last executing test programs: 1m37.458565476s ago: executing program 4 (id=5680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe0600020066b5000008000a000100000008001800ac1414aa06001b004e24000006001c00ff07000006001a"], 0x64}}, 0x0) 1m37.415356841s ago: executing program 4 (id=5685): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x3, 0x1}}, 0x20) 1m37.382033946s ago: executing program 4 (id=5687): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 1m37.375403527s ago: executing program 4 (id=5688): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x200000) 1m37.359341108s ago: executing program 4 (id=5690): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m37.331903832s ago: executing program 4 (id=5692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m22.311512547s ago: executing program 32 (id=5692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.497165752s ago: executing program 3 (id=9851): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @private=0xa010100}}}, 0x118) 19.495420633s ago: executing program 3 (id=9854): r0 = io_uring_setup(0x2625, &(0x7f0000000240)={0x0, 0xfffffffd, 0x800, 0x1, 0x4000159}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40903, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 19.379943717s ago: executing program 3 (id=9861): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x80003, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x13f, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 19.321157205s ago: executing program 3 (id=9865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) 19.292772959s ago: executing program 3 (id=9867): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 19.246037585s ago: executing program 3 (id=9870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) 4.012245087s ago: executing program 33 (id=9870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) 1.779193108s ago: executing program 1 (id=10355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 1.756251711s ago: executing program 1 (id=10356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10) writev(r0, &(0x7f0000000040), 0x2) 1.681815931s ago: executing program 1 (id=10360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) 1.553299417s ago: executing program 1 (id=10364): removexattr(0x0, &(0x7f00000002c0)=@known='trusted.overlay.redirect\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf252001000000000000000000000000000100000000000000000000000000000001000000004e2300000a"], 0xb8}}, 0x0) 1.500890934s ago: executing program 1 (id=10375): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000340)=[{r0, 0x629}], 0x1, 0x400) 606.12369ms ago: executing program 1 (id=10388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 350.246424ms ago: executing program 6 (id=10414): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 270.233765ms ago: executing program 6 (id=10411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 251.905087ms ago: executing program 2 (id=10413): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 233.693679ms ago: executing program 6 (id=10416): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) 225.13131ms ago: executing program 5 (id=10417): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c0500000000000000207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 174.354827ms ago: executing program 0 (id=10418): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1a4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x15c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1a4}}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 174.224436ms ago: executing program 6 (id=10419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 174.117527ms ago: executing program 5 (id=10420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121b01, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0xffffffff, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116dddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xa04c, 0x1, 0xfffffffd, 0xfff, 0x7, "53af070900"}) 174.043897ms ago: executing program 2 (id=10421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mq_unlink(0x0) 153.81242ms ago: executing program 0 (id=10422): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2a, 0x3ff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x88) 143.526241ms ago: executing program 2 (id=10423): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 133.820392ms ago: executing program 6 (id=10424): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x4081, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 126.309673ms ago: executing program 5 (id=10425): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) syz_open_pts(r0, 0x0) 109.315235ms ago: executing program 0 (id=10426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="769363e4128b", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0xea, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) 109.192695ms ago: executing program 2 (id=10427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, 0x0, 0x0, 0x4}, 0x1a) 88.293178ms ago: executing program 2 (id=10428): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) 88.194048ms ago: executing program 5 (id=10429): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 76.80455ms ago: executing program 0 (id=10430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 66.057581ms ago: executing program 6 (id=10431): syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x50) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r0) 58.184652ms ago: executing program 5 (id=10432): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 32.809435ms ago: executing program 2 (id=10433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1a4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x15c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf8, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1a4}}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 31.802305ms ago: executing program 0 (id=10443): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x47e3, &(0x7f0000000200)={0x0, 0x559, 0x0, 0x3, 0x236}) 624.65µs ago: executing program 5 (id=10434): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x10}}], 0x30, 0x20000000}}], 0x1, 0x0) 0s ago: executing program 0 (id=10435): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121b01, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0xffffffff, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116dddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)={0xa04c, 0x1, 0xfffffffd, 0xfff, 0x7, "53af070900"}) kernel console output (not intermixed with test programs): sing a deprecated SCSI ioctl, please convert it to SG_IO [ 184.352760][T20179] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 184.479285][T20200] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 184.597311][T20214] loop3: detected capacity change from 0 to 128 [ 184.756287][T20237] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.876514][T20261] loop2: detected capacity change from 0 to 512 [ 184.884206][T20261] EXT4-fs: inline encryption not supported [ 184.892106][T20261] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 184.900580][T20261] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7744: invalid indirect mapped block 2683928664 (level 1) [ 184.916431][T20261] EXT4-fs (loop2): 1 truncate cleaned up [ 184.972828][T20273] tmpfs: Bad value for 'mpol' [ 185.311912][T20324] loop3: detected capacity change from 0 to 2048 [ 185.344713][T20332] netlink: 'syz.0.7778': attribute type 32 has an invalid length. [ 185.358411][T20335] sd 0:0:1:0: device reset [ 185.365763][T20332] bond1: option coupled_control: invalid value (17) [ 185.375756][T20332] bond1 (unregistering): Released all slaves [ 185.382520][T20324] loop3: p1 < > p4 [ 185.391482][T20324] loop3: p4 size 8388608 extends beyond EOD, truncated [ 185.440149][T20345] loop2: detected capacity change from 0 to 512 [ 185.447353][T20345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.447422][T20345] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.459021][T20347] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 185.488222][T20345] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.7785: Allocating blocks 41-42 which overlap fs metadata [ 185.488899][T20345] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.7785: Allocating blocks 41-42 which overlap fs metadata [ 185.536496][T20353] loop7: detected capacity change from 0 to 7 [ 185.544804][T20345] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7785: Failed to acquire dquot type 1 [ 185.557684][T20345] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 185.558016][T20353] Buffer I/O error on dev loop7, logical block 0, async page read [ 185.572323][T20345] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.7785: corrupted inode contents [ 185.572490][T20345] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.7785: mark_inode_dirty error [ 185.572740][T20345] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.7785: corrupted inode contents [ 185.572885][T20345] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.7785: mark_inode_dirty error [ 185.573044][T20345] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.7785: corrupted inode contents [ 185.573372][T20345] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 185.647882][T20345] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.7785: corrupted inode contents [ 185.660535][T20345] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.7785: mark_inode_dirty error [ 185.667939][T20353] Buffer I/O error on dev loop7, logical block 0, async page read [ 185.672241][T20345] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 185.679588][T20353] loop7: unable to read partition table [ 185.688840][T20345] EXT4-fs (loop2): 1 truncate cleaned up [ 185.708117][T20353] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 185.827246][T20382] netlink: 'syz.1.7802': attribute type 1 has an invalid length. [ 185.846476][T20385] macvlan2: entered promiscuous mode [ 185.915047][T20397] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 185.924238][T20400] loop2: detected capacity change from 0 to 512 [ 185.950802][T20400] ext4 filesystem being mounted at /1636/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.965865][T20407] sg_write: data in/out 393180/10 bytes for SCSI command 0xff-- guessing data in; [ 185.965865][T20407] program syz.5.7814 not setting count and/or reply_len properly [ 186.099467][T20428] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7823: iget: bad extended attribute block 1 [ 186.134877][T20428] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7823: couldn't read orphan inode 15 (err -117) [ 186.309468][T20452] __nla_validate_parse: 11 callbacks suppressed [ 186.309483][T20452] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7833'. [ 186.445802][T20472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.454567][T20472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.935073][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7867'. [ 186.944028][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7867'. [ 187.027372][T20536] team0: Device gtp0 is of different type [ 187.129207][T20554] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 187.142433][T20556] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.142794][T20556] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.178162][T20560] xt_l2tp: unknown flags: 10 [ 187.206007][ T1019] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.245120][T20566] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 187.263537][T20571] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.7891'. [ 187.276433][T20566] bond1 (unregistering): Released all slaves [ 187.282969][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7890'. [ 187.292049][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7890'. [ 187.314603][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 187.314619][ T29] audit: type=1400 audit(2000000005.150:1911): avc: denied { bind } for pid=20577 comm="syz.1.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.381811][T20582] EXT4-fs (loop5): too many log groups per flexible block group [ 187.390179][T20582] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 187.396976][T20582] EXT4-fs (loop5): mount failed [ 187.453001][T20590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7899: bg 0: block 248: padding at end of block bitmap is not set [ 187.468633][T20590] Quota error (device loop2): write_blk: dquota write failed [ 187.476041][T20590] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 187.483781][ T29] audit: type=1400 audit(2000000005.310:1912): avc: denied { getattr } for pid=20596 comm="syz.5.7901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.507721][T20590] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7899: Failed to acquire dquot type 1 [ 187.539217][T20590] EXT4-fs (loop2): 1 truncate cleaned up [ 187.545300][T20590] ext4 filesystem being mounted at /1662/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.583441][T20590] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.7899: deleted inode referenced: 12 [ 187.689686][T20625] netlink: 182 bytes leftover after parsing attributes in process `syz.3.7915'. [ 187.714436][ T29] audit: type=1400 audit(2000000005.550:1913): avc: denied { write } for pid=20627 comm="syz.2.7916" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 187.744399][T20630] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7917: inode has both inline data and extents flags [ 187.758727][T20630] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7917: couldn't read orphan inode 15 (err -117) [ 187.819027][T20641] EXT4-fs: Ignoring removed i_version option [ 187.826235][T20643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7923'. [ 187.842749][T20641] ext4 filesystem being mounted at /1668/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.872211][ T29] audit: type=1400 audit(2000000005.710:1914): avc: denied { ioctl } for pid=20640 comm="syz.2.7922" path="/1668/bus/memory.current" dev="loop2" ino=18 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.043523][T20670] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.7935'. [ 188.053719][T20670] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.7935'. [ 188.114314][ T29] audit: type=1400 audit(2000000005.950:1915): avc: denied { setattr } for pid=20677 comm="syz.5.7939" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 188.174956][ T29] audit: type=1400 audit(2000000006.010:1916): avc: denied { write } for pid=20685 comm="syz.3.7943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.206088][T20688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.219619][T20688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.278025][ T10] usb usb8-port7: attempt power cycle [ 188.460584][ T29] audit: type=1400 audit(2000000006.300:1917): avc: denied { load_policy } for pid=20715 comm="syz.2.7956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.481007][T20716] SELinux: failed to load policy [ 189.019596][ T29] audit: type=1400 audit(2000000006.860:1918): avc: denied { read } for pid=20747 comm="syz.3.7972" name="file0" dev="tmpfs" ino=8364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.640553][T20785] set_capacity_and_notify: 8 callbacks suppressed [ 189.640600][T20785] loop2: detected capacity change from 0 to 2048 [ 189.693823][T20785] ext4 filesystem being mounted at /1708/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.778405][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.815927][T20792] loop2: detected capacity change from 0 to 512 [ 189.895226][T20792] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 189.923960][T20792] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.7992: iget: bad i_size value: 12154757448730 [ 189.944783][T20792] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7992: couldn't read orphan inode 13 (err -117) [ 189.980398][T20792] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 189.995358][T20792] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 190.098350][ T10] usb usb8-port7: unable to enumerate USB device [ 190.405287][T20852] loop2: detected capacity change from 0 to 512 [ 190.416204][T20852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.429329][T20852] EXT4-fs (loop2): 1 orphan inode deleted [ 190.435087][T20852] EXT4-fs (loop2): 1 truncate cleaned up [ 190.470818][T20863] netlink: 'syz.3.8025': attribute type 2 has an invalid length. [ 190.547899][T20878] loop3: detected capacity change from 0 to 512 [ 190.559812][T20878] ext4 filesystem being mounted at /1654/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.599162][T20889] loop2: detected capacity change from 0 to 764 [ 190.606197][T20889] rock: directory entry would overflow storage [ 190.612520][T20889] rock: sig=0x4654, size=5, remaining=4 [ 190.909047][T20937] loop3: detected capacity change from 0 to 1024 [ 191.133892][T20978] loop5: detected capacity change from 0 to 512 [ 191.149753][T20978] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.288918][T21002] tipc: Enabling of bearer rejected, media not registered [ 191.375922][T21018] team0: Port device dummy0 removed [ 191.382770][T21018] bridge_slave_0: left allmulticast mode [ 191.388543][T21018] bridge_slave_0: left promiscuous mode [ 191.394290][T21018] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.402821][T21018] bridge_slave_1: left allmulticast mode [ 191.409503][T21018] bridge_slave_1: left promiscuous mode [ 191.415237][T21018] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.424718][T21018] bond0: (slave bond_slave_0): Releasing backup interface [ 191.432903][T21018] bond_slave_0: left promiscuous mode [ 191.439582][T21018] bond_slave_0: left allmulticast mode [ 191.446104][T21018] bond0: (slave bond_slave_1): Releasing backup interface [ 191.454704][T21018] bond_slave_1: left promiscuous mode [ 191.460326][T21018] bond_slave_1: left allmulticast mode [ 191.466296][T21018] team_slave_0: left promiscuous mode [ 191.472659][T21018] team_slave_0: left allmulticast mode [ 191.478693][T21018] team0: Port device team_slave_0 removed [ 191.485236][T21018] team_slave_1: left promiscuous mode [ 191.490755][T21018] team_slave_1: left allmulticast mode [ 191.496711][T21018] team0: Port device team_slave_1 removed [ 191.503873][T21018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.511511][T21018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.519065][T21018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.948695][ T3481] usb usb8-port7: attempt power cycle [ 192.217407][T21054] loop2: detected capacity change from 0 to 512 [ 192.224945][T21054] EXT4-fs: Ignoring removed nobh option [ 192.232047][T21054] EXT4-fs (loop2): orphan cleanup on readonly fs [ 192.238960][T21054] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.8114: ea_inode file size=4 entry size=6 [ 192.252793][T21054] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.265951][T21054] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8114: corrupted inode contents [ 192.278815][T21054] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.8114: mark_inode_dirty error [ 192.290396][T21054] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8114: corrupted inode contents [ 192.302563][T21054] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.8114: mark_inode_dirty error [ 192.314732][T21054] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.8114: mark inode dirty (error -117) [ 192.327437][T21054] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 192.336539][T21054] EXT4-fs (loop2): 1 orphan inode deleted [ 192.342775][T21054] EXT4-fs mount: 36 callbacks suppressed [ 192.342787][T21054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.370118][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.392258][T21057] bridge4: entered promiscuous mode [ 192.397577][T21057] bridge4: entered allmulticast mode [ 192.459342][T21063] veth1_macvtap: left promiscuous mode [ 192.464981][T21063] macsec0: entered allmulticast mode [ 192.474279][T21063] veth1_macvtap: entered promiscuous mode [ 192.480182][T21063] veth1_macvtap: entered allmulticast mode [ 192.486184][T21063] macsec0: left allmulticast mode [ 192.491466][T21063] veth1_macvtap: left allmulticast mode [ 192.497277][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 192.497295][ T29] audit: type=1400 audit(2000000010.320:1967): avc: denied { mount } for pid=21064 comm="syz.2.8119" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.535918][ T29] audit: type=1400 audit(2000000010.340:1968): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.556461][ T29] audit: type=1326 audit(2000000010.370:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 192.579990][ T29] audit: type=1326 audit(2000000010.370:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 192.603574][ T29] audit: type=1326 audit(2000000010.370:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 192.627130][ T29] audit: type=1326 audit(2000000010.370:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d1579f783 code=0x7ffc0000 [ 192.650864][T21067] loop2: detected capacity change from 0 to 8192 [ 192.659279][ T29] audit: type=1326 audit(2000000010.400:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d1579e1ff code=0x7ffc0000 [ 192.682660][ T29] audit: type=1326 audit(2000000010.470:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d1579f7d7 code=0x7ffc0000 [ 192.706065][ T29] audit: type=1326 audit(2000000010.470:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d1579df90 code=0x7ffc0000 [ 192.730584][ T29] audit: type=1326 audit(2000000010.490:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.2.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d1579f34b code=0x7ffc0000 [ 192.754787][T21067] loop2: p1 p2 p3 p4 [ 192.763051][T21071] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 192.770886][T21067] loop2: p1 size 196608 extends beyond EOD, truncated [ 192.794257][T21067] loop2: p2 start 164919041 is beyond EOD, truncated [ 192.801849][T21067] loop2: p3 size 66846464 extends beyond EOD, truncated [ 192.810559][T21067] loop2: p4 size 37048832 extends beyond EOD, truncated [ 192.915115][T21087] loop3: detected capacity change from 0 to 764 [ 192.922543][T21087] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 192.953929][T21090] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8132: invalid indirect mapped block 256 (level 2) [ 192.992588][T21090] EXT4-fs (loop5): 2 truncates cleaned up [ 192.999929][T21090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.019892][T21096] EXT4-fs: Ignoring removed bh option [ 193.025421][T21096] EXT4-fs: inline encryption not supported [ 193.037641][T21096] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.055589][T21096] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.8134: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.071146][T21096] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.8134: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.085525][T21096] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8134: Failed to acquire dquot type 0 [ 193.087220][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.106750][T21096] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 193.116733][T21096] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.8134: mark_inode_dirty error [ 193.128288][T21096] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 193.139723][T21096] EXT4-fs (loop2): 1 orphan inode deleted [ 193.145975][T21096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.158804][ T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.175478][T21104] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 193.182786][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 193.213709][ T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm kworker/u8:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.228300][ T31] EXT4-fs error (device loop2): ext4_write_dquot:6966: comm kworker/u8:1: Failed to commit dquot type 0 [ 193.248772][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.257944][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 193.279515][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 193.289641][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 193.303432][T21112] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 193.350297][T21122] tc_dump_action: action bad kind [ 193.488469][T21124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.547559][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.777409][T21159] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 193.798602][T21159] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 193.800793][T21157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.807147][T21159] Symlink component flag not implemented [ 193.822201][ T3481] usb usb8-port7: unable to enumerate USB device [ 193.824949][T21159] Symlink component flag not implemented [ 193.846573][T21159] Symlink component flag not implemented (7) [ 193.852695][T21159] Symlink component flag not implemented (116) [ 193.884195][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.966302][T21169] EXT4-fs: inline encryption not supported [ 194.000238][T21169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.000576][T21177] mmap: syz.0.8169 (21177): VmData 20729856 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 194.073536][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.185235][T21196] __nla_validate_parse: 7 callbacks suppressed [ 194.185255][T21196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8178'. [ 194.200485][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8178'. [ 194.209548][T21196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8178'. [ 194.256912][T21198] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.258103][T21198] EXT4-fs error (device loop5): __ext4_iget:5426: inode #15: block 1803188595: comm syz.5.8179: invalid block [ 194.258541][T21198] EXT4-fs (loop5): Remounting filesystem read-only [ 194.259353][T21198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.309180][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.475096][T21210] EXT4-fs (loop1): too many log groups per flexible block group [ 194.516801][T21210] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 194.524556][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8195'. [ 194.533620][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8195'. [ 194.554604][T21213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.584065][T21210] EXT4-fs (loop1): mount failed [ 194.614623][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.793930][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8214'. [ 194.802976][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8214'. [ 194.821142][T21274] gretap0: entered promiscuous mode [ 194.828652][T21274] gretap0: left promiscuous mode [ 195.016872][T21311] netlink: 91 bytes leftover after parsing attributes in process `syz.5.8232'. [ 195.104127][T21322] set_capacity_and_notify: 9 callbacks suppressed [ 195.104145][T21322] loop2: detected capacity change from 0 to 512 [ 195.118295][T21322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.126783][T21322] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8238: EA inode hash validation failed [ 195.141160][T21322] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.154381][T21322] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8238: corrupted inode contents [ 195.166607][T21322] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.8238: mark_inode_dirty error [ 195.179860][T21322] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.8238: corrupted inode contents [ 195.192016][T21322] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.8238: mark_inode_dirty error [ 195.204239][T21322] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.8238: mark inode dirty (error -117) [ 195.218896][T21322] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 195.228124][T21322] EXT4-fs (loop2): 1 orphan inode deleted [ 195.234410][T21322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.259777][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.428178][T21354] netlink: 'syz.5.8252': attribute type 4 has an invalid length. [ 195.580826][T21374] loop5: detected capacity change from 0 to 1024 [ 195.588432][T21377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8263'. [ 195.598456][T21374] EXT4-fs: Ignoring removed orlov option [ 195.604857][T21377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8263'. [ 195.614996][T21374] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 195.640882][T21374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.730674][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.996657][T21437] netlink: 'syz.1.8290': attribute type 3 has an invalid length. [ 196.535889][T21509] loop3: detected capacity change from 0 to 512 [ 196.548482][T21509] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 196.556460][T21509] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 196.564590][T21509] System zones: 0-1, 15-15, 18-18, 34-34 [ 196.570929][T21509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.577382][T21509] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.592035][T21509] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 196.599435][T21509] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8325: bg 0: block 40: padding at end of block bitmap is not set [ 196.613775][T21509] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 196.622770][T21509] EXT4-fs (loop3): 1 truncate cleaned up [ 196.628800][T21509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.644253][T21509] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.8325: bad symlink. [ 196.656608][T21509] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.8325: bad symlink. [ 196.679094][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.733729][T21525] loop3: detected capacity change from 0 to 128 [ 196.746633][T21525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.759700][T21525] ext4 filesystem being mounted at /1745/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.793767][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.937849][T21562] netlink: 'syz.0.8350': attribute type 3 has an invalid length. [ 197.148442][T21607] loop5: detected capacity change from 0 to 256 [ 197.162678][T21606] loop1: detected capacity change from 0 to 512 [ 197.190298][T21607] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 197.198901][T21607] FAT-fs (loop5): Filesystem has been set read-only [ 197.227078][T21606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.243614][T21606] ext4 filesystem being mounted at /1580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.268782][T21618] loop3: detected capacity change from 0 to 128 [ 197.297648][T21618] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 197.303754][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.333742][T21626] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.435499][ T3481] kernel read not supported for file /mdstat (pid: 3481 comm: kworker/0:6) [ 197.595907][T21683] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 197.631823][T21688] netlink: 'syz.2.8412': attribute type 14 has an invalid length. [ 197.639843][T21688] netlink: 'syz.2.8412': attribute type 12 has an invalid length. [ 197.651697][T21691] loop3: detected capacity change from 0 to 512 [ 197.661292][T21691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.685657][T21691] EXT4-fs (loop3): 1 truncate cleaned up [ 197.695383][T21691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.712147][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 197.712163][ T29] audit: type=1400 audit(2000000015.550:2039): avc: denied { setattr } for pid=21690 comm="syz.3.8413" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.750676][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.784255][ T29] audit: type=1400 audit(2000000015.620:2040): avc: denied { mount } for pid=21705 comm="syz.1.8422" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 197.819088][ T29] audit: type=1400 audit(2000000015.660:2041): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 197.866383][ T29] audit: type=1400 audit(2000000015.690:2042): avc: denied { sys_module } for pid=21710 comm="syz.5.8424" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.898835][T21720] loop3: detected capacity change from 0 to 1024 [ 197.905572][T21720] EXT4-fs: inline encryption not supported [ 197.938441][T21720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.982434][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.102091][T21760] loop5: detected capacity change from 0 to 256 [ 198.333539][ T29] audit: type=1400 audit(2000000016.170:2043): avc: denied { listen } for pid=21811 comm="syz.5.8467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.468060][ T29] audit: type=1400 audit(2000000016.310:2044): avc: denied { ioctl } for pid=21833 comm="syz.2.8478" path="socket:[64749]" dev="sockfs" ino=64749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.131348][ T29] audit: type=1400 audit(2000000016.970:2045): avc: denied { setopt } for pid=21850 comm="syz.1.8486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.161968][T21853] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 199.216220][ T29] audit: type=1400 audit(2000000017.050:2046): avc: denied { compute_member } for pid=21858 comm="syz.3.8491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 199.227876][T21861] __nla_validate_parse: 17 callbacks suppressed [ 199.227946][T21861] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8489'. [ 199.295998][T21867] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8494'. [ 199.411060][T21881] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.599538][T21917] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8519'. [ 199.618341][T21917] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8519'. [ 199.628090][ T29] audit: type=1400 audit(2000000017.470:2047): avc: denied { append } for pid=21921 comm="syz.2.8521" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.712511][ T29] audit: type=1400 audit(2000000017.550:2048): avc: denied { map } for pid=21935 comm="syz.3.8528" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 199.789461][T21950] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.848652][T21956] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.860311][T21956] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 199.870446][T21956] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.8537: Corrupt directory, running e2fsck is recommended [ 199.948432][T21956] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 199.956776][T21956] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.8537: corrupted in-inode xattr: invalid ea_ino [ 199.970437][T21956] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8537: couldn't read orphan inode 15 (err -117) [ 199.991185][T21956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.007813][T21961] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 200.072751][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8551'. [ 200.088224][T21990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8553'. [ 200.129994][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.725979][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8601'. [ 200.832292][T22117] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 201.010310][T22148] set_capacity_and_notify: 2 callbacks suppressed [ 201.010330][T22148] loop2: detected capacity change from 0 to 512 [ 201.035015][T22148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.050542][T22148] ext4 filesystem being mounted at /1872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.071642][T22159] netlink: 'syz.5.8630': attribute type 322 has an invalid length. [ 201.114632][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8634'. [ 201.152613][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8637'. [ 201.163808][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.196673][T22170] Process accounting paused [ 201.289112][T22194] loop5: detected capacity change from 0 to 512 [ 201.296369][T22194] journal_path: Non-blockdev passed as './bus' [ 201.302678][T22194] EXT4-fs: error: could not find journal device path [ 201.325457][T22189] loop2: detected capacity change from 0 to 2048 [ 201.390177][T22189] Alternate GPT is invalid, using primary GPT. [ 201.396643][T22189] loop2: p2 p3 p7 [ 201.564949][T22248] loop5: detected capacity change from 0 to 512 [ 201.580041][T22248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.592826][T22248] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.620184][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.649725][T22258] loop3: detected capacity change from 0 to 164 [ 201.668851][T22266] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8681'. [ 201.737444][T22273] loop3: detected capacity change from 0 to 736 [ 201.755959][T22277] loop2: detected capacity change from 0 to 512 [ 201.793692][T22277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.808594][T22277] ext4 filesystem being mounted at /1882/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.885020][T22295] loop3: detected capacity change from 0 to 512 [ 201.906813][T22295] journal_path: Lookup failure for './file0' [ 201.913023][T22295] EXT4-fs: error: could not find journal device path [ 201.980440][T22307] loop1: detected capacity change from 0 to 1024 [ 201.987306][T22307] EXT4-fs: Ignoring removed bh option [ 202.010689][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.034568][T22307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.093396][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.163648][T22341] netlink: 'syz.1.8717': attribute type 3 has an invalid length. [ 202.504619][T22400] loop2: detected capacity change from 0 to 256 [ 202.512327][T22400] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.708025][T22413] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.933004][T22455] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.958250][T22455] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.8772: Bad quota inum: 2, type: 1 [ 202.990512][T22455] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 203.013288][T22469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.025285][T22469] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.8777: iget: bad extended attribute block 262144 [ 203.041853][T22469] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8777: couldn't read orphan inode 15 (err -117) [ 203.057962][T22469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.085191][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.109796][T22480] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.117298][T22480] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 203.118580][T17136] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 203.125644][T22480] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 203.142409][T22480] System zones: 0-1, 15-15, 18-18, 34-34 [ 203.148338][T22480] EXT4-fs (loop1): orphan cleanup on readonly fs [ 203.155224][T22480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8781: bg 0: block 15: invalid block bitmap [ 203.168022][T22480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 203.177143][T22480] EXT4-fs (loop1): 1 truncate cleaned up [ 203.183192][T22480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.212008][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.256492][T22490] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.268957][T22490] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.294156][T22490] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 203.365056][T22500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.479093][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.510513][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 203.510528][ T29] audit: type=1326 audit(2000000021.350:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.590547][ T29] audit: type=1326 audit(2000000021.380:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.614250][ T29] audit: type=1326 audit(2000000021.380:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.637835][ T29] audit: type=1326 audit(2000000021.380:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.661350][ T29] audit: type=1326 audit(2000000021.380:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.684926][ T29] audit: type=1326 audit(2000000021.380:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.708527][ T29] audit: type=1326 audit(2000000021.380:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.732148][ T29] audit: type=1326 audit(2000000021.380:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22517 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde53d5f749 code=0x7ffc0000 [ 203.903026][ T29] audit: type=1400 audit(2000000021.740:2076): avc: denied { read append } for pid=22551 comm="syz.5.8817" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 203.931286][ T29] audit: type=1400 audit(2000000021.740:2077): avc: denied { open } for pid=22551 comm="syz.5.8817" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 204.233188][T22603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 204.256558][T22603] System zones: 1-12 [ 204.266397][T22603] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.8842: corrupted in-inode xattr: e_value size too large [ 204.281418][T22603] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.8842: couldn't read orphan inode 15 (err -117) [ 204.294050][T22603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.327964][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.344921][T22611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.369192][T22611] ext4 filesystem being mounted at /1669/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.495315][T22619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.558215][T22619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.603729][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.957016][T22675] netlink: 'syz.0.8876': attribute type 3 has an invalid length. [ 204.964949][T22675] __nla_validate_parse: 4 callbacks suppressed [ 204.964962][T22675] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8876'. [ 205.065615][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8881'. [ 205.095054][T22691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8883'. [ 205.103591][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'. [ 205.113864][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'. [ 205.138272][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'. [ 205.147534][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'. [ 205.167493][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'. [ 205.331803][T22722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.377839][T22722] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.8897: corrupted in-inode xattr: e_value size too large [ 205.392184][T22722] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8897: couldn't read orphan inode 15 (err -117) [ 205.404645][T22722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.456172][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.553594][T22750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.610403][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.872495][T22791] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 205.995738][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 206.152365][T22817] set_capacity_and_notify: 9 callbacks suppressed [ 206.152385][T22817] loop2: detected capacity change from 0 to 128 [ 206.164686][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8945'. [ 206.187902][T22817] msdos: Bad value for 'errors' [ 206.370351][T22844] program syz.2.8957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.437401][T22852] loop1: detected capacity change from 0 to 512 [ 206.479778][T22852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.497791][T22852] EXT4-fs (loop1): 1 orphan inode deleted [ 206.503739][T22852] EXT4-fs (loop1): 1 truncate cleaned up [ 206.519603][T22852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.588083][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.619698][T22871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8969'. [ 206.725879][T22885] netlink: 'syz.5.8977': attribute type 21 has an invalid length. [ 206.745778][T22885] netlink: 'syz.5.8977': attribute type 5 has an invalid length. [ 206.753601][T22885] netlink: 'syz.5.8977': attribute type 6 has an invalid length. [ 206.872840][T22912] tmpfs: Bad value for 'mpol' [ 207.048370][T22944] loop3: detected capacity change from 0 to 512 [ 207.064888][T22944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.071614][T22948] loop5: detected capacity change from 0 to 256 [ 207.098266][T22944] EXT4-fs (loop3): 1 truncate cleaned up [ 207.104399][T22944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.141761][T22953] Invalid logical block size (2051) [ 207.157739][T22956] loop2: detected capacity change from 0 to 128 [ 207.205390][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.216711][T22956] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 207.225279][T22956] FAT-fs (loop2): Filesystem has been set read-only [ 207.380962][T22988] loop5: detected capacity change from 0 to 512 [ 207.393892][T22988] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.410927][T22988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.431699][T22988] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.9027: path /581/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 207.495365][T22988] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.9027: path /581/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 207.517135][T23002] loop3: detected capacity change from 0 to 512 [ 207.525166][T22988] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.9027: path /581/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 207.540338][T23002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.547177][T22988] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.9027: path /581/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 207.577146][T22988] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.9027: lblock 23 mapped to illegal pblock 18 (length 1) [ 207.602300][T23002] EXT4-fs (loop3): 1 truncate cleaned up [ 207.608478][T23002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.744216][T23028] loop1: detected capacity change from 0 to 512 [ 207.752012][T23028] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 207.761754][T23028] EXT4-fs (loop1): group descriptors corrupted! [ 207.913083][T23052] loop3: detected capacity change from 0 to 512 [ 207.920823][T23052] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.933201][T23052] EXT4-fs (loop3): 1 truncate cleaned up [ 208.151968][T23076] loop2: detected capacity change from 0 to 2048 [ 208.207817][T23076] loop2: p1 p3 p4 [ 208.235975][T23076] loop2: p4 size 589824 extends beyond EOD, truncated [ 208.319031][T17136] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 208.349965][T23084] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 208.356604][T23084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.364087][T23084] vhci_hcd vhci_hcd.0: Device attached [ 208.371241][T23085] vhci_hcd: connection closed [ 208.371501][ T1019] vhci_hcd vhci_hcd.2: stop threads [ 208.381608][ T1019] vhci_hcd vhci_hcd.2: release socket [ 208.387028][ T1019] vhci_hcd vhci_hcd.2: disconnect device [ 208.532210][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 208.532225][ T29] audit: type=1400 audit(2000000026.370:2200): avc: denied { cpu } for pid=23118 comm="syz.5.9086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.563297][T23121] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.575421][T23121] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.617115][ T29] audit: type=1400 audit(2000000026.450:2201): avc: denied { map } for pid=23124 comm="syz.3.9089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.641837][ T29] audit: type=1400 audit(2000000026.450:2202): avc: denied { read write } for pid=23124 comm="syz.3.9089" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.706700][ T29] audit: type=1400 audit(2000000026.540:2203): avc: denied { connect } for pid=23132 comm="syz.5.9093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.740787][ T29] audit: type=1400 audit(2000000026.580:2204): avc: denied { connect } for pid=23135 comm="syz.5.9094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.766485][ T29] audit: type=1400 audit(2000000026.580:2205): avc: denied { ioctl } for pid=23135 comm="syz.5.9094" path="socket:[68856]" dev="sockfs" ino=68856 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.842310][ T29] audit: type=1400 audit(2000000026.680:2206): avc: denied { getopt } for pid=23149 comm="syz.1.9101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.888305][T23146] loop5: p2 < > p4 [ 208.898942][T23146] loop5: p4 size 262144 extends beyond EOD, truncated [ 208.905888][ T29] audit: type=1400 audit(2000000026.740:2207): avc: denied { create } for pid=23157 comm="syz.1.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.930106][ T29] audit: type=1400 audit(2000000026.770:2208): avc: denied { setopt } for pid=23157 comm="syz.1.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.127704][ T29] audit: type=1400 audit(2000000026.960:2209): avc: denied { execmem } for pid=23200 comm="syz.3.9126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.373115][T23253] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.384960][T23253] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 209.393097][T23253] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.399814][T23253] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.9150: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.413798][T23253] EXT4-fs (loop2): 1 orphan inode deleted [ 209.426466][T23253] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.9150: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 209.517132][T23276] EXT4-fs: Ignoring removed nobh option [ 209.524627][T23276] ext4 filesystem being mounted at /1733/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.596900][T23291] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.610649][T23291] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 209.625369][T23291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9165: bg 0: block 248: padding at end of block bitmap is not set [ 209.641235][T23291] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9165: Failed to acquire dquot type 1 [ 209.653040][T23291] EXT4-fs (loop1): 1 truncate cleaned up [ 209.700782][ T323] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 210.057916][T23323] hub 9-0:1.0: USB hub found [ 210.057970][T23323] hub 9-0:1.0: 8 ports detected [ 210.182879][T23333] __nla_validate_parse: 11 callbacks suppressed [ 210.182895][T23333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9186'. [ 210.292463][T23338] ipvlan2: entered promiscuous mode [ 210.455014][T23344] Alternate GPT is invalid, using primary GPT. [ 210.455308][T23344] loop3: p2 p3 p7 [ 210.673471][T23375] rtc_cmos 00:00: Alarms can be up to one day in the future [ 210.901519][T23413] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.929116][T23413] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 210.949358][T23413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9225: bg 0: block 248: padding at end of block bitmap is not set [ 210.953122][T23420] ext4 filesystem being mounted at /1744/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.974494][T23413] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9225: Failed to acquire dquot type 1 [ 210.986638][T23413] EXT4-fs (loop3): 1 truncate cleaned up [ 211.005914][T23420] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 211.027904][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 211.101749][T23438] Process accounting resumed [ 211.147635][T23450] netlink: 'syz.1.9242': attribute type 3 has an invalid length. [ 211.155419][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9242'. [ 211.179229][T23457] atomic_op ffff888101989528 conn xmit_atomic 0000000000000000 [ 211.302130][T23479] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 211.466484][T23508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9269'. [ 211.738968][T23535] set_capacity_and_notify: 11 callbacks suppressed [ 211.738985][T23535] loop3: detected capacity change from 0 to 128 [ 212.204723][T23556] loop2: detected capacity change from 0 to 764 [ 212.227160][T23556] rock: directory entry would overflow storage [ 212.233397][T23556] rock: sig=0x4654, size=5, remaining=4 [ 212.337901][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9294'. [ 212.366598][T23562] syz_tun: entered promiscuous mode [ 212.422974][T23562] syz_tun: refused to change device tx_queue_len [ 212.602557][T23593] sock: sock_set_timeout: `syz.0.9310' (pid 23593) tries to set negative timeout [ 212.705066][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9316'. [ 212.779132][T23619] loop1: detected capacity change from 0 to 128 [ 212.788772][T23619] ext4 filesystem being mounted at /1764/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.009727][T23657] loop1: detected capacity change from 0 to 512 [ 213.025813][T23657] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 213.048513][T23657] EXT4-fs (loop1): Remounting filesystem read-only [ 213.055194][T23657] EXT4-fs (loop1): 1 truncate cleaned up [ 213.093821][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9348'. [ 213.102788][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9348'. [ 213.113922][T23668] dummy0: entered promiscuous mode [ 213.158584][T23682] loop3: detected capacity change from 0 to 512 [ 213.168645][T23682] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.9351: inode has both inline data and extents flags [ 213.186288][T23682] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9351: couldn't read orphan inode 15 (err -117) [ 213.226688][T23689] loop2: detected capacity change from 0 to 512 [ 213.235487][T23689] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.246608][T23691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9356'. [ 213.255679][T23691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9356'. [ 213.290005][T23689] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.9354: path /2042/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 213.320205][T23689] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.9354: path /2042/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 213.361339][T23689] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.9354: path /2042/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 213.398428][T23689] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.9354: path /2042/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 213.419782][T23689] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 18: comm syz.2.9354: lblock 23 mapped to illegal pblock 18 (length 1) [ 213.500386][T23707] loop1: detected capacity change from 0 to 512 [ 213.522244][T23707] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.9363: iget: bad extended attribute block 1 [ 213.535150][T23707] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9363: couldn't read orphan inode 15 (err -117) [ 213.580194][T23716] netlink: 204 bytes leftover after parsing attributes in process `syz.1.9367'. [ 213.629952][T23722] netlink: 'syz.1.9369': attribute type 1 has an invalid length. [ 213.663462][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 213.663479][ T29] audit: type=1400 audit(2000000031.500:2360): avc: denied { create } for pid=23725 comm="syz.3.9372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.699488][ T29] audit: type=1400 audit(2000000031.530:2361): avc: denied { ioctl } for pid=23725 comm="syz.3.9372" path="socket:[70567]" dev="sockfs" ino=70567 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.749690][ T29] audit: type=1400 audit(2000000031.580:2362): avc: denied { bind } for pid=23727 comm="syz.3.9373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.801427][ T29] audit: type=1400 audit(2000000031.590:2363): avc: denied { write } for pid=23727 comm="syz.3.9373" path="socket:[70842]" dev="sockfs" ino=70842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.916619][T23742] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.971771][ T29] audit: type=1400 audit(2000000031.690:2364): avc: denied { write } for pid=23734 comm="syz.3.9377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.991269][ T29] audit: type=1400 audit(2000000031.710:2365): avc: denied { map } for pid=23737 comm="syz.1.9378" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.016011][ T29] audit: type=1400 audit(2000000031.710:2366): avc: denied { read write } for pid=23737 comm="syz.1.9378" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.041116][ T29] audit: type=1400 audit(2000000031.780:2367): avc: denied { read } for pid=23743 comm="syz.1.9381" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.100737][ T29] audit: type=1326 audit(2000000031.940:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.5.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9e90f749 code=0x7ffc0000 [ 214.124300][ T29] audit: type=1326 audit(2000000031.940:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23753 comm="syz.5.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9e90f749 code=0x7ffc0000 [ 214.198958][ T3320] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.276720][T23777] loop5: detected capacity change from 0 to 128 [ 214.284749][T23777] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 214.295657][T23779] lo speed is unknown, defaulting to 1000 [ 214.301513][T23779] lo speed is unknown, defaulting to 1000 [ 214.307740][T23779] lo speed is unknown, defaulting to 1000 [ 214.310113][T23777] ext2 filesystem being mounted at /640/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.315433][T23779] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.352726][T23779] lo speed is unknown, defaulting to 1000 [ 214.360440][T23779] lo speed is unknown, defaulting to 1000 [ 214.393027][ T3481] kernel write not supported for file /input/event2 (pid: 3481 comm: kworker/0:6) [ 214.402705][T23788] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 214.413718][T23788] bond1 (unregistering): Released all slaves [ 214.422974][T23779] lo speed is unknown, defaulting to 1000 [ 214.429269][T23779] lo speed is unknown, defaulting to 1000 [ 214.438097][T23779] lo speed is unknown, defaulting to 1000 [ 214.506751][T23804] ip_vti0: left promiscuous mode [ 214.511952][T23804] ip_vti0: left allmulticast mode [ 214.548383][T23810] netlink: 'syz.0.9412': attribute type 16 has an invalid length. [ 214.557740][T23810] bridge_slave_1: left allmulticast mode [ 214.563466][T23810] bridge_slave_1: left promiscuous mode [ 214.569197][T23810] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.583721][T23810] bridge_slave_0: left allmulticast mode [ 214.589463][T23810] bridge_slave_0: left promiscuous mode [ 214.595288][T23810] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.772308][T23836] cgroup: noprefix used incorrectly [ 215.006606][T23881] binfmt_misc: register: failed to install interpreter file ./file2 [ 215.320263][T23914] loop2: detected capacity change from 0 to 512 [ 215.327146][T23914] EXT4-fs: Ignoring removed bh option [ 215.345313][T23919] sctp: [Deprecated]: syz.5.9459 (pid 23919) Use of int in max_burst socket option deprecated. [ 215.345313][T23919] Use struct sctp_assoc_value instead [ 215.378055][T23914] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 215.393735][T23923] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.408301][T23914] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.9457: corrupted in-inode xattr: e_value size too large [ 215.445002][T23930] loop1: detected capacity change from 0 to 128 [ 215.451478][T23914] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9457: couldn't read orphan inode 15 (err -117) [ 215.548807][T23937] __nla_validate_parse: 4 callbacks suppressed [ 215.548826][T23937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9469'. [ 215.564109][T23937] unsupported nla_type 24929 [ 215.583368][T23941] netlink: 'syz.1.9470': attribute type 2 has an invalid length. [ 215.618258][T23943] netlink: 71 bytes leftover after parsing attributes in process `syz.5.9471'. [ 215.628531][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9472'. [ 215.728286][T23965] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 215.759116][T23965] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9481: bg 0: block 255: padding at end of block bitmap is not set [ 215.773672][T23965] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 215.785578][T23965] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9481: invalid indirect mapped block 1 (level 1) [ 215.799063][T23965] EXT4-fs (loop2): 1 truncate cleaned up [ 215.890647][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9492'. [ 215.957642][T24001] macvtap0: refused to change device tx_queue_len [ 216.126580][T24037] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 216.138187][T24037] bond1 (unregistering): Released all slaves [ 216.221676][T24053] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.577899][T24086] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 216.584542][T24086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.592093][T24086] vhci_hcd vhci_hcd.0: Device attached [ 216.610331][T24087] vhci_hcd: connection closed [ 216.610542][ T1713] vhci_hcd vhci_hcd.3: stop threads [ 216.620714][ T1713] vhci_hcd vhci_hcd.3: release socket [ 216.626135][ T1713] vhci_hcd vhci_hcd.3: disconnect device [ 216.650365][T24096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9540'. [ 216.667150][T24096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9540'. [ 216.679631][T24096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9540'. [ 216.835074][T24121] set_capacity_and_notify: 2 callbacks suppressed [ 216.835092][T24121] loop2: detected capacity change from 0 to 1024 [ 216.859615][T24121] ext4 filesystem being mounted at /2081/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.876027][T24121] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.9559: lblock 3 mapped to illegal pblock 3 (length 3) [ 216.890782][T24121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 216.903165][T24121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 216.903165][T24121] [ 216.927017][ T385] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 216.940455][T24105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.949816][ T385] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 216.962097][ T385] EXT4-fs (loop2): This should not happen!! Data will be lost [ 216.962097][ T385] [ 216.972241][T24105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.999987][T24130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2029 sclass=netlink_audit_socket pid=24130 comm=syz.2.9552 [ 217.041104][T24138] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 217.122593][T24152] hub 9-0:1.0: USB hub found [ 217.127658][T24152] hub 9-0:1.0: 8 ports detected [ 217.165173][T24156] loop2: detected capacity change from 0 to 2048 [ 217.179226][T24158] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 217.190313][T24158] bond1 (unregistering): Released all slaves [ 217.190901][T24156] Alternate GPT is invalid, using primary GPT. [ 217.202610][T24156] loop2: p1 p2 p3 [ 217.206340][T24156] loop2: partition table partially beyond EOD, truncated [ 217.242966][T24164] bond1 (unregistering): Released all slaves [ 217.585098][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9597'. [ 217.607114][T24235] netlink: 'syz.5.9598': attribute type 21 has an invalid length. [ 217.615834][T24235] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9598'. [ 217.624941][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9598'. [ 217.766266][T24247] lo speed is unknown, defaulting to 1000 [ 217.846716][T24253] loop5: detected capacity change from 0 to 1024 [ 217.857167][T24253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.873137][T24253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 217.881484][T24253] System zones: 0-1, 3-36 [ 217.927443][T24265] loop2: detected capacity change from 0 to 1024 [ 217.958080][T24265] EXT4-fs: Ignoring removed nobh option [ 217.965411][T24265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.974971][T24265] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 217.986755][T24265] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.9608: inode #4294967295: comm syz.2.9608: iget: illegal inode # [ 218.002104][T24265] EXT4-fs (loop2): no journal found [ 218.007331][T24265] EXT4-fs (loop2): can't get journal size [ 218.018334][T24265] EXT4-fs (loop2): failed to initialize system zone (-22) [ 218.027279][T24265] EXT4-fs (loop2): mount failed [ 218.075809][T24288] loop5: detected capacity change from 0 to 1024 [ 218.103292][T24288] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.9622: lblock 3 mapped to illegal pblock 3 (length 3) [ 218.117566][T24288] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 218.129934][T24288] EXT4-fs (loop5): This should not happen!! Data will be lost [ 218.129934][T24288] [ 218.154792][ T1713] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 218.157919][T24296] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 218.179254][ T1713] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 218.191620][ T1713] EXT4-fs (loop5): This should not happen!! Data will be lost [ 218.191620][ T1713] [ 218.211807][T24296] bond1 (unregistering): Released all slaves [ 218.327129][T24316] netlink: 'syz.2.9633': attribute type 9 has an invalid length. [ 218.490488][T24335] netlink: 'syz.3.9642': attribute type 21 has an invalid length. [ 218.527180][T24339] loop3: detected capacity change from 0 to 1024 [ 218.555566][T24339] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.9644: lblock 3 mapped to illegal pblock 3 (length 3) [ 218.570500][T24339] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 218.582871][T24339] EXT4-fs (loop3): This should not happen!! Data will be lost [ 218.582871][T24339] [ 218.610301][ T323] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 218.635634][ T323] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 218.648276][ T323] EXT4-fs (loop3): This should not happen!! Data will be lost [ 218.648276][ T323] [ 218.729865][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 218.729880][ T29] audit: type=1326 audit(218.718:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.3.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9cfff749 code=0x7ffc0000 [ 218.769400][ T29] audit: type=1326 audit(218.748:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.3.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9cfff749 code=0x7ffc0000 [ 218.792334][ T29] audit: type=1326 audit(218.748:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.3.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4a9cfff749 code=0x7ffc0000 [ 218.815270][ T29] audit: type=1326 audit(218.748:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.3.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9cfff749 code=0x7ffc0000 [ 218.838151][ T29] audit: type=1326 audit(218.748:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.3.9648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9cfff749 code=0x7ffc0000 [ 218.902552][T24364] loop3: detected capacity change from 0 to 512 [ 218.948539][T24364] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 2816). [ 218.981533][T24364] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.039539][ T29] audit: type=1400 audit(219.028:2551): avc: denied { mount } for pid=24372 comm="syz.1.9658" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 219.126874][T24364] EXT4-fs (loop3): mount failed [ 219.187167][ T29] audit: type=1326 audit(219.168:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24382 comm="syz.2.9662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 219.210203][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.218121][ T29] audit: type=1326 audit(219.168:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24382 comm="syz.2.9662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 219.241057][ T29] audit: type=1326 audit(219.168:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24382 comm="syz.2.9662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1579f749 code=0x7ffc0000 [ 219.452688][T24404] program syz.0.9670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.591429][T24423] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 219.647265][T24433] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 219.661094][T24433] bond1 (unregistering): Released all slaves [ 219.716534][T24442] lo speed is unknown, defaulting to 1000 [ 219.749827][T24451] netlink: 'syz.3.9694': attribute type 12 has an invalid length. [ 219.865957][T24471] loop3: detected capacity change from 0 to 164 [ 220.065130][T24511] loop5: detected capacity change from 0 to 512 [ 220.074751][T24511] journal_path: Lookup failure for './file0' [ 220.080846][T24511] EXT4-fs: error: could not find journal device path [ 220.116862][T24516] netlink: 'syz.3.9727': attribute type 10 has an invalid length. [ 220.145632][T24516] dummy0: left promiscuous mode [ 220.150578][T24516] dummy0: left allmulticast mode [ 220.169836][T24523] loop5: detected capacity change from 0 to 256 [ 220.178889][T24516] dummy0: entered promiscuous mode [ 220.185570][T24516] dummy0: entered allmulticast mode [ 220.192106][T24516] team0: Port device dummy0 added [ 220.213680][ T1713] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.221997][ T5467] kernel write not supported for file /snd/seq (pid: 5467 comm: kworker/1:13) [ 220.256819][T24535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.296942][T24535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 220.306933][T24535] System zones: 0-1, 3-36 [ 220.559141][T24590] Alternate GPT is invalid, using primary GPT. [ 220.565419][T24590] loop5: p1 p2 p3 [ 220.569269][T24590] loop5: partition table partially beyond EOD, truncated [ 220.735534][T24626] pimreg: entered allmulticast mode [ 220.741506][T24626] pimreg: left allmulticast mode [ 220.784117][T24630] __nla_validate_parse: 6 callbacks suppressed [ 220.784130][T24630] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9778'. [ 221.220588][T24699] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9818'. [ 221.316988][T24712] netlink: 'syz.1.9816': attribute type 1 has an invalid length. [ 221.392436][T24726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9824'. [ 221.540141][T24754] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.9838'. [ 221.549878][T24754] netlink: zone id is out of range [ 221.555016][T24754] netlink: zone id is out of range [ 221.561673][T24754] netlink: zone id is out of range [ 221.567546][T24754] netlink: del zone limit has 8 unknown bytes [ 221.594501][T24758] EXT4-fs: dax option not supported [ 221.727836][T24784] team0: No ports can be present during mode change [ 221.753624][T24788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9855'. [ 221.824548][T24797] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9859'. [ 221.854973][T24799] program syz.5.9860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.868699][T24803] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9861'. [ 222.154257][T24829] set_capacity_and_notify: 4 callbacks suppressed [ 222.154278][T24829] loop5: detected capacity change from 0 to 512 [ 222.208869][T24829] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.9876: corrupted in-inode xattr: invalid ea_ino [ 222.231169][T24829] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9876: couldn't read orphan inode 15 (err -117) [ 222.247848][ T4260] Bluetooth: hci0: command 0x1003 tx timeout [ 222.248344][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.311670][T24840] loop2: detected capacity change from 0 to 1024 [ 222.331582][T24840] EXT4-fs: Ignoring removed bh option [ 222.373037][T24840] EXT4-fs mount: 44 callbacks suppressed [ 222.373066][T24840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.465181][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.509015][T24873] netlink: 'syz.2.9887': attribute type 1 has an invalid length. [ 222.720583][T24904] loop5: detected capacity change from 0 to 512 [ 222.727739][T24904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.743670][T24904] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm : invalid indirect mapped block 83886080 (level 1) [ 222.766871][T24904] EXT4-fs (loop5): Remounting filesystem read-only [ 222.782125][T24904] EXT4-fs (loop5): 1 orphan inode deleted [ 222.787947][T24904] EXT4-fs (loop5): 1 truncate cleaned up [ 222.794242][T24904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.831527][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.838457][T24916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9895'. [ 222.868243][T24920] pimreg: tun_chr_ioctl cmd 1075599392 [ 222.922080][T24929] netlink: 'syz.5.9899': attribute type 21 has an invalid length. [ 222.929990][T24929] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.994821][T24936] bond1: entered promiscuous mode [ 223.008127][T24936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.018960][T24936] team0: Port device bond1 added [ 223.093688][T24950] netlink: 'syz.1.9902': attribute type 3 has an invalid length. [ 223.101675][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9902'. [ 223.123248][T24950] netlink: 'syz.1.9902': attribute type 3 has an invalid length. [ 223.131197][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9902'. [ 223.612690][T25034] netlink: 'syz.5.9922': attribute type 6 has an invalid length. [ 223.649703][T25034] bond1 (unregistering): Released all slaves [ 223.751888][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 223.751907][ T29] audit: type=1400 audit(223.738:3004): avc: denied { open } for pid=25053 comm="syz.5.9927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 223.792273][T25058] macvlan0: entered promiscuous mode [ 223.793729][ T29] audit: type=1400 audit(223.738:3005): avc: denied { kernel } for pid=25053 comm="syz.5.9927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 223.828477][T25058] hsr1: entered promiscuous mode [ 223.867662][ T29] audit: type=1400 audit(223.848:3006): avc: denied { create } for pid=25063 comm="syz.2.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.921297][ T29] audit: type=1400 audit(223.878:3007): avc: denied { write } for pid=25063 comm="syz.2.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.941306][ T29] audit: type=1400 audit(223.878:3008): avc: denied { read } for pid=25063 comm="syz.2.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.961265][ T29] audit: type=1400 audit(223.878:3009): avc: denied { ioctl } for pid=25063 comm="syz.2.9929" path="socket:[74445]" dev="sockfs" ino=74445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.019978][ T29] audit: type=1400 audit(224.008:3010): avc: denied { create } for pid=25076 comm="syz.2.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.041178][ T29] audit: type=1400 audit(224.028:3011): avc: denied { write } for pid=25076 comm="syz.2.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.155341][ T29] audit: type=1400 audit(224.138:3012): avc: denied { create } for pid=25090 comm="syz.2.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.180354][ T29] audit: type=1400 audit(224.168:3013): avc: denied { write } for pid=25090 comm="syz.2.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.225600][T25093] can0: slcan on ttyS3. [ 224.277793][T25092] can0 (unregistered): slcan off ttyS3. [ 224.498205][T25123] netlink: 'syz.5.9953': attribute type 1 has an invalid length. [ 224.506134][T25123] netlink: 'syz.5.9953': attribute type 2 has an invalid length. [ 224.550790][T25131] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 224.694633][T25151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25151 comm=syz.2.9967 [ 224.814247][T25165] loop2: detected capacity change from 0 to 1024 [ 224.822539][T25165] EXT4-fs: Ignoring removed bh option [ 224.853834][T25165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.914377][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.358740][T25226] loop5: detected capacity change from 0 to 2048 [ 225.392862][T25226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.422519][T25225] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 225.548927][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.561762][T25245] loop2: detected capacity change from 0 to 2048 [ 225.615906][T25245] loop2: p1 p3 [ 225.636126][T25245] loop2: p3 start 8388352 is beyond EOD, truncated [ 225.863841][T25275] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 225.916841][T25279] loop2: detected capacity change from 0 to 512 [ 225.928106][T25279] journal_path: Lookup failure for './file0' [ 225.934151][T25279] EXT4-fs: error: could not find journal device path [ 225.946702][T25283] netlink: 'syz.0.10025': attribute type 1 has an invalid length. [ 226.006108][T25288] loop5: detected capacity change from 0 to 1024 [ 226.038139][T25288] EXT4-fs: Ignoring removed bh option [ 226.043688][T25288] EXT4-fs: inline encryption not supported [ 226.068301][T25288] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.098545][T25288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 226.107632][T25288] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.10029: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.137705][T25288] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.10029: lblock 0 mapped to illegal pblock 48 (length 1) [ 226.152348][T25288] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.10029: Failed to acquire dquot type 0 [ 226.164139][T25288] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 226.173791][T25288] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.10029: mark_inode_dirty error [ 226.185496][T25288] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 226.195823][T25288] EXT4-fs (loop5): 1 orphan inode deleted [ 226.202132][T25288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.214735][ T12] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.237828][T25300] netlink: 'syz.2.10035': attribute type 21 has an invalid length. [ 226.248085][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 226.265556][T25300] __nla_validate_parse: 14 callbacks suppressed [ 226.265569][T25300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10035'. [ 226.281105][T25300] netlink: 'syz.2.10035': attribute type 1 has an invalid length. [ 226.289877][T25288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.309229][T25288] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.10029: Invalid inode table block 1 in block_group 0 [ 226.328822][T25288] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 226.340281][T25288] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.10029: mark_inode_dirty error [ 226.511424][T25321] loop5: detected capacity change from 0 to 128 [ 226.852057][T25339] loop2: detected capacity change from 0 to 512 [ 226.884563][T25339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.894034][T25347] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.920530][T25347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.940229][T25339] EXT4-fs (loop2): too many log groups per flexible block group [ 226.948967][T25347] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.10055: Allocating blocks 41-42 which overlap fs metadata [ 226.968016][T25339] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 226.975419][T25347] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.10055: Failed to acquire dquot type 1 [ 227.012553][T25339] EXT4-fs (loop2): mount failed [ 227.025847][T25347] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 227.051023][T25347] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10055: corrupted inode contents [ 227.064675][T25347] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.10055: mark_inode_dirty error [ 227.076581][T25347] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10055: corrupted inode contents [ 227.088772][T25347] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.10055: mark_inode_dirty error [ 227.100359][T25347] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10055: corrupted inode contents [ 227.134207][T25347] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 227.150050][T25347] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.10055: corrupted inode contents [ 227.177668][T25347] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.10055: mark_inode_dirty error [ 227.192360][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10063'. [ 227.213669][T25347] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 227.237019][T25347] EXT4-fs (loop5): 1 truncate cleaned up [ 227.247258][T25347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.266059][T25369] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10064'. [ 227.275302][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10064'. [ 227.330866][T17136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.708795][T25413] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.727785][T25413] vhci_hcd vhci_hcd.2: invalid port number 96 [ 227.733986][T25413] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 228.026710][T25431] set_capacity_and_notify: 1 callbacks suppressed [ 228.026724][T25431] loop2: detected capacity change from 0 to 2048 [ 228.054405][T25433] SELinux: failed to load policy [ 228.100919][T25431] Alternate GPT is invalid, using primary GPT. [ 228.107342][T25431] loop2: p2 p3 p7 [ 228.231271][T25439] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.10097'. [ 228.974319][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 228.974333][ T29] audit: type=1400 audit(228.958:3122): avc: denied { create } for pid=25487 comm="syz.5.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.074827][T25462] loop2: detected capacity change from 0 to 512 [ 229.160355][ T29] audit: type=1400 audit(228.988:3123): avc: denied { setopt } for pid=25487 comm="syz.5.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.179459][ T29] audit: type=1400 audit(229.038:3124): avc: denied { write } for pid=25487 comm="syz.5.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.198362][ T29] audit: type=1400 audit(229.108:3125): avc: denied { name_connect } for pid=25491 comm="syz.0.10121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 229.237151][ T29] audit: type=1400 audit(229.208:3126): avc: denied { accept } for pid=25487 comm="syz.5.10119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.358916][T25462] EXT4-fs (loop2): 1 orphan inode deleted [ 229.370266][T25462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.394215][ T1713] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.404019][ T1713] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 229.426284][T25508] netlink: 96 bytes leftover after parsing attributes in process `'. [ 229.446360][ T29] audit: type=1400 audit(229.318:3127): avc: denied { read } for pid=25505 comm="syz.0.10125" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 229.469075][ T29] audit: type=1400 audit(229.318:3128): avc: denied { open } for pid=25505 comm="syz.0.10125" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 229.497234][ T29] audit: type=1400 audit(229.438:3129): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 229.520239][ T29] audit: type=1400 audit(229.438:3130): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 229.545972][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.811290][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10162'. [ 230.921227][T25599] loop2: detected capacity change from 0 to 2048 [ 230.933955][T25602] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.10179'. [ 230.950925][T25599] Alternate GPT is invalid, using primary GPT. [ 230.957227][T25602] netlink: zone id is out of range [ 230.957384][T25599] loop2: p2 p3 p7 [ 230.962504][T25602] netlink: zone id is out of range [ 230.993922][T25602] netlink: zone id is out of range [ 231.021052][T25602] netlink: del zone limit has 8 unknown bytes [ 231.276620][T25636] loop2: detected capacity change from 0 to 512 [ 231.427451][T25652] loop2: detected capacity change from 0 to 256 [ 231.528512][T25660] team0: No ports can be present during mode change [ 231.792361][T25680] loop2: detected capacity change from 0 to 1024 [ 231.840462][T25680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.936607][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.108087][T25708] loop5: detected capacity change from 0 to 2048 [ 232.139821][T25708] Alternate GPT is invalid, using primary GPT. [ 232.146145][T25708] loop5: p2 p3 p7 [ 232.750464][T25754] pimreg: entered allmulticast mode [ 232.766434][T25754] pimreg: left allmulticast mode [ 232.794154][T25758] netlink: 'syz.0.10237': attribute type 1 has an invalid length. [ 233.703119][T25774] syz.5.10255 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 233.717857][T25774] CPU: 0 UID: 0 PID: 25774 Comm: syz.5.10255 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.717888][T25774] Tainted: [W]=WARN [ 233.717895][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.717906][T25774] Call Trace: [ 233.717914][T25774] [ 233.717922][T25774] __dump_stack+0x1d/0x30 [ 233.718010][T25774] dump_stack_lvl+0x95/0xd0 [ 233.718055][T25774] dump_stack+0x15/0x1b [ 233.718083][T25774] dump_header+0x81/0x240 [ 233.718154][T25774] oom_kill_process+0x295/0x350 [ 233.718178][T25774] out_of_memory+0x97b/0xb80 [ 233.718210][T25774] try_charge_memcg+0x610/0xa10 [ 233.718332][T25774] obj_cgroup_charge_pages+0xa6/0x150 [ 233.718369][T25774] __memcg_kmem_charge_page+0x9f/0x170 [ 233.718398][T25774] __alloc_frozen_pages_noprof+0x18f/0x360 [ 233.718430][T25774] alloc_pages_mpol+0xb3/0x260 [ 233.718620][T25774] alloc_pages_noprof+0x90/0x130 [ 233.718662][T25774] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 233.718702][T25774] __kvmalloc_node_noprof+0x492/0x6b0 [ 233.718730][T25774] ? ip_set_alloc+0x24/0x30 [ 233.718852][T25774] ? ip_set_alloc+0x24/0x30 [ 233.718897][T25774] ip_set_alloc+0x24/0x30 [ 233.718928][T25774] hash_netiface_create+0x282/0x740 [ 233.719003][T25774] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.719050][T25774] ip_set_create+0x3cc/0x970 [ 233.719088][T25774] ? __nla_parse+0x40/0x60 [ 233.719118][T25774] nfnetlink_rcv_msg+0x4c6/0x590 [ 233.719202][T25774] netlink_rcv_skb+0x123/0x220 [ 233.719278][T25774] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.719368][T25774] nfnetlink_rcv+0x167/0x16c0 [ 233.719398][T25774] ? kmem_cache_free+0xe3/0x3a0 [ 233.719493][T25774] ? __kfree_skb+0x109/0x150 [ 233.719522][T25774] ? nlmon_xmit+0x4f/0x60 [ 233.719550][T25774] ? consume_skb+0x49/0x150 [ 233.719611][T25774] ? nlmon_xmit+0x4f/0x60 [ 233.719645][T25774] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 233.719727][T25774] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 233.719758][T25774] ? __dev_queue_xmit+0x148/0x1ee0 [ 233.719796][T25774] ? ref_tracker_free+0x37d/0x3e0 [ 233.719879][T25774] ? __netlink_deliver_tap+0x4dc/0x500 [ 233.719967][T25774] netlink_unicast+0x5c0/0x690 [ 233.720004][T25774] netlink_sendmsg+0x58b/0x6b0 [ 233.720057][T25774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.720136][T25774] __sock_sendmsg+0x145/0x180 [ 233.720229][T25774] ____sys_sendmsg+0x31e/0x4a0 [ 233.720271][T25774] ___sys_sendmsg+0x17b/0x1d0 [ 233.720336][T25774] __x64_sys_sendmsg+0xd4/0x160 [ 233.720374][T25774] x64_sys_call+0x17ba/0x3000 [ 233.720399][T25774] do_syscall_64+0xca/0x2b0 [ 233.720446][T25774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.720546][T25774] RIP: 0033:0x7f5f9e90f749 [ 233.720570][T25774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.720592][T25774] RSP: 002b:00007f5f9d377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.720612][T25774] RAX: ffffffffffffffda RBX: 00007f5f9eb65fa0 RCX: 00007f5f9e90f749 [ 233.720638][T25774] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 233.720649][T25774] RBP: 00007f5f9e993f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.720660][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.720675][T25774] R13: 00007f5f9eb66038 R14: 00007f5f9eb65fa0 R15: 00007ffdc6dbbd28 [ 233.720698][T25774] [ 233.720704][T25774] memory: usage 307200kB, limit 307200kB, failcnt 74 [ 234.058818][T25774] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 234.066735][T25774] kmem: usage 306652kB, limit 9007199254740988kB, failcnt 0 [ 234.074049][T25774] Memory cgroup stats for /syz5: [ 234.074489][T25774] cache 0 [ 234.082466][T25774] rss 552960 [ 234.085717][T25774] shmem 0 [ 234.088705][T25774] mapped_file 0 [ 234.092176][T25774] dirty 0 [ 234.095131][T25774] writeback 0 [ 234.098462][T25774] workingset_refault_anon 0 [ 234.102988][T25774] workingset_refault_file 0 [ 234.107503][T25774] swap 0 [ 234.110386][T25774] swapcached 0 [ 234.113773][T25774] pgpgin 104947 [ 234.117296][T25774] pgpgout 104810 [ 234.120889][T25774] pgfault 138318 [ 234.124454][T25774] pgmajfault 1 [ 234.127869][T25774] inactive_anon 552960 [ 234.131952][T25774] active_anon 0 [ 234.135441][T25774] inactive_file 0 [ 234.139113][T25774] active_file 8192 [ 234.142880][T25774] unevictable 0 [ 234.146354][T25774] hierarchical_memory_limit 314572800 [ 234.151761][T25774] hierarchical_memsw_limit 9223372036854771712 [ 234.157945][T25774] total_cache 0 [ 234.161423][T25774] total_rss 552960 [ 234.165278][T25774] total_shmem 0 [ 234.168816][T25774] total_mapped_file 0 [ 234.172881][T25774] total_dirty 0 [ 234.176354][T25774] total_writeback 0 [ 234.180212][T25774] total_workingset_refault_anon 0 [ 234.185254][T25774] total_workingset_refault_file 0 [ 234.190317][T25774] total_swap 0 [ 234.193712][T25774] total_swapcached 0 [ 234.197658][T25774] total_pgpgin 104947 [ 234.201655][T25774] total_pgpgout 104810 [ 234.205739][T25774] total_pgfault 138318 [ 234.209845][T25774] total_pgmajfault 1 [ 234.213755][T25774] total_inactive_anon 552960 [ 234.218387][T25774] total_active_anon 0 [ 234.222407][T25774] total_inactive_file 0 [ 234.226586][T25774] total_active_file 8192 [ 234.230862][T25774] total_unevictable 0 [ 234.234934][T25774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.10255,pid=25773,uid=0 [ 234.249864][T25774] Memory cgroup out of memory: Killed process 25774 (syz.5.10255) total-vm:95884kB, anon-rss:1136kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 234.357855][T25774] syz.5.10255 (25774) used greatest stack depth: 8088 bytes left [ 234.375886][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10270'. [ 234.398589][T25811] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 234.406173][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10270'. [ 234.503542][T25819] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10261'. [ 234.579096][T25823] pimreg: entered allmulticast mode [ 234.609940][T25823] pimreg: left allmulticast mode [ 234.968604][T25845] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 234.970495][T25843] loop5: detected capacity change from 0 to 512 [ 234.983451][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 234.983467][ T29] audit: type=1400 audit(234.968:3355): avc: denied { mounton } for pid=25840 comm="syz.5.10274" path="/874/file1" dev="tmpfs" ino=4496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 235.070396][ T29] audit: type=1400 audit(235.058:3356): avc: denied { read write } for pid=25850 comm="syz.0.10279" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.071508][T25851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.107677][ T29] audit: type=1400 audit(235.058:3357): avc: denied { open } for pid=25850 comm="syz.0.10279" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.130964][ T29] audit: type=1400 audit(235.058:3358): avc: denied { ioctl } for pid=25850 comm="syz.0.10279" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.155943][T25851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.166681][ T29] audit: type=1400 audit(235.118:3359): avc: denied { create } for pid=25852 comm="syz.5.10280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.185869][ T29] audit: type=1400 audit(235.118:3360): avc: denied { bind } for pid=25852 comm="syz.5.10280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.204773][ T29] audit: type=1400 audit(235.118:3361): avc: denied { getopt } for pid=25852 comm="syz.5.10280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.223983][ T29] audit: type=1400 audit(235.148:3362): avc: denied { getopt } for pid=25850 comm="syz.0.10279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.367834][ T5467] usb usb8-port7: attempt power cycle [ 235.697193][ T29] audit: type=1326 audit(235.678:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9e90f749 code=0x7ffc0000 [ 235.720334][ T29] audit: type=1326 audit(235.678:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.10292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9e90f749 code=0x7ffc0000 [ 237.187845][ T5467] usb usb8-port7: unable to enumerate USB device [ 237.225151][ T3315] Process accounting resumed [ 237.267652][T25878] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 237.667229][T25882] syz.0.10291 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 237.681987][T25882] CPU: 1 UID: 0 PID: 25882 Comm: syz.0.10291 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.682034][T25882] Tainted: [W]=WARN [ 237.682043][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.682059][T25882] Call Trace: [ 237.682067][T25882] [ 237.682076][T25882] __dump_stack+0x1d/0x30 [ 237.682107][T25882] dump_stack_lvl+0x95/0xd0 [ 237.682196][T25882] dump_stack+0x15/0x1b [ 237.682224][T25882] dump_header+0x81/0x240 [ 237.682247][T25882] oom_kill_process+0x295/0x350 [ 237.682272][T25882] out_of_memory+0x97b/0xb80 [ 237.682348][T25882] try_charge_memcg+0x610/0xa10 [ 237.682487][T25882] obj_cgroup_charge_pages+0xa6/0x150 [ 237.682526][T25882] __memcg_kmem_charge_page+0x9f/0x170 [ 237.682587][T25882] __alloc_frozen_pages_noprof+0x18f/0x360 [ 237.682621][T25882] alloc_pages_bulk_noprof+0x4b9/0x540 [ 237.682700][T25882] ? policy_nodemask+0x2a5/0x420 [ 237.682808][T25882] alloc_pages_bulk_mempolicy_noprof+0x2e3/0xb00 [ 237.682857][T25882] ? alloc_pages_mpol+0x217/0x260 [ 237.682891][T25882] __vmalloc_node_range_noprof+0x899/0x1310 [ 237.683000][T25882] __kvmalloc_node_noprof+0x492/0x6b0 [ 237.683034][T25882] ? ip_set_alloc+0x24/0x30 [ 237.683082][T25882] ? ip_set_alloc+0x24/0x30 [ 237.683174][T25882] ip_set_alloc+0x24/0x30 [ 237.683258][T25882] hash_netiface_create+0x282/0x740 [ 237.683305][T25882] ? __pfx_hash_netiface_create+0x10/0x10 [ 237.683432][T25882] ip_set_create+0x3cc/0x970 [ 237.683468][T25882] ? __nla_parse+0x40/0x60 [ 237.683500][T25882] nfnetlink_rcv_msg+0x4c6/0x590 [ 237.683586][T25882] netlink_rcv_skb+0x123/0x220 [ 237.683627][T25882] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 237.683662][T25882] nfnetlink_rcv+0x167/0x16c0 [ 237.683716][T25882] ? kmem_cache_free+0xe3/0x3a0 [ 237.683750][T25882] ? __kfree_skb+0x109/0x150 [ 237.683784][T25882] ? nlmon_xmit+0x4f/0x60 [ 237.683842][T25882] ? consume_skb+0x49/0x150 [ 237.683866][T25882] ? nlmon_xmit+0x4f/0x60 [ 237.683885][T25882] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 237.683987][T25882] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 237.684025][T25882] ? __dev_queue_xmit+0x148/0x1ee0 [ 237.684066][T25882] ? ref_tracker_free+0x37d/0x3e0 [ 237.684103][T25882] ? __netlink_deliver_tap+0x4dc/0x500 [ 237.684166][T25882] netlink_unicast+0x5c0/0x690 [ 237.684198][T25882] netlink_sendmsg+0x58b/0x6b0 [ 237.684311][T25882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.684416][T25882] __sock_sendmsg+0x145/0x180 [ 237.684444][T25882] ____sys_sendmsg+0x31e/0x4a0 [ 237.684481][T25882] ___sys_sendmsg+0x17b/0x1d0 [ 237.684603][T25882] __x64_sys_sendmsg+0xd4/0x160 [ 237.684736][T25882] x64_sys_call+0x17ba/0x3000 [ 237.684772][T25882] do_syscall_64+0xca/0x2b0 [ 237.684906][T25882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.684957][T25882] RIP: 0033:0x7fa1b399f749 [ 237.684979][T25882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.685015][T25882] RSP: 002b:00007fa1b2407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.685043][T25882] RAX: ffffffffffffffda RBX: 00007fa1b3bf5fa0 RCX: 00007fa1b399f749 [ 237.685060][T25882] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 237.685078][T25882] RBP: 00007fa1b3a23f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.685094][T25882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.685111][T25882] R13: 00007fa1b3bf6038 R14: 00007fa1b3bf5fa0 R15: 00007ffcc328aa38 [ 237.685137][T25882] [ 237.685147][T25882] memory: usage 307200kB, limit 307200kB, failcnt 72 [ 237.797011][T25888] lo speed is unknown, defaulting to 1000 [ 237.800002][T25882] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 237.800022][T25882] kmem: usage 305536kB, limit 9007199254740988kB, failcnt 0 [ 237.800039][T25882] Memory cgroup stats for /syz0: [ 237.828069][T25882] cache 57344 [ 238.063781][T25882] rss 1630208 [ 238.067080][T25882] shmem 0 [ 238.070137][T25882] mapped_file 57344 [ 238.073939][T25882] dirty 57344 [ 238.077259][T25882] writeback 0 [ 238.080566][T25882] workingset_refault_anon 0 [ 238.085062][T25882] workingset_refault_file 0 [ 238.089580][T25882] swap 0 [ 238.092465][T25882] swapcached 0 [ 238.095867][T25882] pgpgin 227530 [ 238.099374][T25882] pgpgout 227114 [ 238.102989][T25882] pgfault 279137 [ 238.106530][T25882] pgmajfault 3 [ 238.109914][T25882] inactive_anon 1626112 [ 238.114137][T25882] active_anon 4096 [ 238.117898][T25882] inactive_file 0 [ 238.121572][T25882] active_file 73728 [ 238.125402][T25882] unevictable 0 [ 238.128910][T25882] hierarchical_memory_limit 314572800 [ 238.134298][T25882] hierarchical_memsw_limit 9223372036854771712 [ 238.140495][T25882] total_cache 57344 [ 238.144311][T25882] total_rss 1630208 [ 238.148165][T25882] total_shmem 0 [ 238.151702][T25882] total_mapped_file 57344 [ 238.156083][T25882] total_dirty 57344 [ 238.159935][T25882] total_writeback 0 [ 238.163830][T25882] total_workingset_refault_anon 0 [ 238.168924][T25882] total_workingset_refault_file 0 [ 238.173986][T25882] total_swap 0 [ 238.177419][T25882] total_swapcached 0 [ 238.181344][T25882] total_pgpgin 227530 [ 238.185344][T25882] total_pgpgout 227114 [ 238.189479][T25882] total_pgfault 279137 [ 238.193565][T25882] total_pgmajfault 3 [ 238.197474][T25882] total_inactive_anon 1626112 [ 238.202188][T25882] total_active_anon 4096 [ 238.206442][T25882] total_inactive_file 0 [ 238.210695][T25882] total_active_file 73728 [ 238.215059][T25882] total_unevictable 0 [ 238.219067][T25882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10291,pid=25881,uid=0 [ 238.233875][T25882] Memory cgroup out of memory: Killed process 25882 (syz.0.10291) total-vm:95884kB, anon-rss:1140kB, file-rss:21992kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 238.283945][T25882] syz.0.10291 (25882) used greatest stack depth: 8040 bytes left [ 238.433945][ T31] tipc: Resetting bearer [ 238.478961][ T31] tipc: Disabling bearer [ 238.553017][T25945] netlink: 'syz.2.10318': attribute type 1 has an invalid length. [ 238.560942][T25945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10318'. [ 238.629410][ T31] bond0 (unregistering): Released all slaves [ 238.636455][T25959] netlink: 'syz.2.10325': attribute type 1 has an invalid length. [ 238.644437][T25959] netlink: 'syz.2.10325': attribute type 2 has an invalid length. [ 238.658832][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10325'. [ 238.669276][T25942] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.724209][T25888] chnl_net:caif_netlink_parms(): no params data found [ 238.797289][T25942] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.837286][T25982] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 238.851301][T25979] loop2: detected capacity change from 0 to 2048 [ 238.860263][T25888] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.867534][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.876081][T25888] bridge_slave_0: entered allmulticast mode [ 238.883739][T25888] bridge_slave_0: entered promiscuous mode [ 238.890293][T25979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.895082][T25984] netlink: 'syz.1.10335': attribute type 1 has an invalid length. [ 238.904247][T25888] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.910300][T25984] netlink: 'syz.1.10335': attribute type 2 has an invalid length. [ 238.917371][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.919055][T25888] bridge_slave_1: entered allmulticast mode [ 238.939350][T25888] bridge_slave_1: entered promiscuous mode [ 238.951800][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10335'. [ 238.969364][T25942] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.000960][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.023424][T25888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.033920][T25888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.053499][T25942] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.109580][T25888] team0: Port device team_slave_0 added [ 239.119570][T25888] team0: Port device team_slave_1 added [ 239.140912][T25999] lo speed is unknown, defaulting to 1000 [ 239.160285][T25888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.167398][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.193559][T25888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.204355][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.225310][T25888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.232368][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.258529][T25888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.273935][ T385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.290023][ T385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.313219][ T385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.336831][T25888] hsr_slave_0: entered promiscuous mode [ 239.351389][T25888] hsr_slave_1: entered promiscuous mode [ 239.362626][T25888] debugfs: 'hsr0' already exists in 'hsr' [ 239.368442][T25888] Cannot create hsr debugfs directory [ 239.511772][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10357'. [ 239.531484][T26036] loop2: detected capacity change from 0 to 1024 [ 239.539347][T26036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.550573][T26036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 239.567146][T25888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.574131][T26036] System zones: 0-1, 3-36 [ 239.583955][T26036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.598551][T25888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.610730][T25888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.633695][T25888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.641301][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.663288][T25888] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.670408][T25888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.677733][T25888] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.684877][T25888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.697737][T26057] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10364'. [ 239.719840][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10372'. [ 239.733407][T26053] lo speed is unknown, defaulting to 1000 [ 239.768310][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.778379][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.814956][T25888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.828394][T25888] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.838712][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.845898][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.858341][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.865395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.930682][T25888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.036341][T25888] veth0_vlan: entered promiscuous mode [ 240.044518][T25888] veth1_vlan: entered promiscuous mode [ 240.060922][T25888] veth0_macvtap: entered promiscuous mode [ 240.068663][T25888] veth1_macvtap: entered promiscuous mode [ 240.080826][T25888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.093143][T25888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.104179][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.113262][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.122294][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.131549][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.150789][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 240.150870][ T29] audit: type=1400 audit(240.138:3420): avc: denied { mounton } for pid=25888 comm="syz-executor" path="/root/syzkaller.orOPPD/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 240.181132][ T29] audit: type=1400 audit(240.138:3421): avc: denied { mount } for pid=25888 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.202824][ T29] audit: type=1400 audit(240.138:3422): avc: denied { mount } for pid=25888 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.224319][ T29] audit: type=1400 audit(240.138:3423): avc: denied { mounton } for pid=25888 comm="syz-executor" path="/root/syzkaller.orOPPD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 240.250671][ T29] audit: type=1400 audit(240.138:3424): avc: denied { mounton } for pid=25888 comm="syz-executor" path="/root/syzkaller.orOPPD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 240.278190][ T29] audit: type=1400 audit(240.168:3425): avc: denied { mounton } for pid=25888 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 240.300629][ T29] audit: type=1400 audit(240.168:3426): avc: denied { mount } for pid=25888 comm="syz-executor" name="/" dev="gadgetfs" ino=4462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 240.342722][T26086] loop6: detected capacity change from 0 to 512 [ 240.420925][ T29] audit: type=1326 audit(240.408:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26101 comm="syz.6.10374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8eddf749 code=0x7ffc0000 [ 240.459902][ T29] audit: type=1400 audit(240.428:3428): avc: denied { read write } for pid=26105 comm="syz.0.10376" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 240.483896][ T29] audit: type=1400 audit(240.428:3429): avc: denied { open } for pid=26105 comm="syz.0.10376" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 240.515281][T26112] loop2: detected capacity change from 0 to 512 [ 240.523351][T26112] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 240.534592][T26112] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10383: bg 0: block 255: padding at end of block bitmap is not set [ 240.562843][T26119] No control pipe specified [ 240.575808][T26112] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 240.588072][T26112] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10383: invalid indirect mapped block 1 (level 1) [ 240.602072][T26112] EXT4-fs (loop2): 1 truncate cleaned up [ 240.608347][T26112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.656875][T26127] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10389'. [ 240.668200][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.743411][T26146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10396'. [ 240.787505][T26151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10398'. [ 240.796697][T26151] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10398'. [ 240.806865][T26151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10398'. [ 240.816414][T26151] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10398'. [ 240.825690][T26151] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10398'. [ 240.938956][T26173] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 241.068320][T26196] netlink: 'syz.6.10419': attribute type 1 has an invalid length. [ 241.106727][T26201] Process accounting paused [ 241.184838][T26217] loop6: detected capacity change from 0 to 2048 [ 241.218449][T26217] loop6: p1 < > p4 [ 241.228337][T26217] loop6: p4 size 8388608 extends beyond EOD, truncated [ 241.249853][ T37] ================================================================== [ 241.257992][ T37] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 241.266553][ T37] [ 241.268900][ T37] write to 0xffff88813d75a108 of 44 bytes by task 26227 on cpu 1: [ 241.276740][ T37] tty_set_termios+0xc0/0x8c0 [ 241.281453][ T37] set_termios+0x35b/0x4d0 [ 241.285896][ T37] tty_mode_ioctl+0x379/0x5c0 [ 241.290605][ T37] n_tty_ioctl_helper+0x91/0x210 [ 241.295570][ T37] n_tty_ioctl+0x101/0x230 [ 241.300013][ T37] tty_ioctl+0x83f/0xb80 [ 241.304268][ T37] __se_sys_ioctl+0xce/0x140 [ 241.308889][ T37] __x64_sys_ioctl+0x43/0x50 [ 241.313502][ T37] x64_sys_call+0x14b0/0x3000 [ 241.318202][ T37] do_syscall_64+0xca/0x2b0 [ 241.322731][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.328643][ T37] [ 241.330982][ T37] read to 0xffff88813d75a122 of 1 bytes by task 37 on cpu 0: [ 241.338358][ T37] n_tty_receive_char_flow_ctrl+0x59/0x1d0 [ 241.344191][ T37] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 241.349756][ T37] tty_port_default_lookahead_buf+0x91/0xc0 [ 241.355679][ T37] flush_to_ldisc+0x288/0x340 [ 241.360396][ T37] process_scheduled_works+0x4ce/0x9d0 [ 241.365887][ T37] worker_thread+0x582/0x770 [ 241.370506][ T37] kthread+0x489/0x510 [ 241.374607][ T37] ret_from_fork+0x149/0x290 [ 241.379229][ T37] ret_from_fork_asm+0x1a/0x30 [ 241.384022][ T37] [ 241.386352][ T37] value changed: 0x47 -> 0x00 [ 241.391042][ T37] [ 241.393371][ T37] Reported by Kernel Concurrency Sanitizer on: [ 241.399546][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.410851][ T37] Tainted: [W]=WARN [ 241.414674][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.424749][ T37] Workqueue: events_unbound flush_to_ldisc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.430580][ T37] ================================================================== [ 241.757861][T22508] bond0: (slave syz_tun): Releasing backup interface