last executing test programs: 3.44696317s ago: executing program 2 (id=1789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r0, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 2.499001775s ago: executing program 1 (id=1802): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60a}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.224477841s ago: executing program 1 (id=1807): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x8000000d}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.043174311s ago: executing program 1 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1.995335214s ago: executing program 1 (id=1811): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/65, 0x41}, 0x2}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.88684887s ago: executing program 1 (id=1814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = gettid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) 1.884213891s ago: executing program 1 (id=1815): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 1.769226647s ago: executing program 2 (id=1818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300), 0x94}, 0x6}], 0x1, 0x10000, 0x0) 1.641079095s ago: executing program 4 (id=1820): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4c044) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00002a1000/0x1000)=nil, 0x1000, 0x8) mmap(&(0x7f0000667000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a8d4000) 1.390402449s ago: executing program 3 (id=1823): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 1.339044102s ago: executing program 4 (id=1824): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.297441284s ago: executing program 2 (id=1825): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000, 0x8d30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0xf0ff1f00000000) 1.297224415s ago: executing program 4 (id=1826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="001404"], 0x48}, 0x1, 0x0, 0x0, 0x80500f1}, 0x40000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 1.224431429s ago: executing program 0 (id=1827): socket(0x1d, 0x2, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x5d2, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.223977359s ago: executing program 3 (id=1828): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa) setresuid(0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ftruncate(r0, 0x81fe) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1.124688215s ago: executing program 2 (id=1829): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xff, 0x2ce, &(0x7f0000000780)="$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") r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) unshare(0x22020400) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) socket$packet(0x11, 0x3, 0x300) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x11063, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.120138115s ago: executing program 0 (id=1830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1.053871179s ago: executing program 0 (id=1831): io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000c80500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f7274"], 0x60}}, 0x0) 990.034913ms ago: executing program 3 (id=1832): io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x2, 0x2, 0x26d}) eventfd2(0xff, 0x80800) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = memfd_create(&(0x7f00000001c0)='\xd9\x16h\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\xac\xc6(\x8e>\xbe0\xf1f\xb1\x87\x86!\x9c\xe1\xd2X\x18\xaaO', 0x7) lseek(r2, 0x10001, 0x1) 989.843683ms ago: executing program 0 (id=1833): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2029, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x38, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 960.056454ms ago: executing program 0 (id=1834): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x10000000004, 0x3c, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000240)=0x1) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 886.775989ms ago: executing program 4 (id=1835): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, &(0x7f0000000140)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 835.060741ms ago: executing program 2 (id=1836): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 834.606091ms ago: executing program 4 (id=1837): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="14aa3fa4ff8cc517a9c8506202000000d25450a286aba63ae2b6b5e6af9081fff278ed248b23abcf0c96aff2d4ba29955391e6a84b5e3f272585d0467367b9ceb52a6b8508b36c9715227f38f6ed010076035c9c8cc80e0ff8b8ecd1c579a00f58311c2fe1cb7487d8d938cdfcec99f95bc471f53cf41024270ec91baea7d46532d3f7fb226ca7f4bb0e5b0af46ccf0e988668b06aa2287be30bc565595e4fa019569c2081b1b540e106a1c43ab49bf2f9894f8b6c980000000000000000000000000000003897af9f822f355c43817683aa9b7bd49e31c0604f1c803dd07944596a352570c40c4a0d1df7da3739e3e7476de78fdaa18ca5d381a60eb7ed939d876d80983911b159a619d132afae545a3f54f4e8c336316c796c07d1fabe454a3869ff977d94a076fe6425ca3cc2fac199a255f18fe0ed9445fbfd0d4f0926d63733cc791b438fdecf7a1a36a7b77a8c9d6bd228000000000000000000000000000000b0eb27ed7ab7f654d375c6ff38f2e88fbf9de2b7bc", 0xfffffffffffffd8b, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1ea3, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff, 0x8000000000000004}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x6b95}, 0x0, 0x0, 0x0) 834.389222ms ago: executing program 3 (id=1838): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 814.821492ms ago: executing program 3 (id=1839): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 798.408844ms ago: executing program 4 (id=1840): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 776.358655ms ago: executing program 2 (id=1841): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x400) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x10, 0x75, 0x200, 0xfffffc01, 0xe, "0f1a91080d09a83d179ba1507ff85a111d5a52"}) 510.85929ms ago: executing program 3 (id=1842): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 510.51802ms ago: executing program 32 (id=1842): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 0s ago: executing program 0 (id=1844): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000f00)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffff, 0xb, 0x200000, 0x86, 0x7f, "db8f2d2b3b000200"}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xd551, 0x88b, 0x9, 0x89, 0x8, "d206476a94f3902707f67f8de40100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7) kernel console output (not intermixed with test programs): : 3560 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.459392][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.469501][ T3560] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 39.475835][ T3560] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 39.495698][ T3560] RSP: 0018:ffffc900019eb388 EFLAGS: 00010246 [ 39.501814][ T3560] RAX: ffff88811b4f1b10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 39.509853][ T3560] RDX: ffffffff867f0735 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 39.517937][ T3560] RBP: ffff88811b9a3270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 39.526040][ T3560] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b9a3230 [ 39.534054][ T3560] R13: 00000000ffffdfcc R14: ffff88811b9a327c R15: ffff88811b9a3268 [ 39.542090][ T3560] FS: 00007fb1da1166c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 39.551097][ T3560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.557765][ T3560] CR2: 00007fb1da115ff8 CR3: 000000011b77e000 CR4: 00000000003506f0 [ 39.565920][ T3560] Call Trace: [ 39.569273][ T3560] [ 39.572252][ T3560] reg_set_min_max+0x1c8/0x260 [ 39.577089][ T3560] check_cond_jmp_op+0x13bd/0x1a80 [ 39.582278][ T3560] do_check+0x440c/0x9060 [ 39.586704][ T3560] do_check_common+0xd0f/0x1630 [ 39.591679][ T3560] bpf_check+0x2f6d/0xc7e0 [ 39.596171][ T3560] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 39.602368][ T3560] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 39.608076][ T3560] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 39.614083][ T3560] ? css_rstat_updated+0xbb/0x280 [ 39.619195][ T3560] ? try_charge_memcg+0x215/0xa10 [ 39.624294][ T3560] ? pcpu_block_update+0x232/0x3b0 [ 39.629542][ T3560] ? pcpu_block_refresh_hint+0x157/0x170 [ 39.635281][ T3560] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 39.641417][ T3560] ? css_rstat_updated+0xbb/0x280 [ 39.646641][ T3560] ? mod_memcg_state+0x182/0x260 [ 39.651685][ T3560] ? __rcu_read_unlock+0x4e/0x70 [ 39.656705][ T3560] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 39.662569][ T3560] ? pcpu_alloc_noprof+0xb08/0x1010 [ 39.667847][ T3560] ? __kmalloc_noprof+0x4a3/0x580 [ 39.672979][ T3560] ? security_bpf_prog_load+0x60/0x140 [ 39.678634][ T3560] ? selinux_bpf_prog_load+0xac/0xd0 [ 39.684069][ T3560] ? security_bpf_prog_load+0x9e/0x140 [ 39.689662][ T3560] bpf_prog_load+0xf76/0x1140 [ 39.694402][ T3560] ? security_bpf+0x2b/0x90 [ 39.698978][ T3560] __sys_bpf+0x469/0x7b0 [ 39.703375][ T3560] __x64_sys_bpf+0x41/0x50 [ 39.707860][ T3560] x64_sys_call+0x28e1/0x3000 [ 39.712626][ T3560] do_syscall_64+0xc0/0x2a0 [ 39.717214][ T3560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.723145][ T3560] RIP: 0033:0x7fb1db6daeb9 [ 39.727802][ T3560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.747537][ T3560] RSP: 002b:00007fb1da116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.756070][ T3560] RAX: ffffffffffffffda RBX: 00007fb1db956090 RCX: 00007fb1db6daeb9 [ 39.764078][ T3560] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 39.772269][ T3560] RBP: 00007fb1db748c1f R08: 0000000000000000 R09: 0000000000000000 [ 39.780303][ T3560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.788339][ T3560] R13: 00007fb1db956128 R14: 00007fb1db956090 R15: 00007ffdf45f3ab8 [ 39.796402][ T3560] [ 39.799519][ T3560] ---[ end trace 0000000000000000 ]--- [ 39.994358][ T3578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39'. [ 40.058771][ T3585] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 40.066562][ T3560] syz.4.31 (3560) used greatest stack depth: 10008 bytes left [ 40.133939][ T3588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.42'. [ 40.185608][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 40.291754][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. [ 40.303701][ T3608] ip6erspan0: entered allmulticast mode [ 40.492981][ T3621] Cannot find add_set index 0 as target [ 40.634987][ T3479] IPVS: starting estimator thread 0... [ 40.649693][ T10] IPVS: starting estimator thread 0... [ 40.737829][ T3642] IPVS: using max 2304 ests per chain, 115200 per kthread [ 40.748817][ T3652] bridge0: port 3(ipvlan2) entered blocking state [ 40.755422][ T3652] bridge0: port 3(ipvlan2) entered disabled state [ 40.756473][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 40.762270][ T3644] IPVS: using max 2256 ests per chain, 112800 per kthread [ 40.767563][ T3652] ipvlan2: entered allmulticast mode [ 40.783592][ T3652] bridge0: entered allmulticast mode [ 40.796167][ T3652] ipvlan2: left allmulticast mode [ 40.801251][ T3652] bridge0: left allmulticast mode [ 41.039921][ T3678] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 41.587296][ T3730] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.771195][ T3747] capability: warning: `syz.4.117' uses deprecated v2 capabilities in a way that may be insecure [ 42.011586][ T3771] xt_hashlimit: max too large, truncated to 1048576 [ 42.040647][ T3771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.327325][ T3808] bond1: option downdelay: invalid value (18446744073709551615) [ 42.335221][ T3808] bond1: option downdelay: allowed values 0 - 2147483647 [ 42.346176][ T3808] bond1 (unregistering): Released all slaves [ 42.515293][ T3828] loop1: detected capacity change from 0 to 2048 [ 42.560122][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.621395][ T3847] loop0: detected capacity change from 0 to 512 [ 42.672556][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.890661][ T3882] loop0: detected capacity change from 0 to 512 [ 43.026726][ T3891] loop0: detected capacity change from 0 to 256 [ 43.164518][ T3902] loop1: detected capacity change from 0 to 256 [ 43.189288][ T3902] FAT-fs (loop1): Directory bread(block 64) failed [ 43.210024][ T3902] FAT-fs (loop1): Directory bread(block 65) failed [ 43.241908][ T3902] FAT-fs (loop1): Directory bread(block 66) failed [ 43.249493][ T3902] FAT-fs (loop1): Directory bread(block 67) failed [ 43.261522][ T3902] FAT-fs (loop1): Directory bread(block 68) failed [ 43.270529][ T3902] FAT-fs (loop1): Directory bread(block 69) failed [ 43.287308][ T3902] FAT-fs (loop1): Directory bread(block 70) failed [ 43.299408][ T3902] FAT-fs (loop1): Directory bread(block 71) failed [ 43.312324][ T3910] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 43.332296][ T3902] FAT-fs (loop1): Directory bread(block 72) failed [ 43.339407][ T3910] Zero length message leads to an empty skb [ 43.345953][ T3902] FAT-fs (loop1): Directory bread(block 73) failed [ 43.403101][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 43.403120][ T29] audit: type=1400 audit(1769828334.354:184): avc: denied { bind } for pid=3917 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.431854][ T29] audit: type=1400 audit(1769828334.354:185): avc: denied { node_bind } for pid=3917 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.524606][ T3928] netlink: 'syz.2.198': attribute type 11 has an invalid length. [ 43.532434][ T3928] __nla_validate_parse: 19 callbacks suppressed [ 43.532452][ T3928] netlink: 44 bytes leftover after parsing attributes in process `syz.2.198'. [ 43.577059][ T3930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 43.586067][ T3930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.199'. [ 43.621941][ T29] audit: type=1400 audit(1769828334.574:187): avc: denied { write } for pid=3935 comm="syz.2.202" name="ip_tables_names" dev="proc" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.646107][ T29] audit: type=1400 audit(1769828334.574:186): avc: denied { create } for pid=3933 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.677692][ T3938] bond0: option min_links: invalid value (18446744073709551613) [ 43.685556][ T3938] bond0: option min_links: allowed values 0 - 2147483647 [ 43.743337][ T3940] netlink: 774 bytes leftover after parsing attributes in process `syz.2.205'. [ 43.752971][ T29] audit: type=1400 audit(1769828334.584:188): avc: denied { getopt } for pid=3933 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.817495][ T29] audit: type=1326 audit(1769828334.704:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3943 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 43.841031][ T29] audit: type=1326 audit(1769828334.704:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3943 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 43.864427][ T29] audit: type=1400 audit(1769828334.764:191): avc: denied { create } for pid=3949 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.883817][ T29] audit: type=1326 audit(1769828334.764:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3943 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 43.907189][ T29] audit: type=1326 audit(1769828334.764:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3943 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 43.940058][ T3954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'. [ 44.203518][ T3985] loop3: detected capacity change from 0 to 764 [ 44.286291][ T3985] iso9660: Unknown parameter 'uidv||[5cGcaLdDSq$qD.l{*' [ 44.325224][ T3988] capability: warning: `syz.4.226' uses 32-bit capabilities (legacy support in use) [ 44.416622][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 44.707161][ T4016] netlink: 332 bytes leftover after parsing attributes in process `syz.4.239'. [ 44.807094][ T4023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 44.819433][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 44.828147][ T4028] loop4: detected capacity change from 0 to 512 [ 44.849033][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'. [ 45.164515][ T825] kernel read not supported for file /vcs (pid: 825 comm: kworker/0:2) [ 45.267275][ T4059] loop2: detected capacity change from 0 to 128 [ 45.285801][ T4058] ip6erspan0: entered allmulticast mode [ 45.369761][ T4059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.438069][ T4070] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 45.457408][ T4059] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.495273][ T4068] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 45.519798][ T4072] loop0: detected capacity change from 0 to 512 [ 45.551908][ T4072] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.262: invalid indirect mapped block 4294967295 (level 1) [ 45.610218][ T4072] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.262: invalid indirect mapped block 4294967295 (level 1) [ 45.641645][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.666626][ T4072] EXT4-fs (loop0): 2 truncates cleaned up [ 45.672801][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.779221][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.840289][ T4090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.930592][ T4099] vlan2: entered allmulticast mode [ 45.935883][ T4099] veth0_to_bond: entered allmulticast mode [ 46.754575][ T4157] loop2: detected capacity change from 0 to 512 [ 46.766116][ T4157] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 46.776965][ T4157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 46.812722][ T4157] System zones: 1-12 [ 46.816976][ T4157] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.823665][ T4157] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.299: bg 0: block 361: padding at end of block bitmap is not set [ 46.839029][ T4157] EXT4-fs (loop2): Remounting filesystem read-only [ 46.846911][ T4157] EXT4-fs (loop2): 1 truncate cleaned up [ 46.861712][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.035231][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.202443][ T4187] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 47.336748][ T4189] loop4: detected capacity change from 0 to 2048 [ 47.399844][ T4189] EXT4-fs: Invalid want_extra_isize 9 [ 47.900946][ T4212] loop1: detected capacity change from 0 to 2048 [ 47.979575][ T4212] loop1: p1 p3 p4 [ 47.999047][ T4212] loop1: p4 size 589824 extends beyond EOD, truncated [ 48.024843][ T3002] loop1: p1 p3 p4 [ 48.035580][ T3002] loop1: p4 size 589824 extends beyond EOD, truncated [ 48.077800][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 48.079451][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.137634][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 48.150463][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.423699][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 48.423716][ T29] audit: type=1400 audit(1769828339.374:265): avc: denied { name_bind } for pid=4241 comm="syz.4.337" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 49.015657][ T29] audit: type=1400 audit(1769828339.964:266): avc: denied { allowed } for pid=4267 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.034893][ T29] audit: type=1400 audit(1769828339.964:267): avc: denied { create } for pid=4267 comm="syz.1.348" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.056021][ T29] audit: type=1400 audit(1769828339.964:268): avc: denied { map } for pid=4267 comm="syz.1.348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.079947][ T29] audit: type=1400 audit(1769828339.964:269): avc: denied { read write } for pid=4267 comm="syz.1.348" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.108543][ T4271] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 49.135052][ T4268] loop3: detected capacity change from 0 to 512 [ 49.164731][ T4268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.177882][ T4268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.259736][ T4268] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.302959][ T4268] EXT4-fs (loop3): 1 truncate cleaned up [ 49.323631][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.366104][ T29] audit: type=1400 audit(1769828340.314:270): avc: denied { link } for pid=4265 comm="syz.3.350" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.388198][ T29] audit: type=1400 audit(1769828340.314:271): avc: denied { remove_name } for pid=4265 comm="syz.3.350" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.410725][ T29] audit: type=1400 audit(1769828340.314:272): avc: denied { unlink } for pid=4265 comm="syz.3.350" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.463364][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.578284][ T29] audit: type=1400 audit(1769828340.534:273): avc: denied { setopt } for pid=4294 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.237621][ T29] audit: type=1400 audit(1769828341.194:274): avc: denied { execute } for pid=4311 comm="syz.0.366" path="/67/cpu.stat" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.582625][ T4325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 50.826999][ T4338] loop4: detected capacity change from 0 to 512 [ 50.878180][ T4340] loop1: detected capacity change from 0 to 256 [ 50.975282][ T4341] __nla_validate_parse: 11 callbacks suppressed [ 50.975300][ T4341] netlink: 176 bytes leftover after parsing attributes in process `syz.4.373'. [ 51.099313][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 51.139636][ T4351] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 51.147494][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 51.464823][ T4361] loop4: detected capacity change from 0 to 512 [ 51.905576][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 52.184262][ T4400] loop2: detected capacity change from 0 to 1024 [ 52.209860][ T4400] EXT4-fs: Ignoring removed bh option [ 52.237037][ T4400] EXT4-fs: inline encryption not supported [ 52.244156][ T4400] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.261297][ T4400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 52.361683][ T4400] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.403: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.387523][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 52.413232][ T4400] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.403: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.434898][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 52.474793][ T4400] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.403: Failed to acquire dquot type 0 [ 52.493838][ T4400] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 52.510452][ T4400] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.403: mark_inode_dirty error [ 52.542099][ T4400] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 52.552724][ T4400] EXT4-fs (loop2): 1 orphan inode deleted [ 52.559325][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.573313][ T1666] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.608484][ T1666] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 52.624295][ T4428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.649808][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.659355][ T3315] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 52.676310][ T3315] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 52.694896][ T3315] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 52.921180][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 52.955219][ T4463] netlink: 'syz.4.432': attribute type 66 has an invalid length. [ 52.966410][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 52.997323][ T4470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.429'. [ 53.106250][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 53.466362][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 53.466380][ T29] audit: type=1400 audit(1769828344.424:295): avc: denied { create } for pid=4499 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 53.493181][ T4499] delete_channel: no stack [ 53.524753][ T29] audit: type=1400 audit(1769828344.444:296): avc: denied { ioctl } for pid=4499 comm="syz.0.447" path="socket:[7956]" dev="sockfs" ino=7956 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 53.633749][ T29] audit: type=1400 audit(1769828344.584:297): avc: denied { create } for pid=4508 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.691907][ T29] audit: type=1400 audit(1769828344.614:298): avc: denied { listen } for pid=4508 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.711304][ T29] audit: type=1400 audit(1769828344.614:299): avc: denied { ioctl } for pid=4508 comm="syz.3.450" path="socket:[7971]" dev="sockfs" ino=7971 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.814719][ T29] audit: type=1400 audit(1769828344.764:300): avc: denied { setopt } for pid=4518 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.834806][ T29] audit: type=1400 audit(1769828344.764:301): avc: denied { getopt } for pid=4518 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.102164][ T4533] loop4: detected capacity change from 0 to 512 [ 54.132517][ T4533] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.154014][ T4533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.462: bg 0: block 248: padding at end of block bitmap is not set [ 54.174713][ T4533] Quota error (device loop4): write_blk: dquota write failed [ 54.182171][ T4533] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 54.192223][ T4533] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.462: Failed to acquire dquot type 1 [ 54.204129][ T4533] EXT4-fs (loop4): 1 truncate cleaned up [ 54.211346][ T4533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.259746][ T4533] EXT4-fs (loop4): shut down requested (0) [ 54.275648][ T4533] syz.4.462 (4533) used greatest stack depth: 9216 bytes left [ 54.286395][ T29] audit: type=1400 audit(1769828345.244:302): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.315253][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.461248][ T4557] tipc: Started in network mode [ 54.466231][ T4557] tipc: Node identity ac14140f, cluster identity 4711 [ 54.490099][ T4557] tipc: New replicast peer: 255.255.255.255 [ 54.496344][ T4557] tipc: Enabled bearer , priority 10 [ 55.011510][ T4592] loop1: detected capacity change from 0 to 512 [ 55.023411][ T4594] loop3: detected capacity change from 0 to 512 [ 55.416000][ T4592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.480869][ T4592] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.584374][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.883833][ T4608] loop3: detected capacity change from 0 to 512 [ 55.910053][ T4608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.492: error while reading EA inode 32 err=-116 [ 55.922777][ T4608] EXT4-fs (loop3): Remounting filesystem read-only [ 55.929714][ T4608] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.941403][ T4608] EXT4-fs (loop3): 1 orphan inode deleted [ 55.947904][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.974152][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.349779][ T825] tipc: Node number set to 2886997007 [ 56.389178][ T4614] loop3: detected capacity change from 0 to 1024 [ 56.397990][ T4614] EXT4-fs: inline encryption not supported [ 56.403939][ T4614] EXT4-fs: Ignoring removed oldalloc option [ 56.429417][ T4614] EXT4-fs: inline encryption not supported [ 56.436058][ T4614] EXT4-fs: Ignoring removed orlov option [ 56.473189][ T4614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.506556][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.517993][ T4630] loop1: detected capacity change from 0 to 1024 [ 56.526882][ T4630] EXT4-fs: Ignoring removed orlov option [ 56.578483][ T4636] __nla_validate_parse: 6 callbacks suppressed [ 56.578499][ T4636] netlink: 277 bytes leftover after parsing attributes in process `syz.4.503'. [ 56.607608][ T4630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.622721][ T4630] EXT4-fs (loop1): shut down requested (2) [ 56.629816][ T4630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 56.642372][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 56.661731][ T4630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 56.704081][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.916013][ T4675] loop1: detected capacity change from 0 to 512 [ 56.967225][ T4680] tipc: Started in network mode [ 56.972163][ T4680] tipc: Node identity ffe5, cluster identity 4711 [ 56.978652][ T4680] tipc: Enabling of bearer rejected, failed to enable media [ 57.044583][ T4690] loop2: detected capacity change from 0 to 512 [ 57.045843][ T4688] netlink: 176 bytes leftover after parsing attributes in process `syz.1.520'. [ 57.067470][ T4690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.082597][ T4690] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.107403][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.222431][ T4703] Cannot find set identified by id 0 to match [ 57.336092][ T4712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.535'. [ 57.345087][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 57.354122][ T4712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.535'. [ 57.437760][ T4718] syz.2.538 (4718) used greatest stack depth: 9064 bytes left [ 57.506710][ T4722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'. [ 57.761178][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 57.799045][ T4725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.540'. [ 57.841349][ T4725] ip6gre1: entered promiscuous mode [ 57.849557][ T4725] ip6gre1: entered allmulticast mode [ 57.944469][ T4732] loop1: detected capacity change from 0 to 2048 [ 57.972592][ T4732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.999196][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.071656][ T4743] loop1: detected capacity change from 0 to 256 [ 58.080807][ T4743] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.400830][ T4771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 58.415143][ T4773] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 58.502456][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 58.502475][ T29] audit: type=1400 audit(1769828349.454:350): avc: denied { execute } for pid=4775 comm="syz.1.563" path="/proc/250/task/251/net/vlan/vlan1" dev="proc" ino=4026533249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 58.595839][ T4787] loop0: detected capacity change from 0 to 128 [ 58.615716][ T4787] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.674103][ T4792] program syz.3.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.702788][ T4787] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.839040][ T4801] tipc: Enabling of bearer rejected, failed to enable media [ 58.919610][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.369169][ T4829] ip6gre1: entered promiscuous mode [ 59.374438][ T4829] ip6gre1: entered allmulticast mode [ 59.780471][ T29] audit: type=1400 audit(1769828350.734:351): avc: denied { shutdown } for pid=4855 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.980845][ T4865] loop3: detected capacity change from 0 to 256 [ 59.992481][ T4871] delete_channel: no stack [ 60.008009][ T29] audit: type=1400 audit(1769828350.964:352): avc: denied { setopt } for pid=4870 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.113359][ T29] audit: type=1400 audit(1769828351.064:353): avc: denied { setopt } for pid=4878 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.265689][ T4884] ip6gre1: entered promiscuous mode [ 60.270984][ T4884] ip6gre1: entered allmulticast mode [ 60.440032][ T29] audit: type=1400 audit(1769828351.394:354): avc: denied { module_request } for pid=4892 comm="syz.4.612" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.579274][ T29] audit: type=1400 audit(1769828351.524:355): avc: denied { bind } for pid=4902 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.647413][ T29] audit: type=1400 audit(1769828351.604:356): avc: denied { connect } for pid=4907 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.964786][ T29] audit: type=1400 audit(1769828351.904:357): avc: denied { create } for pid=4922 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.995585][ T4925] loop0: detected capacity change from 0 to 512 [ 61.010496][ T29] audit: type=1400 audit(1769828351.944:358): avc: denied { setopt } for pid=4922 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.029875][ T29] audit: type=1400 audit(1769828351.944:359): avc: denied { bind } for pid=4922 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.065081][ T4925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.081868][ T4925] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.109905][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.373127][ T4958] loop3: detected capacity change from 0 to 512 [ 61.667650][ T4990] sctp: [Deprecated]: syz.0.656 (pid 4990) Use of int in max_burst socket option. [ 61.667650][ T4990] Use struct sctp_assoc_value instead [ 61.714606][ T4994] loop0: detected capacity change from 0 to 512 [ 61.725586][ T4996] __nla_validate_parse: 15 callbacks suppressed [ 61.725607][ T4996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.659'. [ 61.762243][ T4998] loop0: detected capacity change from 0 to 128 [ 61.776931][ T4998] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.805134][ T4998] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.878233][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.995915][ T5024] loop2: detected capacity change from 0 to 512 [ 62.172460][ T5039] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.679'. [ 62.604973][ T5060] loop2: detected capacity change from 0 to 256 [ 62.657023][ T5060] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.810407][ T5077] loop0: detected capacity change from 0 to 512 [ 62.836466][ T5077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 62.856861][ T5081] loop2: detected capacity change from 0 to 1024 [ 62.865901][ T5077] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.943542][ T5081] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.954537][ T5081] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.973949][ T5085] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 62.975355][ T5081] JBD2: no valid journal superblock found [ 62.980363][ T5085] dvmrp1: linktype set to 270 [ 62.985315][ T5081] EXT4-fs (loop2): Could not load journal inode [ 63.014213][ T5081] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 63.040004][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.055411][ T5089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'. [ 63.079357][ T5089] ip6erspan0: entered allmulticast mode [ 63.290925][ T5110] geneve2: entered promiscuous mode [ 63.296211][ T5110] geneve2: entered allmulticast mode [ 63.435596][ T5126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 63.456954][ T5130] loop0: detected capacity change from 0 to 512 [ 63.480912][ T5130] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 63.498748][ T5134] loop2: detected capacity change from 0 to 512 [ 63.507714][ T5129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.720'. [ 63.524918][ T5130] System zones: 0-2, 18-18, 34-35 [ 63.546482][ T5130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.547156][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.559305][ T5130] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.583232][ T5134] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.655508][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.691238][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.720220][ T5148] atomic_op ffff88811c43cd28 conn xmit_atomic 0000000000000000 [ 63.834665][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 64.674834][ T5192] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.685852][ T5192] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.715571][ T5192] JBD2: no valid journal superblock found [ 64.721358][ T5192] EXT4-fs (loop4): Could not load journal inode [ 64.781002][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 64.789951][ T5192] netlink: 64 bytes leftover after parsing attributes in process `syz.4.745'. [ 64.798894][ T5192] netlink: 580 bytes leftover after parsing attributes in process `syz.4.745'. [ 65.034447][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 65.034472][ T29] audit: type=1400 audit(1769828355.984:377): avc: denied { connect } for pid=5212 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.072112][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 65.082034][ T29] audit: type=1400 audit(1769828356.024:378): avc: denied { read } for pid=5212 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.208239][ T5222] sctp: [Deprecated]: syz.4.759 (pid 5222) Use of int in maxseg socket option. [ 65.208239][ T5222] Use struct sctp_assoc_value instead [ 65.390935][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.406152][ T5158] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.436741][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.458551][ T29] audit: type=1400 audit(1769828356.414:379): avc: denied { ioctl } for pid=5234 comm="syz.1.764" path="socket:[10219]" dev="sockfs" ino=10219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.505903][ T29] audit: type=1400 audit(1769828356.464:380): avc: denied { bind } for pid=5237 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.536834][ T29] audit: type=1400 audit(1769828356.464:381): avc: denied { listen } for pid=5237 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.589242][ T29] audit: type=1400 audit(1769828356.534:382): avc: denied { ioctl } for pid=5242 comm="syz.0.767" path="socket:[10753]" dev="sockfs" ino=10753 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.666990][ T29] audit: type=1400 audit(1769828356.624:383): avc: denied { connect } for pid=5251 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 65.706852][ T29] audit: type=1400 audit(1769828356.654:384): avc: denied { firmware_load } for pid=5253 comm="syz.1.771" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 65.736819][ T5256] program syz.0.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.999772][ T5273] process 'syz.1.781' launched './file0' with NULL argv: empty string added [ 66.008957][ T29] audit: type=1400 audit(1769828356.964:385): avc: denied { execute_no_trans } for pid=5272 comm="syz.1.781" path="/152/file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.238105][ T29] audit: type=1400 audit(1769828357.194:386): avc: denied { write } for pid=5291 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.254451][ T5295] bpf: Bad value for 'uid' [ 66.463260][ T5318] set_capacity_and_notify: 4 callbacks suppressed [ 66.463276][ T5318] loop3: detected capacity change from 0 to 512 [ 66.498257][ T5322] macvlan0: entered promiscuous mode [ 66.517388][ T5322] dummy0: entered promiscuous mode [ 66.532270][ T5322] hsr1: entered promiscuous mode [ 66.537422][ T5322] hsr1: entered allmulticast mode [ 66.542495][ T5322] macvlan0: entered allmulticast mode [ 66.547988][ T5322] veth1_vlan: entered allmulticast mode [ 66.554085][ T5322] dummy0: entered allmulticast mode [ 66.752413][ T5338] __nla_validate_parse: 5 callbacks suppressed [ 66.752570][ T5338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.808'. [ 67.172432][ T5352] loop1: detected capacity change from 0 to 512 [ 67.181415][ T5352] EXT4-fs: Ignoring removed nobh option [ 67.196657][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.209762][ T5352] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.242478][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.263510][ T5361] loop2: detected capacity change from 0 to 256 [ 67.291191][ T5361] FAT-fs (loop2): Directory bread(block 64) failed [ 67.315175][ T5361] FAT-fs (loop2): Directory bread(block 65) failed [ 67.339822][ T5361] FAT-fs (loop2): Directory bread(block 66) failed [ 67.350884][ T5368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 67.360698][ T5361] FAT-fs (loop2): Directory bread(block 67) failed [ 67.378117][ T5361] FAT-fs (loop2): Directory bread(block 68) failed [ 67.404115][ T5361] FAT-fs (loop2): Directory bread(block 69) failed [ 67.412245][ T5361] FAT-fs (loop2): Directory bread(block 70) failed [ 67.419120][ T5361] FAT-fs (loop2): Directory bread(block 71) failed [ 67.426517][ T5361] FAT-fs (loop2): Directory bread(block 72) failed [ 67.454761][ T5361] FAT-fs (loop2): Directory bread(block 73) failed [ 67.473954][ T5380] netlink: 88 bytes leftover after parsing attributes in process `syz.4.826'. [ 67.498446][ T5380] netlink: 48 bytes leftover after parsing attributes in process `syz.4.826'. [ 67.548144][ T5385] macvlan0: entered promiscuous mode [ 67.554529][ T5385] dummy0: entered promiscuous mode [ 67.564124][ T5385] debugfs: 'hsr1' already exists in 'hsr' [ 67.569997][ T5385] Cannot create hsr debugfs directory [ 67.576365][ T5385] hsr1: entered promiscuous mode [ 67.581417][ T5385] hsr1: entered allmulticast mode [ 67.586527][ T5385] macvlan0: entered allmulticast mode [ 67.591990][ T5385] veth1_vlan: entered allmulticast mode [ 67.601106][ T5385] dummy0: entered allmulticast mode [ 67.665315][ T5396] netlink: 182 bytes leftover after parsing attributes in process `syz.4.832'. [ 67.675453][ T5397] netlink: 444 bytes leftover after parsing attributes in process `syz.2.833'. [ 67.684447][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 67.732322][ T5402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 67.755658][ T5402] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 67.763375][ T5402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.836'. [ 67.986305][ T5430] loop4: detected capacity change from 0 to 4096 [ 68.025816][ T5430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.083661][ T5430] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.851: corrupted inode contents [ 68.097584][ T5449] netlink: 87 bytes leftover after parsing attributes in process `syz.3.859'. [ 68.117202][ T5430] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.851: mark_inode_dirty error [ 68.128758][ T5430] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.851: corrupted inode contents [ 68.133692][ T5455] loop1: detected capacity change from 0 to 128 [ 68.150506][ T5430] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.851: mark_inode_dirty error [ 68.182395][ T5430] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.851: corrupted inode contents [ 68.194537][ T5430] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.851: mark_inode_dirty error [ 68.203593][ T5455] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.223039][ T5459] program syz.2.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.243911][ T5455] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.272279][ T5430] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.851: corrupted inode contents [ 68.325459][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.334578][ T5430] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.851: mark_inode_dirty error [ 68.355014][ T5430] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 68.369011][ T5458] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.851: corrupted inode contents [ 68.398071][ T5476] loop3: detected capacity change from 0 to 128 [ 68.405128][ T5458] EXT4-fs warning (device loop4): swap_inode_boot_loader:480: couldn't mark inode #15 dirty (err -117) [ 68.421020][ T5476] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.445075][ T5476] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.464073][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.496508][ T5476] EXT4-fs (loop3): shut down requested (0) [ 68.554543][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.600176][ T5487] netlink: 'syz.3.874': attribute type 2 has an invalid length. [ 69.263441][ T5514] loop1: detected capacity change from 0 to 512 [ 69.328815][ T5514] EXT4-fs: Ignoring removed i_version option [ 69.335162][ T5514] EXT4-fs: Ignoring removed bh option [ 69.441803][ T5514] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 69.506143][ T5524] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 69.676037][ T5542] bridge0: entered promiscuous mode [ 69.682833][ T5542] bridge0: port 3(macsec1) entered blocking state [ 69.689366][ T5542] bridge0: port 3(macsec1) entered disabled state [ 69.720698][ T5547] loop4: detected capacity change from 0 to 512 [ 69.730481][ T5542] macsec1: entered allmulticast mode [ 69.735930][ T5542] bridge0: entered allmulticast mode [ 69.751266][ T5542] macsec1: left allmulticast mode [ 69.756511][ T5542] bridge0: left allmulticast mode [ 69.773639][ T5542] bridge0: left promiscuous mode [ 70.905706][ T5603] syz.0.921 uses obsolete (PF_INET,SOCK_PACKET) [ 70.925370][ T5603] syzkaller1: entered allmulticast mode [ 71.070916][ T5615] loop0: detected capacity change from 0 to 512 [ 71.092328][ T5617] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 72.024285][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 72.024305][ T29] audit: type=1326 audit(1769828362.974:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.055353][ T29] audit: type=1326 audit(1769828362.974:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.080393][ T5665] __nla_validate_parse: 9 callbacks suppressed [ 72.080411][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.947'. [ 72.106986][ T29] audit: type=1326 audit(1769828363.044:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.130809][ T29] audit: type=1326 audit(1769828363.064:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.154221][ T29] audit: type=1326 audit(1769828363.064:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.185073][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.947'. [ 72.209156][ T29] audit: type=1326 audit(1769828363.154:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.232526][ T29] audit: type=1326 audit(1769828363.154:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.255884][ T29] audit: type=1326 audit(1769828363.154:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.279208][ T29] audit: type=1326 audit(1769828363.154:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.302469][ T29] audit: type=1326 audit(1769828363.154:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 72.415534][ T5682] netlink: 68 bytes leftover after parsing attributes in process `syz.0.955'. [ 72.524770][ T5695] loop3: detected capacity change from 0 to 2048 [ 72.623392][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 72.664409][ T5695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.687595][ T5714] loop1: detected capacity change from 0 to 1764 [ 72.825753][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.250714][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 73.640960][ T5769] loop0: detected capacity change from 0 to 128 [ 73.654117][ T5769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.667007][ T5769] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.709120][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.796765][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 74.656059][ T5803] loop4: detected capacity change from 0 to 512 [ 74.676192][ T5803] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.710526][ T5803] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.729497][ T5803] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.997: Allocating blocks 41-42 which overlap fs metadata [ 74.746548][ T5803] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.997: Allocating blocks 41-42 which overlap fs metadata [ 74.760621][ T5803] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.997: Failed to acquire dquot type 1 [ 74.875586][ T5803] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 74.891720][ T5803] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.997: corrupted inode contents [ 74.922508][ T5812] hsr0: entered promiscuous mode [ 74.929364][ T5803] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.997: mark_inode_dirty error [ 74.942537][ T5803] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.997: corrupted inode contents [ 74.955123][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 74.955750][ T5803] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.997: mark_inode_dirty error [ 74.975022][ T5814] bond1: option packets_per_slave: invalid value (1635017058) [ 74.982615][ T5814] bond1: option packets_per_slave: allowed values 0 - 65535 [ 74.988335][ T5803] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.997: corrupted inode contents [ 75.002840][ T5814] bond1 (unregistering): Released all slaves [ 75.012698][ T5803] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 75.021470][ T5812] hsr_slave_0: left promiscuous mode [ 75.022193][ T5803] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.997: corrupted inode contents [ 75.038703][ T5812] hsr_slave_1: left promiscuous mode [ 75.039875][ T5803] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.997: mark_inode_dirty error [ 75.055500][ T5803] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 75.056958][ T5812] hsr0 (unregistering): left promiscuous mode [ 75.090881][ T5803] EXT4-fs (loop4): 1 truncate cleaned up [ 75.108450][ T5803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.196921][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 75.610581][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.854912][ T5849] netlink: 'syz.0.1018': attribute type 16 has an invalid length. [ 75.862830][ T5849] netlink: 'syz.0.1018': attribute type 2 has an invalid length. [ 75.870635][ T5849] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.1018'. [ 76.067457][ T5869] loop0: detected capacity change from 0 to 512 [ 76.190279][ T5878] loop3: detected capacity change from 0 to 512 [ 76.342739][ T5886] loop3: detected capacity change from 0 to 2048 [ 76.402204][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.566350][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 76.588342][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 76.666946][ T5901] loop3: detected capacity change from 0 to 1024 [ 76.722206][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.926525][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.022770][ T5910] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 77.041645][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 77.041660][ T29] audit: type=1400 audit(1769828367.994:517): avc: denied { watch } for pid=5908 comm="syz.3.1041" path="/212" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.124743][ T29] audit: type=1326 audit(1769828368.074:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.148202][ T29] audit: type=1326 audit(1769828368.074:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.222094][ T29] audit: type=1326 audit(1769828368.124:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.245609][ T29] audit: type=1326 audit(1769828368.124:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.269074][ T29] audit: type=1326 audit(1769828368.124:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.292616][ T29] audit: type=1326 audit(1769828368.124:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.316140][ T29] audit: type=1326 audit(1769828368.124:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.330272][ T3420] kernel write not supported for file bpf-prog (pid: 3420 comm: kworker/0:3) [ 77.339580][ T29] audit: type=1326 audit(1769828368.134:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.431562][ T29] audit: type=1326 audit(1769828368.334:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 77.546272][ T5936] netlink: 'syz.2.1055': attribute type 6 has an invalid length. [ 78.001060][ T5974] loop4: detected capacity change from 0 to 512 [ 78.094295][ T5983] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1072'. [ 78.133220][ T5985] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1080'. [ 78.146062][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'. [ 78.167235][ T5987] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 78.186860][ T5988] ip6erspan0: entered allmulticast mode [ 78.259514][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 78.365568][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1082'. [ 78.751109][ T6011] rdma_op ffff88811e656580 conn xmit_rdma 0000000000000000 [ 78.926010][ T6019] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 79.442177][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 79.451232][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 79.517543][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 79.598757][ T6079] loop4: detected capacity change from 0 to 2048 [ 79.620524][ T6079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.751683][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.908866][ T6097] loop1: detected capacity change from 0 to 512 [ 80.183137][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 80.217947][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 80.961715][ T6162] loop1: detected capacity change from 0 to 512 [ 80.969040][ T6162] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.988253][ T6162] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.010076][ T6162] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1154: bg 0: block 248: padding at end of block bitmap is not set [ 81.025185][ T6162] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1154: Failed to acquire dquot type 1 [ 81.037308][ T6162] EXT4-fs (loop1): 1 truncate cleaned up [ 81.043468][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 81.058777][ T6162] EXT4-fs (loop1): shut down requested (1) [ 81.086685][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 81.098545][ T6170] loop0: detected capacity change from 0 to 512 [ 81.482870][ T6210] batadv_slave_0: entered promiscuous mode [ 81.524270][ T6209] batadv_slave_0: left promiscuous mode [ 81.591436][ T6223] loop2: detected capacity change from 0 to 512 [ 82.234741][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 82.234760][ T29] audit: type=1400 audit(1769828373.184:583): avc: denied { getopt } for pid=6262 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.525698][ T29] audit: type=1400 audit(1769828373.484:584): avc: denied { watch } for pid=6278 comm="syz.1.1203" path="/240/file1" dev="tmpfs" ino=1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.671241][ T29] audit: type=1400 audit(1769828373.624:585): avc: denied { sqpoll } for pid=6286 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.692177][ T6290] qrtr: Invalid version 220 [ 82.773006][ T6296] loop2: detected capacity change from 0 to 512 [ 82.792696][ T29] audit: type=1400 audit(1769828373.734:586): avc: denied { append } for pid=6292 comm="syz.1.1209" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 82.815975][ T29] audit: type=1400 audit(1769828373.734:587): avc: denied { open } for pid=6292 comm="syz.1.1209" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 82.856618][ T6296] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 1: comm syz.2.1211: invalid block [ 82.869016][ T6296] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1211: couldn't read orphan inode 11 (err -117) [ 82.885079][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.921771][ T29] audit: type=1400 audit(1769828373.874:588): avc: denied { execute } for pid=6299 comm="syz.3.1212" name="file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.944090][ T29] audit: type=1400 audit(1769828373.874:589): avc: denied { execute_no_trans } for pid=6299 comm="syz.3.1212" path="/257/file0" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.977661][ T29] audit: type=1400 audit(1769828373.874:590): avc: denied { setattr } for pid=6295 comm="syz.2.1211" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.026359][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.082801][ T6307] loop3: detected capacity change from 0 to 512 [ 83.100349][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.166753][ T6315] loop2: detected capacity change from 0 to 512 [ 83.203747][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.350444][ T29] audit: type=1326 audit(1769828374.304:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 83.373931][ T29] audit: type=1326 audit(1769828374.304:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.4.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 83.665670][ T6330] loop1: detected capacity change from 0 to 1024 [ 83.684541][ T6330] EXT4-fs: Ignoring removed orlov option [ 83.716105][ T6330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.899556][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.945296][ T6346] netlink: 'syz.1.1227': attribute type 29 has an invalid length. [ 83.971513][ T6346] netlink: 'syz.1.1227': attribute type 29 has an invalid length. [ 83.994463][ T6346] __nla_validate_parse: 9 callbacks suppressed [ 83.994480][ T6346] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1227'. [ 84.117931][ T6360] loop4: detected capacity change from 0 to 512 [ 84.145664][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1232'. [ 84.166279][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.214224][ T6360] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.264560][ T6360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 84.336950][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.661503][ T6394] syzkaller1: entered promiscuous mode [ 84.667089][ T6394] syzkaller1: entered allmulticast mode [ 85.002935][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 85.210491][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'. [ 85.319584][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 85.429267][ T6446] loop1: detected capacity change from 0 to 512 [ 86.033172][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1269'. [ 86.316595][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.323785][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.650774][ T6487] loop3: detected capacity change from 0 to 512 [ 86.815843][ T6500] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1291'. [ 86.938065][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.245350][ T12] tipc: Subscription rejected, illegal request [ 87.586173][ T6557] loop4: detected capacity change from 0 to 512 [ 87.593160][ T6557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.614803][ T6557] EXT4-fs (loop4): 1 truncate cleaned up [ 87.623066][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.670037][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.935458][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 87.935474][ T29] audit: type=1400 audit(1769828378.894:622): avc: denied { map } for pid=6575 comm="syz.4.1323" path="socket:[15189]" dev="sockfs" ino=15189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 88.160063][ T29] audit: type=1400 audit(1769828379.114:623): avc: denied { lock } for pid=6588 comm="syz.3.1329" path="socket:[15232]" dev="sockfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.503106][ T6613] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1340'. [ 88.619311][ T29] audit: type=1400 audit(1769828379.574:624): avc: denied { write } for pid=6614 comm="syz.2.1341" path="socket:[15329]" dev="sockfs" ino=15329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.646706][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 89.015671][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.064158][ T29] audit: type=1326 audit(1769828380.014:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6621 comm="syz.3.1344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa57aa8aeb9 code=0x0 [ 89.098017][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 89.314884][ T6631] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1347'. [ 89.324209][ T6631] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1347'. [ 89.641116][ T29] audit: type=1400 audit(1769828380.594:626): avc: denied { write } for pid=6662 comm="syz.1.1362" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.676794][ T29] audit: type=1400 audit(1769828380.634:627): avc: denied { map } for pid=6662 comm="syz.1.1362" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.700897][ T29] audit: type=1400 audit(1769828380.634:628): avc: denied { execute } for pid=6662 comm="syz.1.1362" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.973521][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1368'. [ 89.982662][ T6679] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1368'. [ 89.991717][ T6679] netlink: 'syz.2.1368': attribute type 6 has an invalid length. [ 89.999592][ T6679] netlink: 'syz.2.1368': attribute type 5 has an invalid length. [ 90.007408][ T6679] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1368'. [ 90.098126][ T6685] netlink: 'syz.2.1370': attribute type 27 has an invalid length. [ 90.240883][ T29] audit: type=1400 audit(1769828381.194:629): avc: denied { create } for pid=6688 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.285698][ T29] audit: type=1400 audit(1769828381.194:630): avc: denied { write } for pid=6688 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.639712][ T6665] syz.4.1363 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 90.650793][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.4.1363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.650902][ T6665] Tainted: [W]=WARN [ 90.650908][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.650920][ T6665] Call Trace: [ 90.650926][ T6665] [ 90.650933][ T6665] __dump_stack+0x1d/0x30 [ 90.650956][ T6665] dump_stack_lvl+0x95/0xd0 [ 90.650975][ T6665] dump_stack+0x15/0x1b [ 90.651055][ T6665] dump_header+0x80/0x240 [ 90.651102][ T6665] oom_kill_process+0x295/0x350 [ 90.651126][ T6665] out_of_memory+0x97d/0xb80 [ 90.651150][ T6665] try_charge_memcg+0x62e/0xa10 [ 90.651175][ T6665] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 90.651218][ T6665] __read_swap_cache_async+0x17b/0x2d0 [ 90.651249][ T6665] swap_cluster_readahead+0x262/0x3c0 [ 90.651307][ T6665] swapin_readahead+0xde/0x840 [ 90.651334][ T6665] ? lruvec_stat_mod_folio+0xd2/0x110 [ 90.651357][ T6665] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 90.651446][ T6665] ? __rcu_read_unlock+0x4e/0x70 [ 90.651476][ T6665] ? swap_cache_get_folio+0x26f/0x280 [ 90.651509][ T6665] do_swap_page+0x59b/0x2a50 [ 90.651556][ T6665] ? _raw_spin_lock+0x52/0xa0 [ 90.651586][ T6665] ? _raw_spin_unlock+0x9/0x30 [ 90.651663][ T6665] ? inode_to_bdi+0x47/0xa0 [ 90.651681][ T6665] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 90.651718][ T6665] ? __rcu_read_lock+0x36/0x50 [ 90.651759][ T6665] ? __pfx_default_wake_function+0x10/0x10 [ 90.651788][ T6665] handle_mm_fault+0xb40/0x3030 [ 90.651825][ T6665] ? vma_start_read+0x1c7/0x2c0 [ 90.651930][ T6665] do_user_addr_fault+0x62f/0x1050 [ 90.651997][ T6665] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 90.652067][ T6665] ? irqentry_exit+0x3c/0x510 [ 90.652089][ T6665] exc_page_fault+0x62/0xa0 [ 90.652110][ T6665] asm_exc_page_fault+0x26/0x30 [ 90.652198][ T6665] RIP: 0033:0x7fb1db5af6c8 [ 90.652213][ T6665] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 11 95 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 90.652265][ T6665] RSP: 002b:00007ffdf45f3b50 EFLAGS: 00010202 [ 90.652280][ T6665] RAX: 0000001b34022e50 RBX: ffffffff8465f11f RCX: 0000001b34022e48 [ 90.652292][ T6665] RDX: 0000001b33a24220 RSI: 0000000000000008 RDI: 00007fb1dc485720 [ 90.652303][ T6665] RBP: 0000000000000001 R08: 00007fb1db940000 R09: 00007fb1db942000 [ 90.652315][ T6665] R10: 000000008465f123 R11: 0000000000000003 R12: 00007fb1db956038 [ 90.652326][ T6665] R13: 0000000000000001 R14: ffffffff8465f875 R15: 00007fb1dc485720 [ 90.652339][ T6665] ? __x64_sys_sendmsg+0x25/0x160 [ 90.652390][ T6665] ? ____sys_sendmsg+0x22f/0x600 [ 90.652475][ T6665] [ 90.652481][ T6665] memory: usage 307200kB, limit 307200kB, failcnt 247 [ 90.920630][ T6665] memory+swap: usage 307684kB, limit 9007199254740988kB, failcnt 0 [ 90.928767][ T6665] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 90.936253][ T6665] Memory cgroup stats for /syz4: [ 90.936671][ T6665] cache 0 [ 90.944593][ T6665] rss 0 [ 90.947432][ T6665] shmem 0 [ 90.950380][ T6665] mapped_file 0 [ 90.953892][ T6665] dirty 0 [ 90.956883][ T6665] writeback 4096 [ 90.960456][ T6665] workingset_refault_anon 37 [ 90.965117][ T6665] workingset_refault_file 55 [ 90.969718][ T6665] swap 495616 [ 90.972999][ T6665] swapcached 4096 [ 90.976722][ T6665] pgpgin 46823 [ 90.980130][ T6665] pgpgout 46822 [ 90.983589][ T6665] pgfault 70443 [ 90.987093][ T6665] pgmajfault 23 [ 90.990600][ T6665] inactive_anon 4096 [ 90.994536][ T6665] active_anon 0 [ 90.998099][ T6665] inactive_file 0 [ 91.001849][ T6665] active_file 0 [ 91.005422][ T6665] unevictable 0 [ 91.008932][ T6665] hierarchical_memory_limit 314572800 [ 91.014304][ T6665] hierarchical_memsw_limit 9223372036854771712 [ 91.020501][ T6665] total_cache 0 [ 91.023990][ T6665] total_rss 0 [ 91.027324][ T6665] total_shmem 0 [ 91.030801][ T6665] total_mapped_file 0 [ 91.034828][ T6665] total_dirty 0 [ 91.038301][ T6665] total_writeback 4096 [ 91.042442][ T6665] total_workingset_refault_anon 37 [ 91.047754][ T6665] total_workingset_refault_file 55 [ 91.052891][ T6665] total_swap 495616 [ 91.056815][ T6665] total_swapcached 4096 [ 91.060999][ T6665] total_pgpgin 46823 [ 91.064983][ T6665] total_pgpgout 46822 [ 91.068980][ T6665] total_pgfault 70443 [ 91.072961][ T6665] total_pgmajfault 23 [ 91.077088][ T6665] total_inactive_anon 4096 [ 91.081517][ T6665] total_active_anon 0 [ 91.085533][ T6665] total_inactive_file 0 [ 91.089707][ T6665] total_active_file 0 [ 91.093696][ T6665] total_unevictable 0 [ 91.097718][ T6665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1363,pid=6665,uid=0 [ 91.112456][ T6665] Memory cgroup out of memory: Killed process 6665 (syz.4.1363) total-vm:96180kB, anon-rss:1124kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 91.133554][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.140925][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.232831][ T6666] syz.4.1363 (6666) used greatest stack depth: 6320 bytes left [ 91.301926][ T29] audit: type=1326 audit(1769828382.254:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 91.368426][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.396255][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.400975][ T6734] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1383'. [ 91.458519][ T6734] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1383'. [ 91.505814][ T6685] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 91.513807][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1386'. [ 91.533571][ T6685] ip6erspan0: left allmulticast mode [ 91.539421][ T6685] vlan2: left allmulticast mode [ 91.544312][ T6685] veth0_to_bond: left allmulticast mode [ 91.551268][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.580377][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.617804][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.651252][ T6755] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1388'. [ 91.671897][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.787472][ T6772] netlink: 'syz.1.1394': attribute type 6 has an invalid length. [ 91.923004][ T6787] netlink: 'syz.2.1397': attribute type 83 has an invalid length. [ 92.120723][ T6818] netlink: 'syz.4.1404': attribute type 11 has an invalid length. [ 92.226454][ T6836] netlink: 'syz.2.1406': attribute type 4 has an invalid length. [ 92.536231][ T6863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6863 comm=syz.0.1412 [ 92.634444][ T6876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6876 comm=syz.2.1419 [ 92.681266][ T6880] netlink: 'syz.0.1420': attribute type 11 has an invalid length. [ 93.901096][ T6949] loop4: detected capacity change from 0 to 1024 [ 93.943355][ T6949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.020403][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 94.020418][ T29] audit: type=1400 audit(1769828384.974:650): avc: denied { nlmsg_read } for pid=6948 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.088660][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.109888][ T29] audit: type=1400 audit(1769828385.064:651): avc: denied { write } for pid=6967 comm="syz.1.1456" path="socket:[15795]" dev="sockfs" ino=15795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.186645][ T29] audit: type=1326 audit(1769828385.124:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.210149][ T29] audit: type=1326 audit(1769828385.124:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.233584][ T29] audit: type=1326 audit(1769828385.124:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.256984][ T29] audit: type=1326 audit(1769828385.124:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.280402][ T29] audit: type=1326 audit(1769828385.124:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1db69b78e code=0x7ffc0000 [ 94.303977][ T29] audit: type=1326 audit(1769828385.124:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1db69b78e code=0x7ffc0000 [ 94.327587][ T29] audit: type=1326 audit(1769828385.124:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.351137][ T29] audit: type=1326 audit(1769828385.124:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.4.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1db6daeb9 code=0x7ffc0000 [ 94.952796][ T7004] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 95.000911][ T7009] __nla_validate_parse: 11 callbacks suppressed [ 95.000932][ T7009] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1470'. [ 95.175297][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 95.850844][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.866861][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.949815][ T7020] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 95.961501][ T7031] team0: entered promiscuous mode [ 95.966662][ T7031] team_slave_0: entered promiscuous mode [ 95.972427][ T7031] team_slave_1: entered promiscuous mode [ 95.978696][ T7032] lo: entered promiscuous mode [ 96.003921][ T1434] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.026529][ T1434] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.046360][ T7030] lo: left promiscuous mode [ 96.046500][ T7038] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 96.051015][ T7030] team0: left promiscuous mode [ 96.063507][ T7030] team_slave_0: left promiscuous mode [ 96.069123][ T7030] team_slave_1: left promiscuous mode [ 96.079225][ T1434] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.088455][ T1696] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.117445][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 96.133391][ T7044] loop0: detected capacity change from 0 to 512 [ 96.169443][ T7038] bond2: entered promiscuous mode [ 96.175056][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.204581][ T7053] loop4: detected capacity change from 0 to 1024 [ 96.211601][ T7043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.230416][ T7053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.247478][ T7048] bond2: (slave bridge2): making interface the new active one [ 96.255289][ T7048] bridge2: entered promiscuous mode [ 96.268339][ T7046] loop1: detected capacity change from 0 to 8192 [ 96.280791][ T7048] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 96.337640][ T7053] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 96.354851][ T7046] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 96.362112][ T7046] FAT-fs (loop1): Filesystem has been set read-only [ 96.368779][ T7053] EXT4-fs (loop4): Remounting filesystem read-only [ 96.368855][ T7053] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 96.409080][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.462024][ T7060] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1488'. [ 96.492222][ T7065] IPv6: Can't replace route, no match found [ 96.702037][ T7075] loop1: detected capacity change from 0 to 512 [ 96.806307][ T7075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.874951][ T7075] EXT4-fs (loop1): 1 truncate cleaned up [ 96.888681][ T7075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.020493][ T7085] loop0: detected capacity change from 0 to 1024 [ 97.078076][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.116669][ T7085] EXT4-fs error (device loop0): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.0.1497: path /278/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 97.184283][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.206730][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.216903][ T7093] loop3: detected capacity change from 0 to 512 [ 97.224600][ T7093] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.233798][ T7093] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 97.283565][ T7093] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 97.302084][ T7096] SELinux: failed to load policy [ 97.307148][ T7093] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 97.315506][ T7093] System zones: 0-2, 18-18, 34-35 [ 97.321304][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.367015][ T7093] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1500: bg 0: block 353: padding at end of block bitmap is not set [ 97.380594][ T7068] syz.4.1491 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 97.395530][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.1491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.395571][ T7068] Tainted: [W]=WARN [ 97.395580][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.395665][ T7068] Call Trace: [ 97.395675][ T7068] [ 97.395686][ T7068] __dump_stack+0x1d/0x30 [ 97.395719][ T7068] dump_stack_lvl+0x95/0xd0 [ 97.395750][ T7068] dump_stack+0x15/0x1b [ 97.395777][ T7068] dump_header+0x80/0x240 [ 97.395805][ T7068] oom_kill_process+0x295/0x350 [ 97.395910][ T7068] out_of_memory+0x97d/0xb80 [ 97.395967][ T7068] try_charge_memcg+0x62e/0xa10 [ 97.396001][ T7068] obj_cgroup_charge_pages+0x23/0xc0 [ 97.396090][ T7068] __memcg_kmem_charge_page+0x9e/0x170 [ 97.396162][ T7068] __alloc_frozen_pages_noprof+0x18a/0x350 [ 97.396281][ T7068] alloc_pages_mpol+0xb3/0x260 [ 97.396320][ T7068] alloc_pages_noprof+0x8f/0x130 [ 97.396383][ T7068] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 97.396437][ T7068] __kvmalloc_node_noprof+0x471/0x680 [ 97.396477][ T7068] ? ip_set_alloc+0x24/0x30 [ 97.396573][ T7068] ? ip_set_alloc+0x24/0x30 [ 97.396610][ T7068] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 97.396640][ T7068] ip_set_alloc+0x24/0x30 [ 97.396698][ T7068] hash_netiface_create+0x282/0x740 [ 97.396800][ T7068] ? __pfx_hash_netiface_create+0x10/0x10 [ 97.396844][ T7068] ip_set_create+0x3cf/0x970 [ 97.396880][ T7068] ? __nla_parse+0x40/0x60 [ 97.396900][ T7068] nfnetlink_rcv_msg+0x509/0x5d0 [ 97.397002][ T7068] netlink_rcv_skb+0x123/0x220 [ 97.397046][ T7068] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.397096][ T7068] nfnetlink_rcv+0x167/0x1720 [ 97.397138][ T7068] ? __kfree_skb+0x109/0x150 [ 97.397289][ T7068] ? nlmon_xmit+0x4f/0x60 [ 97.397333][ T7068] ? consume_skb+0x49/0x140 [ 97.397471][ T7068] ? nlmon_xmit+0x4f/0x60 [ 97.397505][ T7068] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 97.397631][ T7068] ? __dev_queue_xmit+0x139a/0x1f20 [ 97.397679][ T7068] ? __dev_queue_xmit+0x148/0x1f20 [ 97.397747][ T7068] ? ref_tracker_free+0x37d/0x3e0 [ 97.397848][ T7068] ? __netlink_deliver_tap+0x4dc/0x500 [ 97.397888][ T7068] netlink_unicast+0x5c0/0x690 [ 97.398015][ T7068] netlink_sendmsg+0x5c8/0x6f0 [ 97.398045][ T7068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.398072][ T7068] ____sys_sendmsg+0x5af/0x600 [ 97.398158][ T7068] ___sys_sendmsg+0x195/0x1e0 [ 97.398201][ T7068] __x64_sys_sendmsg+0xd4/0x160 [ 97.398225][ T7068] x64_sys_call+0x17ba/0x3000 [ 97.398293][ T7068] do_syscall_64+0xc0/0x2a0 [ 97.398337][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.398365][ T7068] RIP: 0033:0x7fb1db6daeb9 [ 97.398388][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.398413][ T7068] RSP: 002b:00007fb1da137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.398459][ T7068] RAX: ffffffffffffffda RBX: 00007fb1db955fa0 RCX: 00007fb1db6daeb9 [ 97.398474][ T7068] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 97.398492][ T7068] RBP: 00007fb1db748c1f R08: 0000000000000000 R09: 0000000000000000 [ 97.398510][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.398525][ T7068] R13: 00007fb1db956038 R14: 00007fb1db955fa0 R15: 00007ffdf45f3ab8 [ 97.398545][ T7068] [ 97.398552][ T7068] memory: usage 307200kB, limit 307200kB, failcnt 1858 [ 97.619261][ T7101] loop2: detected capacity change from 0 to 4096 [ 97.623853][ T7068] memory+swap: usage 307692kB, limit 9007199254740988kB, failcnt 0 [ 97.623875][ T7068] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 97.753374][ T7068] Memory cgroup stats for /syz4: [ 97.763830][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.825969][ T7068] cache 0 [ 97.829030][ T7068] rss 0 [ 97.831815][ T7068] shmem 0 [ 97.834806][ T7068] mapped_file 0 [ 97.838300][ T7068] dirty 0 [ 97.841268][ T7068] writeback 0 [ 97.844610][ T7068] workingset_refault_anon 177 [ 97.849330][ T7068] workingset_refault_file 825 [ 97.854038][ T7068] swap 503808 [ 97.857421][ T7068] swapcached 0 [ 97.860849][ T7068] pgpgin 54959 [ 97.864289][ T7068] pgpgout 54959 [ 97.867850][ T7068] pgfault 80020 [ 97.871372][ T7068] pgmajfault 131 [ 97.874975][ T7068] inactive_anon 0 [ 97.878625][ T7068] active_anon 0 [ 97.882186][ T7068] inactive_file 0 [ 97.885930][ T7068] active_file 0 [ 97.889413][ T7068] unevictable 0 [ 97.892895][ T7068] hierarchical_memory_limit 314572800 [ 97.898517][ T7068] hierarchical_memsw_limit 9223372036854771712 [ 97.904806][ T7068] total_cache 0 [ 97.908290][ T7068] total_rss 0 [ 97.911620][ T7068] total_shmem 0 [ 97.915164][ T7068] total_mapped_file 0 [ 97.919167][ T7068] total_dirty 0 [ 97.922654][ T7068] total_writeback 0 [ 97.926519][ T7068] total_workingset_refault_anon 177 [ 97.931825][ T7068] total_workingset_refault_file 825 [ 97.937075][ T7068] total_swap 503808 [ 97.940925][ T7068] total_swapcached 0 [ 97.944882][ T7068] total_pgpgin 54959 [ 97.948812][ T7068] total_pgpgout 54959 [ 97.952893][ T7068] total_pgfault 80020 [ 97.956939][ T7068] total_pgmajfault 131 [ 97.961042][ T7068] total_inactive_anon 0 [ 97.965273][ T7068] total_active_anon 0 [ 97.969279][ T7068] total_inactive_file 0 [ 97.973458][ T7068] total_active_file 0 [ 97.977494][ T7068] total_unevictable 0 [ 97.981552][ T7068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1491,pid=7067,uid=0 [ 97.996459][ T7068] Memory cgroup out of memory: Killed process 7067 (syz.4.1491) total-vm:96312kB, anon-rss:1204kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 98.016208][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.048572][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.204567][ T7123] loop2: detected capacity change from 0 to 512 [ 98.232441][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.249051][ T7123] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.326677][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.372900][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 98.510661][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 98.927624][ T6719] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 98.943957][ T7149] loop4: detected capacity change from 0 to 2048 [ 98.952619][ T6719] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.986994][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.000953][ T7151] SELinux: failed to load policy [ 99.098826][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.110297][ T7163] IPv6: addrconf: prefix option has invalid lifetime [ 99.274263][ T7171] netlink: 'syz.1.1532': attribute type 8 has an invalid length. [ 99.282192][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 99.294807][ T7171] bond0: entered promiscuous mode [ 99.299895][ T7171] bond_slave_0: entered promiscuous mode [ 99.305835][ T7171] bond_slave_1: entered promiscuous mode [ 99.313603][ T7171] gretap0: entered promiscuous mode [ 99.322014][ T7171] bond0: left promiscuous mode [ 99.326968][ T7171] bond_slave_0: left promiscuous mode [ 99.332525][ T7171] bond_slave_1: left promiscuous mode [ 99.340147][ T7171] gretap0: left promiscuous mode [ 99.346757][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 99.462219][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 99.462235][ T29] audit: type=1400 audit(1769828390.414:698): avc: denied { ioctl } for pid=7175 comm="syz.2.1534" path="socket:[16915]" dev="sockfs" ino=16915 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 99.510201][ T7182] loop3: detected capacity change from 0 to 1024 [ 99.530935][ T29] audit: type=1326 audit(1769828390.454:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.1537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1db6daeb9 code=0x0 [ 99.553744][ T29] audit: type=1400 audit(1769828390.454:700): avc: denied { write } for pid=7175 comm="syz.2.1534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 99.610584][ T29] audit: type=1400 audit(1769828390.484:701): avc: denied { watch watch_reads } for pid=7178 comm="syz.4.1537" path="/proc/726/task/727/fd" dev="proc" ino=16096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.613445][ T7182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.684552][ T7182] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 99.699985][ T7182] EXT4-fs (loop3): Remounting filesystem read-only [ 99.706640][ T7182] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 99.739551][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.928970][ T7214] loop1: detected capacity change from 0 to 128 [ 99.952869][ T7214] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 99.962883][ T7214] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.975311][ T7214] ext2 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.003768][ T29] audit: type=1400 audit(1769828390.944:702): avc: denied { rename } for pid=7213 comm="syz.1.1551" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.049500][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.091599][ T7219] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1553'. [ 100.118902][ T7221] loop2: detected capacity change from 0 to 128 [ 100.129108][ T7221] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.142159][ T7221] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.179399][ T29] audit: type=1400 audit(1769828391.134:703): avc: denied { setattr } for pid=7220 comm="syz.2.1554" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.227355][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.265758][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 100.293417][ T6719] kernel write not supported for file bpf-prog (pid: 6719 comm: kworker/0:14) [ 100.391863][ T7236] loop1: detected capacity change from 0 to 256 [ 100.409896][ T7236] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 100.417833][ T7236] FAT-fs (loop1): Filesystem has been set read-only [ 100.544554][ T7239] loop2: detected capacity change from 0 to 1024 [ 100.582025][ T7239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.598360][ T7239] EXT4-fs error (device loop2): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.2.1562: path /299/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 100.636951][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.771662][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 100.790843][ T29] audit: type=1400 audit(1769828391.744:704): avc: denied { module_load } for pid=7255 comm="syz.3.1568" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 100.885996][ T7264] loop1: detected capacity change from 0 to 1024 [ 100.910189][ T7264] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1572: bad orphan inode 134217728 [ 100.921724][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.113467][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.211217][ T7281] loop1: detected capacity change from 0 to 1024 [ 101.226096][ T7281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.241401][ T7281] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.1.1577: path /319/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 101.277497][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.315770][ T7287] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1578'. [ 101.385041][ T7294] loop1: detected capacity change from 0 to 512 [ 101.391759][ T7294] EXT4-fs: Ignoring removed i_version option [ 101.397889][ T7294] EXT4-fs: Ignoring removed bh option [ 101.416269][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.428994][ T7294] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.454906][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.473105][ T7299] loop1: detected capacity change from 0 to 128 [ 101.485394][ T7299] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.498032][ T7299] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.515326][ T29] audit: type=1400 audit(1769828392.474:705): avc: denied { rename } for pid=7298 comm="syz.1.1583" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.569527][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.589742][ T29] audit: type=1326 audit(1769828392.544:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211409aeb9 code=0x7ffc0000 [ 101.613236][ T29] audit: type=1326 audit(1769828392.544:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211409aeb9 code=0x7ffc0000 [ 101.832169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b762000: rx timeout, send abort [ 101.840519][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b762000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.911615][ T7321] netlink: 'syz.1.1593': attribute type 8 has an invalid length. [ 101.919484][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 101.952659][ T7321] bond0: entered promiscuous mode [ 101.957849][ T7321] bond_slave_0: entered promiscuous mode [ 101.963684][ T7321] bond_slave_1: entered promiscuous mode [ 101.985899][ T7321] gretap0: entered promiscuous mode [ 101.992132][ T7321] hsr2: entered promiscuous mode [ 102.007230][ T7321] netlink: 'syz.1.1593': attribute type 8 has an invalid length. [ 102.015125][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 102.102889][ T7336] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1599'. [ 102.181994][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 102.482566][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'. [ 102.568245][ T7364] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1610'. [ 102.596603][ T7367] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.612378][ T7367] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1611: bad orphan inode 131083 [ 102.635899][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.680384][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.836571][ T7386] bridge_slave_0: invalid flags given to default FDB implementation [ 102.873313][ T7388] syz.3.1619: attempt to access beyond end of device [ 102.873313][ T7388] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 102.914761][ T7392] IPv6: sit1: Disabled Multicast RS [ 103.018397][ T7398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.089728][ T7401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.109263][ T7401] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.124532][ T7401] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1624: bg 0: block 416: padding at end of block bitmap is not set [ 103.162167][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.218796][ T7407] netlink: 'syz.2.1626': attribute type 11 has an invalid length. [ 103.231607][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.244084][ T7407] netlink: 'syz.2.1626': attribute type 11 has an invalid length. [ 103.262551][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.284347][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.305981][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.386160][ T7417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.474515][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.505560][ T7416] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 103.548105][ T7416] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 103.560642][ T7416] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.560642][ T7416] [ 103.570368][ T7416] EXT4-fs (loop2): Total free blocks count 0 [ 103.576416][ T7416] EXT4-fs (loop2): Free/Dirty block details [ 103.582335][ T7416] EXT4-fs (loop2): free_blocks=2415919504 [ 103.588093][ T7416] EXT4-fs (loop2): dirty_blocks=320 [ 103.593315][ T7416] EXT4-fs (loop2): Block reservation details [ 103.599336][ T7416] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 104.362752][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 2 with error 28 [ 104.523082][ T7436] set_capacity_and_notify: 5 callbacks suppressed [ 104.523098][ T7436] loop4: detected capacity change from 0 to 256 [ 104.592971][ T7436] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 104.601038][ T7436] FAT-fs (loop4): Filesystem has been set read-only [ 104.767222][ T7443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.917924][ T7450] syz_tun (unregistering): left allmulticast mode [ 105.240228][ T7461] loop3: detected capacity change from 0 to 1024 [ 105.267077][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.292109][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.717042][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 105.717062][ T29] audit: type=1400 audit(1769828396.674:735): avc: denied { mounton } for pid=7476 comm="syz.4.1651" path=2F3334302FE91F7189591E9233614B dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 106.304750][ T7412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.397542][ T7500] loop3: detected capacity change from 0 to 512 [ 106.412310][ T29] audit: type=1326 audit(1769828397.364:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7502 comm="syz.0.1662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x0 [ 106.451302][ T7500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.505283][ T7500] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.539019][ T29] audit: type=1400 audit(1769828397.494:737): avc: denied { append } for pid=7502 comm="syz.0.1662" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.563560][ T7508] __nla_validate_parse: 10 callbacks suppressed [ 106.563579][ T7508] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 106.588760][ T7500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.649520][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 106.760840][ T7518] loop4: detected capacity change from 0 to 512 [ 106.779220][ T7518] EXT4-fs (loop4): #clusters per group too big: 270336 [ 106.804506][ T7522] loop2: detected capacity change from 0 to 128 [ 106.817667][ T29] audit: type=1400 audit(1769828397.774:738): avc: denied { ioctl } for pid=7517 comm="syz.4.1668" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.034601][ T7539] netlink: 'syz.2.1677': attribute type 29 has an invalid length. [ 107.043242][ T7539] netlink: 'syz.2.1677': attribute type 29 has an invalid length. [ 107.051859][ T7539] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1677'. [ 107.120375][ T7545] loop4: detected capacity change from 0 to 512 [ 107.161362][ T7545] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1680: iget: bad i_size value: 38620345925642 [ 107.185403][ T7545] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1680: couldn't read orphan inode 15 (err -117) [ 107.220754][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 107.229969][ T7545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.230313][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 107.317512][ T29] audit: type=1326 audit(1769828398.274:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 107.341022][ T29] audit: type=1326 audit(1769828398.274:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 107.364558][ T29] audit: type=1326 audit(1769828398.274:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 107.391989][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.401598][ T29] audit: type=1326 audit(1769828398.344:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 107.424985][ T29] audit: type=1400 audit(1769828398.344:743): avc: denied { bind } for pid=7564 comm="syz.0.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.444673][ T29] audit: type=1326 audit(1769828398.344:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c779faeb9 code=0x7ffc0000 [ 107.718179][ T7582] SELinux: ebitmap: empty map [ 107.723136][ T7582] SELinux: failed to load policy [ 108.106663][ T7613] loop3: detected capacity change from 0 to 512 [ 108.116957][ T7613] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1705: corrupted in-inode xattr: e_value size too large [ 108.133761][ T7613] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1705: couldn't read orphan inode 15 (err -117) [ 108.149375][ T7613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.241216][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.290754][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.307367][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.331725][ T7623] loop4: detected capacity change from 0 to 4096 [ 108.345885][ T7623] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.352499][ T7623] EXT4-fs: test_dummy_encryption option not supported [ 108.434147][ T7630] loop4: detected capacity change from 0 to 8192 [ 108.445804][ T7630] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.517970][ T7634] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.764647][ T7645] loop0: detected capacity change from 0 to 1024 [ 108.780257][ T7645] EXT4-fs: Ignoring removed oldalloc option [ 108.786453][ T7645] EXT4-fs: Ignoring removed bh option [ 108.848283][ T7645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.686873][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.786808][ T7670] loop3: detected capacity change from 0 to 1024 [ 109.816767][ T7670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.829283][ T7670] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.843980][ T7670] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1728: lblock 3 mapped to illegal pblock 3 (length 3) [ 109.858431][ T7670] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 109.870866][ T7670] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.870866][ T7670] [ 109.881337][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'. [ 109.921921][ T7670] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1728: bg 0: block 112: padding at end of block bitmap is not set [ 109.957964][ T7670] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1728: lblock 3 mapped to illegal pblock 3 (length 1) [ 109.973059][ T7670] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1728: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.105173][ T7670] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1728: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.127639][ T7675] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1728: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 110.146253][ T7675] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem [ 110.146480][ T7678] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1728: lblock 0 mapped to illegal pblock 0 (length 1) [ 110.182860][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.280090][ T7681] loop3: detected capacity change from 0 to 256 [ 110.296942][ T7563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.666852][ T7710] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1737'. [ 110.922823][ T7717] loop3: detected capacity change from 0 to 1024 [ 110.945795][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 110.989276][ T7717] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1738: bad orphan inode 134217728 [ 111.002397][ T7717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.137956][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 111.221427][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1742'. [ 111.625747][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.707444][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 111.716702][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 111.716719][ T29] audit: type=1400 audit(1769828402.664:751): avc: denied { bind } for pid=7816 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.794183][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'. [ 112.104452][ T29] audit: type=1400 audit(1769828403.054:752): avc: denied { associate } for pid=7811 comm="syz.0.1747" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.166294][ T7840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1758'. [ 112.240358][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 112.508321][ T7858] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 112.563215][ T7853] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 112.563340][ T29] audit: type=1400 audit(1769828403.514:753): avc: denied { relabelfrom } for pid=7855 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.593132][ T29] audit: type=1400 audit(1769828403.514:754): avc: denied { relabelto } for pid=7855 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.614240][ T29] audit: type=1326 audit(1769828403.564:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x0 [ 112.736221][ T7868] netlink: 'syz.1.1769': attribute type 4 has an invalid length. [ 112.780391][ T7869] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 112.806661][ T7872] netlink: 'syz.1.1769': attribute type 4 has an invalid length. [ 112.825384][ T7869] SELinux: failed to load policy [ 112.898830][ T7878] netlink: 'syz.3.1773': attribute type 4 has an invalid length. [ 112.928641][ T7880] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1774'. [ 112.958538][ T7878] netlink: 'syz.3.1773': attribute type 4 has an invalid length. [ 112.982475][ T7882] loop0: detected capacity change from 0 to 128 [ 113.011612][ T7886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1777'. [ 113.088414][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 113.104222][ T7882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.149827][ T7882] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.275958][ T7896] batadv_slave_1: entered promiscuous mode [ 113.338222][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.385933][ T7895] batadv_slave_1: left promiscuous mode [ 113.539332][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 113.581213][ T29] audit: type=1326 audit(1769828404.524:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 113.604645][ T29] audit: type=1326 audit(1769828404.534:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 113.628004][ T29] audit: type=1326 audit(1769828404.534:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 113.651333][ T29] audit: type=1326 audit(1769828404.534:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 113.674801][ T29] audit: type=1326 audit(1769828404.534:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edce5aeb9 code=0x7ffc0000 [ 113.910264][ T7928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1793'. [ 113.969184][ T7930] loop4: detected capacity change from 0 to 512 [ 113.976403][ T7930] EXT4-fs: Ignoring removed bh option [ 113.982379][ T7930] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 113.996422][ T7930] EXT4-fs (loop4): 1 truncate cleaned up [ 114.002551][ T7930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.098878][ T7927] syzkaller1: entered promiscuous mode [ 114.104423][ T7927] syzkaller1: entered allmulticast mode [ 114.193171][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.263557][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 114.543256][ T7944] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 114.800044][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.825245][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.291192][ T7979] loop1: detected capacity change from 0 to 128 [ 115.337919][ T7788] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.508217][ T7992] netlink: 'syz.4.1819': attribute type 5 has an invalid length. [ 116.003251][ T8014] loop3: detected capacity change from 0 to 8192 [ 116.087981][ T8019] loop2: detected capacity change from 0 to 128 [ 116.111800][ T8019] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.201636][ T8025] program syz.0.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.366939][ T8036] loop2: detected capacity change from 0 to 7 [ 116.384687][ T8036] loop2: [ 116.414017][ T8042] loop4: detected capacity change from 0 to 1024 [ 116.427846][ T8042] EXT4-fs: Ignoring removed oldalloc option [ 116.433899][ T8042] EXT4-fs: Ignoring removed bh option [ 116.486620][ T8042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.861591][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 116.906563][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.913684][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.921328][ T8051] bridge_slave_0: entered allmulticast mode [ 116.928161][ T8051] bridge_slave_0: entered promiscuous mode [ 116.935426][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.942520][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.950125][ T8051] bridge_slave_1: entered allmulticast mode [ 116.956936][ T8051] bridge_slave_1: entered promiscuous mode [ 116.976475][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.987607][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.009271][ T8051] team0: Port device team_slave_0 added [ 117.015964][ T8051] team0: Port device team_slave_1 added [ 117.033588][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.040626][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.066662][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.078105][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.085108][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.111128][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.160667][ T8051] hsr_slave_0: entered promiscuous mode [ 117.167036][ T8051] hsr_slave_1: entered promiscuous mode [ 117.215190][ T8067] loop0: detected capacity change from 0 to 512 [ 117.223426][ T8042] ================================================================== [ 117.231587][ T8042] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 117.238851][ T8042] [ 117.241207][ T8042] write to 0xffff888107a325cc of 4 bytes by task 8049 on cpu 1: [ 117.248867][ T8042] __xa_set_mark+0x172/0x1a0 [ 117.253510][ T8042] __folio_mark_dirty+0x383/0x490 [ 117.258597][ T8042] mark_buffer_dirty+0x11e/0x200 [ 117.263579][ T8042] block_write_end+0x12d/0x210 [ 117.268383][ T8042] ext4_write_end+0x133/0x730 [ 117.273112][ T8042] ext4_da_write_end+0x65/0x800 [ 117.277998][ T8042] generic_perform_write+0x311/0x490 [ 117.283330][ T8042] ext4_buffered_write_iter+0x1ee/0x3c0 [ 117.288930][ T8042] ext4_file_write_iter+0x380/0xf70 [ 117.294258][ T8042] iter_file_splice_write+0x6bc/0xa80 [ 117.299688][ T8042] direct_splice_actor+0x156/0x2a0 [ 117.304840][ T8042] splice_direct_to_actor+0x311/0x670 [ 117.310252][ T8042] do_splice_direct+0x119/0x1a0 [ 117.315154][ T8042] do_sendfile+0x382/0x650 [ 117.319617][ T8042] __x64_sys_sendfile64+0x105/0x150 [ 117.324859][ T8042] x64_sys_call+0x2db1/0x3000 [ 117.329582][ T8042] do_syscall_64+0xc0/0x2a0 [ 117.334137][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.340066][ T8042] [ 117.342410][ T8042] read to 0xffff888107a325cc of 4 bytes by task 8042 on cpu 0: [ 117.349982][ T8042] xas_find_marked+0x5d7/0x620 [ 117.354798][ T8042] filemap_get_folios_tag+0xfa/0x510 [ 117.360130][ T8042] file_write_and_wait_range+0x20c/0x2f0 [ 117.365446][ T8067] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.365811][ T8042] generic_buffers_fsync_noflush+0x45/0x130 [ 117.379899][ T8042] ext4_sync_file+0x1aa/0x680 [ 117.384708][ T8042] vfs_fsync_range+0x10d/0x130 [ 117.389523][ T8042] ext4_buffered_write_iter+0x34f/0x3c0 [ 117.395134][ T8042] ext4_file_write_iter+0x380/0xf70 [ 117.400396][ T8042] iter_file_splice_write+0x6bc/0xa80 [ 117.405804][ T8042] direct_splice_actor+0x156/0x2a0 [ 117.410977][ T8042] splice_direct_to_actor+0x311/0x670 [ 117.414979][ T6508] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.416387][ T8042] do_splice_direct+0x119/0x1a0 [ 117.427350][ T8042] do_sendfile+0x382/0x650 [ 117.431802][ T8042] __x64_sys_sendfile64+0x105/0x150 [ 117.437043][ T8042] x64_sys_call+0x2db1/0x3000 [ 117.441788][ T8042] do_syscall_64+0xc0/0x2a0 [ 117.446329][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.452256][ T8042] [ 117.454596][ T8042] value changed: 0x04000021 -> 0x0e000021 [ 117.460333][ T8042] [ 117.462672][ T8042] Reported by Kernel Concurrency Sanitizer on: [ 117.468892][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.4.1840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.480215][ T8042] Tainted: [W]=WARN [ 117.484064][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.494146][ T8042] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 117.555373][ T8067] EXT4-fs (loop0): 1 truncate cleaned up [ 117.561527][ T8067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.579073][ T8051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.587266][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.598636][ T8051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.623163][ T8051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.674920][ T8051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.824377][ T7773] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.917759][ T7773] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.008865][ T7773] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.057217][ T7773] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.135306][ T8069] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.176302][ T7773] bridge_slave_1: left allmulticast mode [ 118.182066][ T7773] bridge_slave_1: left promiscuous mode [ 118.187854][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.195714][ T7773] bridge_slave_0: left allmulticast mode [ 118.201372][ T7773] bridge_slave_0: left promiscuous mode [ 118.207173][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.336842][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.347269][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.356495][ T7773] bond0 (unregistering): Released all slaves [ 118.364809][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 118.364851][ T29] audit: type=1400 audit(1769828409.324:803): avc: denied { read } for pid=3041 comm="dhcpcd" name="n25" dev="tmpfs" ino=9171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.392597][ T29] audit: type=1400 audit(1769828409.324:804): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=9171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.416193][ T29] audit: type=1400 audit(1769828409.324:805): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=9171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.442084][ T29] audit: type=1400 audit(1769828409.394:806): avc: denied { read open } for pid=8072 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.467893][ T29] audit: type=1400 audit(1769828409.394:807): avc: denied { getattr } for pid=8072 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.495013][ T7773] hsr_slave_0: left promiscuous mode [ 118.500808][ T7773] hsr_slave_1: left promiscuous mode [ 118.506743][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.514142][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.521831][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.529287][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.540705][ T7773] veth1_macvtap: left promiscuous mode [ 118.546289][ T7773] veth0_macvtap: left promiscuous mode [ 118.551807][ T7773] veth1_vlan: left promiscuous mode [ 118.557167][ T7773] veth0_vlan: left promiscuous mode [ 118.581443][ T29] audit: type=1400 audit(1769828409.534:808): avc: denied { add_name } for pid=8071 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.603938][ T29] audit: type=1400 audit(1769828409.534:809): avc: denied { create } for pid=8071 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.630592][ T29] audit: type=1400 audit(1769828409.584:810): avc: denied { write } for pid=8071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=9176 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.656993][ T29] audit: type=1400 audit(1769828409.584:811): avc: denied { append } for pid=8071 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=9176 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.696981][ T29] audit: type=1400 audit(1769828409.654:812): avc: denied { remove_name } for pid=8082 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=9176 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.723702][ T7773] team0 (unregistering): Port device team_slave_1 removed [ 118.733920][ T7773] team0 (unregistering): Port device team_slave_0 removed [ 119.175310][ T7773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.242443][ T7773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.278531][ T7773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.326602][ T7773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.603051][ T7773] bridge_slave_1: left allmulticast mode [ 119.608844][ T7773] bridge_slave_1: left promiscuous mode [ 119.614694][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.624234][ T7773] bridge_slave_0: left allmulticast mode [ 119.630005][ T7773] bridge_slave_0: left promiscuous mode [ 119.635812][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.645621][ T7773] bridge_slave_1: left allmulticast mode [ 119.651308][ T7773] bridge_slave_1: left promiscuous mode [ 119.657231][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.668468][ T7773] bridge_slave_0: left allmulticast mode [ 119.674149][ T7773] bridge_slave_0: left promiscuous mode [ 119.679859][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.688701][ T7773] bridge_slave_1: left allmulticast mode [ 119.694376][ T7773] bridge_slave_1: left promiscuous mode [ 119.700249][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.708427][ T7773] bridge_slave_0: left allmulticast mode [ 119.714111][ T7773] bridge_slave_0: left promiscuous mode [ 119.719931][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.797764][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.807098][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.816422][ T7773] bond0 (unregistering): Released all slaves [ 119.837670][ T7773] gretap0 (unregistering): left promiscuous mode [ 119.876837][ T7773] bond0 (unregistering): left promiscuous mode [ 119.883075][ T7773] bond_slave_0: left promiscuous mode [ 119.888648][ T7773] bond_slave_1: left promiscuous mode [ 119.896390][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.906412][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.916250][ T7773] bond0 (unregistering): Released all slaves [ 119.996976][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.006779][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.016323][ T7773] bond0 (unregistering): Released all slaves [ 120.042917][ T7773] tipc: Disabling bearer [ 120.048385][ T7773] tipc: Left network mode [ 120.066984][ T7773] IPVS: stopping backup sync thread 7944 ... [ 120.073182][ T7773] IPVS: stopping master sync thread 5617 ... [ 120.083179][ T7773] hsr_slave_0: left promiscuous mode [ 120.089152][ T7773] hsr_slave_1: left promiscuous mode [ 120.095158][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.102752][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.110855][ T7773] macvlan0: left promiscuous mode [ 120.116515][ T7773] dummy0: left promiscuous mode [ 120.123506][ T7773] hsr_slave_0: left promiscuous mode [ 120.129442][ T7773] hsr_slave_1: left promiscuous mode [ 120.135142][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.142561][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.150124][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.157584][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.167451][ T7773] hsr_slave_0: left promiscuous mode [ 120.173203][ T7773] hsr_slave_1: left promiscuous mode [ 120.179111][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.186788][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.199893][ T7773] veth1_macvtap: left promiscuous mode [ 120.205544][ T7773] veth0_macvtap: left promiscuous mode [ 120.211161][ T7773] veth1_vlan: left allmulticast mode [ 120.216610][ T7773] veth1_vlan: left promiscuous mode [ 120.222165][ T7773] veth0_vlan: left promiscuous mode [ 120.296142][ T7773] team0 (unregistering): Port device team_slave_1 removed [ 120.306379][ T7773] team0 (unregistering): Port device team_slave_0 removed [ 120.364673][ T7773] team0 (unregistering): Port device team_slave_1 removed [ 120.374936][ T7773] team0 (unregistering): Port device team_slave_0 removed [ 120.433769][ T7773] team0 (unregistering): Port device team_slave_1 removed [ 120.444536][ T7773] team0 (unregistering): Port device team_slave_0 removed [ 121.022478][ T7773] IPVS: stop unused estimator thread 0...