): avc: denied { open } for pid=8601 comm="syz.5.2059" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.226977][ T29] audit: type=1400 audit(1747790823.949:2052): avc: denied { ioctl } for pid=8601 comm="syz.5.2059" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.269453][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.307704][ T8612] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡ [ 101.333332][ T29] audit: type=1326 audit(1747790824.109:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 101.356962][ T29] audit: type=1326 audit(1747790824.109:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 101.380507][ T29] audit: type=1326 audit(1747790824.109:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 101.404170][ T29] audit: type=1326 audit(1747790824.109:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 101.507367][ T8608] loop5: detected capacity change from 0 to 8192 [ 101.545056][ T8608] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.825402][ T8645] sd 0:0:1:0: device reset [ 102.052959][ T8670] loop3: detected capacity change from 0 to 512 [ 102.083768][ T8670] EXT4-fs (loop3): 1 orphan inode deleted [ 102.100025][ T4193] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 1 [ 102.113523][ T8670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.153200][ T8670] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.225388][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.344473][ T8679] infiniband syz1: set active [ 102.349218][ T8679] infiniband syz1: added veth0_to_team [ 102.381802][ T8679] RDS/IB: syz1: added [ 102.392161][ T8679] smc: adding ib device syz1 with port count 1 [ 102.398445][ T8679] smc: ib device syz1 port 1 has pnetid [ 102.683349][ T8702] SELinux: syz.0.2096 (8702) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 102.706666][ T8704] loop6: detected capacity change from 0 to 128 [ 102.727395][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 102.736426][ T8708] netlink: 'syz.0.2098': attribute type 30 has an invalid length. [ 102.750514][ T8708] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.759280][ T8708] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.768177][ T8708] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.776926][ T8708] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.790148][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 102.799115][ T8708] netlink: 'syz.0.2098': attribute type 30 has an invalid length. [ 102.815755][ T8714] loop6: detected capacity change from 0 to 128 [ 102.842069][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.842069][ T8714] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 102.855587][ T8714] buffer_io_error: 2 callbacks suppressed [ 102.855604][ T8714] Buffer I/O error on dev loop6, logical block 2065, async page read [ 102.871597][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.871597][ T8714] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 102.885043][ T8714] Buffer I/O error on dev loop6, logical block 2066, async page read [ 102.901566][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.901566][ T8714] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 102.914906][ T8714] Buffer I/O error on dev loop6, logical block 2067, async page read [ 102.925324][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.925324][ T8714] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 102.938599][ T8714] Buffer I/O error on dev loop6, logical block 2068, async page read [ 102.961852][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.961852][ T8714] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 102.975171][ T8714] Buffer I/O error on dev loop6, logical block 2069, async page read [ 102.988503][ T8714] syz.6.2099: attempt to access beyond end of device [ 102.988503][ T8714] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 102.998174][ T8729] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 103.001771][ T8714] Buffer I/O error on dev loop6, logical block 2070, async page read [ 103.002482][ T8714] syz.6.2099: attempt to access beyond end of device [ 103.002482][ T8714] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 103.031249][ T8714] Buffer I/O error on dev loop6, logical block 2071, async page read [ 103.042287][ T8714] syz.6.2099: attempt to access beyond end of device [ 103.042287][ T8714] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 103.055570][ T8714] Buffer I/O error on dev loop6, logical block 2072, async page read [ 103.064684][ T8714] syz.6.2099: attempt to access beyond end of device [ 103.064684][ T8714] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 103.078037][ T8714] Buffer I/O error on dev loop6, logical block 2065, async page read [ 103.087577][ T8714] syz.6.2099: attempt to access beyond end of device [ 103.087577][ T8714] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 103.100913][ T8714] Buffer I/O error on dev loop6, logical block 2066, async page read [ 103.127088][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 103.252518][ T8757] loop1: detected capacity change from 0 to 128 [ 103.260998][ T8757] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.276676][ T8753] loop6: detected capacity change from 0 to 512 [ 103.283566][ T8757] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.317113][ T8753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 103.326779][ T8753] System zones: 1-12 [ 103.332701][ T8753] EXT4-fs error (device loop6): dx_probe:793: inode #2: comm syz.6.2115: Directory hole found for htree index block 0 [ 103.348567][ T8753] EXT4-fs (loop6): Remounting filesystem read-only [ 103.357163][ T8753] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 103.366933][ T8753] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 103.375649][ T4193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.387098][ T8753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.400909][ T8753] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.421245][ T8772] loop0: detected capacity change from 0 to 512 [ 103.429751][ T8772] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.443668][ T8772] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.453316][ T8772] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2123: invalid indirect mapped block 256 (level 2) [ 103.468191][ T8772] EXT4-fs (loop0): 2 truncates cleaned up [ 103.474777][ T8772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.501438][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.556242][ T8789] loop0: detected capacity change from 0 to 1024 [ 103.577022][ T8789] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 103.586904][ T8789] EXT4-fs (loop0): group descriptors corrupted! [ 103.650084][ T8808] loop3: detected capacity change from 0 to 128 [ 103.666539][ T8813] loop0: detected capacity change from 0 to 164 [ 103.678262][ T8813] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.715267][ T8813] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 103.788489][ T8835] netlink: 'syz.3.2146': attribute type 12 has an invalid length. [ 103.796430][ T8835] netlink: 'syz.3.2146': attribute type 29 has an invalid length. [ 103.804370][ T8835] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2146'. [ 103.813496][ T8835] netlink: 'syz.3.2146': attribute type 2 has an invalid length. [ 103.821268][ T8835] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2146'. [ 103.832923][ T8839] loop1: detected capacity change from 0 to 128 [ 103.875064][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 103.884810][ T8846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2149'. [ 104.185068][ T8896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8896 comm=syz.3.2164 [ 104.358499][ T8925] loop5: detected capacity change from 0 to 1024 [ 104.384720][ T8925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.404053][ T8925] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 104.427293][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.484410][ T8940] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 104.525359][ T8945] loop3: detected capacity change from 0 to 2048 [ 104.550216][ T8949] netlink: 33912 bytes leftover after parsing attributes in process `syz.5.2186'. [ 104.563710][ T8945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.669517][ T8954] loop6: detected capacity change from 0 to 512 [ 104.695476][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.709974][ T8954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.723826][ T8954] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.774066][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 104.840890][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.893874][ T8979] loop6: detected capacity change from 0 to 1024 [ 104.933566][ T8979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.976125][ T8989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8989 comm=syz.5.2196 [ 104.988718][ T8989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8989 comm=syz.5.2196 [ 105.121634][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.149438][ T8999] SELinux: failed to load policy [ 105.204470][ T9009] loop6: detected capacity change from 0 to 164 [ 105.240771][ T9009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.265548][ T9014] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2207'. [ 105.276818][ T9009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.329902][ T9017] wireguard0: entered promiscuous mode [ 105.335452][ T9017] wireguard0: entered allmulticast mode [ 105.392497][ T9030] loop5: detected capacity change from 0 to 2048 [ 105.419318][ T9030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.446727][ T9030] EXT4-fs error (device loop5): ext4_ext_precache:631: inode #2: comm syz.5.2213: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 105.465104][ T9030] EXT4-fs (loop5): Remounting filesystem read-only [ 105.486052][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.649764][ T9051] SELinux: ebitmap: truncated map [ 105.659239][ T9051] SELinux: failed to load policy [ 105.679051][ T9064] loop6: detected capacity change from 0 to 256 [ 105.714769][ T9064] FAT-fs (loop6): Directory bread(block 64) failed [ 105.722951][ T9064] FAT-fs (loop6): Directory bread(block 65) failed [ 105.731160][ T9064] FAT-fs (loop6): Directory bread(block 66) failed [ 105.737796][ T9064] FAT-fs (loop6): Directory bread(block 67) failed [ 105.748024][ T9064] FAT-fs (loop6): Directory bread(block 68) failed [ 105.755842][ T9064] FAT-fs (loop6): Directory bread(block 69) failed [ 105.765197][ T9064] FAT-fs (loop6): Directory bread(block 70) failed [ 105.772002][ T9064] FAT-fs (loop6): Directory bread(block 71) failed [ 105.779029][ T9064] FAT-fs (loop6): Directory bread(block 72) failed [ 105.788282][ T9064] FAT-fs (loop6): Directory bread(block 73) failed [ 105.853695][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 105.853713][ T29] audit: type=1400 audit(1747790828.629:2264): avc: denied { append } for pid=9077 comm="syz.6.2231" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.001928][ T29] audit: type=1400 audit(1747790828.779:2265): avc: denied { write } for pid=9091 comm="syz.5.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.023461][ T9093] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 106.042614][ T29] audit: type=1400 audit(1747790828.819:2266): avc: denied { name_bind } for pid=9096 comm="syz.3.2241" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.064522][ T29] audit: type=1400 audit(1747790828.819:2267): avc: denied { node_bind } for pid=9096 comm="syz.3.2241" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.093843][ T29] audit: type=1400 audit(1747790828.859:2268): avc: denied { block_suspend } for pid=9092 comm="syz.6.2239" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.140739][ T29] audit: type=1400 audit(1747790828.869:2269): avc: denied { setopt } for pid=9095 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.161062][ T29] audit: type=1400 audit(1747790828.919:2270): avc: denied { tracepoint } for pid=9106 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.181052][ T9104] netlink: 'syz.3.2243': attribute type 13 has an invalid length. [ 106.190778][ T29] audit: type=1400 audit(1747790828.959:2271): avc: denied { read } for pid=9106 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.258572][ T29] audit: type=1400 audit(1747790829.029:2272): avc: denied { create } for pid=9114 comm="syz.0.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.305793][ T29] audit: type=1400 audit(1747790829.059:2273): avc: denied { connect } for pid=9114 comm="syz.0.2246" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.351063][ T9104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.636907][ T9155] loop1: detected capacity change from 0 to 1764 [ 106.653051][ T9155] ISOFS: unable to read i-node block [ 106.658379][ T9155] isofs_fill_super: get root inode failed [ 106.678292][ T9161] loop6: detected capacity change from 0 to 128 [ 106.739229][ T9161] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 106.747207][ T9161] FAT-fs (loop6): Filesystem has been set read-only [ 106.779773][ T9161] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 106.787730][ T9161] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 106.934455][ T9205] loop3: detected capacity change from 0 to 512 [ 106.959658][ T9205] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.076467][ T9216] loop3: detected capacity change from 0 to 164 [ 107.152438][ T9225] geneve0: entered allmulticast mode [ 107.358896][ T9254] netlink: 'syz.6.2297': attribute type 4 has an invalid length. [ 107.371920][ T9256] nfs4: Bad value for 'source' [ 107.488823][ T9269] loop3: detected capacity change from 0 to 2048 [ 107.523607][ T9269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.538506][ T9269] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.2304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 107.561025][ T9269] EXT4-fs (loop3): Remounting filesystem read-only [ 107.579178][ T9290] loop0: detected capacity change from 0 to 1024 [ 107.599396][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.599672][ T9290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.631442][ T9290] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 107.684470][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.696433][ T9308] binfmt_misc: register: failed to install interpreter file ./file0 [ 107.722969][ T9314] loop0: detected capacity change from 0 to 512 [ 107.735403][ T9317] sctp: [Deprecated]: syz.6.2320 (pid 9317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.735403][ T9317] Use struct sctp_sack_info instead [ 107.735769][ T9314] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.758566][ T9314] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2317: bad orphan inode 13 [ 107.769405][ T9314] ext4_test_bit(bit=12, block=18) = 1 [ 107.774921][ T9314] is_bad_inode(inode)=0 [ 107.779268][ T9314] NEXT_ORPHAN(inode)=2130706432 [ 107.784253][ T9314] max_ino=32 [ 107.787519][ T9314] i_nlink=1 [ 107.798447][ T9314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.842614][ T9324] loop6: detected capacity change from 0 to 1024 [ 107.855792][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.874407][ T9326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.887310][ T9324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.906180][ T9324] EXT4-fs (loop6): shut down requested (1) [ 107.924322][ T9324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.963763][ T9326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.018762][ T9326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.054269][ T9357] loop0: detected capacity change from 0 to 1024 [ 108.062182][ T9357] EXT4-fs: Ignoring removed orlov option [ 108.067878][ T9357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.078737][ T9326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.123364][ T9357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.142123][ T9357] random: crng reseeded on system resumption [ 108.148776][ T9326] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.163889][ T9326] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.177756][ T9326] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.221236][ T9326] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.238239][ T9380] loop6: detected capacity change from 0 to 512 [ 108.245396][ T9380] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 108.355508][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.461360][ T9408] loop1: detected capacity change from 0 to 256 [ 108.707345][ T9459] SELinux: security_context_str_to_sid () failed with errno=-22 [ 108.759069][ T9463] loop3: detected capacity change from 0 to 512 [ 108.767948][ T9463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.799532][ T9463] EXT4-fs (loop3): 1 truncate cleaned up [ 108.817640][ T9463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.841821][ T9463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.728106][ T9518] SELinux: syz.5.2387 (9518) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.783710][ T9520] __nla_validate_parse: 3 callbacks suppressed [ 109.783730][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 109.981811][ T9558] 9pnet: p9_errstr2errno: server reported unknown error @ [ 109.991358][ T9556] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2398'. [ 110.310628][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.319573][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.353693][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.385868][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.394979][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.412620][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.426706][ T9602] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 110.439697][ T9607] loop9: detected capacity change from 0 to 7 [ 110.449109][ T9607] buffer_io_error: 22 callbacks suppressed [ 110.449125][ T9607] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.465327][ T9607] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.473211][ T9607] loop9: unable to read partition table [ 110.487750][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.496753][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 110.508189][ T9607] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 110.508189][ T9607] U) failed (rc=-5) [ 110.602468][ T9619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=9619 comm=syz.0.2413 [ 110.762508][ T9639] serio: Serial port ptm0 [ 110.774375][ T9641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.844920][ T9641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.866422][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 110.866440][ T29] audit: type=1326 audit(1747790833.639:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 110.920702][ T29] audit: type=1326 audit(1747790833.689:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 110.944331][ T29] audit: type=1326 audit(1747790833.689:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 110.967950][ T29] audit: type=1326 audit(1747790833.689:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 110.991453][ T29] audit: type=1326 audit(1747790833.689:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 111.014949][ T29] audit: type=1326 audit(1747790833.689:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba4b0e5927 code=0x7ffc0000 [ 111.038616][ T29] audit: type=1326 audit(1747790833.689:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba4b08ab39 code=0x7ffc0000 [ 111.062293][ T29] audit: type=1326 audit(1747790833.689:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 111.085647][ T29] audit: type=1326 audit(1747790833.689:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 111.109098][ T29] audit: type=1326 audit(1747790833.689:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.6.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 111.134773][ T9641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.161800][ T9667] loop6: detected capacity change from 0 to 2048 [ 111.174718][ T9641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.222089][ T9667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.289944][ T5316] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.309611][ T9641] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.326893][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.351818][ T9641] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.388413][ T9641] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.414914][ T9641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.440752][ T9704] loop6: detected capacity change from 0 to 512 [ 111.457822][ T9704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.479369][ T9704] EXT4-fs (loop6): 1 truncate cleaned up [ 111.487813][ T9704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.503480][ T9704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.515534][ T9717] IPVS: stopping master sync thread 9720 ... [ 111.521625][ T9720] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 111.703446][ T9739] loop6: detected capacity change from 0 to 1764 [ 112.183818][ T9810] ref_ctr_offset mismatch. inode: 0xbb8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 112.267401][ T9816] loop5: detected capacity change from 0 to 512 [ 112.289011][ T9816] EXT4-fs (loop5): orphan cleanup on readonly fs [ 112.307939][ T9816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2482: bg 0: block 248: padding at end of block bitmap is not set [ 112.337090][ T9816] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2482: Failed to acquire dquot type 1 [ 112.349485][ T9816] EXT4-fs (loop5): 1 truncate cleaned up [ 112.356768][ T9816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.384354][ T1039] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 112.392109][ T1039] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 112.405768][ T1039] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 112.406834][ T9832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.414018][ T1039] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 112.423755][ T9832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.458382][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.483287][ T9832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.493865][ T9832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.552850][ T9832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.563371][ T9832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.612691][ T9832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.623197][ T9832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.675970][ T9832] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.684333][ T9832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.696088][ T9832] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.704413][ T9832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.715599][ T9832] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.723844][ T9832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.735097][ T9832] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.743346][ T9832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.854275][ T9880] netlink: 'syz.1.2498': attribute type 1 has an invalid length. [ 112.885227][ T9880] bond3: entered promiscuous mode [ 112.890591][ T9880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.919279][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 112.928026][ T9880] bond3: (slave batadv2): making interface the new active one [ 112.935688][ T9880] batadv2: entered promiscuous mode [ 112.943280][ T9880] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 112.978621][ T9931] netlink: '': attribute type 3 has an invalid length. [ 113.028074][ T9937] netlink: 'syz.5.2507': attribute type 1 has an invalid length. [ 113.242252][ T9976] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 113.322764][ T9991] netlink: 'syz.3.2531': attribute type 3 has an invalid length. [ 113.330771][ T9983] loop6: detected capacity change from 0 to 8192 [ 113.367822][ T9983] loop6: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 113.368860][ T9983] loop6: p3 start 327168 is beyond EOD, truncated [ 113.768501][T10358] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 113.853466][T10464] loop5: detected capacity change from 0 to 512 [ 113.872266][T10464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.892718][T10464] EXT4-fs (loop5): 1 truncate cleaned up [ 113.906417][T10464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.987861][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.056776][T10566] loop5: detected capacity change from 0 to 2048 [ 114.082690][T10566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.215722][ T4858] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.239287][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.199058][T10639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.272812][T10639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.345328][T10639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.386618][T10639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.475089][T10639] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.492684][T10639] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.506767][T10639] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.519221][T10639] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.685787][T10724] wireguard1: entered promiscuous mode [ 115.691369][T10724] wireguard1: entered allmulticast mode [ 115.698147][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.707140][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.758684][T10739] __nla_validate_parse: 10 callbacks suppressed [ 115.758704][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2607'. [ 115.820858][T10745] netlink: 'syz.6.2610': attribute type 6 has an invalid length. [ 115.870076][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 115.870094][ T29] audit: type=1326 audit(1747790838.649:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.903042][T10753] atomic_op ffff888118ca6528 conn xmit_atomic 0000000000000000 [ 115.911568][ T29] audit: type=1326 audit(1747790838.679:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.935223][ T29] audit: type=1326 audit(1747790838.679:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.958949][ T29] audit: type=1400 audit(1747790838.679:2885): avc: denied { bind } for pid=10752 comm="syz.5.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.978543][ T29] audit: type=1400 audit(1747790838.679:2886): avc: denied { write } for pid=10752 comm="syz.5.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.998302][ T29] audit: type=1326 audit(1747790838.689:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.998372][ T29] audit: type=1326 audit(1747790838.689:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.998409][ T29] audit: type=1326 audit(1747790838.689:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.998443][ T29] audit: type=1326 audit(1747790838.709:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 115.998521][ T29] audit: type=1326 audit(1747790838.709:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.1.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f633d071225 code=0x7ffc0000 [ 116.105711][T10770] vhci_hcd: invalid port number 65 [ 116.125088][T10770] vhci_hcd: invalid port number 65 [ 116.160397][T10775] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 116.201776][T10784] loop6: detected capacity change from 0 to 512 [ 116.240814][T10784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.260263][T10784] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.341165][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.464165][T10810] loop6: detected capacity change from 0 to 512 [ 116.490864][T10810] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.554815][T10810] EXT4-fs (loop6): mount failed [ 116.629467][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.641066][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.688967][T10835] loop5: detected capacity change from 0 to 1024 [ 116.705504][T10835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.757773][T10846] loop6: detected capacity change from 0 to 2048 [ 116.768078][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.794047][T10846] loop6: p1 < > p4 [ 116.805491][T10846] loop6: p4 size 8388608 extends beyond EOD, truncated [ 116.844746][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2647'. [ 116.925735][T10868] loop5: detected capacity change from 0 to 512 [ 116.936080][T10868] EXT4-fs: Ignoring removed nobh option [ 116.963205][T10868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.044837][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.080733][T10878] vhci_hcd: invalid port number 236 [ 117.086074][T10878] vhci_hcd: invalid port number 236 [ 117.205046][T10890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.238380][T10890] bond0: (slave bond4): Enslaving as an active interface with an up link [ 117.256640][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2665'. [ 117.293541][T10945] dvmrp5: entered allmulticast mode [ 117.300401][T10945] dvmrp5: left allmulticast mode [ 117.311625][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 117.540427][T10997] Invalid ELF header magic: != ELF [ 117.544636][T10996] loop5: detected capacity change from 0 to 2048 [ 117.566567][T10996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.599687][T11006] loop6: detected capacity change from 0 to 512 [ 117.607508][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.771937][T11041] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.985729][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2711'. [ 117.994711][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2711'. [ 118.086873][T11068] netlink: 'syz.3.2715': attribute type 10 has an invalid length. [ 118.097533][T11068] team0: Device hsr_slave_0 failed to register rx_handler [ 118.154541][T11072] netlink: 'syz.3.2717': attribute type 11 has an invalid length. [ 118.217971][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.226150][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.280915][T11091] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.432295][T11097] SELinux: failed to load policy [ 118.946745][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 119.016872][T11159] netlink: 'syz.1.2749': attribute type 12 has an invalid length. [ 119.024871][T11159] netlink: 'syz.1.2749': attribute type 29 has an invalid length. [ 119.032811][T11159] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2749'. [ 119.041921][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 119.506020][T11209] sd 0:0:1:0: device reset [ 119.532962][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2773'. [ 119.627218][ T3391] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.640249][T11241] loop5: detected capacity change from 0 to 512 [ 119.642688][ T3391] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.670372][T11241] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 119.700285][T11241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 119.709389][T11241] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2782: corrupted in-inode xattr: e_value size too large [ 119.733766][T11241] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2782: couldn't read orphan inode 15 (err -117) [ 119.748067][T11249] SELinux: syz.0.2785 (11249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 119.778427][T11241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.829792][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.853583][T11262] loop9: detected capacity change from 0 to 7 [ 119.860097][T11262] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.868041][T11262] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.875966][T11262] loop9: unable to read partition table [ 119.884074][T11262] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 119.884074][T11262] U) failed (rc=-5) [ 119.918391][T11269] loop5: detected capacity change from 0 to 512 [ 119.925487][T11269] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.947098][T11269] EXT4-fs (loop5): 1 truncate cleaned up [ 119.955075][T11269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.105743][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.145290][ T1039] Process accounting resumed [ 120.424451][T11337] loop6: detected capacity change from 0 to 512 [ 120.433384][T11337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.448521][T11337] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.476694][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.685456][T11381] ALSA: seq fatal error: cannot create timer (-16) [ 120.790297][T11395] syzkaller0: entered promiscuous mode [ 120.795846][T11395] syzkaller0: entered allmulticast mode [ 120.862366][T11411] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.893121][T11417] loop9: detected capacity change from 0 to 7 [ 120.899589][T11417] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.907797][T11417] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.915800][T11417] loop9: unable to read partition table [ 120.921912][T11417] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 120.921912][T11417] U) failed (rc=-5) [ 120.961572][T11411] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.988247][T11427] __nla_validate_parse: 2 callbacks suppressed [ 120.988265][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 121.007311][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 121.007361][ T29] audit: type=1400 audit(1747790843.779:3172): avc: denied { create } for pid=11432 comm="syz.6.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.034147][T11411] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.081364][T11411] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.132756][ T29] audit: type=1400 audit(1747790843.899:3173): avc: denied { setopt } for pid=11456 comm="syz.0.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.161468][T11411] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.192978][T11411] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.209336][ T29] audit: type=1400 audit(1747790843.979:3174): avc: denied { ioctl } for pid=11465 comm="syz.0.2865" path="socket:[26663]" dev="sockfs" ino=26663 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.218590][T11411] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.254225][T11472] pimreg: entered allmulticast mode [ 121.267160][T11411] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.276119][T11472] pimreg: left allmulticast mode [ 121.395019][ T29] audit: type=1326 audit(1747790844.169:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.418718][ T29] audit: type=1326 audit(1747790844.169:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.442389][ T29] audit: type=1326 audit(1747790844.169:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.465951][ T29] audit: type=1326 audit(1747790844.169:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.489731][ T29] audit: type=1326 audit(1747790844.169:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.513285][ T29] audit: type=1326 audit(1747790844.169:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.553983][ T29] audit: type=1326 audit(1747790844.319:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 121.926707][T11455] Set syz1 is full, maxelem 65536 reached [ 122.079764][T11537] sch_tbf: burst 0 is lower than device lo mtu (327700) ! [ 122.133898][T11540] SELinux: failed to load policy [ 122.342992][T11573] loop5: detected capacity change from 0 to 1024 [ 122.350281][T11573] EXT4-fs: Ignoring removed orlov option [ 122.356014][T11573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.374483][T11573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.545662][T11590] syz.3.2901 (11590): /proc/11589/oom_adj is deprecated, please use /proc/11589/oom_score_adj instead. [ 122.702372][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.797721][T11617] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 122.926253][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.935318][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.218719][T11662] netlink: 'syz.1.2926': attribute type 3 has an invalid length. [ 123.702894][T11716] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2950'. [ 123.712065][T11716] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2950'. [ 123.721464][T11716] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2950'. [ 123.737147][T11722] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.744259][T11718] SELinux: ebitmap: truncated map [ 123.751934][T11718] SELinux: failed to load policy [ 123.972966][T11746] vhci_hcd: invalid port number 224 [ 124.027259][T11759] loop5: detected capacity change from 0 to 2048 [ 124.034056][T11759] EXT4-fs: Ignoring removed bh option [ 124.035683][T11754] hub 2-0:1.0: USB hub found [ 124.044627][T11754] hub 2-0:1.0: 8 ports detected [ 124.084177][T11771] loop5: detected capacity change from 0 to 764 [ 124.099667][T11771] Symlink component flag not implemented [ 124.105922][T11771] Symlink component flag not implemented (7) [ 124.303189][T11791] vhci_hcd: invalid port number 224 [ 124.475268][T11800] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.485182][T11800] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.542131][T11800] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.552045][T11800] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.591432][T11800] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.601471][T11800] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.641547][T11800] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.651454][T11800] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.680178][T11810] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.680178][T11810] program syz.1.2983 not setting count and/or reply_len properly [ 124.712385][T11800] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.720782][T11800] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.735905][T11800] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.744256][T11800] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.758216][T11800] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.766497][T11800] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.779274][T11800] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.787596][T11800] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.810893][T11824] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 124.885853][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2991'. [ 124.909571][T11835] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 124.999282][T11870] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2999'. [ 125.059248][T11873] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 125.159499][T11885] netlink: 'syz.1.3005': attribute type 4 has an invalid length. [ 125.205939][T11890] rdma_op ffff88811a940180 conn xmit_rdma 0000000000000000 [ 125.357945][T11909] 9p: Unknown Cache mode or invalid value  [ 125.498782][T11942] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 125.567898][T11964] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3027'. [ 125.720972][T11980] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 125.738962][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.748987][T11980] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 125.789766][T11989] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.807423][T11980] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 125.815414][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3033'. [ 125.831698][T11980] batadv0: entered promiscuous mode [ 125.836984][T11980] batadv0: entered allmulticast mode [ 125.867398][T11980] bond0: (slave batadv0): Releasing backup interface [ 125.879955][T11980] bridge0: port 4(batadv0) entered blocking state [ 125.886496][T11980] bridge0: port 4(batadv0) entered disabled state [ 125.895714][T11989] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.902963][ T4183] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 125.914845][ T4183] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 125.961754][T11989] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.017425][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 126.017443][ T29] audit: type=1400 audit(1747790848.789:3380): avc: denied { create } for pid=12015 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.063794][T11989] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.086129][ T29] audit: type=1400 audit(1747790848.789:3381): avc: denied { ioctl } for pid=12017 comm="syz.0.3048" path="socket:[28282]" dev="sockfs" ino=28282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.112161][ T29] audit: type=1400 audit(1747790848.829:3382): avc: denied { setopt } for pid=12015 comm="+}[@" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.132596][ T29] audit: type=1326 audit(1747790848.849:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.156160][ T29] audit: type=1326 audit(1747790848.849:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.179782][ T29] audit: type=1326 audit(1747790848.849:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.203356][ T29] audit: type=1326 audit(1747790848.849:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.227032][ T29] audit: type=1326 audit(1747790848.849:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.250608][ T29] audit: type=1326 audit(1747790848.849:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.274316][ T29] audit: type=1326 audit(1747790848.849:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12021 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4b0ee969 code=0x7ffc0000 [ 126.298106][T12027] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3051'. [ 126.348087][T11989] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.362575][T11989] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.377636][T11989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.398284][T11989] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.539212][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3068'. [ 126.556374][T12076] openvswitch: netlink: Message has 6 unknown bytes. [ 126.583689][T12079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.610553][T12096] smc: net device bond0 applied user defined pnetid SYZ0 [ 126.620257][T12096] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 126.629661][T12096] smc: net device bond0 erased user defined pnetid SYZ0 [ 126.637106][T12096] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 126.704068][T12105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.763327][T12121] IPv6: Can't replace route, no match found [ 126.833830][T12105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.892896][T12105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.942111][T12164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3091'. [ 126.955574][T12105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.031191][T12105] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.045014][T12173] loop5: detected capacity change from 0 to 512 [ 127.047879][T12105] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.069855][T12105] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.084365][T12105] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.094781][T12173] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.106836][T12173] syzkaller1: entered promiscuous mode [ 127.106931][T12173] syzkaller1: entered allmulticast mode [ 127.241131][T12205] loop6: detected capacity change from 0 to 128 [ 127.375765][ T4209] bio_check_eod: 27 callbacks suppressed [ 127.375783][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.375783][ T4209] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 127.375918][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.375918][ T4209] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 127.419970][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.419970][ T4209] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 127.420104][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420104][ T4209] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 127.420144][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420144][ T4209] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 127.420182][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420182][ T4209] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 127.420249][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420249][ T4209] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 127.420281][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420281][ T4209] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 127.420363][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420363][ T4209] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 127.420402][ T4209] kworker/u8:46: attempt to access beyond end of device [ 127.420402][ T4209] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 127.607614][T12227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.641168][T12236] loop5: detected capacity change from 0 to 256 [ 127.753646][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 128.019955][ T3391] kernel write not supported for file /vcsu (pid: 3391 comm: kworker/0:4) [ 128.342466][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 128.948770][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3160'. [ 128.979137][T12353] ip6gretap1: entered allmulticast mode [ 129.355704][T12428] SELinux: syz.0.3191 (12428) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.729719][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 129.797098][T12478] loop5: detected capacity change from 0 to 512 [ 129.823751][T12478] EXT4-fs mount: 4 callbacks suppressed [ 129.823778][T12478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.881313][T12478] ext4 filesystem being mounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.908999][T12478] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3210: corrupted inode contents [ 129.946236][T12478] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.3210: mark_inode_dirty error [ 129.985836][T12478] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3210: corrupted inode contents [ 130.008613][T12494] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3215'. [ 130.042285][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.387423][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 130.533387][T12559] netlink: 'syz.3.3241': attribute type 3 has an invalid length. [ 130.563350][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 130.911916][T12611] loop6: detected capacity change from 0 to 512 [ 130.950783][T12611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.984732][T12611] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.044422][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 131.044439][ T29] audit: type=1400 audit(1747790853.819:3558): avc: denied { write } for pid=12608 comm="syz.6.3265" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.044931][T12611] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3265: bg 0: block 328: padding at end of block bitmap is not set [ 131.050685][ T29] audit: type=1400 audit(1747790853.819:3559): avc: denied { add_name } for pid=12608 comm="syz.6.3265" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.050723][ T29] audit: type=1400 audit(1747790853.819:3560): avc: denied { create } for pid=12608 comm="syz.6.3265" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 131.186886][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.224825][T12636] xt_hashlimit: max too large, truncated to 1048576 [ 131.332409][ T29] audit: type=1400 audit(1747790854.099:3561): avc: denied { write } for pid=12655 comm="syz.6.3284" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.356349][ T29] audit: type=1400 audit(1747790854.109:3562): avc: denied { getopt } for pid=12657 comm="syz.5.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.424220][ T29] audit: type=1326 audit(1747790854.139:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d047e969 code=0x7ffc0000 [ 131.447849][ T29] audit: type=1326 audit(1747790854.139:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d047e969 code=0x7ffc0000 [ 131.471449][ T29] audit: type=1326 audit(1747790854.139:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d047e969 code=0x7ffc0000 [ 131.495001][ T29] audit: type=1326 audit(1747790854.139:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d047e969 code=0x7ffc0000 [ 131.518601][ T29] audit: type=1326 audit(1747790854.139:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d047e969 code=0x7ffc0000 [ 131.536122][T12670] binfmt_misc: register: failed to install interpreter file ./file2 [ 131.665721][T12676] netlink: 'syz.1.3293': attribute type 13 has an invalid length. [ 131.724160][T12676] bridge0: port 3(batadv1) entered disabled state [ 131.730801][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.738043][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.754299][T12682] __nla_validate_parse: 1 callbacks suppressed [ 131.754317][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.769596][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.781392][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.837627][T12676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.849325][T12676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.907188][T12676] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.915733][T12676] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.915939][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.924141][T12676] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.924183][T12676] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.933086][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.959962][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.988412][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 131.997562][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 132.006673][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 132.016702][T12684] IPVS: Error connecting to the multicast addr [ 132.023126][ T3391] syz1: Port: 1 Link DOWN [ 132.197137][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3308'. [ 132.234893][T12717] bond2: entered promiscuous mode [ 132.240026][T12717] bond2: entered allmulticast mode [ 132.248240][T12717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.278767][T12717] bond2 (unregistering): Released all slaves [ 132.298727][T12791] serio: Serial port ptm0 [ 132.435979][T12815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.449078][T12815] bridge0: port 3(bond3) entered blocking state [ 132.455624][T12815] bridge0: port 3(bond3) entered disabled state [ 132.462189][T12815] bond3: entered allmulticast mode [ 132.468761][T12815] bond3: entered promiscuous mode [ 132.474218][T12815] bridge0: port 3(bond3) entered blocking state [ 132.480522][T12815] bridge0: port 3(bond3) entered forwarding state [ 132.575429][T12878] random: crng reseeded on system resumption [ 132.596495][T12880] netlink: zone id is out of range [ 132.601899][T12880] netlink: zone id is out of range [ 132.607181][T12880] netlink: del zone limit has 8 unknown bytes [ 132.846816][T12917] loop5: detected capacity change from 0 to 512 [ 132.925229][T12917] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3347: bg 0: block 248: padding at end of block bitmap is not set [ 132.964177][T12917] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3347: Failed to acquire dquot type 1 [ 132.976261][T12917] EXT4-fs (loop5): 1 truncate cleaned up [ 132.982946][T12917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.008642][T12917] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.028621][ T4183] bridge0: port 3(bond3) entered disabled state [ 133.084513][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.202293][T12946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.265139][T12952] loop6: detected capacity change from 0 to 164 [ 133.354423][T12965] loop6: detected capacity change from 0 to 512 [ 133.386039][T12965] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.439978][T12965] EXT4-fs (loop6): orphan cleanup on readonly fs [ 133.446419][T12965] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #3: comm syz.6.3368: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 133.534460][T12965] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.3368: Bad quota inode: 3, type: 0 [ 133.592415][T12965] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 133.607192][T12965] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 133.629486][T12965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.677656][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.687732][T12979] SELinux: syz.5.3373 (12979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.181916][T13024] dummy0: entered allmulticast mode [ 134.204420][T13024] dummy0: left allmulticast mode [ 134.450053][T13031] SELinux: failed to load policy [ 134.546741][T13043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13043 comm=syz.6.3391 [ 134.622831][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.623049][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.953828][T13066] loop5: detected capacity change from 0 to 8192 [ 135.186442][T13095] netlink: 'syz.1.3409': attribute type 1 has an invalid length. [ 135.286547][T13135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.301279][T13135] bond5: (slave bond6): making interface the new active one [ 135.309027][T13135] bond5: (slave bond6): Enslaving as an active interface with an up link [ 135.638593][T13186] binfmt_misc: register: failed to install interpreter file ./file2 [ 135.803845][T13201] SELinux: policydb version 17152 does not match my version range 15-34 [ 135.830562][T13201] SELinux: failed to load policy [ 135.870855][T13212] loop5: detected capacity change from 0 to 1024 [ 135.896859][T13212] journal_path: Lookup failure for './file0' [ 135.903106][T13212] EXT4-fs: error: could not find journal device path [ 136.123007][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 136.123023][ T29] audit: type=1400 audit(1747790858.899:3685): avc: denied { read } for pid=13254 comm="syz.1.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.207267][ T29] audit: type=1400 audit(1747790858.979:3686): avc: denied { ioctl } for pid=13266 comm="syz.3.3454" path="socket:[32150]" dev="sockfs" ino=32150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.286502][ T29] audit: type=1400 audit(1747790859.059:3687): avc: denied { create } for pid=13277 comm="syz.3.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.331932][ T29] audit: type=1400 audit(1747790859.099:3688): avc: denied { setopt } for pid=13277 comm="syz.3.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.381442][ T29] audit: type=1400 audit(1747790859.129:3689): avc: denied { create } for pid=13283 comm="syz.1.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 136.401475][ T29] audit: type=1400 audit(1747790859.129:3690): avc: denied { sys_admin } for pid=13283 comm="syz.1.3462" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 136.467834][ T29] audit: type=1400 audit(1747790859.239:3691): avc: denied { name_bind } for pid=13298 comm="syz.3.3465" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 136.637641][ T29] audit: type=1400 audit(1747790859.409:3692): avc: denied { connect } for pid=13281 comm="syz.5.3461" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.739588][ T29] audit: type=1400 audit(1747790859.509:3693): avc: denied { write } for pid=13281 comm="syz.5.3461" path="socket:[31043]" dev="sockfs" ino=31043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.763928][T13335] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 136.807374][ T29] audit: type=1400 audit(1747790859.579:3694): avc: denied { read write } for pid=13337 comm="syz.3.3475" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.897137][T13349] netlink: 'syz.5.3476': attribute type 1 has an invalid length. [ 136.905093][T13349] netlink: 'syz.5.3476': attribute type 4 has an invalid length. [ 136.912981][T13349] __nla_validate_parse: 9 callbacks suppressed [ 136.913048][T13349] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3476'. [ 137.339890][T13398] loop5: detected capacity change from 0 to 164 [ 137.362308][T13398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.387372][T13398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.401469][T13398] rock: directory entry would overflow storage [ 137.407699][T13398] rock: sig=0x4f50, size=4, remaining=3 [ 137.413338][T13398] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.516852][T13418] loop5: detected capacity change from 0 to 256 [ 137.721126][T13435] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3514'. [ 137.765087][T13444] loop6: detected capacity change from 0 to 527 [ 137.776495][T13444] EXT4-fs (loop6): failed to parse options in superblock:  [ 137.789391][T13444] EXT4-fs (loop6): Unsupported encryption level 4 [ 137.953621][T13473] loop6: detected capacity change from 0 to 512 [ 138.007122][T13473] EXT4-fs (loop6): 1 orphan inode deleted [ 138.020399][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 138.035260][T13473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.060364][T13490] netlink: 'syz.3.3532': attribute type 21 has an invalid length. [ 138.088603][T13473] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.183640][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.591143][T13549] loop9: detected capacity change from 0 to 7 [ 138.597496][T13549] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.605428][T13549] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.613481][T13549] loop9: unable to read partition table [ 138.619189][T13549] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 138.619189][T13549] U) failed (rc=-5) [ 138.818701][T13565] loop5: detected capacity change from 0 to 512 [ 138.831283][T13565] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3564: Failed to acquire dquot type 1 [ 138.843221][T13565] EXT4-fs (loop5): 1 truncate cleaned up [ 138.849345][T13565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.862050][T13565] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.885080][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.988779][T13578] netlink: 'syz.3.3568': attribute type 10 has an invalid length. [ 138.996707][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3568'. [ 139.006304][T13578] dummy0: entered promiscuous mode [ 139.012270][T13578] bridge0: port 3(dummy0) entered blocking state [ 139.013969][T13580] netlink: 87 bytes leftover after parsing attributes in process `syz.5.3569'. [ 139.018641][T13578] bridge0: port 3(dummy0) entered disabled state [ 139.034106][T13578] dummy0: entered allmulticast mode [ 139.039910][T13578] bridge0: port 3(dummy0) entered blocking state [ 139.046364][T13578] bridge0: port 3(dummy0) entered forwarding state [ 139.114023][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3574'. [ 139.208600][T13599] nfs4: Bad value for 'source' [ 139.247486][T13602] loop9: detected capacity change from 0 to 7 [ 139.261208][T13602] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.277206][T13602] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.285204][T13602] loop9: unable to read partition table [ 139.291057][T13602] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 139.291057][T13602] U) failed (rc=-5) [ 139.353522][T13609] netlink: 'syz.6.3582': attribute type 10 has an invalid length. [ 139.361431][T13609] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3582'. [ 139.386074][T13609] dummy0: entered promiscuous mode [ 139.392025][T13609] bridge0: port 3(dummy0) entered blocking state [ 139.398452][T13609] bridge0: port 3(dummy0) entered disabled state [ 139.405463][T13609] dummy0: entered allmulticast mode [ 139.414436][T13609] bridge0: port 3(dummy0) entered blocking state [ 139.420911][T13609] bridge0: port 3(dummy0) entered forwarding state [ 139.519945][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3588'. [ 139.578542][T13650] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.622762][T13654] vhci_hcd: invalid port number 0 [ 139.893056][T13680] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.110859][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3613'. [ 140.132525][T13701] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.141398][T13701] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.149650][T13701] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.157915][T13701] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.163114][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 140.178791][T13701] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.186495][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 140.187420][T13701] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.204677][T13701] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.213111][T13701] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.224367][T13707] vhci_hcd: invalid port number 96 [ 140.229526][T13707] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 140.362043][T13730] Invalid ELF header magic: != ELF [ 140.404867][T13735] vhci_hcd: invalid port number 0 [ 140.478771][T13745] netlink: 'syz.3.3629': attribute type 6 has an invalid length. [ 140.644294][T13758] loop6: detected capacity change from 0 to 512 [ 140.654226][T13758] EXT4-fs (loop6): orphan cleanup on readonly fs [ 140.660911][T13758] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3634: bad orphan inode 13 [ 140.672354][T13758] ext4_test_bit(bit=12, block=18) = 1 [ 140.677768][T13758] is_bad_inode(inode)=0 [ 140.682001][T13758] NEXT_ORPHAN(inode)=2130706432 [ 140.686867][T13758] max_ino=32 [ 140.690188][T13758] i_nlink=1 [ 140.695560][T13758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.713621][T13758] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 140.750974][T13758] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 140.799137][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.808879][T13779] loop5: detected capacity change from 0 to 512 [ 140.834479][T13779] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.847924][T13779] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3640: bad orphan inode 13 [ 140.877554][T13779] ext4_test_bit(bit=12, block=18) = 1 [ 140.883155][T13779] is_bad_inode(inode)=0 [ 140.887331][T13779] NEXT_ORPHAN(inode)=2130706432 [ 140.892246][T13779] max_ino=32 [ 140.895463][T13779] i_nlink=1 [ 140.900894][T13779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.998709][T13779] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 141.039582][T13779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3640: bg 0: block 248: padding at end of block bitmap is not set [ 141.055818][T13807] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 141.068514][T13805] IPVS: stopping master sync thread 13807 ... [ 141.080841][T13779] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3640: Failed to acquire dquot type 1 [ 141.112887][T13779] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.178393][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.203412][T13820] vhci_hcd: invalid port number 96 [ 141.208661][T13820] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 141.218464][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 141.218478][ T29] audit: type=1400 audit(1747790863.989:3835): avc: denied { mount } for pid=13823 comm="syz.3.3659" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.267732][ T29] audit: type=1400 audit(1747790864.039:3836): avc: denied { unmount } for pid=13823 comm="syz.3.3659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.360224][T13846] IPVS: stopping master sync thread 13849 ... [ 141.363374][T13849] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 141.387909][ T29] audit: type=1326 audit(1747790864.079:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.411594][ T29] audit: type=1326 audit(1747790864.079:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.435265][ T29] audit: type=1326 audit(1747790864.079:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.458791][ T29] audit: type=1326 audit(1747790864.079:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.482417][ T29] audit: type=1326 audit(1747790864.079:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.506155][ T29] audit: type=1326 audit(1747790864.079:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.0.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2565fde969 code=0x7ffc0000 [ 141.529699][ T29] audit: type=1326 audit(1747790864.119:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 141.553268][ T29] audit: type=1326 audit(1747790864.119:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13811 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633d03e969 code=0x7ffc0000 [ 141.609339][T13867] random: crng reseeded on system resumption [ 141.734478][T13882] dummy0: entered allmulticast mode [ 141.742632][T13882] dummy0: left allmulticast mode [ 141.804280][T13895] loop5: detected capacity change from 0 to 512 [ 141.811278][T13895] EXT4-fs: Ignoring removed nobh option [ 141.818143][T13890] SELinux: policydb version 0 does not match my version range 15-34 [ 141.826874][T13890] SELinux: failed to load policy [ 141.842643][T13895] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 141.863921][T13895] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3682: attempt to clear invalid blocks 2 len 1 [ 141.899032][T13895] EXT4-fs (loop5): Remounting filesystem read-only [ 141.910844][T13895] EXT4-fs (loop5): 1 truncate cleaned up [ 141.917117][T13895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.962491][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.062756][T13936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.071676][T13936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.118353][T13942] loop6: detected capacity change from 0 to 512 [ 142.127854][T13942] EXT4-fs: Ignoring removed nobh option [ 142.137394][T13942] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 142.155134][T13942] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3701: attempt to clear invalid blocks 2 len 1 [ 142.185635][T13942] EXT4-fs (loop6): Remounting filesystem read-only [ 142.196749][T13948] bridge0: port 3(gretap0) entered disabled state [ 142.197558][T13942] EXT4-fs (loop6): 1 truncate cleaned up [ 142.235110][T13942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.370363][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.427976][T13955] netlink: 'syz.6.3702': attribute type 10 has an invalid length. [ 142.472511][T13955] ipvlan0: entered allmulticast mode [ 142.477955][T13955] veth0_vlan: entered allmulticast mode [ 142.511397][T13955] team0: Device ipvlan0 failed to register rx_handler [ 142.647238][T13975] loop6: detected capacity change from 0 to 512 [ 142.670284][T13975] EXT4-fs (loop6): orphan cleanup on readonly fs [ 142.679321][T13975] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3710: bad orphan inode 13 [ 142.691616][T13975] ext4_test_bit(bit=12, block=18) = 1 [ 142.697081][T13975] is_bad_inode(inode)=0 [ 142.701324][T13975] NEXT_ORPHAN(inode)=2130706432 [ 142.706207][T13975] max_ino=32 [ 142.709473][T13975] i_nlink=1 [ 142.715333][T13975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.744033][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.786458][T13991] IPVS: Error connecting to the multicast addr [ 142.898107][T14003] loop6: detected capacity change from 0 to 1024 [ 142.935981][T14003] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 142.948687][T14003] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.965319][T14003] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #32: comm syz.6.3721: iget: special inode unallocated [ 142.979944][T14003] EXT4-fs (loop6): Remounting filesystem read-only [ 142.986516][T14003] EXT4-fs (loop6): no journal found [ 142.991803][T14003] EXT4-fs (loop6): can't get journal size [ 142.999561][T14003] EXT4-fs (loop6): failed to initialize system zone (-117) [ 143.006892][T14003] EXT4-fs (loop6): mount failed [ 143.015390][T14010] __nla_validate_parse: 4 callbacks suppressed [ 143.015407][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 143.031268][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 143.058138][T14018] vhci_hcd: default hub control req: 4a0e v0000 i0000 l31125 [ 143.144756][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 143.156630][T14038] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.165129][T14038] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.173442][T14038] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.181717][T14038] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.184549][T14044] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 143.197386][T14038] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.205996][T14038] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.214467][T14038] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.222874][T14038] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.557395][T14090] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 143.606902][T14099] netlink: 'syz.6.3759': attribute type 1 has an invalid length. [ 143.649233][T14107] netlink: 'syz.6.3764': attribute type 1 has an invalid length. [ 143.674552][T14107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.682665][T14107] bond2: (slave bond3): making interface the new active one [ 143.690337][T14107] bond2: (slave bond3): Enslaving as an active interface with an up link [ 144.411417][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3766'. [ 144.420484][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3766'. [ 144.429442][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3766'. [ 144.438419][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881304e0200: rx timeout, send abort [ 144.440497][T14179] netlink: 'syz.1.3765': attribute type 10 has an invalid length. [ 144.446692][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881304e0200: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.469064][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3766'. [ 144.478048][T14177] netlink: 'syz.6.3766': attribute type 6 has an invalid length. [ 144.493866][T14179] ipvlan0: entered allmulticast mode [ 144.499283][T14179] veth0_vlan: entered allmulticast mode [ 144.505957][T14179] team0: Device ipvlan0 failed to register rx_handler [ 144.737069][T14236] vhci_hcd: default hub control req: 4a0e v0000 i0000 l31125 [ 145.011243][T14253] netlink: 'syz.6.3789': attribute type 13 has an invalid length. [ 145.152093][T14253] bridge0: port 3(dummy0) entered disabled state [ 145.158572][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.165761][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.340554][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.352755][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.396226][T14253] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.404750][T14253] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.413237][T14253] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.421739][T14253] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.438614][T14331] loop6: detected capacity change from 0 to 1024 [ 146.475390][T14331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.481410][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 146.481505][ T29] audit: type=1400 audit(1747790869.249:3949): avc: denied { mounton } for pid=14329 comm="syz.0.3812" path="/proc/1743/cgroup" dev="proc" ino=33517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 146.670406][ T5316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.684970][T14345] loop5: detected capacity change from 0 to 1024 [ 146.712295][T14345] EXT4-fs: Ignoring removed orlov option [ 146.731971][T14345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.972047][ T29] audit: type=1400 audit(1747790869.729:3950): avc: denied { listen } for pid=14364 comm="syz.3.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.008188][T14369] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.020549][T14369] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.045576][T14367] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 147.058963][T14373] ip6gre1: entered allmulticast mode [ 147.116828][T14383] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.294734][T14386] netlink: 'syz.6.3836': attribute type 11 has an invalid length. [ 147.306693][T14386] netlink: 448 bytes leftover after parsing attributes in process `syz.6.3836'. [ 147.476409][ T4204] ================================================================== [ 147.484542][ T4204] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 147.493873][ T4204] [ 147.496226][ T4204] write to 0xffff88811cc1a92d of 2 bytes by task 14361 on cpu 1: [ 147.503964][ T4204] copy_page_from_iter_atomic+0x77f/0xff0 [ 147.509708][ T4204] generic_perform_write+0x2c2/0x490 [ 147.515038][ T4204] ext4_buffered_write_iter+0x1ee/0x3c0 [ 147.520630][ T4204] ext4_file_write_iter+0x383/0xf00 [ 147.525873][ T4204] iter_file_splice_write+0x5f2/0x970 [ 147.531291][ T4204] direct_splice_actor+0x153/0x2a0 [ 147.536427][ T4204] splice_direct_to_actor+0x30f/0x680 [ 147.541827][ T4204] do_splice_direct+0xda/0x150 [ 147.546625][ T4204] do_sendfile+0x380/0x640 [ 147.551065][ T4204] __x64_sys_sendfile64+0x105/0x150 [ 147.556310][ T4204] x64_sys_call+0xb39/0x2fb0 [ 147.560935][ T4204] do_syscall_64+0xd0/0x1a0 [ 147.565515][ T4204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.571451][ T4204] [ 147.573793][ T4204] read to 0xffff88811cc1a800 of 1024 bytes by task 4204 on cpu 0: [ 147.581620][ T4204] copy_page_from_iter_atomic+0x77f/0xff0 [ 147.587387][ T4204] generic_perform_write+0x2c2/0x490 [ 147.592713][ T4204] shmem_file_write_iter+0xc5/0xf0 [ 147.597873][ T4204] lo_rw_aio+0x5fa/0x7c0 [ 147.602196][ T4204] loop_process_work+0x52d/0xa60 [ 147.607190][ T4204] loop_workfn+0x31/0x40 [ 147.611488][ T4204] process_scheduled_works+0x4cb/0x9d0 [ 147.617088][ T4204] worker_thread+0x582/0x770 [ 147.621722][ T4204] kthread+0x486/0x510 [ 147.625820][ T4204] ret_from_fork+0x4b/0x60 [ 147.630264][ T4204] ret_from_fork_asm+0x1a/0x30 [ 147.635066][ T4204] [ 147.637436][ T4204] Reported by Kernel Concurrency Sanitizer on: [ 147.643673][ T4204] CPU: 0 UID: 0 PID: 4204 Comm: kworker/u8:41 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 147.656380][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.666568][ T4204] Workqueue: loop5 loop_workfn [ 147.671385][ T4204] ================================================================== [ 147.698895][ T4858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.