last executing test programs: 1.501902158s ago: executing program 4 (id=2790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0xe) 1.47261031s ago: executing program 3 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x80}, {0x884, 0x1, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 1.457099451s ago: executing program 4 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4048095}, 0x0) 1.334015311s ago: executing program 3 (id=2797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) 1.275936426s ago: executing program 1 (id=2808): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = semget$private(0x0, 0x4, 0x589) semtimedop(r1, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000040)=0x4) 1.179071113s ago: executing program 1 (id=2800): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r2}, 0x18) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.116805259s ago: executing program 3 (id=2802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0xe) 1.113747669s ago: executing program 4 (id=2803): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.032785336s ago: executing program 3 (id=2805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 901.298336ms ago: executing program 3 (id=2806): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 827.277042ms ago: executing program 4 (id=2809): ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 763.404968ms ago: executing program 4 (id=2810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 727.945131ms ago: executing program 4 (id=2812): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000001c0)={[{@nodots}, {@fat=@discard}, {@nodots}, {@fat=@flush}, {@nodots}, {@fat=@discard}, {@nodots}, {@nodots}, {}]}, 0x1, 0x11f1, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069117b0000000000851000ff00000000850000001800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 634.676918ms ago: executing program 0 (id=2813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 634.174458ms ago: executing program 1 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 564.932203ms ago: executing program 3 (id=2815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_usbip_server_init(0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xdab, 0x7ff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x488, 0x30, 0x12f, 0x40, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x20000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}}, 0x0) 350.161551ms ago: executing program 1 (id=2816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 269.441878ms ago: executing program 1 (id=2817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x29, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 255.512889ms ago: executing program 0 (id=2818): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 231.513291ms ago: executing program 2 (id=2819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0x32) close(r2) 197.595984ms ago: executing program 2 (id=2820): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 194.257864ms ago: executing program 0 (id=2821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='U', 0x1}], 0x1}, 0x0) 172.620006ms ago: executing program 0 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 157.417516ms ago: executing program 2 (id=2823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 100.233191ms ago: executing program 0 (id=2824): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) r3 = pidfd_getfd(r1, r1, 0x0) setns(r3, 0x14020000) 99.626212ms ago: executing program 1 (id=2825): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010102}], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x300, 0x1, 0x1, 0x6, 0x6, 0xbf}, 0x20) 99.208451ms ago: executing program 2 (id=2826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 72.930704ms ago: executing program 2 (id=2827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xc82, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20008844) 220.559µs ago: executing program 2 (id=2828): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 0s ago: executing program 0 (id=2829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x9, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.854882][ T4694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.854894][ T4687] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.881794][ T4694] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.893386][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.051308][ T4715] loop4: detected capacity change from 0 to 1024 [ 56.086874][ T4715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.099513][ T4715] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.142524][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.178772][ T4720] loop3: detected capacity change from 0 to 8192 [ 56.240745][ T4720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.249470][ T4720] FAT-fs (loop3): Filesystem has been set read-only [ 56.270769][ T4736] loop4: detected capacity change from 0 to 2048 [ 56.339333][ T4736] Alternate GPT is invalid, using primary GPT. [ 56.345722][ T4736] loop4: p1 p2 p3 [ 56.609616][ T4768] loop3: detected capacity change from 0 to 1024 [ 56.628693][ T4768] EXT4-fs: inline encryption not supported [ 56.634607][ T4768] EXT4-fs: Ignoring removed i_version option [ 56.678993][ T4777] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 56.696729][ T4768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.722736][ T4777] team0: Device hsr_slave_0 failed to register rx_handler [ 56.782278][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.940237][ T4807] serio: Serial port ptm0 [ 57.075777][ T4824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.303997][ T4851] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 57.385014][ T4862] sd 0:0:1:0: device reset [ 57.483860][ T4878] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 57.605983][ T4894] hub 9-0:1.0: USB hub found [ 57.615362][ T4894] hub 9-0:1.0: 8 ports detected [ 57.648450][ T4904] netlink: 'syz.3.584': attribute type 13 has an invalid length. [ 57.687513][ T4904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.703160][ T4903] netlink: 'syz.0.583': attribute type 20 has an invalid length. [ 57.713139][ T4899] __nla_validate_parse: 5 callbacks suppressed [ 57.713160][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 57.728324][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 57.743091][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 57.752013][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 57.760982][ T4903] netlink: 'syz.0.583': attribute type 20 has an invalid length. [ 57.769757][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.790765][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.802686][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.803936][ T4910] loop3: detected capacity change from 0 to 512 [ 57.821295][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.906264][ T4924] loop4: detected capacity change from 0 to 1024 [ 57.913418][ T4924] EXT4-fs: Ignoring removed nobh option [ 57.919110][ T4924] EXT4-fs: Ignoring removed bh option [ 57.928788][ T4928] loop3: detected capacity change from 0 to 256 [ 57.939996][ T4924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.031313][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.141443][ T4963] loop3: detected capacity change from 0 to 764 [ 58.164761][ T4963] rock: directory entry would overflow storage [ 58.171179][ T4963] rock: sig=0x5245, size=8, remaining=5 [ 59.036634][ T4976] serio: Serial port ptm0 [ 59.136008][ T4987] loop2: detected capacity change from 0 to 1024 [ 59.143077][ T4987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.202871][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.273981][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.283237][ T5001] loop4: detected capacity change from 0 to 512 [ 59.308742][ T5001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.322787][ T5001] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.353264][ T5001] EXT4-fs: Ignoring removed orlov option [ 59.367982][ T5001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.376791][ T5001] EXT4-fs (loop4): can't enable nombcache during remount [ 59.418301][ T5007] loop1: detected capacity change from 0 to 1024 [ 59.427868][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.440335][ T5007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.540607][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.649577][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.871044][ T5052] loop1: detected capacity change from 0 to 512 [ 59.893700][ T5052] EXT4-fs (loop1): 1 orphan inode deleted [ 59.911185][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.913218][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 59.936256][ T5060] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 59.938863][ T5052] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.945631][ T5060] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 59.985075][ T5064] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 59.992609][ T5064] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.020782][ T5066] hub 9-0:1.0: USB hub found [ 60.028589][ T5068] sd 0:0:1:0: device reset [ 60.036157][ T5066] hub 9-0:1.0: 8 ports detected [ 60.046281][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.235872][ T5128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.643635][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 60.643653][ T29] audit: type=1400 audit(1754028436.803:892): avc: denied { write } for pid=5171 comm="syz.2.674" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.676204][ T5173] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.676204][ T5173] program syz.2.674 not setting count and/or reply_len properly [ 60.741607][ T29] audit: type=1400 audit(1754028436.903:893): avc: denied { write } for pid=5181 comm="syz.2.678" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.822155][ T29] audit: type=1400 audit(1754028436.983:894): avc: denied { create } for pid=5189 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.895510][ T29] audit: type=1400 audit(1754028437.013:895): avc: denied { connect } for pid=5189 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.915406][ T29] audit: type=1400 audit(1754028437.053:896): avc: denied { create } for pid=5194 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.935020][ T29] audit: type=1400 audit(1754028437.053:897): avc: denied { connect } for pid=5194 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.062210][ T29] audit: type=1400 audit(1754028437.223:898): avc: denied { read write } for pid=5200 comm="syz.1.687" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.086210][ T29] audit: type=1400 audit(1754028437.223:899): avc: denied { open } for pid=5200 comm="syz.1.687" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.114093][ T5201] loop1: detected capacity change from 0 to 512 [ 61.130996][ T29] audit: type=1400 audit(1754028437.273:900): avc: denied { sqpoll } for pid=5078 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.150157][ T29] audit: type=1400 audit(1754028437.273:901): avc: denied { allowed } for pid=5078 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.171035][ T5201] EXT4-fs: Ignoring removed nobh option [ 61.184561][ T5204] loop2: detected capacity change from 0 to 512 [ 61.204886][ T5201] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.217280][ T5201] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 61.227449][ T5201] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.687: Corrupt directory, running e2fsck is recommended [ 61.251753][ T5201] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 61.262178][ T5201] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.687: corrupted in-inode xattr: invalid ea_ino [ 61.275814][ T5201] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.687: couldn't read orphan inode 15 (err -117) [ 61.290867][ T5201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.320648][ T5213] bond2: entered promiscuous mode [ 61.325738][ T5213] bond2: entered allmulticast mode [ 61.353824][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.367857][ T5213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.430421][ T5213] bond2 (unregistering): Released all slaves [ 61.442220][ T5218] loop1: detected capacity change from 0 to 1024 [ 61.449361][ T5218] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.493405][ T5218] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.694: Invalid block bitmap block 0 in block_group 0 [ 61.528103][ T5218] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.694: Failed to acquire dquot type 0 [ 61.549770][ T5218] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.694: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.559792][ T5227] loop2: detected capacity change from 0 to 128 [ 61.579093][ T5218] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.694: Invalid inode bitmap blk 0 in block_group 0 [ 61.597727][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 61.610666][ T5231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5231 comm=syz.0.698 [ 61.623823][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.627491][ T5231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=5231 comm=syz.0.698 [ 61.632553][ T5227] FAT-fs (loop2): Filesystem has been set read-only [ 61.651233][ T5218] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 61.664689][ T5227] syz.2.696: attempt to access beyond end of device [ 61.664689][ T5227] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.681267][ T5218] EXT4-fs (loop1): 1 orphan inode deleted [ 61.694039][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.701979][ T5227] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.710010][ T5218] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.730348][ T5218] syz.1.694 (5218) used greatest stack depth: 9312 bytes left [ 61.743921][ T5227] syz.2.696: attempt to access beyond end of device [ 61.743921][ T5227] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.790227][ T5232] syz.2.696: attempt to access beyond end of device [ 61.790227][ T5232] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 61.803461][ T5232] Buffer I/O error on dev loop2, logical block 2065, async page read [ 61.821505][ T5232] syz.2.696: attempt to access beyond end of device [ 61.821505][ T5232] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 61.834822][ T5232] Buffer I/O error on dev loop2, logical block 2066, async page read [ 61.845374][ T5232] syz.2.696: attempt to access beyond end of device [ 61.845374][ T5232] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 61.858603][ T5232] Buffer I/O error on dev loop2, logical block 2067, async page read [ 61.870346][ T5232] syz.2.696: attempt to access beyond end of device [ 61.870346][ T5232] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 61.883645][ T5232] Buffer I/O error on dev loop2, logical block 2068, async page read [ 61.894541][ T5232] syz.2.696: attempt to access beyond end of device [ 61.894541][ T5232] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 61.907873][ T5232] Buffer I/O error on dev loop2, logical block 2069, async page read [ 61.919818][ T5232] syz.2.696: attempt to access beyond end of device [ 61.919818][ T5232] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 61.933109][ T5232] Buffer I/O error on dev loop2, logical block 2070, async page read [ 61.941440][ T5232] syz.2.696: attempt to access beyond end of device [ 61.941440][ T5232] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 61.954847][ T5232] Buffer I/O error on dev loop2, logical block 2071, async page read [ 61.963129][ T5232] syz.2.696: attempt to access beyond end of device [ 61.963129][ T5232] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 61.976483][ T5232] Buffer I/O error on dev loop2, logical block 2072, async page read [ 61.991860][ T5232] Buffer I/O error on dev loop2, logical block 2065, async page read [ 62.001602][ T5232] Buffer I/O error on dev loop2, logical block 2066, async page read [ 62.089875][ T5252] loop9: detected capacity change from 0 to 7 [ 62.112629][ T5252] loop9: unable to read partition table [ 62.121268][ T5258] loop4: detected capacity change from 0 to 512 [ 62.129539][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.136034][ T5252] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 62.136034][ T5252] ) failed (rc=-5) [ 62.150952][ T5258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.163998][ T5258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 62.172054][ T5258] System zones: 1-12 [ 62.186235][ T5258] EXT4-fs (loop4): 1 truncate cleaned up [ 62.284024][ T5257] loop1: detected capacity change from 0 to 8192 [ 62.409432][ T5268] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 62.474977][ T5279] loop3: detected capacity change from 0 to 1024 [ 62.501083][ T5279] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.521886][ T5279] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.722: Invalid block bitmap block 0 in block_group 0 [ 62.561905][ T5294] netlink: 96 bytes leftover after parsing attributes in process `syz.2.727'. [ 62.571377][ T5279] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.722: Failed to acquire dquot type 0 [ 62.586583][ T5279] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.722: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.611234][ T5279] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.722: Invalid inode bitmap blk 0 in block_group 0 [ 62.628459][ T5100] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0 [ 62.644328][ T5279] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 62.655786][ T5279] EXT4-fs (loop3): 1 orphan inode deleted [ 62.666525][ T5279] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.685812][ T5302] loop2: detected capacity change from 0 to 164 [ 62.693270][ T5302] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.705765][ T5302] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.715014][ T5302] Symlink component flag not implemented [ 62.721399][ T5302] Symlink component flag not implemented [ 62.727622][ T5302] Symlink component flag not implemented (7) [ 62.733726][ T5302] Symlink component flag not implemented (116) [ 62.963141][ T5341] loop3: detected capacity change from 0 to 1024 [ 62.976066][ T5341] EXT4-fs: inline encryption not supported [ 62.985568][ T5345] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 62.985568][ T5345] program syz.2.752 not setting count and/or reply_len properly [ 62.987189][ T5341] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 63.098768][ T5357] netlink: 2 bytes leftover after parsing attributes in process `syz.3.757'. [ 63.200090][ T5371] sctp: [Deprecated]: syz.1.763 (pid 5371) Use of int in max_burst socket option. [ 63.200090][ T5371] Use struct sctp_assoc_value instead [ 63.234962][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.243680][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.388375][ T5379] vhci_hcd: invalid port number 96 [ 63.393539][ T5379] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 63.416138][ T5381] netlink: 204 bytes leftover after parsing attributes in process `syz.4.766'. [ 63.853731][ T5400] mmap: syz.0.775 (5400) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.345468][ T5454] 9pnet: Could not find request transport: reffective_cpus [ 64.549716][ T5471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.805'. [ 64.601359][ T5473] SELinux: failed to load policy [ 64.707616][ T5489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.813'. [ 64.778961][ T5500] sctp: [Deprecated]: syz.4.817 (pid 5500) Use of int in max_burst socket option. [ 64.778961][ T5500] Use struct sctp_assoc_value instead [ 64.852114][ T5506] SELinux: failed to load policy [ 64.862578][ T5508] 9pnet: Could not find request transport: 0xffffffffffffffff [ 64.886073][ T5511] 9pnet: Could not find request transport: reffective_cpus [ 64.918283][ T5518] loop9: detected capacity change from 0 to 7 [ 64.924803][ T5518] loop9: unable to read partition table [ 64.930674][ T5518] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.930674][ T5518] ) failed (rc=-5) [ 64.967094][ T5522] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 64.974933][ T5522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.828'. [ 65.017089][ T5529] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.826'. [ 65.027368][ T5520] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.826'. [ 65.045473][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.832'. [ 65.069288][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 65.108337][ T5538] tipc: Started in network mode [ 65.113279][ T5538] tipc: Node identity fe18ba135075, cluster identity 4711 [ 65.120732][ T5538] tipc: Enabled bearer , priority 0 [ 65.134292][ T5538] tipc: Disabling bearer [ 65.292476][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 65.411722][ T5572] SELinux: failed to load policy [ 65.433406][ T5579] netlink: 'syz.3.851': attribute type 6 has an invalid length. [ 65.724522][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 65.724603][ T29] audit: type=1326 audit(1754028441.883:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.754494][ T29] audit: type=1326 audit(1754028441.883:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.790655][ T29] audit: type=1326 audit(1754028441.883:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.814658][ T29] audit: type=1326 audit(1754028441.883:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.838145][ T29] audit: type=1326 audit(1754028441.883:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.862179][ T29] audit: type=1326 audit(1754028441.883:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.886496][ T29] audit: type=1326 audit(1754028441.883:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.909877][ T29] audit: type=1326 audit(1754028441.883:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.933437][ T29] audit: type=1326 audit(1754028441.883:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 65.956875][ T29] audit: type=1326 audit(1754028441.883:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 66.124216][ T5599] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 66.140568][ T5599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.181224][ T5599] bond2 (unregistering): Released all slaves [ 66.347763][ T5621] bridge0: entered promiscuous mode [ 66.387025][ T5621] macsec1: entered promiscuous mode [ 66.424395][ T5621] bridge0: port 3(macsec1) entered blocking state [ 66.431319][ T5621] bridge0: port 3(macsec1) entered disabled state [ 66.486479][ T5621] macsec1: entered allmulticast mode [ 66.492002][ T5621] bridge0: entered allmulticast mode [ 66.528975][ T5621] macsec1: left allmulticast mode [ 66.534143][ T5621] bridge0: left allmulticast mode [ 66.544041][ T5621] bridge0: left promiscuous mode [ 66.939869][ T5666] sch_fq: defrate 0 ignored. [ 66.965167][ T5674] tipc: Started in network mode [ 66.970241][ T5674] tipc: Node identity 0efa3e33d966, cluster identity 4711 [ 66.978340][ T5674] tipc: Enabled bearer , priority 0 [ 67.013953][ T5674] tipc: Disabling bearer [ 67.132317][ T5701] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 67.305950][ T5728] sctp: [Deprecated]: syz.4.909 (pid 5728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.305950][ T5728] Use struct sctp_sack_info instead [ 67.540339][ T5751] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.631575][ T5756] loop3: detected capacity change from 0 to 512 [ 67.717611][ T5756] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.852573][ T5775] netlink: 'syz.1.933': attribute type 3 has an invalid length. [ 67.915778][ T5784] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 67.916198][ T5783] IPVS: stopping master sync thread 5784 ... [ 68.189148][ T5804] serio: Serial port ptm0 [ 68.267120][ T5822] loop2: detected capacity change from 0 to 512 [ 68.285517][ T5822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.953: bg 0: block 393: padding at end of block bitmap is not set [ 68.310194][ T5822] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 68.420452][ T5822] EXT4-fs (loop2): 2 truncates cleaned up [ 68.441883][ T5830] syz.0.956 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.581631][ T5842] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 69.161547][ T5866] __nla_validate_parse: 13 callbacks suppressed [ 69.161609][ T5866] netlink: 304 bytes leftover after parsing attributes in process `syz.3.972'. [ 69.212808][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 69.214496][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 69.326608][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 69.465125][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 69.495985][ T5100] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.509381][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 69.526447][ T5100] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.546009][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.588733][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.930289][ T5946] loop3: detected capacity change from 0 to 512 [ 69.939970][ T5948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1010'. [ 69.971233][ T5946] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1009: bg 0: block 393: padding at end of block bitmap is not set [ 70.001316][ T5946] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 70.014384][ T5959] 9pnet_fd: Insufficient options for proto=fd [ 70.016224][ T5946] EXT4-fs (loop3): 2 truncates cleaned up [ 70.166626][ T5983] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 70.181937][ T5983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.194633][ T5983] bond2 (unregistering): Released all slaves [ 70.528612][ T6035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1048'. [ 70.551674][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 70.805967][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 70.805983][ T29] audit: type=1400 audit(1754028446.963:1287): avc: denied { create } for pid=6056 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.869970][ T29] audit: type=1400 audit(1754028447.003:1288): avc: denied { setopt } for pid=6056 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.889569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.899065][ T29] audit: type=1400 audit(1754028447.023:1289): avc: denied { setattr } for pid=6062 comm="syz.2.1060" name="tty2" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 70.985506][ T29] audit: type=1400 audit(1754028447.143:1290): avc: denied { connect } for pid=6068 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.036233][ T29] audit: type=1400 audit(1754028447.173:1291): avc: denied { getopt } for pid=6068 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.262513][ T6075] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1066'. [ 71.438994][ T29] audit: type=1400 audit(1754028447.603:1292): avc: denied { create } for pid=6089 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.502914][ T29] audit: type=1326 audit(1754028447.663:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 71.526871][ T29] audit: type=1326 audit(1754028447.663:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 71.550947][ T29] audit: type=1326 audit(1754028447.663:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 71.574399][ T29] audit: type=1326 audit(1754028447.663:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 71.673591][ T6096] SELinux: ebitmap: truncated map [ 71.711416][ T6096] SELinux: failed to load policy [ 71.935564][ T6117] vhci_hcd: invalid port number 96 [ 71.940911][ T6117] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 72.436465][ T6169] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 72.452747][ T6169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.473622][ T6169] bond2 (unregistering): Released all slaves [ 72.681745][ T6192] policy can only be matched on NF_INET_PRE_ROUTING [ 72.681762][ T6192] unable to load match [ 73.076098][ T6228] loop2: detected capacity change from 0 to 1024 [ 73.111455][ T6228] EXT4-fs mount: 12 callbacks suppressed [ 73.111476][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.129557][ T6228] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.164944][ T6228] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 73.177267][ T6228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.177267][ T6228] [ 73.186966][ T6228] EXT4-fs (loop2): Total free blocks count 0 [ 73.192987][ T6228] EXT4-fs (loop2): Free/Dirty block details [ 73.199627][ T6228] EXT4-fs (loop2): free_blocks=0 [ 73.204590][ T6228] EXT4-fs (loop2): dirty_blocks=0 [ 73.209655][ T6228] EXT4-fs (loop2): Block reservation details [ 73.215681][ T6228] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 73.242403][ T6240] random: crng reseeded on system resumption [ 73.255045][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.683682][ T6294] loop3: detected capacity change from 0 to 128 [ 73.691111][ T6294] FAT-fs (loop3): Directory bread(block 162) failed [ 73.699604][ T6294] FAT-fs (loop3): Directory bread(block 163) failed [ 73.706662][ T6294] FAT-fs (loop3): Directory bread(block 164) failed [ 73.713401][ T6294] FAT-fs (loop3): Directory bread(block 165) failed [ 73.720454][ T6294] FAT-fs (loop3): Directory bread(block 166) failed [ 73.728560][ T6294] FAT-fs (loop3): Directory bread(block 167) failed [ 73.740348][ T6294] FAT-fs (loop3): Directory bread(block 168) failed [ 73.749321][ T6294] FAT-fs (loop3): Directory bread(block 169) failed [ 73.828547][ T6303] loop3: detected capacity change from 0 to 256 [ 73.842033][ T6303] FAT-fs (loop3): Directory bread(block 64) failed [ 73.849482][ T6303] FAT-fs (loop3): Directory bread(block 65) failed [ 73.856118][ T6303] FAT-fs (loop3): Directory bread(block 66) failed [ 73.863466][ T6303] FAT-fs (loop3): Directory bread(block 67) failed [ 73.870900][ T6303] FAT-fs (loop3): Directory bread(block 68) failed [ 73.878080][ T6303] FAT-fs (loop3): Directory bread(block 69) failed [ 73.884664][ T6303] FAT-fs (loop3): Directory bread(block 70) failed [ 73.896731][ T6303] FAT-fs (loop3): Directory bread(block 71) failed [ 73.904053][ T6303] FAT-fs (loop3): Directory bread(block 72) failed [ 73.914484][ T6303] FAT-fs (loop3): Directory bread(block 73) failed [ 73.986184][ T6314] loop3: detected capacity change from 0 to 512 [ 73.994237][ T6314] msdos: Bad value for 'uid' [ 73.998931][ T6314] msdos: Bad value for 'uid' [ 74.083243][ T6316] loop3: detected capacity change from 0 to 1024 [ 74.099152][ T6316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.131470][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.413648][ T6339] 0XD: left allmulticast mode [ 74.433604][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.455121][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.469396][ T6339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.490090][ T6343] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 74.504477][ T6343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.526059][ T6343] bond1: (slave gretap1): making interface the new active one [ 74.535057][ T6343] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 74.889413][ T6383] netlink: 'syz.4.1197': attribute type 10 has an invalid length. [ 74.900336][ T6383] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 74.940420][ T6387] veth1_to_bond: entered allmulticast mode [ 74.953852][ T6387] veth1_to_bond: left allmulticast mode [ 75.094886][ T6407] vlan2: entered allmulticast mode [ 75.171337][ T6426] __nla_validate_parse: 4 callbacks suppressed [ 75.171355][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 75.198154][ T6426] erspan0: entered promiscuous mode [ 75.207146][ T6426] macvtap1: entered promiscuous mode [ 75.212615][ T6426] macvtap1: entered allmulticast mode [ 75.218073][ T6426] erspan0: entered allmulticast mode [ 75.232402][ T6429] erspan0: left allmulticast mode [ 75.238307][ T6429] erspan0: left promiscuous mode [ 75.282941][ T6433] netlink: 'syz.3.1220': attribute type 298 has an invalid length. [ 75.309638][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 75.395232][ T6443] netlink: 'syz.4.1225': attribute type 3 has an invalid length. [ 75.443527][ T6448] vlan0: entered allmulticast mode [ 75.477827][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 75.674744][ T6465] loop3: detected capacity change from 0 to 164 [ 75.689344][ T6465] bio_check_eod: 26520 callbacks suppressed [ 75.689403][ T6465] syz.3.1235: attempt to access beyond end of device [ 75.689403][ T6465] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 75.737075][ T6465] syz.3.1235: attempt to access beyond end of device [ 75.737075][ T6465] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 75.809203][ T6477] random: crng reseeded on system resumption [ 75.860974][ T6486] loop4: detected capacity change from 0 to 128 [ 75.869367][ T6486] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.882274][ T6486] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.897402][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 75.897443][ T29] audit: type=1400 audit(1754028452.063:1388): avc: denied { read write open } for pid=6485 comm="syz.4.1243" path="/239/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.930095][ T29] audit: type=1400 audit(1754028452.063:1389): avc: denied { setattr } for pid=6485 comm="syz.4.1243" path="/239/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.953453][ T29] audit: type=1400 audit(1754028452.093:1390): avc: denied { ioctl } for pid=6485 comm="syz.4.1243" path="/239/file1/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.979231][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.003026][ T6489] loop3: detected capacity change from 0 to 8192 [ 76.009748][ T6489] msdos: Unknown parameter '' [ 76.203440][ T29] audit: type=1326 audit(1754028452.363:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.226987][ T29] audit: type=1326 audit(1754028452.363:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.255034][ T29] audit: type=1326 audit(1754028452.413:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.278716][ T29] audit: type=1326 audit(1754028452.413:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.302294][ T29] audit: type=1326 audit(1754028452.413:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.325889][ T29] audit: type=1326 audit(1754028452.413:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.349343][ T29] audit: type=1326 audit(1754028452.413:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6490 comm="syz.4.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 76.418369][ T6502] loop4: detected capacity change from 0 to 512 [ 76.425680][ T6502] msdos: Bad value for 'uid' [ 76.431329][ T6502] msdos: Bad value for 'uid' [ 76.480769][ T6509] IPv6: Can't replace route, no match found [ 77.610507][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 77.628167][ T6555] netem: change failed [ 77.669157][ T6559] loop4: detected capacity change from 0 to 164 [ 77.698867][ T6559] syz.4.1274: attempt to access beyond end of device [ 77.698867][ T6559] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.719463][ T6559] syz.4.1274: attempt to access beyond end of device [ 77.719463][ T6559] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.813068][ T6568] loop2: detected capacity change from 0 to 164 [ 77.861162][ T6568] syz.2.1280: attempt to access beyond end of device [ 77.861162][ T6568] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.905628][ T6568] syz.2.1280: attempt to access beyond end of device [ 77.905628][ T6568] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 78.069518][ T6587] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1288'. [ 78.164251][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 78.199704][ T6601] erspan0: entered promiscuous mode [ 78.214606][ T6602] loop4: detected capacity change from 0 to 2048 [ 78.222627][ T6601] macvtap1: entered promiscuous mode [ 78.228196][ T6601] macvtap1: entered allmulticast mode [ 78.233681][ T6601] erspan0: entered allmulticast mode [ 78.248150][ T6607] erspan0: left allmulticast mode [ 78.253411][ T6607] erspan0: left promiscuous mode [ 78.293508][ T6602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.562705][ T6630] loop3: detected capacity change from 0 to 512 [ 78.573909][ T6630] EXT4-fs: Ignoring removed oldalloc option [ 78.600334][ T6630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.626808][ T6630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.641727][ T6630] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.663917][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.709501][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.017662][ T6692] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1333'. [ 79.039578][ T6696] loop3: detected capacity change from 0 to 164 [ 79.056064][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1336'. [ 79.074513][ T6696] syz.3.1334: attempt to access beyond end of device [ 79.074513][ T6696] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 79.092356][ T6696] syz.3.1334: attempt to access beyond end of device [ 79.092356][ T6696] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.272575][ T6722] futex_wake_op: syz.1.1346 tries to shift op by -1; fix this program [ 79.290702][ T6716] loop4: detected capacity change from 0 to 8192 [ 79.301055][ T6725] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1348'. [ 79.405225][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1355'. [ 79.872164][ T6785] syz.1.1375: attempt to access beyond end of device [ 79.872164][ T6785] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 79.911003][ T6785] FAT-fs (loop3): unable to read boot sector [ 80.014136][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.021612][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.104684][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.116380][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.138151][ T6798] SELinux: failed to load policy [ 80.196584][ T5115] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.197814][ T36] kernel read not supported for file /588/statm (pid: 36 comm: kworker/1:1) [ 80.206534][ T5115] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.245191][ T5115] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.254401][ T5115] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.272361][ T5115] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.281423][ T5115] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.294776][ T5115] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.304479][ T5115] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.512886][ T6844] __nla_validate_parse: 2 callbacks suppressed [ 80.512904][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1400'. [ 80.529153][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1400'. [ 80.674649][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'. [ 80.802657][ T6865] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.616326][ T6892] loop3: detected capacity change from 0 to 1024 [ 81.626317][ T6892] EXT4-fs: Ignoring removed orlov option [ 81.665855][ T6892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.758045][ T6892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.981371][ T6913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1423'. [ 82.589205][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 82.589224][ T29] audit: type=1326 audit(1754028458.753:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 82.619629][ T29] audit: type=1326 audit(1754028458.753:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 82.701626][ T6955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1435'. [ 82.749609][ T6957] loop4: detected capacity change from 0 to 1024 [ 82.763615][ T29] audit: type=1326 audit(1754028458.823:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 82.788094][ T29] audit: type=1326 audit(1754028458.823:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 82.811664][ T29] audit: type=1326 audit(1754028458.823:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0857c51425 code=0x7ffc0000 [ 82.835918][ T29] audit: type=1326 audit(1754028458.823:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 82.922865][ T6957] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 82.952026][ T29] audit: type=1326 audit(1754028459.053:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 83.057105][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 83.069996][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 83.087835][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1442'. [ 83.096839][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1442'. [ 83.105899][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1442'. [ 83.223783][ T29] audit: type=1400 audit(1754028459.383:1472): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop0" dev="devtmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.272130][ T6987] netlink: 'syz.4.1451': attribute type 83 has an invalid length. [ 83.280096][ T29] audit: type=1400 audit(1754028459.383:1473): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.304223][ T29] audit: type=1400 audit(1754028459.383:1474): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=579 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.514755][ T7000] loop9: detected capacity change from 0 to 7 [ 83.533901][ T7000] buffer_io_error: 26522 callbacks suppressed [ 83.533917][ T7000] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.567872][ T7000] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.575754][ T7000] loop9: unable to read partition table [ 83.602256][ T7006] serio: Serial port ptm0 [ 83.616991][ T7000] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.616991][ T7000] ) failed (rc=-5) [ 83.928251][ T7038] loop3: detected capacity change from 0 to 4096 [ 83.940041][ T7038] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.984441][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.110404][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.187925][ T7059] vhci_hcd: invalid port number 254 [ 84.193186][ T7059] vhci_hcd: invalid port number 254 [ 84.294647][ T7075] : renamed from bond0 [ 84.366072][ T7082] loop9: detected capacity change from 0 to 7 [ 84.372982][ T7082] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.383189][ T7082] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.391146][ T7082] loop9: unable to read partition table [ 84.398967][ T7082] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 84.398967][ T7082] ) failed (rc=-5) [ 84.458873][ T7086] SELinux: ebitmap: truncated map [ 84.465230][ T7086] SELinux: failed to load policy [ 84.592680][ T7107] netlink: 'syz.0.1505': attribute type 3 has an invalid length. [ 84.656884][ T7113] loop0: detected capacity change from 0 to 1024 [ 84.680007][ T7113] EXT4-fs: Invalid want_extra_isize 0 [ 84.881997][ T7143] block device autoloading is deprecated and will be removed. [ 85.144499][ T7163] loop9: detected capacity change from 0 to 7 [ 85.157149][ T7163] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.168248][ T7163] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.176365][ T7163] loop9: unable to read partition table [ 85.182885][ T7163] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 85.182885][ T7163] ) failed (rc=-5) [ 85.415953][ T7192] loop1: detected capacity change from 0 to 2048 [ 85.425044][ T7192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.549159][ T7199] loop3: detected capacity change from 0 to 1024 [ 85.551876][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.556583][ T7199] EXT4-fs: Invalid want_extra_isize 0 [ 85.724858][ T7221] SELinux: ebitmap: truncated map [ 85.731614][ T7221] SELinux: failed to load policy [ 85.856336][ T7229] team_slave_0: entered promiscuous mode [ 85.862062][ T7229] team_slave_1: entered promiscuous mode [ 85.868843][ T7229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.883149][ T7229] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 85.952689][ T7233] loop1: detected capacity change from 0 to 1024 [ 85.961606][ T7233] EXT4-fs: Invalid want_extra_isize 0 [ 86.046608][ T7241] ALSA: seq fatal error: cannot create timer (-19) [ 86.133874][ T7254] __nla_validate_parse: 8 callbacks suppressed [ 86.133892][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 86.527617][ T7280] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1580'. [ 86.654454][ T7293] netlink: zone id is out of range [ 86.805108][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1593'. [ 87.067247][ T7319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'. [ 87.076363][ T7319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'. [ 87.086242][ T7319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'. [ 87.195163][ T7330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.282717][ T7330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.334347][ T7339] loop3: detected capacity change from 0 to 2048 [ 87.365083][ T7330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.390899][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.410787][ T7330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.422115][ T7339] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.1607: iget: bogus i_mode (4355) [ 87.449578][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.498778][ T5100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.534549][ T5100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.553814][ T5100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.577191][ T5100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.605519][ T7364] loop4: detected capacity change from 0 to 2048 [ 87.644021][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 87.644038][ T29] audit: type=1400 audit(1754028463.803:1695): avc: denied { create } for pid=7368 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.679766][ T7364] loop4: p1 < > p4 [ 87.679995][ T29] audit: type=1400 audit(1754028463.803:1696): avc: denied { ioctl } for pid=7368 comm="syz.0.1620" path="socket:[17517]" dev="sockfs" ino=17517 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.684502][ T7364] loop4: p4 size 8388608 extends beyond EOD, truncated [ 87.723390][ T29] audit: type=1400 audit(1754028463.883:1697): avc: denied { connect } for pid=7371 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.742963][ T29] audit: type=1400 audit(1754028463.883:1698): avc: denied { getopt } for pid=7371 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.815680][ T29] audit: type=1400 audit(1754028463.973:1699): avc: denied { mounton } for pid=7363 comm="syz.4.1616" path="/dev/loop4p1" dev="devtmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.882555][ T29] audit: type=1326 audit(1754028464.043:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 87.906896][ T29] audit: type=1326 audit(1754028464.043:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 87.931145][ T29] audit: type=1326 audit(1754028464.043:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0857c1eb69 code=0x7ffc0000 [ 88.003518][ T29] audit: type=1326 audit(1754028464.163:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7397 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 88.029422][ T7395] loop4: detected capacity change from 0 to 1024 [ 88.036282][ T7395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.038127][ T29] audit: type=1326 audit(1754028464.163:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7397 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 88.083955][ T7395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.121090][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'. [ 88.132447][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.153643][ T7412] loop2: detected capacity change from 0 to 2048 [ 88.178411][ T7412] loop2: p1 < > p4 [ 88.182901][ T7412] loop2: p4 size 8388608 extends beyond EOD, truncated [ 88.241178][ T7425] loop2: detected capacity change from 0 to 512 [ 88.251211][ T7425] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1644: bad orphan inode 15 [ 88.265909][ T7425] ext4_test_bit(bit=14, block=5) = 0 [ 88.286465][ T7425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.343659][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.412374][ T7442] loop9: detected capacity change from 0 to 7 [ 88.427220][ T7442] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.449476][ T7442] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.457413][ T7442] loop9: unable to read partition table [ 88.469926][ T7442] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.469926][ T7442] ) failed (rc=-5) [ 88.531580][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 88.548263][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 88.589105][ T7461] team1: entered promiscuous mode [ 88.594198][ T7461] team1: entered allmulticast mode [ 88.748825][ T7484] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1670'. [ 88.758917][ T7484] 0X: renamed from caif0 [ 88.766541][ T7484] 0X: entered allmulticast mode [ 88.771957][ T7484] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 88.803483][ T7491] team1: entered promiscuous mode [ 88.808773][ T7491] team1: entered allmulticast mode [ 88.839914][ T7497] loop0: detected capacity change from 0 to 764 [ 89.071192][ T7519] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 89.166204][ T7536] smc: net device bond0 applied user defined pnetid SYZ2 [ 89.174629][ T7536] smc: net device bond0 erased user defined pnetid SYZ2 [ 89.213762][ T7534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.224275][ T7534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.284434][ T7534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.295612][ T7534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.350839][ T7534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.361418][ T7534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.400389][ T7534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.410784][ T7534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.474344][ T5100] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.482636][ T5100] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.494768][ T5115] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.503064][ T5115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.514849][ T37] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.523725][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535876][ T5115] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.544222][ T5115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.022940][ T7587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.053940][ T7592] netlink: 'syz.1.1721': attribute type 14 has an invalid length. [ 90.064596][ T7592] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 90.074775][ T7592] netlink: 'syz.1.1721': attribute type 14 has an invalid length. [ 90.115919][ T7587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.129142][ T7592] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 90.180536][ T7587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.245417][ T7587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.313376][ T5081] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.325984][ T5081] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.340627][ T5081] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.352654][ T5081] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.586297][ T7605] loop1: detected capacity change from 0 to 764 [ 90.604329][ T7607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7607 comm=syz.2.1726 [ 90.662550][ T7615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.720200][ T7621] netlink: 'syz.0.1732': attribute type 13 has an invalid length. [ 90.799617][ T7621] 8021q: adding VLAN 0 to HW filter on device  [ 90.808718][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.820525][ T7621] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 91.060927][ T7647] loop4: detected capacity change from 0 to 2048 [ 91.084829][ T7647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.171233][ T7662] __nla_validate_parse: 8 callbacks suppressed [ 91.171249][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 91.186386][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 91.221526][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 91.225986][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.230550][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 91.260518][ T5106] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.268970][ T5106] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.285312][ T5106] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.313487][ T5106] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.329859][ T7673] loop2: detected capacity change from 0 to 764 [ 91.416696][ T7689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.434949][ T7689] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 92.043086][ T7760] netlink: 'syz.0.1797': attribute type 12 has an invalid length. [ 92.251598][ T7777] loop0: detected capacity change from 0 to 1024 [ 92.281314][ T7777] EXT4-fs: Ignoring removed nobh option [ 92.287063][ T7777] EXT4-fs: inline encryption not supported [ 92.336827][ T7783] geneve2: entered promiscuous mode [ 92.380050][ T7787] ipvlan2: entered promiscuous mode [ 92.386324][ T7787] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.396620][ T7787] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.457618][ T7777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.491582][ T7777] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1803: Allocating blocks 385-513 which overlap fs metadata [ 92.510063][ T7777] EXT4-fs (loop0): pa ffff88810564c2a0: logic 16, phys. 129, len 24 [ 92.518471][ T7777] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 92.530713][ T7777] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 92.542964][ T7777] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.542964][ T7777] [ 92.552679][ T7777] EXT4-fs (loop0): Total free blocks count 0 [ 92.558750][ T7777] EXT4-fs (loop0): Free/Dirty block details [ 92.564682][ T7777] EXT4-fs (loop0): free_blocks=128 [ 92.569842][ T7777] EXT4-fs (loop0): dirty_blocks=0 [ 92.574887][ T7777] EXT4-fs (loop0): Block reservation details [ 92.581028][ T7777] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 92.752927][ T7801] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 92.752927][ T7801] program syz.0.1812 not setting count and/or reply_len properly [ 92.991141][ T7818] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1818'. [ 93.178898][ T7837] netlink: 'syz.4.1829': attribute type 21 has an invalid length. [ 93.196486][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1829'. [ 93.222006][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 93.272101][ T36] IPVS: starting estimator thread 0... [ 93.295979][ T7856] netlink: 'syz.4.1837': attribute type 13 has an invalid length. [ 93.367000][ T7854] IPVS: using max 2208 ests per chain, 110400 per kthread [ 93.376297][ T7856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.433588][ T7872] team_slave_0: entered promiscuous mode [ 93.439313][ T7872] team_slave_1: entered promiscuous mode [ 93.446803][ T7872] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 93.468780][ T7872] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 93.520361][ T7880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.676049][ T7897] loop1: detected capacity change from 0 to 512 [ 93.684196][ T7897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.697040][ T7897] EXT4-fs (loop1): 1 truncate cleaned up [ 93.703210][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.705257][ T7900] netlink: 'syz.3.1852': attribute type 13 has an invalid length. [ 93.734206][ T7900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.772585][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.790668][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 93.790688][ T29] audit: type=1326 audit(1754028469.953:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.827281][ T29] audit: type=1326 audit(1754028469.953:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.850882][ T29] audit: type=1326 audit(1754028469.953:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.854093][ T7908] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 93.874561][ T29] audit: type=1326 audit(1754028469.953:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874616][ T29] audit: type=1326 audit(1754028469.953:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874651][ T29] audit: type=1326 audit(1754028469.953:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874763][ T29] audit: type=1326 audit(1754028469.953:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874795][ T29] audit: type=1326 audit(1754028469.953:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874827][ T29] audit: type=1326 audit(1754028469.953:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.874862][ T29] audit: type=1326 audit(1754028469.953:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f97f000eb69 code=0x7ffc0000 [ 93.978492][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 94.052738][ T7908] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 94.065653][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 94.446620][ T7925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.595799][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 94.605794][ T7927] netlink: 'syz.0.1863': attribute type 5 has an invalid length. [ 94.927220][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.934688][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.968930][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.976434][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.983927][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.991500][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.998965][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.006419][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.014047][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.021659][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.029230][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.036631][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.056040][ T7956] syzkaller0: entered promiscuous mode [ 95.061589][ T7956] syzkaller0: entered allmulticast mode [ 95.096534][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.104249][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.111839][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.119296][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.126698][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.134212][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.141656][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.149161][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.156611][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.164041][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.171571][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.179007][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.186403][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.193850][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.201437][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.230498][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.559885][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 95.632822][ T7994] loop0: detected capacity change from 0 to 8192 [ 95.652913][ T7994] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 95.972544][ T8037] netlink: 'syz.2.1912': attribute type 15 has an invalid length. [ 95.987646][ T8037] netlink: 'syz.2.1912': attribute type 15 has an invalid length. [ 96.163937][ T8049] netlink: 'syz.0.1918': attribute type 27 has an invalid length. [ 96.581793][ T8049] 0X: left allmulticast mode [ 96.684450][ T8052] 8021q: adding VLAN 0 to HW filter on device  [ 96.692683][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.702716][ T8052] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 96.833016][ T8069] __nla_validate_parse: 4 callbacks suppressed [ 96.833032][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 96.849355][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 96.850848][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 96.876727][ T8073] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 96.916691][ T8075] loop0: detected capacity change from 0 to 512 [ 96.925813][ T8075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.944582][ T8075] EXT4-fs (loop0): 1 truncate cleaned up [ 96.951188][ T8075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.969916][ T8071] capability: warning: `syz.4.1927' uses 32-bit capabilities (legacy support in use) [ 97.073023][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.329090][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 97.355221][ T8122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.433066][ T8139] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 97.448738][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 97.458046][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 97.561454][ T8158] loop4: detected capacity change from 0 to 1024 [ 97.568391][ T8158] EXT4-fs: Ignoring removed nobh option [ 97.574367][ T8158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.583768][ T8158] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.594753][ T8158] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.609587][ T8158] JBD2: no valid journal superblock found [ 97.615390][ T8158] EXT4-fs (loop4): Could not load journal inode [ 97.666550][ T8165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1968'. [ 97.825106][ T8185] syzkaller0: entered promiscuous mode [ 97.830711][ T8185] syzkaller0: entered allmulticast mode [ 98.555151][ T8214] netlink: 'syz.4.1985': attribute type 4 has an invalid length. [ 98.564353][ T8214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1985'. [ 98.592794][ T8214] : renamed from bond0 (while UP) [ 98.737616][ T8224] Falling back ldisc for ttyS3. [ 98.773418][ T8234] syzkaller0: entered promiscuous mode [ 98.779275][ T8234] syzkaller0: entered allmulticast mode [ 98.839481][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 98.839560][ T29] audit: type=1400 audit(1754028475.003:2130): avc: denied { shutdown } for pid=8240 comm="syz.0.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.923876][ T8247] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 98.923876][ T8247] program syz.2.2000 not setting count and/or reply_len properly [ 98.941529][ T29] audit: type=1400 audit(1754028475.083:2131): avc: denied { write } for pid=8246 comm="syz.2.2000" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.965274][ T29] audit: type=1400 audit(1754028475.083:2132): avc: denied { open } for pid=8246 comm="syz.2.2000" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.990094][ T29] audit: type=1400 audit(1754028475.083:2133): avc: denied { ioctl } for pid=8246 comm="syz.2.2000" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.110643][ T29] audit: type=1400 audit(1754028475.233:2134): avc: denied { connect } for pid=8248 comm="syz.4.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.245382][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 99.525269][ T29] audit: type=1400 audit(1754028475.683:2135): avc: denied { load_policy } for pid=8278 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.573899][ T8279] SELinux: failed to load policy [ 99.588267][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.595749][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.603445][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.611605][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.619110][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.626539][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.634071][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.642222][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.649677][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.657280][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.664710][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.673065][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.680534][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.688246][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.695819][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.704043][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.711511][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.718981][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.726462][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.726991][ T29] audit: type=1326 audit(1754028475.853:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 99.734684][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.757625][ T29] audit: type=1326 audit(1754028475.853:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 99.764848][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.764873][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.788438][ T29] audit: type=1326 audit(1754028475.853:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 99.788521][ T29] audit: type=1326 audit(1754028475.853:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 99.851866][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.859963][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.867397][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.874833][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.882284][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.890368][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.897833][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.905235][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.912920][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.920971][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.928390][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.935794][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.943234][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.951188][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.958595][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.966084][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.973512][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.981626][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.989037][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.996608][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.004301][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.015929][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 100.017042][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.043012][ T8290] IPVS: Error joining to the multicast group [ 100.071314][ T8294] netlink: 'syz.1.2022': attribute type 4 has an invalid length. [ 100.090136][ T8294] : renamed from bond0 (while UP) [ 100.174911][ T8311] netlink: 'syz.4.2030': attribute type 10 has an invalid length. [ 100.186869][ T8311] team0: Port device dummy0 added [ 100.218862][ T8311] netlink: 'syz.4.2030': attribute type 10 has an invalid length. [ 100.232997][ T8311] team0: Port device dummy0 removed [ 100.249240][ T8311] : (slave dummy0): Enslaving as an active interface with an up link [ 100.387968][ T8340] netlink: 'syz.2.2040': attribute type 4 has an invalid length. [ 100.411433][ T8345] loop1: detected capacity change from 0 to 512 [ 100.414900][ T8340] : renamed from bond0 (while UP) [ 100.419200][ T8345] EXT4-fs: Ignoring removed i_version option [ 100.430445][ T8345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.454043][ T8345] EXT4-fs (loop1): 1 truncate cleaned up [ 100.464633][ T8345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.543465][ T8358] EXT4-fs (loop1): shut down requested (1) [ 100.560761][ T8360] loop9: detected capacity change from 0 to 7 [ 100.583310][ T8360] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.594164][ T8364] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 100.603632][ T8360] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.611741][ T8360] loop9: unable to read partition table [ 100.620319][ T8360] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.620319][ T8360] ) failed (rc=-5) [ 100.636214][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.666853][ T8368] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 100.681131][ T8364] team0: Port device dummy0 added [ 100.706407][ T8368] team0: Port device dummy0 removed [ 100.706759][ T8375] loop3: detected capacity change from 0 to 128 [ 100.723566][ T8368] : (slave dummy0): Enslaving as an active interface with an up link [ 100.736516][ T8375] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.771703][ T8375] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.798854][ T8381] : renamed from  (while UP) [ 100.805002][ T8383] loop1: detected capacity change from 0 to 512 [ 100.833121][ T8383] EXT4-fs (loop1): too many log groups per flexible block group [ 100.840934][ T8383] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 100.848435][ T8383] EXT4-fs (loop1): mount failed [ 100.896814][ T8393] SELinux: unknown common r [ 100.902656][ T8393] SELinux: failed to load policy [ 101.013561][ T8405] validate_nla: 2 callbacks suppressed [ 101.013581][ T8405] netlink: 'syz.1.2064': attribute type 10 has an invalid length. [ 101.039179][ T8405] dummy0: entered promiscuous mode [ 101.044680][ T8405] team0: Port device dummy0 added [ 101.062319][ T8405] netlink: 'syz.1.2064': attribute type 10 has an invalid length. [ 101.079623][ T8405] team0: Port device dummy0 removed [ 101.093751][ T8405] dummy0: left promiscuous mode [ 101.099887][ T8405] : (slave dummy0): Enslaving as an active interface with an up link [ 101.847530][ T8421] netlink: 'syz.3.2067': attribute type 4 has an invalid length. [ 101.855320][ T8421] __nla_validate_parse: 5 callbacks suppressed [ 101.855340][ T8421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2067'. [ 101.904966][ T8421] : renamed from bond0 (while UP) [ 101.959429][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 101.989463][ T8433] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 101.989463][ T8433] program syz.3.2074 not setting count and/or reply_len properly [ 102.237024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.271807][ T8451] loop4: detected capacity change from 0 to 1024 [ 102.308487][ T8451] EXT4-fs: Ignoring removed orlov option [ 102.340556][ T8451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.365461][ T8455] loop1: detected capacity change from 0 to 1024 [ 102.407392][ T8455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.439824][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.462319][ T8441] loop2: detected capacity change from 0 to 512 [ 102.471150][ T8455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.504063][ T8441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.548615][ T8441] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 102.556660][ T8441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 102.598012][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.618836][ T8441] System zones: 0-1, 15-15, 18-18, 34-34 [ 102.625308][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 102.635734][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2091'. [ 102.644737][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 102.661690][ T8441] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.674118][ T8441] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.689820][ T8441] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 102.698078][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2091'. [ 102.707172][ T8468] netlink: 'syz.4.2091': attribute type 6 has an invalid length. [ 102.725230][ T8441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2080: bg 0: block 40: padding at end of block bitmap is not set [ 102.741369][ T8441] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 102.751617][ T8441] EXT4-fs (loop2): 1 truncate cleaned up [ 102.782136][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.877295][ T8486] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 102.968083][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 102.997247][ T8492] IPVS: Error joining to the multicast group [ 103.179022][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.192272][ T8505] loop4: detected capacity change from 0 to 512 [ 103.200508][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 103.200508][ T8503] loop9: detected capacity change from 0 to 7 [ 103.216444][ T8508] loop3: detected capacity change from 0 to 128 [ 103.223201][ T8505] EXT4-fs: Ignoring removed i_version option [ 103.230277][ T8503] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.239003][ T8503] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.240409][ T8505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.246868][ T8503] loop9: unable to read partition table [ 103.262704][ T8503] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.262704][ T8503] ) failed (rc=-5) [ 103.289127][ T8510] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 103.289266][ T8505] EXT4-fs (loop4): 1 truncate cleaned up [ 103.315122][ T8505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.352436][ T8508] syz.3.2110: attempt to access beyond end of device [ 103.352436][ T8508] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 103.360722][ T8513] netlink: 'syz.2.2106': attribute type 10 has an invalid length. [ 103.390753][ T8513] team0: Port device dummy0 added [ 103.409575][ T8522] EXT4-fs (loop4): shut down requested (1) [ 103.422025][ T8513] netlink: 'syz.2.2106': attribute type 10 has an invalid length. [ 103.425960][ T8524] loop1: detected capacity change from 0 to 128 [ 103.436619][ T8513] team0: Port device dummy0 removed [ 103.438463][ T8524] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.456016][ T8524] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.469396][ T8513] : (slave dummy0): Enslaving as an active interface with an up link [ 103.544176][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.584905][ T8536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2120'. [ 103.594166][ T8536] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2120'. [ 103.629897][ T8542] random: crng reseeded on system resumption [ 103.642855][ T8544] loop3: detected capacity change from 0 to 1024 [ 103.689514][ T8548] netlink: 'syz.2.2126': attribute type 6 has an invalid length. [ 103.700537][ T8544] EXT4-fs: Ignoring removed orlov option [ 103.725833][ T8544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.750471][ T8552] vhci_hcd: invalid port number 96 [ 103.755637][ T8552] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.827288][ T8571] netlink: 'syz.4.2137': attribute type 10 has an invalid length. [ 103.839369][ T8544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 103.847814][ T8571] ipvlan0: entered allmulticast mode [ 103.858802][ T8571] veth0_vlan: entered allmulticast mode [ 103.865398][ T8571] team0: Device ipvlan0 failed to register rx_handler [ 103.901824][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.931008][ T8581] netlink: 'syz.3.2140': attribute type 10 has an invalid length. [ 103.953735][ T8581] dummy0: entered promiscuous mode [ 103.963775][ T8581] team0: Port device dummy0 added [ 103.974769][ T8585] tipc: Enabling of bearer rejected, already enabled [ 104.019523][ T8591] loop2: detected capacity change from 0 to 128 [ 104.027538][ T8591] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.030627][ T8581] team0: Port device dummy0 removed [ 104.041864][ T8591] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.079125][ T8581] dummy0: left promiscuous mode [ 104.089980][ T8581] : (slave dummy0): Enslaving as an active interface with an up link [ 104.372756][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 104.372781][ T29] audit: type=1400 audit(1754028480.533:2235): avc: denied { ioctl } for pid=8628 comm="syz.3.2165" path="socket:[21346]" dev="sockfs" ino=21346 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.426260][ T29] audit: type=1400 audit(1754028480.583:2236): avc: denied { write } for pid=8631 comm="syz.1.2166" path="socket:[21355]" dev="sockfs" ino=21355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.646296][ T29] audit: type=1326 audit(1754028480.803:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 104.670441][ T29] audit: type=1326 audit(1754028480.803:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 104.693992][ T29] audit: type=1400 audit(1754028480.803:2239): avc: denied { name_bind } for pid=8649 comm="syz.4.2173" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 104.743319][ T29] audit: type=1326 audit(1754028480.873:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 104.766995][ T29] audit: type=1326 audit(1754028480.873:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 104.790530][ T29] audit: type=1326 audit(1754028480.873:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492fc5eb69 code=0x7ffc0000 [ 104.853359][ T29] audit: type=1326 audit(1754028480.973:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 104.877837][ T29] audit: type=1326 audit(1754028480.973:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 105.047316][ T8684] ipvlan0: left allmulticast mode [ 105.052442][ T8684] veth0_vlan: left allmulticast mode [ 105.074270][ T8684] vxlan0: left promiscuous mode [ 105.095136][ T8684] macvtap1: left promiscuous mode [ 105.100276][ T8684] macvtap1: left allmulticast mode [ 105.117766][ T5159] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.156042][ T8686] 8021q: adding VLAN 0 to HW filter on device  [ 105.187702][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.200302][ T8686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.216064][ T5159] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.225379][ T5159] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.247298][ T5159] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.321657][ T8702] : (slave dummy0): Releasing backup interface [ 105.332499][ T8702] team0: Port device dummy0 added [ 105.364530][ T8702] team0: Port device dummy0 removed [ 105.372342][ T8702] : (slave dummy0): Enslaving as an active interface with an up link [ 105.543287][ T8733] ref_ctr_offset mismatch. inode: 0x9e5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 105.641709][ T8744] loop0: detected capacity change from 0 to 512 [ 105.648629][ T8744] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.655559][ T8744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.678375][ T8744] EXT4-fs (loop0): 1 truncate cleaned up [ 105.685671][ T8744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.729164][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.780161][ T8750] loop1: detected capacity change from 0 to 4096 [ 105.789450][ T8750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.823449][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.958454][ T8771] loop0: detected capacity change from 0 to 512 [ 105.961858][ T8775] bridge0: port 3(batadv1) entered blocking state [ 105.971345][ T8775] bridge0: port 3(batadv1) entered disabled state [ 105.980195][ T8775] batadv1: entered allmulticast mode [ 105.985847][ T8771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.986529][ T8775] batadv1: entered promiscuous mode [ 106.007750][ T8771] EXT4-fs (loop0): 1 truncate cleaned up [ 106.022873][ T8771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.041377][ T8771] EXT4-fs error (device loop0): __ext4_iget:5464: inode #12: block 2: comm syz.0.2221: invalid block [ 106.052670][ T8771] EXT4-fs (loop0): Remounting filesystem read-only [ 106.076209][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.150189][ T8793] validate_nla: 4 callbacks suppressed [ 106.150205][ T8793] netlink: 'syz.1.2232': attribute type 27 has an invalid length. [ 106.224762][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.232095][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.244332][ T8793] team_slave_0: left promiscuous mode [ 106.250686][ T8793] team_slave_1: left promiscuous mode [ 106.295052][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.305297][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.351158][ T8793] geneve1: left promiscuous mode [ 106.358672][ T8793] macvtap1: left promiscuous mode [ 106.363823][ T8793] macvtap1: left allmulticast mode [ 106.372525][ T8793] geneve2: left promiscuous mode [ 106.411281][ T8803] 8021q: adding VLAN 0 to HW filter on device  [ 106.420684][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.431780][ T8803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.468415][ T5172] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.478537][ T5172] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 106.520987][ T5131] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.537735][ T5131] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.562242][ T5131] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.623543][ T5131] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.669765][ T8840] loop4: detected capacity change from 0 to 1024 [ 106.676693][ T8840] EXT4-fs: Ignoring removed nobh option [ 106.682334][ T8840] EXT4-fs: Ignoring removed bh option [ 106.701205][ T8840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.781992][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.800332][ T8855] netlink: 'syz.3.2257': attribute type 27 has an invalid length. [ 106.842425][ T8861] loop4: detected capacity change from 0 to 128 [ 106.849301][ T8859] loop1: detected capacity change from 0 to 512 [ 106.851672][ T8861] EXT4-fs: Ignoring removed nobh option [ 106.869565][ T8861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.869676][ T8859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.886541][ T8861] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.967912][ T8859] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.994547][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.029283][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.288144][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.295396][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.334927][ T8855] team_slave_0: left promiscuous mode [ 107.340503][ T8855] team_slave_1: left promiscuous mode [ 107.803818][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.824952][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.970174][ T8855] team1: left promiscuous mode [ 107.975005][ T8855] team1: left allmulticast mode [ 108.014899][ T8864] 8021q: adding VLAN 0 to HW filter on device  [ 108.023819][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.034498][ T8864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.055324][ T8879] pimreg: entered allmulticast mode [ 108.078921][ T8881] pimreg: left allmulticast mode [ 108.167940][ T8909] netlink: 'syz.2.2267': attribute type 4 has an invalid length. [ 108.179360][ T5172] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.187909][ T5172] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.219892][ T5172] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.228448][ T5172] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.247983][ T5172] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.256431][ T5172] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.271407][ T5172] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.279977][ T5172] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.347543][ T8941] netlink: 'syz.3.2278': attribute type 10 has an invalid length. [ 108.422131][ T8952] netlink: 'syz.2.2287': attribute type 3 has an invalid length. [ 108.463579][ T8955] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.585693][ T8978] netlink: 'syz.1.2300': attribute type 3 has an invalid length. [ 108.627131][ T8983] loop4: detected capacity change from 0 to 128 [ 108.650220][ T8988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8988 comm=syz.1.2304 [ 108.715128][ T8995] __nla_validate_parse: 8 callbacks suppressed [ 108.715143][ T8995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2307'. [ 108.824304][ T9007] loop0: detected capacity change from 0 to 764 [ 108.837767][ T9007] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 108.965041][ T9027] sctp: [Deprecated]: syz.1.2319 (pid 9027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.965041][ T9027] Use struct sctp_sack_info instead [ 109.204575][ T9047] syzkaller1: entered promiscuous mode [ 109.211013][ T9047] syzkaller1: entered allmulticast mode [ 109.787702][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 109.787719][ T29] audit: type=1400 audit(1754028485.943:2438): avc: denied { write } for pid=9066 comm="syz.4.2338" name="kcm" dev="proc" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.850011][ T29] audit: type=1400 audit(1754028486.013:2439): avc: denied { write } for pid=9073 comm="syz.4.2342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.902471][ T29] audit: type=1400 audit(1754028486.063:2440): avc: denied { write } for pid=9079 comm="syz.4.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.955566][ T29] audit: type=1326 audit(1754028486.093:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 109.979199][ T29] audit: type=1326 audit(1754028486.093:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 110.002702][ T29] audit: type=1326 audit(1754028486.093:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 110.026114][ T29] audit: type=1400 audit(1754028486.093:2444): avc: denied { create } for pid=9078 comm="syz.1.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.045876][ T29] audit: type=1326 audit(1754028486.093:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 110.059964][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 110.069369][ T29] audit: type=1326 audit(1754028486.093:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 110.069467][ T29] audit: type=1326 audit(1754028486.093:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 110.285815][ T9103] vlan2: entered allmulticast mode [ 110.545854][ T9132] loop4: detected capacity change from 0 to 512 [ 110.559635][ T9134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9134 comm=syz.3.2368 [ 110.560712][ T9132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.587180][ T9132] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.612834][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2369'. [ 110.631508][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.721804][ T9143] syzkaller0: entered promiscuous mode [ 110.728093][ T9143] syzkaller0: entered allmulticast mode [ 110.908750][ T9170] vlan0: entered allmulticast mode [ 111.081254][ T9196] rdma_op ffff88811a050180 conn xmit_rdma 0000000000000000 [ 111.214595][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 111.261258][ T9223] syzkaller0: entered promiscuous mode [ 111.266852][ T9223] syzkaller0: entered allmulticast mode [ 111.273968][ T9227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2408'. [ 111.287370][ T9225] vlan2: entered allmulticast mode [ 111.292937][ T9225] dummy0: entered allmulticast mode [ 111.412065][ T9246] netlink: 'syz.3.2419': attribute type 15 has an invalid length. [ 111.542174][ T9263] wireguard0: entered promiscuous mode [ 111.547866][ T9263] wireguard0: entered allmulticast mode [ 111.567875][ T9258] support for cryptoloop has been removed. Use dm-crypt instead. [ 111.636456][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2432'. [ 112.013442][ T9295] netlink: 'syz.3.2437': attribute type 3 has an invalid length. [ 112.425959][ T9358] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2452'. [ 112.458579][ T9358] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2452'. [ 112.491171][ T9368] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 112.532959][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.721871][ T9409] loop3: detected capacity change from 0 to 1024 [ 112.753280][ T9409] EXT4-fs: Ignoring removed orlov option [ 112.819531][ T9409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.913271][ T9429] netlink: 'syz.0.2466': attribute type 29 has an invalid length. [ 112.948294][ T9429] netlink: 'syz.0.2466': attribute type 29 has an invalid length. [ 113.266032][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.356767][ T9475] vlan0: entered allmulticast mode [ 113.366093][ T9475] dummy0: entered allmulticast mode [ 113.409179][ T9480] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 113.584366][ T9500] loop2: detected capacity change from 0 to 1024 [ 113.607962][ T9500] EXT4-fs: Ignoring removed orlov option [ 113.632637][ T9500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.651155][ T9514] vlan2: entered allmulticast mode [ 113.660866][ T9514] dummy0: entered allmulticast mode [ 113.969691][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.136422][ T9550] ALSA: seq fatal error: cannot create timer (-19) [ 114.611608][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'. [ 114.624379][ T9577] netlink: 'syz.3.2518': attribute type 29 has an invalid length. [ 114.635794][ T9577] netlink: 'syz.3.2518': attribute type 29 has an invalid length. [ 114.679884][ T9585] netlink: 'syz.1.2522': attribute type 13 has an invalid length. [ 114.799738][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2530'. [ 115.168835][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 115.168853][ T29] audit: type=1400 audit(1754028491.333:2566): avc: denied { write } for pid=9606 comm="syz.3.2533" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.268559][ T9616] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 115.268638][ T29] audit: type=1400 audit(1754028491.433:2567): avc: denied { relabelfrom } for pid=9615 comm="syz.3.2537" name="SCTPv6" dev="sockfs" ino=24117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.363127][ T29] audit: type=1400 audit(1754028491.443:2568): avc: denied { relabelto } for pid=9615 comm="syz.3.2537" name="SCTPv6" dev="sockfs" ino=24117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:wtmp_t:s0" [ 115.417823][ T29] audit: type=1400 audit(1754028491.583:2569): avc: denied { read write } for pid=9617 comm="syz.3.2538" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.419238][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.441327][ T29] audit: type=1400 audit(1754028491.583:2570): avc: denied { open } for pid=9617 comm="syz.3.2538" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.448759][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.448824][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.508483][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.515999][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.523447][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.530864][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.538323][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.545725][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.553225][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.560713][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.568162][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.575639][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.583205][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.590681][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.598155][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.605612][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.613144][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.620589][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.628100][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.635517][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.643030][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.650657][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.656511][ T9621] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 115.658126][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.658165][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.658193][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.658225][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.658256][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.658285][ T3370] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.730862][ T9624] loop0: detected capacity change from 0 to 1024 [ 115.747461][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.759227][ T9624] EXT4-fs: Ignoring removed orlov option [ 115.804578][ T9621] bond0: (slave gretap1): making interface the new active one [ 115.818046][ T9624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.837140][ T3370] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 115.848240][ T9621] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 116.036947][ T29] audit: type=1326 audit(1754028492.193:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 116.060767][ T29] audit: type=1326 audit(1754028492.193:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 116.085189][ T29] audit: type=1326 audit(1754028492.193:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 116.108646][ T29] audit: type=1326 audit(1754028492.193:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 116.132113][ T29] audit: type=1326 audit(1754028492.193:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.2.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f0ceb69 code=0x7ffc0000 [ 116.266142][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.529385][ T9675] loop2: detected capacity change from 0 to 512 [ 116.549226][ T9675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.571334][ T9675] EXT4-fs (loop2): 1 truncate cleaned up [ 116.577782][ T9675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.618607][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.659676][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 116.746585][ T9689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2567'. [ 116.822539][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 116.831579][ T9696] netlink: 'syz.3.2571': attribute type 29 has an invalid length. [ 116.839661][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 117.191520][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 117.230396][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 117.391663][ T9742] netlink: 'syz.3.2593': attribute type 1 has an invalid length. [ 117.400280][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 117.517900][ T9747] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.732500][ T9764] netlink: 'syz.1.2603': attribute type 4 has an invalid length. [ 117.769018][ T9771] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2607'. [ 117.825641][ T9780] loop3: detected capacity change from 0 to 1764 [ 117.876621][ T9787] serio: Serial port ptm0 [ 118.091698][ T9820] vhci_hcd: invalid port number 129 [ 118.097176][ T9820] vhci_hcd: default hub control req: 0200 v0005 i0081 l0 [ 118.165604][ T9836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9836 comm=syz.3.2636 [ 118.180313][ T9836] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 118.218965][ T9836] bond0: (slave bridge2): making interface the new active one [ 118.227259][ T9836] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 118.447636][ T9879] netlink: 'syz.4.2654': attribute type 18 has an invalid length. [ 118.455979][ T9879] netlink: 'syz.4.2654': attribute type 18 has an invalid length. [ 119.299433][ T9959] loop3: detected capacity change from 0 to 512 [ 119.312989][ T9959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.357300][ T9959] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2689: invalid indirect mapped block 4294967295 (level 0) [ 119.413101][ T9959] EXT4-fs (loop3): Remounting filesystem read-only [ 119.424087][ T9959] EXT4-fs (loop3): 1 orphan inode deleted [ 119.429939][ T9959] EXT4-fs (loop3): 1 truncate cleaned up [ 119.452018][ T9959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.513560][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.823229][T10016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.857120][ T3370] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.015016][T10027] bridge0: port 4(batadv2) entered blocking state [ 120.021653][T10027] bridge0: port 4(batadv2) entered disabled state [ 120.030879][T10027] batadv2: entered allmulticast mode [ 120.038826][T10027] batadv2: entered promiscuous mode [ 120.206544][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 120.206637][ T29] audit: type=1400 audit(1754028496.363:2771): avc: denied { setopt } for pid=10033 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.253347][ T29] audit: type=1400 audit(1754028496.403:2772): avc: denied { bind } for pid=10033 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.272988][ T29] audit: type=1400 audit(1754028496.403:2773): avc: denied { name_bind } for pid=10033 comm="syz.3.2722" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 120.295085][ T29] audit: type=1400 audit(1754028496.403:2774): avc: denied { node_bind } for pid=10033 comm="syz.3.2722" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 120.505636][ T29] audit: type=1326 audit(1754028496.663:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.529370][ T29] audit: type=1326 audit(1754028496.663:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.529429][ T5159] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 120.529445][ T5159] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 120.573314][ T29] audit: type=1326 audit(1754028496.663:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.596885][ T29] audit: type=1326 audit(1754028496.663:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.620516][ T29] audit: type=1326 audit(1754028496.663:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.644116][ T29] audit: type=1326 audit(1754028496.663:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10050 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe01a0beb69 code=0x7ffc0000 [ 120.668219][ T8897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.823799][T10064] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.868204][T10068] bridge0: port 3(macsec1) entered blocking state [ 120.874691][T10068] bridge0: port 3(macsec1) entered disabled state [ 120.900688][T10068] macsec1: entered allmulticast mode [ 120.906106][T10068] bridge0: entered allmulticast mode [ 120.937106][T10068] macsec1: left allmulticast mode [ 120.942187][T10068] bridge0: left allmulticast mode [ 121.063610][ T9997] syz.4.2707 (9997) used greatest stack depth: 7024 bytes left [ 122.605996][T10203] __nla_validate_parse: 9 callbacks suppressed [ 122.606015][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 122.652004][T10203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.669531][T10203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.891532][T10221] loop0: detected capacity change from 0 to 512 [ 122.911931][T10221] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.944016][T10221] EXT4-fs (loop0): 1 truncate cleaned up [ 122.951792][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.993983][T10221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.302399][T10244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'. [ 123.357049][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.492461][T10250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 123.499035][T10250] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.506535][T10250] vhci_hcd vhci_hcd.0: Device attached [ 123.527950][T10251] vhci_hcd: connection closed [ 123.529871][ T5172] vhci_hcd: stop threads [ 123.538949][ T5172] vhci_hcd: release socket [ 123.543386][ T5172] vhci_hcd: disconnect device [ 123.877568][T10272] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2823'. [ 124.006179][T10284] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 124.014121][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'. [ 124.037022][T10246] ================================================================== [ 124.045154][T10246] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 124.052488][T10246] [ 124.054826][T10246] write to 0xffff88811948a9a0 of 4 bytes by task 10254 on cpu 0: [ 124.062564][T10246] touch_atime+0x1e8/0x340 [ 124.067033][T10246] shmem_file_splice_read+0x5b1/0x600 [ 124.072420][T10246] splice_direct_to_actor+0x26f/0x680 [ 124.077813][T10246] do_splice_direct+0xda/0x150 [ 124.082594][T10246] do_sendfile+0x380/0x650 [ 124.087049][T10246] __x64_sys_sendfile64+0x105/0x150 [ 124.092299][T10246] x64_sys_call+0x2bb0/0x2ff0 [ 124.096992][T10246] do_syscall_64+0xd2/0x200 [ 124.101519][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.107480][T10246] [ 124.109822][T10246] read to 0xffff88811948a9a0 of 4 bytes by task 10246 on cpu 1: [ 124.117468][T10246] atime_needs_update+0x25f/0x3e0 [ 124.122540][T10246] touch_atime+0x4a/0x340 [ 124.126913][T10246] shmem_file_splice_read+0x5b1/0x600 [ 124.132331][T10246] splice_direct_to_actor+0x26f/0x680 [ 124.137739][T10246] do_splice_direct+0xda/0x150 [ 124.142550][T10246] do_sendfile+0x380/0x650 [ 124.147092][T10246] __x64_sys_sendfile64+0x105/0x150 [ 124.152365][T10246] x64_sys_call+0x2bb0/0x2ff0 [ 124.157083][T10246] do_syscall_64+0xd2/0x200 [ 124.161626][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.167604][T10246] [ 124.169954][T10246] value changed: 0x0b81ee95 -> 0x0c1a8515 [ 124.175694][T10246] [ 124.178026][T10246] Reported by Kernel Concurrency Sanitizer on: [ 124.184199][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.4.2812 Tainted: G W 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 124.198130][T10246] Tainted: [W]=WARN [ 124.201953][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.212036][T10246] ==================================================================