last executing test programs: 1m4.125590194s ago: executing program 4 (id=76): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 1m3.969820425s ago: executing program 4 (id=81): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="a7", 0x1, 0x44001, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1m3.875891196s ago: executing program 4 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m3.828676776s ago: executing program 4 (id=84): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m3.621651207s ago: executing program 4 (id=86): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m3.597376707s ago: executing program 4 (id=87): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 52.881311165s ago: executing program 3 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000600), &(0x7f0000000680)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) nanosleep(&(0x7f00000004c0), 0x0) 52.796651235s ago: executing program 3 (id=411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2d41, 0xd2) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 52.769493935s ago: executing program 3 (id=412): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) 51.767228351s ago: executing program 3 (id=430): unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 51.692508621s ago: executing program 3 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 51.616105472s ago: executing program 3 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000ff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000200)=')', &(0x7f0000000080)=""/59}, 0x20) 48.564009508s ago: executing program 32 (id=87): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 36.597852933s ago: executing program 33 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000ff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000200)=')', &(0x7f0000000080)=""/59}, 0x20) 2.204108648s ago: executing program 0 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000020000200130003"], 0x98}, 0x1, 0x7}, 0x0) 2.145765809s ago: executing program 2 (id=1769): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @empty, 'macvlan0\x00'}}, 0x80, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.135322998s ago: executing program 0 (id=1770): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 2.067548699s ago: executing program 2 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 2.012435059s ago: executing program 2 (id=1776): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)) 1.545153041s ago: executing program 0 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1.163225134s ago: executing program 2 (id=1796): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103201, 0x71) pread64(r1, &(0x7f00000006c0)=""/124, 0x71, 0x41) 1.158767224s ago: executing program 0 (id=1807): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 959.510275ms ago: executing program 5 (id=1806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 911.892715ms ago: executing program 5 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 891.730315ms ago: executing program 5 (id=1813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 738.656296ms ago: executing program 5 (id=1817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) 684.037466ms ago: executing program 1 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='leases_conflict\x00', r1, 0x0, 0xbe}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 682.642216ms ago: executing program 6 (id=1821): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x0, 0x7, 0xc, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0xd, 0x0, 0xe5, 0xffffffffffffffff, 0xb}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 671.999467ms ago: executing program 5 (id=1822): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x80228, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 647.279956ms ago: executing program 0 (id=1823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 644.116756ms ago: executing program 1 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 584.704977ms ago: executing program 6 (id=1825): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 584.408897ms ago: executing program 0 (id=1826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x4008, 0x4) 555.365267ms ago: executing program 6 (id=1827): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0xac9, &(0x7f0000000280)={0x0, 0x8352, 0x2, 0x3, 0xcb}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x10002, 0x1}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 554.975507ms ago: executing program 1 (id=1828): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 515.358497ms ago: executing program 1 (id=1829): creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 306.174998ms ago: executing program 2 (id=1830): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xfffffffff7ff8518]}, 0xffffffffffffffff, 0x0, 0x8) 120.39693ms ago: executing program 6 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x1ff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}]}}}]}, 0x40}}, 0x4008040) 120.049549ms ago: executing program 1 (id=1832): syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 91.072559ms ago: executing program 6 (id=1833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 63.58657ms ago: executing program 6 (id=1834): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 566.2µs ago: executing program 2 (id=1835): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) 240.22µs ago: executing program 1 (id=1836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 0s ago: executing program 5 (id=1837): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): policy [ 48.136803][ T4161] program syz.2.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.157372][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 48.412232][ T4192] loop1: detected capacity change from 0 to 128 [ 48.429875][ T4193] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 48.443645][ T4192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.466358][ T4192] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.575902][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.933304][ T4221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.933449][ T4221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.562160][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 49.562177][ T29] audit: type=1326 audit(1762695834.047:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 49.616176][ T29] audit: type=1326 audit(1762695834.047:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 49.639622][ T29] audit: type=1326 audit(1762695834.047:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 49.662869][ T29] audit: type=1326 audit(1762695834.047:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 49.686211][ T29] audit: type=1326 audit(1762695834.057:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 49.709503][ T29] audit: type=1326 audit(1762695834.087:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 49.733034][ T29] audit: type=1326 audit(1762695834.087:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 49.756333][ T29] audit: type=1326 audit(1762695834.087:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 49.780564][ T29] audit: type=1326 audit(1762695834.087:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 49.803948][ T29] audit: type=1326 audit(1762695834.087:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 49.892715][ T4260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4260 comm=syz.1.327 [ 49.897279][ T4262] capability: warning: `syz.2.328' uses deprecated v2 capabilities in a way that may be insecure [ 49.905155][ T4260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4260 comm=syz.1.327 [ 50.320309][ T4293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.411840][ T4293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.509053][ T4293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.559252][ T4293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.623568][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.644613][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.683958][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706179][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.282902][ T4346] syzkaller1: entered promiscuous mode [ 51.288571][ T4346] syzkaller1: entered allmulticast mode [ 51.315081][ T4348] loop2: detected capacity change from 0 to 128 [ 51.338961][ T4348] vfat: Unknown parameter '0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿþ.Ï ©¡{Òí~€?ƒuÁP¡øHöÂÁù2Ò·;ä²¹¥½R\ûîU['`…”¾ºc%’:¯]·Lÿ' [ 51.769245][ T4377] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 51.769454][ T4379] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 51.797701][ T4379] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 51.807718][ T4377] bond1: entered promiscuous mode [ 51.822739][ T4377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.843468][ T4382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.868195][ T4382] bond1: (slave bond2): making interface the new active one [ 51.875522][ T4382] bond2: entered promiscuous mode [ 51.906907][ T4382] bond1: (slave bond2): Enslaving as an active interface with an up link [ 52.215702][ T4410] unsupported nla_type 52263 [ 52.691827][ T4505] loop2: detected capacity change from 0 to 512 [ 52.713916][ T4505] EXT4-fs: Ignoring removed bh option [ 52.729764][ T4505] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.759690][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 52.765937][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.805416][ T4505] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.864928][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.193931][ T4524] xt_hashlimit: max too large, truncated to 1048576 [ 53.338084][ T4534] __nla_validate_parse: 5 callbacks suppressed [ 53.338099][ T4534] netlink: 172 bytes leftover after parsing attributes in process `syz.0.421'. [ 53.499856][ T4545] batadv_slave_1: entered promiscuous mode [ 53.517004][ T4544] batadv_slave_1: left promiscuous mode [ 53.709906][ T4551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.811333][ T4551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.869873][ T4551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.929378][ T4551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.004632][ T4462] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.014806][ T4462] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.045095][ T4462] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.064212][ T4565] loop2: detected capacity change from 0 to 1024 [ 54.065366][ T4462] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.094773][ T4565] EXT4-fs: Ignoring removed orlov option [ 54.117526][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.198942][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.427528][ T4592] vhci_hcd: default hub control req: 2313 v4002 i0001 l0 [ 54.487331][ T4594] hub 8-0:1.0: USB hub found [ 54.506461][ T4594] hub 8-0:1.0: 8 ports detected [ 54.800691][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 54.800712][ T29] audit: type=1400 audit(1762695839.287:639): avc: denied { create } for pid=4602 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.845044][ T29] audit: type=1400 audit(1762695839.317:640): avc: denied { bind } for pid=4602 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.864365][ T29] audit: type=1400 audit(1762695839.317:641): avc: denied { name_bind } for pid=4602 comm="syz.2.452" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.885028][ T29] audit: type=1400 audit(1762695839.317:642): avc: denied { node_bind } for pid=4602 comm="syz.2.452" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 54.993430][ T29] audit: type=1400 audit(1762695839.457:643): avc: denied { create } for pid=4606 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.012953][ T29] audit: type=1400 audit(1762695839.457:644): avc: denied { ioctl } for pid=4606 comm="syz.1.454" path="socket:[8742]" dev="sockfs" ino=8742 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.092607][ T29] audit: type=1326 audit(1762695839.577:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 55.137295][ T29] audit: type=1326 audit(1762695839.577:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 55.160849][ T29] audit: type=1326 audit(1762695839.577:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 55.184257][ T29] audit: type=1326 audit(1762695839.577:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 55.600999][ T4640] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.469'. [ 55.636225][ T4640] netlink: zone id is out of range [ 55.641374][ T4640] netlink: zone id is out of range [ 55.666250][ T4640] netlink: zone id is out of range [ 55.671500][ T4640] netlink: del zone limit has 8 unknown bytes [ 56.436521][ T4651] hub 8-0:1.0: USB hub found [ 56.441248][ T4651] hub 8-0:1.0: 8 ports detected [ 56.734110][ T4668] bridge_slave_0: left allmulticast mode [ 56.739852][ T4668] bridge_slave_0: left promiscuous mode [ 56.745509][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.755658][ T4668] bridge_slave_1: left allmulticast mode [ 56.761512][ T4668] bridge_slave_1: left promiscuous mode [ 56.767374][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.806974][ T4668] bond0: (slave bond_slave_0): Releasing backup interface [ 56.827898][ T4668] bond0: (slave bond_slave_1): Releasing backup interface [ 56.841622][ T4668] team0: Port device team_slave_0 removed [ 56.851053][ T4668] team0: Port device team_slave_1 removed [ 56.858649][ T4668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.866146][ T4668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.875525][ T4668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.883012][ T4668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.897337][ T4668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.899799][ T4675] netlink: 'syz.2.484': attribute type 4 has an invalid length. [ 57.126766][ T4688] ALSA: seq fatal error: cannot create timer (-19) [ 57.232449][ T4431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.264729][ T4712] macvtap0: entered promiscuous mode [ 57.286679][ T4712] macvtap0: left promiscuous mode [ 57.311478][ T4431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.417026][ T4431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.546784][ T4431] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.609717][ T4690] chnl_net:caif_netlink_parms(): no params data found [ 57.734262][ T4431] bond1: left allmulticast mode [ 57.739218][ T4431] bond1: left promiscuous mode [ 57.744226][ T4431] bridge0: port 3(bond1) entered disabled state [ 57.810200][ T4431] bridge_slave_1: left allmulticast mode [ 57.815891][ T4431] bridge_slave_1: left promiscuous mode [ 57.821871][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.860498][ T4431] bridge_slave_0: left allmulticast mode [ 57.866224][ T4431] bridge_slave_0: left promiscuous mode [ 57.871949][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.049060][ T4431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.067523][ T4431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.087609][ T4431] bond0 (unregistering): Released all slaves [ 58.107161][ T4431] bond1 (unregistering): Released all slaves [ 58.130884][ T4743] macvtap0: entered promiscuous mode [ 58.137912][ T4743] macvtap0: left promiscuous mode [ 58.175845][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.183020][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.206845][ T4690] bridge_slave_0: entered allmulticast mode [ 58.233181][ T4690] bridge_slave_0: entered promiscuous mode [ 58.251977][ T4431] hsr_slave_0: left promiscuous mode [ 58.257794][ T4431] hsr_slave_1: left promiscuous mode [ 58.274067][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.281687][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.299630][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.307118][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.333248][ T4431] veth1_macvtap: left promiscuous mode [ 58.342220][ T4431] veth0_macvtap: left promiscuous mode [ 58.353284][ T4431] veth1_vlan: left promiscuous mode [ 58.364068][ T4431] veth0_vlan: left promiscuous mode [ 58.501109][ T4431] team0 (unregistering): Port device team_slave_1 removed [ 58.518731][ T4431] team0 (unregistering): Port device team_slave_0 removed [ 58.595301][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.602584][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.624877][ T4690] bridge_slave_1: entered allmulticast mode [ 58.637469][ T4690] bridge_slave_1: entered promiscuous mode [ 58.683560][ T4690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.714434][ T4690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.755869][ T4690] team0: Port device team_slave_0 added [ 58.767331][ T4690] team0: Port device team_slave_1 added [ 58.805440][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.812486][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.838458][ T4690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.850110][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.857207][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.883195][ T4690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.908536][ T4431] IPVS: stop unused estimator thread 0... [ 58.962208][ T4690] hsr_slave_0: entered promiscuous mode [ 58.981534][ T4690] hsr_slave_1: entered promiscuous mode [ 59.122483][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 59.131384][ T4761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 59.173771][ T4690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.193636][ T4690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.216272][ T4690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.228114][ T4690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.254933][ T4767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.325205][ T4690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.350957][ T4690] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.361373][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.368493][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.417857][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.424981][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.476399][ T4690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.515608][ T4690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.532430][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 59.756438][ T4690] veth0_vlan: entered promiscuous mode [ 59.774567][ T4690] veth1_vlan: entered promiscuous mode [ 59.804904][ T4690] veth0_macvtap: entered promiscuous mode [ 59.814207][ T4827] loop1: detected capacity change from 0 to 2048 [ 59.822212][ T4690] veth1_macvtap: entered promiscuous mode [ 59.850237][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.860300][ T4827] Alternate GPT is invalid, using primary GPT. [ 59.866686][ T4827] loop1: p1 p2 p3 [ 59.870314][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.883507][ T4431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.893440][ T4431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.893529][ T4431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.916425][ T4431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958114][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 59.958139][ T29] audit: type=1400 audit(1762695844.447:749): avc: denied { mounton } for pid=4690 comm="syz-executor" path="/root/syzkaller.YIbnGx/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.027566][ T29] audit: type=1400 audit(1762695844.477:750): avc: denied { mount } for pid=4690 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.049730][ T29] audit: type=1400 audit(1762695844.477:751): avc: denied { mounton } for pid=4690 comm="syz-executor" path="/root/syzkaller.YIbnGx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.076411][ T29] audit: type=1400 audit(1762695844.477:752): avc: denied { mounton } for pid=4690 comm="syz-executor" path="/root/syzkaller.YIbnGx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.103967][ T29] audit: type=1400 audit(1762695844.477:753): avc: denied { mounton } for pid=4690 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.126882][ T29] audit: type=1400 audit(1762695844.487:754): avc: denied { mount } for pid=4690 comm="syz-executor" name="/" dev="gadgetfs" ino=4762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.150620][ T29] audit: type=1326 audit(1762695844.537:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 60.174131][ T29] audit: type=1326 audit(1762695844.537:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 60.197749][ T29] audit: type=1326 audit(1762695844.537:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 60.221275][ T29] audit: type=1326 audit(1762695844.597:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 60.293046][ T4845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.456728][ T4857] loop2: detected capacity change from 0 to 512 [ 60.474969][ T4862] loop1: detected capacity change from 0 to 128 [ 60.482057][ T4857] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.547: error while reading EA inode 32 err=-116 [ 60.495452][ T4857] EXT4-fs (loop2): Remounting filesystem read-only [ 60.502361][ T4857] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 60.512708][ T4857] EXT4-fs (loop2): 1 orphan inode deleted [ 60.519305][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.547643][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.578536][ T4867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.550'. [ 60.751819][ T4865] bio_check_eod: 250 callbacks suppressed [ 60.751857][ T4865] syz.1.549: attempt to access beyond end of device [ 60.751857][ T4865] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.771148][ T4865] buffer_io_error: 18 callbacks suppressed [ 60.771210][ T4865] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.786562][ T4862] syz.1.549: attempt to access beyond end of device [ 60.786562][ T4862] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.800050][ T4862] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.811814][ T4862] syz.1.549: attempt to access beyond end of device [ 60.811814][ T4862] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.825278][ T4862] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.901352][ T4877] loop2: detected capacity change from 0 to 128 [ 60.940872][ T4877] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.004684][ T4877] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.049156][ T4884] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 61.059682][ T3395] hid_parser_main: 43 callbacks suppressed [ 61.059698][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 61.073089][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.080631][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.088163][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.095586][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.103023][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.112815][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.120282][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.127786][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 61.135198][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.163565][ T3395] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 61.175498][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.205815][ T4890] loop2: detected capacity change from 0 to 256 [ 61.225602][ T4474] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.240573][ T4890] FAT-fs (loop2): Directory bread(block 64) failed [ 61.256884][ T4890] FAT-fs (loop2): Directory bread(block 65) failed [ 61.273622][ T4890] FAT-fs (loop2): Directory bread(block 66) failed [ 61.304518][ T4890] FAT-fs (loop2): Directory bread(block 67) failed [ 61.324275][ T4890] FAT-fs (loop2): Directory bread(block 68) failed [ 61.338003][ T4901] loop5: detected capacity change from 0 to 512 [ 61.350158][ T4890] FAT-fs (loop2): Directory bread(block 69) failed [ 61.356963][ T4890] FAT-fs (loop2): Directory bread(block 70) failed [ 61.363534][ T4890] FAT-fs (loop2): Directory bread(block 71) failed [ 61.370208][ T4890] FAT-fs (loop2): Directory bread(block 72) failed [ 61.371679][ T4901] EXT4-fs: Ignoring removed orlov option [ 61.376823][ T4890] FAT-fs (loop2): Directory bread(block 73) failed [ 61.408307][ T4901] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 61.422307][ T4901] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.566: corrupted in-inode xattr: e_value size too large [ 61.444312][ T4890] syz.2.561: attempt to access beyond end of device [ 61.444312][ T4890] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 61.458580][ T4901] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.566: couldn't read orphan inode 15 (err -117) [ 61.482653][ T4901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.563227][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.635216][ T4920] netlink: 56 bytes leftover after parsing attributes in process `syz.0.573'. [ 61.739674][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 61.769054][ T4932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.579'. [ 62.053187][ T4948] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 62.095959][ T4950] netlink: 'syz.2.588': attribute type 12 has an invalid length. [ 62.240953][ T4958] pim6reg: entered allmulticast mode [ 62.263601][ T4958] pim6reg: left allmulticast mode [ 62.944808][ T4984] loop2: detected capacity change from 0 to 164 [ 62.962983][ T4984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.997655][ T4984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.026426][ T4984] Symlink component flag not implemented [ 63.032101][ T4984] Symlink component flag not implemented [ 63.066177][ T4984] Symlink component flag not implemented (7) [ 63.072220][ T4984] Symlink component flag not implemented (116) [ 63.296251][ T4893] Bluetooth: hci0: command 0x1003 tx timeout [ 63.302306][ T3580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.515640][ T5010] loop0: detected capacity change from 0 to 128 [ 63.536181][ T5010] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.544146][ T5010] FAT-fs (loop0): Filesystem has been set read-only [ 63.556116][ T5010] syz.0.616: attempt to access beyond end of device [ 63.556116][ T5010] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.596141][ T5010] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.604005][ T5010] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.636234][ T5010] syz.0.616: attempt to access beyond end of device [ 63.636234][ T5010] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.676127][ T5010] syz.0.616: attempt to access beyond end of device [ 63.676127][ T5010] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.689805][ T5010] syz.0.616: attempt to access beyond end of device [ 63.689805][ T5010] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.703095][ T5010] syz.0.616: attempt to access beyond end of device [ 63.703095][ T5010] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.716699][ T5010] syz.0.616: attempt to access beyond end of device [ 63.716699][ T5010] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.939765][ T5022] loop5: detected capacity change from 0 to 512 [ 63.961556][ T5022] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.977210][ T5024] loop1: detected capacity change from 0 to 512 [ 64.008636][ T5024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.041455][ T5024] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.093903][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.137502][ T5032] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.186846][ T5002] syz.2.613 (5002) used greatest stack depth: 10064 bytes left [ 64.197274][ T5037] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 64.199345][ T5032] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.205231][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 64.297793][ T5032] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.357769][ T5032] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.430438][ T4487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.438934][ T4487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.472521][ T4485] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.484291][ T4485] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.520359][ T5055] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 64.579653][ T5062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.604972][ T5062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.747639][ T5052] netlink: 'syz.5.635': attribute type 4 has an invalid length. [ 64.753712][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 64.769536][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 64.797240][ T5077] SELinux: Context › is not valid (left unmapped). [ 64.888483][ T5087] netlink: 'syz.5.652': attribute type 12 has an invalid length. [ 64.966968][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 64.967062][ T29] audit: type=1326 audit(1762695849.457:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 64.997999][ T29] audit: type=1326 audit(1762695849.457:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.021653][ T29] audit: type=1326 audit(1762695849.487:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.021705][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 65.044927][ T29] audit: type=1326 audit(1762695849.487:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.044966][ T29] audit: type=1326 audit(1762695849.487:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.101357][ T29] audit: type=1326 audit(1762695849.507:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.124811][ T29] audit: type=1326 audit(1762695849.547:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.148710][ T29] audit: type=1326 audit(1762695849.547:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.172356][ T29] audit: type=1326 audit(1762695849.587:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.196389][ T29] audit: type=1326 audit(1762695849.587:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 65.300770][ T5105] loop5: detected capacity change from 0 to 2048 [ 65.317220][ T5107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.341945][ T5107] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.354775][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.457634][ T5116] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 65.511511][ T5105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 65.538739][ T5121] vhci_hcd: default hub control req: 2313 v4002 i0001 l0 [ 65.558393][ T5105] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 65.570931][ T5105] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.570931][ T5105] [ 65.580711][ T5105] EXT4-fs (loop5): Total free blocks count 0 [ 65.586843][ T5105] EXT4-fs (loop5): Free/Dirty block details [ 65.592748][ T5105] EXT4-fs (loop5): free_blocks=4096 [ 65.598193][ T5105] EXT4-fs (loop5): dirty_blocks=592 [ 65.603408][ T5105] EXT4-fs (loop5): Block reservation details [ 65.609458][ T5105] EXT4-fs (loop5): i_reserved_data_blocks=37 [ 65.651580][ T5105] syz.5.660 (5105) used greatest stack depth: 9880 bytes left [ 65.666589][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.896425][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 66.007154][ T5130] loop2: detected capacity change from 0 to 32768 [ 66.056615][ T5130] loop2: p1 p3 < > [ 66.430443][ T5197] netlink: 96 bytes leftover after parsing attributes in process `syz.5.698'. [ 66.781265][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 66.795014][ T5213] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 67.116235][ T5235] SELinux: Context Ü is not valid (left unmapped). [ 67.273736][ T5245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.378709][ T5247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.492374][ T5253] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.725'. [ 67.526231][ T5253] netlink: zone id is out of range [ 67.531392][ T5253] netlink: zone id is out of range [ 67.546424][ T5253] netlink: zone id is out of range [ 67.578489][ T5253] netlink: set zone limit has 8 unknown bytes [ 67.806441][ T5274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5274 comm=syz.1.735 [ 67.856827][ T5279] sg_write: data in/out 59925/10 bytes for SCSI command 0x2d-- guessing data in; [ 67.856827][ T5279] program syz.5.738 not setting count and/or reply_len properly [ 67.925578][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.946371][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.019818][ T5292] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.069257][ T5290] loop5: detected capacity change from 0 to 8192 [ 68.131989][ T5300] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.141463][ T5300] netlink: zone id is out of range [ 68.146664][ T5300] netlink: zone id is out of range [ 68.152288][ T5300] netlink: del zone limit has 8 unknown bytes [ 68.661393][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 69.168625][ T5395] loop0: detected capacity change from 0 to 128 [ 69.197627][ T4474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.225803][ T5369] chnl_net:caif_netlink_parms(): no params data found [ 69.262740][ T4474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.311633][ T4474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.399200][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.406459][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.418878][ T5369] bridge_slave_0: entered allmulticast mode [ 69.434166][ T5369] bridge_slave_0: entered promiscuous mode [ 69.441907][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.449224][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.458130][ T5369] bridge_slave_1: entered allmulticast mode [ 69.465382][ T5369] bridge_slave_1: entered promiscuous mode [ 69.474617][ T4474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.504430][ T5369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.525826][ T5369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.567646][ T5369] team0: Port device team_slave_0 added [ 69.574515][ T5369] team0: Port device team_slave_1 added [ 69.581535][ T4474] bridge_slave_1: left allmulticast mode [ 69.587268][ T4474] bridge_slave_1: left promiscuous mode [ 69.593061][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.612935][ T4474] bridge_slave_0: left promiscuous mode [ 69.618768][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.646765][ T5395] bio_check_eod: 11481 callbacks suppressed [ 69.646783][ T5395] syz.0.789: attempt to access beyond end of device [ 69.646783][ T5395] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.666346][ T5395] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 69.676147][ T5400] syz.0.789: attempt to access beyond end of device [ 69.676147][ T5400] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.689547][ T5400] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 69.803390][ T4474] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.813620][ T4474] bond_slave_0: left promiscuous mode [ 69.820539][ T4474] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.835959][ T4474] bond_slave_1: left promiscuous mode [ 69.854751][ T4474] $Hÿ (unregistering): Released all slaves [ 69.906163][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.913175][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.939153][ T5369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.998239][ T4474] hsr_slave_0: left promiscuous mode [ 70.006587][ T4474] hsr_slave_1: left promiscuous mode [ 70.029385][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.037041][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.055264][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.062755][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.086700][ T4474] veth1_macvtap: left promiscuous mode [ 70.097409][ T4474] veth0_macvtap: left promiscuous mode [ 70.102971][ T4474] veth1_vlan: left promiscuous mode [ 70.108383][ T4474] veth0_vlan: left promiscuous mode [ 70.149620][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 70.149638][ T29] audit: type=1400 audit(1762695854.637:1044): avc: denied { read } for pid=5447 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.202388][ T29] audit: type=1400 audit(1762695854.687:1045): avc: denied { ioctl } for pid=5447 comm="syz.5.810" path="socket:[12295]" dev="sockfs" ino=12295 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.277882][ T29] audit: type=1400 audit(1762695854.697:1046): avc: denied { bind } for pid=5447 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.307345][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 70.323356][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 70.376770][ T5451] loop1: detected capacity change from 0 to 8192 [ 70.466947][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.473932][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.502018][ T5369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.576379][ T5461] netlink: 272 bytes leftover after parsing attributes in process `syz.2.815'. [ 70.607016][ T5463] syz.0.816 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.607046][ T29] audit: type=1326 audit(1762695855.087:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.618191][ T5369] hsr_slave_0: entered promiscuous mode [ 70.640732][ T29] audit: type=1326 audit(1762695855.087:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.669635][ T29] audit: type=1326 audit(1762695855.087:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.670237][ T5369] hsr_slave_1: entered promiscuous mode [ 70.693070][ T29] audit: type=1326 audit(1762695855.087:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.693103][ T29] audit: type=1326 audit(1762695855.097:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.767058][ T5369] debugfs: 'hsr0' already exists in 'hsr' [ 70.772828][ T5369] Cannot create hsr debugfs directory [ 70.848571][ T29] audit: type=1326 audit(1762695855.137:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 70.872208][ T29] audit: type=1326 audit(1762695855.137:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 71.014501][ T5369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.034840][ T5369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.046000][ T5482] loop0: detected capacity change from 0 to 1024 [ 71.056951][ T5369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.067052][ T5369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.078043][ T5482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.111405][ T5490] syz.5.827 (5490) used greatest stack depth: 9744 bytes left [ 71.125783][ T5495] loop1: detected capacity change from 0 to 512 [ 71.150035][ T5369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.167445][ T5369] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.178414][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185516][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.194908][ T5495] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.211717][ T5495] EXT4-fs (loop1): mount failed [ 71.221261][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.228410][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.287081][ T5503] SELinux: failed to load policy [ 71.291858][ T5369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.302434][ T5369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.336293][ T5505] netlink: 'syz.1.831': attribute type 12 has an invalid length. [ 71.412229][ T5369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.642437][ T5369] veth0_vlan: entered promiscuous mode [ 71.668821][ T5369] veth1_vlan: entered promiscuous mode [ 71.704452][ T5369] veth0_macvtap: entered promiscuous mode [ 71.717377][ T5369] veth1_macvtap: entered promiscuous mode [ 71.755160][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.778121][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.796138][ T4474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.813237][ T4474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.831461][ T5561] loop2: detected capacity change from 0 to 1764 [ 71.840394][ T4462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.869660][ T4462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911634][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.033107][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 72.204038][ T5619] loop6: detected capacity change from 0 to 512 [ 72.218236][ T5619] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.6.865: corrupted xattr block 95: invalid header [ 72.236494][ T5619] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.865: bg 0: block 7: invalid block bitmap [ 72.253792][ T5619] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 72.272909][ T5619] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2967: inode #11: comm syz.6.865: corrupted xattr block 95: invalid header [ 72.286574][ T5619] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 72.295812][ T5619] EXT4-fs (loop6): 1 orphan inode deleted [ 72.306502][ T5619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.340743][ T5631] netlink: 'syz.5.870': attribute type 3 has an invalid length. [ 72.350247][ T5369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.567448][ T5654] SELinux: failed to load policy [ 73.328265][ T3407] hid_parser_main: 28 callbacks suppressed [ 73.328315][ T3407] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 73.341941][ T3407] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 73.350327][ T3407] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 73.359045][ T3407] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.393580][ T5700] loop0: detected capacity change from 0 to 512 [ 73.412981][ T5700] EXT4-fs: Ignoring removed orlov option [ 73.419379][ T5700] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 73.439325][ T5700] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.900: corrupted in-inode xattr: e_value size too large [ 73.464132][ T5700] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.900: couldn't read orphan inode 15 (err -117) [ 73.477337][ T5700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.528519][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.678371][ T5728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'. [ 73.745687][ T3400] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 73.753591][ T3400] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 73.782920][ T3400] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 73.791739][ T5739] loop6: detected capacity change from 0 to 512 [ 73.792026][ T3400] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.804687][ T5739] EXT4-fs: Ignoring removed orlov option [ 73.816249][ T5739] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 73.829639][ T5739] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.915: corrupted in-inode xattr: e_value size too large [ 73.844136][ T5739] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.915: couldn't read orphan inode 15 (err -117) [ 73.859558][ T5739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.875551][ T5746] netlink: 'syz.0.918': attribute type 12 has an invalid length. [ 73.905858][ T5369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.267093][ T5753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.336573][ T5765] netlink: 'syz.5.927': attribute type 7 has an invalid length. [ 74.349070][ T4431] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.349084][ T5765] netlink: 'syz.5.927': attribute type 7 has an invalid length. [ 74.369520][ T5753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.403086][ T4431] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.414190][ T4431] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.423660][ T4431] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.440591][ T3407] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 74.441592][ T5753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.448347][ T3407] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 74.468042][ T3407] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 74.477011][ T3407] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 74.501495][ T5753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.530316][ T5778] netlink: 'syz.5.932': attribute type 12 has an invalid length. [ 74.538534][ T5777] loop2: detected capacity change from 0 to 512 [ 74.545370][ T5777] EXT4-fs: Ignoring removed orlov option [ 74.551643][ T5777] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.561729][ T5777] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.931: corrupted in-inode xattr: e_value size too large [ 74.583670][ T4487] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.596192][ T4487] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612492][ T4487] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.621145][ T5777] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.931: couldn't read orphan inode 15 (err -117) [ 74.632986][ T4487] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.642800][ T5777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.734258][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.385616][ T36] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 75.394128][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 75.394146][ T29] audit: type=1326 audit(1762695859.877:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 75.424103][ T36] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.426940][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 75.453168][ T29] audit: type=1326 audit(1762695859.877:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 75.476567][ T29] audit: type=1326 audit(1762695859.877:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 75.499813][ T29] audit: type=1326 audit(1762695859.877:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 75.523165][ T29] audit: type=1326 audit(1762695859.897:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 75.564841][ T5817] netlink: 'syz.6.946': attribute type 12 has an invalid length. [ 75.627154][ T5821] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.648515][ T5824] netlink: 'syz.5.952': attribute type 3 has an invalid length. [ 75.668604][ T5826] loop0: detected capacity change from 0 to 136 [ 75.677117][ T5826] Attempt to read inode for relocated directory [ 75.692498][ T5821] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.747313][ T29] audit: type=1400 audit(1762695860.237:1133): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.770148][ T5821] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.783439][ T3400] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.802590][ T3407] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.829304][ T5821] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.866559][ T5843] loop5: detected capacity change from 0 to 2048 [ 75.883221][ T5847] wireguard: wg1: Could not create IPv4 socket [ 75.892448][ T4462] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.905049][ T4462] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.918277][ T5845] vhci_hcd: invalid port number 96 [ 75.919911][ T4462] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.923427][ T5845] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 75.935770][ T4462] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.947365][ T5843] Alternate GPT is invalid, using primary GPT. [ 75.953641][ T5843] loop5: p1 p2 p3 [ 75.983498][ T29] audit: type=1326 audit(1762695860.467:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 76.007024][ T29] audit: type=1326 audit(1762695860.467:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 76.035155][ T29] audit: type=1326 audit(1762695860.497:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 76.058556][ T29] audit: type=1326 audit(1762695860.497:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 76.091773][ T5855] netlink: 1 bytes leftover after parsing attributes in process `syz.6.969'. [ 76.101080][ T5855] xt_policy: neither incoming nor outgoing policy selected [ 76.147441][ T5861] netlink: 92 bytes leftover after parsing attributes in process `syz.1.972'. [ 76.160272][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 76.277275][ T5870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.284562][ T5870] IPv6: NLM_F_CREATE should be set when creating new route [ 76.373586][ T5879] loop6: detected capacity change from 0 to 512 [ 76.412394][ T5882] netlink: 168 bytes leftover after parsing attributes in process `+}[@'. [ 76.425344][ T5879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.450112][ T5879] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.481988][ T5879] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.979: corrupted xattr block 33: bad e_name length [ 76.515514][ T5879] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 76.533920][ T5879] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.979: corrupted xattr block 33: bad e_name length [ 76.547700][ T5879] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 76.586678][ T5887] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.597123][ T5887] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.609717][ T5369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.657814][ T5896] loop6: detected capacity change from 0 to 2048 [ 76.669246][ T5887] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.672463][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.985'. [ 76.679731][ T5887] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.699642][ T5896] Alternate GPT is invalid, using primary GPT. [ 76.706033][ T5896] loop6: p1 p2 p3 [ 76.718563][ T5898] bond0: entered promiscuous mode [ 76.723640][ T5898] bond_slave_0: entered promiscuous mode [ 76.729530][ T5898] bond_slave_1: entered promiscuous mode [ 76.751661][ T5898] bond0: left promiscuous mode [ 76.756642][ T5898] bond_slave_0: left promiscuous mode [ 76.762327][ T5898] bond_slave_1: left promiscuous mode [ 76.776707][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.985'. [ 76.790547][ T5899] bond0: entered promiscuous mode [ 76.795658][ T5899] bond_slave_0: entered promiscuous mode [ 76.801586][ T5899] bond_slave_1: entered promiscuous mode [ 76.808383][ T5899] bond0: left promiscuous mode [ 76.813234][ T5899] bond_slave_0: left promiscuous mode [ 76.818838][ T5899] bond_slave_1: left promiscuous mode [ 76.831149][ T5887] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.841526][ T5887] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.949490][ T5887] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.959912][ T5887] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.053504][ T4431] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.061848][ T4431] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087690][ T4431] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.095954][ T4431] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.128456][ T4431] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.136785][ T4431] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.157707][ T4431] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.157735][ T5916] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.173787][ T4431] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.219457][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 77.234691][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 77.344344][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 77.357801][ T5935] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 77.407350][ T5941] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.488852][ T5941] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.563359][ T5941] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.627559][ T5941] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.678441][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1008'. [ 77.708112][ T4474] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739410][ T4462] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.758007][ T4462] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.786143][ T4462] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.870743][ T5968] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1017'. [ 77.931617][ T5972] vhci_hcd: default hub control req: 2313 v4002 i0001 l0 [ 77.939297][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 78.087336][ T5989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.158526][ T5989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.213142][ T5998] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 78.252373][ T5989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.297905][ T5989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.318460][ T6006] vhci_hcd: default hub control req: 2313 v4002 i0001 l0 [ 78.759150][ T6035] vhci_hcd: default hub control req: 2313 v4002 i0001 l0 [ 78.998998][ T6055] sg_write: data in/out 59925/10 bytes for SCSI command 0x2d-- guessing data in; [ 78.998998][ T6055] program syz.6.1057 not setting count and/or reply_len properly [ 79.065233][ T6058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6058 comm=syz.6.1058 [ 79.354474][ T6060] loop6: detected capacity change from 0 to 32768 [ 79.406784][ T6060] loop6: p1 p3 < > [ 79.740865][ T6114] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.817217][ T6116] loop6: detected capacity change from 0 to 8192 [ 79.843380][ T6120] netlink: zone id is out of range [ 79.848595][ T6120] netlink: zone id is out of range [ 79.853968][ T6120] netlink: del zone limit has 8 unknown bytes [ 80.197785][ T6150] netlink: zone id is out of range [ 80.202948][ T6150] netlink: zone id is out of range [ 80.216442][ T6150] netlink: del zone limit has 8 unknown bytes [ 81.282902][ T4487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306912][ T4487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.323368][ T4487] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.339399][ T4487] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607061][ T6206] __nla_validate_parse: 7 callbacks suppressed [ 81.607082][ T6206] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1127'. [ 81.623550][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 81.623563][ T29] audit: type=1326 audit(1762695866.107:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.653422][ T29] audit: type=1326 audit(1762695866.107:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.676595][ T6206] netlink: zone id is out of range [ 81.682006][ T6206] netlink: zone id is out of range [ 81.705371][ T29] audit: type=1326 audit(1762695866.167:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.711075][ T6206] netlink: zone id is out of range [ 81.728909][ T29] audit: type=1326 audit(1762695866.167:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.751800][ T6206] netlink: set zone limit has 8 unknown bytes [ 81.757446][ T29] audit: type=1326 audit(1762695866.167:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.786976][ T29] audit: type=1326 audit(1762695866.177:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.810477][ T29] audit: type=1326 audit(1762695866.177:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.833896][ T29] audit: type=1326 audit(1762695866.177:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.857311][ T29] audit: type=1326 audit(1762695866.187:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 81.880749][ T29] audit: type=1326 audit(1762695866.187:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 82.283575][ T6249] loop1: detected capacity change from 0 to 1024 [ 82.321197][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.699652][ T6289] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 82.853857][ T6313] vlan2: entered allmulticast mode [ 82.908157][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.059584][ T6344] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1168'. [ 83.130493][ T4462] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 83.188037][ T6354] loop2: detected capacity change from 0 to 128 [ 83.431845][ T6379] ip6tnl1: entered promiscuous mode [ 83.437137][ T6379] ip6tnl1: entered allmulticast mode [ 83.534945][ T6385] netlink: 'syz.2.1187': attribute type 39 has an invalid length. [ 83.910766][ T6402] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 83.991964][ T6427] loop5: detected capacity change from 0 to 128 [ 84.067776][ T6436] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.160170][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 84.369890][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1228'. [ 84.379031][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1228'. [ 84.666460][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 84.759447][ T6556] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1250'. [ 84.768671][ T6556] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1250'. [ 84.822595][ T6565] loop2: detected capacity change from 0 to 512 [ 84.862455][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.879965][ T6565] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.891441][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 84.933959][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.942079][ T6584] pimreg: entered allmulticast mode [ 84.954204][ T6584] pimreg: left allmulticast mode [ 85.081881][ T6612] loop1: detected capacity change from 0 to 256 [ 85.096468][ T6612] FAT-fs (loop1): bogus number of FAT sectors [ 85.102582][ T6612] FAT-fs (loop1): Can't find a valid FAT filesystem [ 85.240589][ T6639] loop5: detected capacity change from 0 to 512 [ 85.262397][ T6639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.277163][ T6639] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.314217][ T6639] SELinux: Context @ is not valid (left unmapped). [ 85.350667][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.362928][ T6657] net_ratelimit: 1 callbacks suppressed [ 85.362944][ T6657] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 85.378434][ T6655] vhci_hcd: invalid port number 96 [ 85.383772][ T6655] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 85.438937][ T6674] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 85.448076][ T6660] Falling back ldisc for ttyS3. [ 85.479537][ T6676] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1291' sets config #1 [ 85.650241][ T6706] loop6: detected capacity change from 0 to 128 [ 85.884491][ T6738] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.150478][ T6755] loop6: detected capacity change from 0 to 128 [ 86.331498][ T6773] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 86.439857][ T6755] syz.6.1322: attempt to access beyond end of device [ 86.439857][ T6755] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 86.453351][ T6755] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 86.475842][ T6755] syz.6.1322: attempt to access beyond end of device [ 86.475842][ T6755] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 86.489343][ T6755] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 86.607052][ T6807] vhci_hcd: invalid port number 96 [ 86.612292][ T6807] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 86.679907][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 86.679980][ T29] audit: type=1326 audit(1762695871.167:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 86.709710][ T29] audit: type=1326 audit(1762695871.167:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 86.733067][ T29] audit: type=1326 audit(1762695871.167:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 86.820401][ T6824] SELinux: failed to load policy [ 86.847248][ T6829] loop6: detected capacity change from 0 to 128 [ 86.895086][ T29] audit: type=1326 audit(1762695871.377:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.6.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354ae9f6c9 code=0x7ffc0000 [ 86.922522][ T29] audit: type=1326 audit(1762695871.407:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.6.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f354ae9f6c9 code=0x7ffc0000 [ 86.946347][ T29] audit: type=1326 audit(1762695871.407:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.6.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354ae9f6c9 code=0x7ffc0000 [ 86.970044][ T29] audit: type=1326 audit(1762695871.407:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.6.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354ae9f6c9 code=0x7ffc0000 [ 87.011932][ T6843] loop5: detected capacity change from 0 to 128 [ 87.045016][ T6848] batadv1: entered promiscuous mode [ 87.050474][ T6848] batadv1: entered allmulticast mode [ 87.061702][ T6846] loop6: detected capacity change from 0 to 512 [ 87.078008][ T6846] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 87.088165][ T6846] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.104200][ T6846] EXT4-fs (loop6): mount failed [ 87.184060][ T6865] loop6: detected capacity change from 0 to 128 [ 87.192817][ T6865] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.205308][ T6865] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.280530][ T5369] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.349268][ T6874] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 87.367565][ T6874] SELinux: failed to load policy [ 87.372858][ T6870] SELinux: policydb magic number 0x340 does not match expected magic number 0xf97cff8c [ 87.383007][ T6870] SELinux: failed to load policy [ 87.464186][ T6883] __nla_validate_parse: 4 callbacks suppressed [ 87.464205][ T6883] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1363'. [ 87.489002][ T6843] syz.5.1352: attempt to access beyond end of device [ 87.489002][ T6843] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.502480][ T6843] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 87.528623][ T6843] syz.5.1352: attempt to access beyond end of device [ 87.528623][ T6843] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.542103][ T6843] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 87.567568][ T6897] loop2: detected capacity change from 0 to 512 [ 87.617112][ T6897] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 87.630031][ T6897] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.645059][ T6897] EXT4-fs (loop2): mount failed [ 87.655470][ T6906] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.685172][ T6913] loop5: detected capacity change from 0 to 128 [ 87.703761][ T6913] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.718978][ T6913] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.794460][ T4690] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.818784][ T6934] loop1: detected capacity change from 0 to 128 [ 87.841401][ T6934] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.864110][ T6934] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.902271][ T6941] SELinux: failed to load policy [ 87.937305][ T6949] loop2: detected capacity change from 0 to 128 [ 87.951177][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.959381][ T6956] loop0: detected capacity change from 0 to 512 [ 87.982527][ T6956] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 87.996119][ T6956] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.013658][ T6956] EXT4-fs (loop0): mount failed [ 88.057756][ T6969] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.207971][ T6988] netlink: 'syz.0.1401': attribute type 12 has an invalid length. [ 88.316248][ T6993] loop5: detected capacity change from 0 to 512 [ 88.327348][ T6993] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.1404: corrupted xattr block 95: invalid header [ 88.341935][ T6993] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1404: bg 0: block 7: invalid block bitmap [ 88.354904][ T6993] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 88.365217][ T6993] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.1404: corrupted xattr block 95: invalid header [ 88.379843][ T6993] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 88.390420][ T6993] EXT4-fs (loop5): 1 orphan inode deleted [ 88.396808][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.431914][ T6949] syz.2.1383: attempt to access beyond end of device [ 88.431914][ T6949] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 88.445558][ T6949] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 88.460135][ T6966] syz.2.1383: attempt to access beyond end of device [ 88.460135][ T6966] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 88.473713][ T6966] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 88.484782][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.494700][ T7008] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 89.088581][ T7063] loop1: detected capacity change from 0 to 164 [ 89.117346][ T7063] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.126982][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 89.168013][ T7063] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.182906][ T7063] Symlink component flag not implemented [ 89.188749][ T7063] Symlink component flag not implemented [ 89.218540][ T7063] Symlink component flag not implemented (7) [ 89.224592][ T7063] Symlink component flag not implemented (116) [ 89.398506][ T7089] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.630923][ T7145] netlink: 'syz.1.1445': attribute type 7 has an invalid length. [ 89.654493][ T4431] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.654617][ T7145] netlink: 'syz.1.1445': attribute type 7 has an invalid length. [ 89.667863][ T4431] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.707747][ T4431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.716181][ T4431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.759959][ T7157] loop2: detected capacity change from 0 to 512 [ 89.767223][ T7157] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.782614][ T7161] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 89.820625][ T7171] netlink: 'syz.6.1446': attribute type 4 has an invalid length. [ 90.067516][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.091648][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.110886][ T7210] loop2: detected capacity change from 0 to 512 [ 90.150056][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1454'. [ 90.160289][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.183334][ T7210] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.232645][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.340387][ T7225] netlink: 'syz.2.1464': attribute type 7 has an invalid length. [ 90.368077][ T4431] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.378680][ T7225] netlink: 'syz.2.1464': attribute type 7 has an invalid length. [ 90.390149][ T4431] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.401000][ T7229] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.416574][ T4431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.455205][ T4431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.484239][ T7231] loop6: detected capacity change from 0 to 512 [ 90.491253][ T7231] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.864144][ T7266] loop1: detected capacity change from 0 to 2048 [ 90.882192][ T7273] loop5: detected capacity change from 0 to 512 [ 90.897723][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.898199][ T7273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.924280][ T7273] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.952428][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.980266][ T7266] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 90.994677][ T7266] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 91.007206][ T7266] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.007206][ T7266] [ 91.016919][ T7266] EXT4-fs (loop1): Total free blocks count 0 [ 91.022911][ T7266] EXT4-fs (loop1): Free/Dirty block details [ 91.028886][ T7266] EXT4-fs (loop1): free_blocks=4096 [ 91.034105][ T7266] EXT4-fs (loop1): dirty_blocks=512 [ 91.039561][ T7266] EXT4-fs (loop1): Block reservation details [ 91.045576][ T7266] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 91.083114][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.358367][ T7342] loop6: detected capacity change from 0 to 2048 [ 91.389958][ T7342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.483735][ T7352] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 91.503417][ T7352] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 91.515923][ T7352] EXT4-fs (loop6): This should not happen!! Data will be lost [ 91.515923][ T7352] [ 91.525619][ T7352] EXT4-fs (loop6): Total free blocks count 0 [ 91.531697][ T7352] EXT4-fs (loop6): Free/Dirty block details [ 91.537653][ T7352] EXT4-fs (loop6): free_blocks=4096 [ 91.542879][ T7352] EXT4-fs (loop6): dirty_blocks=512 [ 91.548185][ T7352] EXT4-fs (loop6): Block reservation details [ 91.554186][ T7352] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 91.591316][ T5369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.271989][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 92.272006][ T29] audit: type=1326 audit(1762695876.757:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.305284][ T7421] loop5: detected capacity change from 0 to 128 [ 92.317226][ T7421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.325098][ T7421] FAT-fs (loop5): Filesystem has been set read-only [ 92.333419][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.333419][ T7421] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 92.342403][ T29] audit: type=1326 audit(1762695876.797:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.349944][ T7421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.370539][ T29] audit: type=1326 audit(1762695876.797:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.370652][ T29] audit: type=1326 audit(1762695876.797:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.0.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.378484][ T7421] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.434312][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.434312][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.448952][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.448952][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.462488][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.462488][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.476017][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.476017][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.489874][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.489874][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.503296][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.503296][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.516861][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.516861][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.547020][ T29] audit: type=1326 audit(1762695877.037:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.570559][ T29] audit: type=1326 audit(1762695877.037:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.594133][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.594133][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.607566][ T7421] syz.5.1518: attempt to access beyond end of device [ 92.607566][ T7421] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.697588][ T29] audit: type=1326 audit(1762695877.037:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.721381][ T29] audit: type=1326 audit(1762695877.037:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.745068][ T29] audit: type=1326 audit(1762695877.037:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.768653][ T29] audit: type=1326 audit(1762695877.037:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7425 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e72f6c9 code=0x7ffc0000 [ 92.802492][ T7432] loop2: detected capacity change from 0 to 2048 [ 92.823302][ T7432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.906586][ T7442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 92.936245][ T7442] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 92.948662][ T7442] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.948662][ T7442] [ 92.958425][ T7442] EXT4-fs (loop2): Total free blocks count 0 [ 92.964423][ T7442] EXT4-fs (loop2): Free/Dirty block details [ 92.970406][ T7442] EXT4-fs (loop2): free_blocks=4096 [ 92.975622][ T7442] EXT4-fs (loop2): dirty_blocks=800 [ 92.980869][ T7442] EXT4-fs (loop2): Block reservation details [ 92.987043][ T7442] EXT4-fs (loop2): i_reserved_data_blocks=50 [ 93.092950][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.205661][ T7468] netlink: 'syz.1.1545': attribute type 12 has an invalid length. [ 93.281267][ T7484] netlink: 168 bytes leftover after parsing attributes in process `+}[@'. [ 93.568430][ T7503] vhci_hcd: invalid port number 96 [ 93.573597][ T7503] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 93.669066][ T7510] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1551'. [ 93.679315][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1551'. [ 93.710983][ T7512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.718254][ T7512] IPv6: NLM_F_CREATE should be set when creating new route [ 93.851344][ T7526] loop6: detected capacity change from 0 to 128 [ 93.861379][ T7526] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 93.869313][ T7526] FAT-fs (loop6): Filesystem has been set read-only [ 93.876550][ T7526] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 93.884405][ T7526] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 93.944896][ T7533] loop0: detected capacity change from 0 to 2048 [ 93.971735][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.066979][ T7559] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 94.105234][ T7559] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 94.117694][ T7559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.117694][ T7559] [ 94.127391][ T7559] EXT4-fs (loop0): Total free blocks count 0 [ 94.133504][ T7559] EXT4-fs (loop0): Free/Dirty block details [ 94.139453][ T7559] EXT4-fs (loop0): free_blocks=4096 [ 94.144684][ T7559] EXT4-fs (loop0): dirty_blocks=512 [ 94.149922][ T7559] EXT4-fs (loop0): Block reservation details [ 94.155908][ T7559] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 94.274435][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.370408][ T7570] loop0: detected capacity change from 0 to 512 [ 94.397483][ T7570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.428798][ T7570] ext4 filesystem being mounted at /344/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.468514][ T7570] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1574: corrupted xattr block 33: bad e_name length [ 94.507211][ T7576] vhci_hcd: invalid port number 96 [ 94.512447][ T7576] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 94.565529][ T7570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 94.618085][ T7570] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1574: corrupted xattr block 33: bad e_name length [ 94.636262][ T7570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 94.686479][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.777264][ T7593] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1569'. [ 94.799304][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1569'. [ 95.027352][ T7623] loop1: detected capacity change from 0 to 128 [ 95.046613][ T7623] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.054586][ T7623] FAT-fs (loop1): Filesystem has been set read-only [ 95.076480][ T7623] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.084404][ T7623] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.098800][ T7630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.106085][ T7630] IPv6: NLM_F_CREATE should be set when creating new route [ 95.155388][ T7632] wireguard: wg1: Could not create IPv4 socket [ 95.576821][ T7650] loop5: detected capacity change from 0 to 2048 [ 95.617442][ T7650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.701446][ T7655] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1586'. [ 95.710605][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1586'. [ 95.776259][ T7650] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 95.809028][ T7650] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 95.821452][ T7650] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.821452][ T7650] [ 95.831109][ T7650] EXT4-fs (loop5): Total free blocks count 0 [ 95.837161][ T7650] EXT4-fs (loop5): Free/Dirty block details [ 95.843073][ T7650] EXT4-fs (loop5): free_blocks=4096 [ 95.848784][ T7650] EXT4-fs (loop5): dirty_blocks=512 [ 95.854002][ T7650] EXT4-fs (loop5): Block reservation details [ 95.860237][ T7650] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 95.945587][ T7662] netlink: 168 bytes leftover after parsing attributes in process `+}[@'. [ 96.001195][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.059618][ T7680] loop5: detected capacity change from 0 to 512 [ 96.078466][ T7682] wireguard: wg1: Could not create IPv4 socket [ 96.086534][ T7680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.099216][ T7680] ext4 filesystem being mounted at /220/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.126164][ T7680] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1593: corrupted xattr block 33: bad e_name length [ 96.142247][ T7680] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 96.151488][ T7680] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1593: corrupted xattr block 33: bad e_name length [ 96.165650][ T7680] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 96.202862][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.212830][ T7701] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1599'. [ 96.224718][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1599'. [ 96.286667][ T7711] loop1: detected capacity change from 0 to 512 [ 96.327124][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.346244][ T7711] ext4 filesystem being mounted at /308/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.383544][ T7724] loop2: detected capacity change from 0 to 128 [ 96.413584][ T7724] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.421480][ T7724] FAT-fs (loop2): Filesystem has been set read-only [ 96.437944][ T7711] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1612: corrupted xattr block 33: bad e_name length [ 96.461919][ T7724] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.469851][ T7724] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.491249][ T7727] loop5: detected capacity change from 0 to 2048 [ 96.519368][ T7711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 96.534237][ T7727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.581404][ T7711] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1612: corrupted xattr block 33: bad e_name length [ 96.608489][ T7711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 96.662958][ T7727] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.703694][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.704003][ T7727] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 96.725344][ T7727] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.725344][ T7727] [ 96.735145][ T7727] EXT4-fs (loop5): Total free blocks count 0 [ 96.741197][ T7727] EXT4-fs (loop5): Free/Dirty block details [ 96.747128][ T7727] EXT4-fs (loop5): free_blocks=4096 [ 96.752413][ T7727] EXT4-fs (loop5): dirty_blocks=512 [ 96.757648][ T7727] EXT4-fs (loop5): Block reservation details [ 96.763644][ T7727] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 96.833625][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.405450][ T7778] loop2: detected capacity change from 0 to 512 [ 97.448666][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.461394][ T7778] ext4 filesystem being mounted at /372/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.490769][ T7778] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1621: corrupted xattr block 33: bad e_name length [ 97.514597][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 97.514613][ T29] audit: type=1326 audit(1762695881.997:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 97.544473][ T29] audit: type=1326 audit(1762695881.997:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 97.568046][ T29] audit: type=1326 audit(1762695881.997:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 97.591602][ T29] audit: type=1326 audit(1762695881.997:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 97.594429][ T7778] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 97.615204][ T29] audit: type=1326 audit(1762695881.997:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 97.659235][ T7778] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1621: corrupted xattr block 33: bad e_name length [ 97.678703][ T7778] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 97.734424][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.768904][ T5925] hid_parser_main: 75 callbacks suppressed [ 97.768935][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.782473][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.790019][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.797866][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.805340][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.812967][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.820409][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.827851][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.835291][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.842767][ T5925] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 97.851267][ T5925] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 97.932568][ T7826] bond0: entered promiscuous mode [ 97.937810][ T7826] bond_slave_0: entered promiscuous mode [ 97.943676][ T7826] bond_slave_1: entered promiscuous mode [ 97.951609][ T7826] bond0: left promiscuous mode [ 97.956482][ T7826] bond_slave_0: left promiscuous mode [ 97.962041][ T7826] bond_slave_1: left promiscuous mode [ 97.986959][ T7833] bond0: entered promiscuous mode [ 97.992048][ T7833] bond_slave_0: entered promiscuous mode [ 97.997998][ T7833] bond_slave_1: entered promiscuous mode [ 98.005158][ T7833] bond0: left promiscuous mode [ 98.010004][ T7833] bond_slave_0: left promiscuous mode [ 98.012468][ T29] audit: type=1326 audit(1762695882.497:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 98.015480][ T7833] bond_slave_1: left promiscuous mode [ 98.038852][ T29] audit: type=1326 audit(1762695882.497:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 98.068835][ T29] audit: type=1326 audit(1762695882.527:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 98.092321][ T29] audit: type=1326 audit(1762695882.527:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 98.115770][ T29] audit: type=1326 audit(1762695882.527:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5014f6c9 code=0x7ffc0000 [ 98.250977][ T7843] loop0: detected capacity change from 0 to 512 [ 98.271774][ T7843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.284432][ T7843] ext4 filesystem being mounted at /362/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.297265][ T7843] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1645: corrupted xattr block 33: bad e_name length [ 98.310810][ T7843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.320187][ T7843] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1645: corrupted xattr block 33: bad e_name length [ 98.333795][ T7843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.354539][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.574472][ T7858] loop0: detected capacity change from 0 to 512 [ 98.607212][ T7858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.653127][ T7858] ext4 filesystem being mounted at /363/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.678630][ T5925] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 98.698527][ T7858] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1657: corrupted xattr block 33: bad e_name length [ 98.753774][ T7858] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.767088][ T7858] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1657: corrupted xattr block 33: bad e_name length [ 98.781678][ T7858] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.791058][ T7888] __nla_validate_parse: 3 callbacks suppressed [ 98.791076][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 98.828701][ T7888] bond0: entered promiscuous mode [ 98.833871][ T7888] bond_slave_0: entered promiscuous mode [ 98.839711][ T7888] bond_slave_1: entered promiscuous mode [ 98.866370][ T7888] bond0: left promiscuous mode [ 98.871222][ T7888] bond_slave_0: left promiscuous mode [ 98.876788][ T7888] bond_slave_1: left promiscuous mode [ 98.887676][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.914408][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 98.933239][ T7901] loop0: detected capacity change from 0 to 512 [ 98.956787][ T7891] bond0: entered promiscuous mode [ 98.961893][ T7891] bond_slave_0: entered promiscuous mode [ 98.967705][ T7891] bond_slave_1: entered promiscuous mode [ 98.979260][ T7891] bond0: left promiscuous mode [ 98.984086][ T7891] bond_slave_0: left promiscuous mode [ 98.989585][ T7891] bond_slave_1: left promiscuous mode [ 98.996637][ T7901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.009325][ T7901] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.042076][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.093950][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 99.140487][ T7922] loop1: detected capacity change from 0 to 512 [ 99.169237][ T7922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.185278][ T7922] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.238028][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.470015][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'. [ 99.470450][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1675'. [ 99.485729][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'. [ 99.507895][ T7953] bond0: entered promiscuous mode [ 99.512990][ T7953] bond_slave_0: entered promiscuous mode [ 99.518900][ T7953] bond_slave_1: entered promiscuous mode [ 99.527242][ T7953] bond0: left promiscuous mode [ 99.532064][ T7953] bond_slave_0: left promiscuous mode [ 99.537615][ T7953] bond_slave_1: left promiscuous mode [ 99.544598][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1675'. [ 99.568152][ T7957] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 99.583967][ T7958] bond0: entered promiscuous mode [ 99.589132][ T7958] bond_slave_0: entered promiscuous mode [ 99.594959][ T7958] bond_slave_1: entered promiscuous mode [ 99.604743][ T7958] bond0: left promiscuous mode [ 99.609638][ T7958] bond_slave_0: left promiscuous mode [ 99.615159][ T7958] bond_slave_1: left promiscuous mode [ 99.663853][ T7982] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.697586][ T7969] Falling back ldisc for ttyS3. [ 99.714791][ T7988] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 99.722680][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 99.737009][ T7991] loop1: detected capacity change from 0 to 128 [ 99.770449][ T7982] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.838911][ T7982] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.887880][ T7982] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.943050][ T4474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.966809][ T4474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.975713][ T4474] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.984799][ T4474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.088645][ T7991] bio_check_eod: 63492 callbacks suppressed [ 100.088672][ T7991] syz.1.1696: attempt to access beyond end of device [ 100.088672][ T7991] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 100.108138][ T7991] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 100.132057][ T7991] syz.1.1696: attempt to access beyond end of device [ 100.132057][ T7991] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 100.145607][ T7991] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 100.225466][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 100.238243][ T8058] bond0: entered promiscuous mode [ 100.255742][ T8058] bond0: left promiscuous mode [ 100.286497][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 100.305761][ T8072] bond0: entered promiscuous mode [ 100.315639][ T8072] bond0: left promiscuous mode [ 100.402232][ T8082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 100.437149][ T8087] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.477647][ T8087] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.481537][ T8098] netlink: 'syz.6.1706': attribute type 1 has an invalid length. [ 100.506367][ T8091] Falling back ldisc for ttyS3. [ 100.537399][ T8087] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.597571][ T8087] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.653312][ T4462] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.665055][ T4462] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.676676][ T4462] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.688415][ T4462] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.783287][ T8119] loop0: detected capacity change from 0 to 128 [ 101.076500][ T8126] syz.0.1709: attempt to access beyond end of device [ 101.076500][ T8126] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 101.089952][ T8126] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 101.101687][ T8130] netlink: 'syz.5.1716': attribute type 1 has an invalid length. [ 101.101686][ T8119] syz.0.1709: attempt to access beyond end of device [ 101.101686][ T8119] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 101.101720][ T8119] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 101.136960][ T8126] syz.0.1709: attempt to access beyond end of device [ 101.136960][ T8126] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 101.150513][ T8126] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 101.265828][ T8136] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.275688][ T8136] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.317063][ T8144] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 101.377755][ T8136] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.387705][ T8136] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.430511][ T8156] loop0: detected capacity change from 0 to 128 [ 101.447981][ T8136] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.457964][ T8136] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.507598][ T8136] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.517591][ T8136] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.592460][ T4487] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.600892][ T4487] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.613812][ T4462] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.622399][ T4462] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.634289][ T4474] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.642650][ T4474] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.653944][ T4474] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.662227][ T4474] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.838020][ T8193] loop1: detected capacity change from 0 to 128 [ 101.844854][ T8194] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 102.083312][ T8196] syz.1.1730: attempt to access beyond end of device [ 102.083312][ T8196] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.096824][ T8196] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 102.105577][ T8193] syz.1.1730: attempt to access beyond end of device [ 102.105577][ T8193] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.119097][ T8193] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 102.128184][ T8196] syz.1.1730: attempt to access beyond end of device [ 102.128184][ T8196] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.141637][ T8196] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 102.544544][ T8207] loop1: detected capacity change from 0 to 128 [ 102.559923][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 102.560005][ T29] audit: type=1326 audit(1762695887.047:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 102.593155][ T8212] loop2: detected capacity change from 0 to 128 [ 102.601386][ T29] audit: type=1326 audit(1762695887.087:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 102.625104][ T29] audit: type=1326 audit(1762695887.087:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 102.648471][ T29] audit: type=1326 audit(1762695887.087:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 102.671890][ T29] audit: type=1326 audit(1762695887.087:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056e8bf6c9 code=0x7ffc0000 [ 102.922404][ T8207] syz.1.1747: attempt to access beyond end of device [ 102.922404][ T8207] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.935909][ T8207] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 103.067361][ T29] audit: type=1400 audit(1762695887.557:1765): avc: denied { mount } for pid=8257 comm="syz.2.1757" name="/" dev="hugetlbfs" ino=19890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 103.097920][ T8261] loop0: detected capacity change from 0 to 1024 [ 103.109122][ T8261] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.130583][ T8261] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.144272][ T29] audit: type=1326 audit(1762695887.597:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 103.157414][ T8261] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.167890][ T29] audit: type=1326 audit(1762695887.597:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 103.181783][ T8261] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.1758: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.197926][ T29] audit: type=1326 audit(1762695887.597:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 103.235029][ T29] audit: type=1326 audit(1762695887.707:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.1.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6476edf6c9 code=0x7ffc0000 [ 103.284040][ T8261] EXT4-fs (loop0): 1 orphan inode deleted [ 103.290248][ T8261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.311781][ T8280] netlink: 'syz.1.1766': attribute type 21 has an invalid length. [ 103.316304][ T8278] loop2: detected capacity change from 0 to 1024 [ 103.340211][ T8278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.352731][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.387624][ T8286] SELinux: failed to load policy [ 103.407540][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.427039][ T8292] loop0: detected capacity change from 0 to 128 [ 103.500492][ T8308] SELinux: policydb version 0 does not match my version range 15-35 [ 103.509191][ T8308] SELinux: failed to load policy [ 103.586779][ T8319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.756569][ T8335] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.808691][ T8340] __nla_validate_parse: 10 callbacks suppressed [ 103.808707][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1786'. [ 103.853494][ T8310] syz.0.1770: attempt to access beyond end of device [ 103.853494][ T8310] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 103.867018][ T8310] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 103.877557][ T8343] loop1: detected capacity change from 0 to 512 [ 103.907731][ T8343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.921584][ T8343] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.946601][ T8343] syz.1.1788 (8343) used greatest stack depth: 8896 bytes left [ 103.978357][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.987585][ T8360] loop6: detected capacity change from 0 to 2048 [ 104.026730][ T8360] loop6: p1 < > p4 [ 104.033023][ T8360] loop6: p4 size 8388608 extends beyond EOD, truncated [ 104.400918][ T8383] tipc: Started in network mode [ 104.405854][ T8383] tipc: Node identity ac14140f, cluster identity 4711 [ 104.412518][ T8388] loop0: detected capacity change from 0 to 128 [ 104.415042][ T8383] tipc: New replicast peer: 255.255.255.83 [ 104.424792][ T8383] tipc: Enabled bearer , priority 10 [ 104.459663][ T8392] loop1: detected capacity change from 0 to 256 [ 104.492454][ T8392] FAT-fs (loop1): Directory bread(block 64) failed [ 104.497943][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1803'. [ 104.508701][ T8392] FAT-fs (loop1): Directory bread(block 65) failed [ 104.515708][ T8392] FAT-fs (loop1): Directory bread(block 66) failed [ 104.522531][ T8392] FAT-fs (loop1): Directory bread(block 67) failed [ 104.529694][ T8392] FAT-fs (loop1): Directory bread(block 68) failed [ 104.546309][ T8392] FAT-fs (loop1): Directory bread(block 69) failed [ 104.555223][ T8392] FAT-fs (loop1): Directory bread(block 70) failed [ 104.561832][ T8392] FAT-fs (loop1): Directory bread(block 71) failed [ 104.576184][ T8392] FAT-fs (loop1): Directory bread(block 72) failed [ 104.582757][ T8392] FAT-fs (loop1): Directory bread(block 73) failed [ 104.673344][ T8419] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1811'. [ 104.889484][ T5925] hid_parser_main: 48 callbacks suppressed [ 104.889506][ T5925] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 104.935348][ T5925] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.255753][ T8476] loop2: detected capacity change from 0 to 512 [ 105.266884][ T8476] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1830: bad orphan inode 13 [ 105.277530][ T8476] ext4_test_bit(bit=12, block=4) = 1 [ 105.282855][ T8476] is_bad_inode(inode)=0 [ 105.287169][ T8476] NEXT_ORPHAN(inode)=0 [ 105.291281][ T8476] max_ino=32 [ 105.294663][ T8476] i_nlink=1 [ 105.300575][ T8476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.415229][ T8487] loop1: detected capacity change from 0 to 164 [ 105.423049][ T8487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.426140][ T10] tipc: Node number set to 2886997007 [ 105.439891][ T8487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.449293][ T8487] Symlink component flag not implemented [ 105.454952][ T8487] Symlink component flag not implemented [ 105.466182][ T8487] Symlink component flag not implemented (7) [ 105.472256][ T8487] Symlink component flag not implemented (116) [ 105.497690][ T8495] loop6: detected capacity change from 0 to 128 [ 105.508137][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.566903][ T8495] ================================================================== [ 105.575080][ T8495] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 105.582227][ T8495] [ 105.584570][ T8495] write to 0xffff88811a469d14 of 4 bytes by task 8505 on cpu 1: [ 105.592219][ T8495] xas_set_mark+0x12b/0x140 [ 105.596824][ T8495] __folio_start_writeback+0x155/0x390 [ 105.602311][ T8495] __block_write_full_folio+0x53a/0x8f0 [ 105.607901][ T8495] block_write_full_folio+0x2c2/0x2e0 [ 105.613302][ T8495] mpage_writepages+0x6cf/0x1250 [ 105.618294][ T8495] fat_writepages+0x24/0x30 [ 105.622838][ T8495] do_writepages+0x1c6/0x310 [ 105.627460][ T8495] file_write_and_wait_range+0x156/0x2c0 [ 105.633146][ T8495] __generic_file_fsync+0x46/0x140 [ 105.638294][ T8495] fat_file_fsync+0x49/0x100 [ 105.642921][ T8495] vfs_fsync_range+0x10d/0x130 [ 105.647722][ T8495] generic_file_write_iter+0x1b8/0x2f0 [ 105.653215][ T8495] iter_file_splice_write+0x666/0xa60 [ 105.658617][ T8495] direct_splice_actor+0x156/0x2a0 [ 105.663763][ T8495] splice_direct_to_actor+0x312/0x680 [ 105.669172][ T8495] do_splice_direct+0xda/0x150 [ 105.673968][ T8495] do_sendfile+0x380/0x650 [ 105.678438][ T8495] __x64_sys_sendfile64+0x105/0x150 [ 105.683676][ T8495] x64_sys_call+0x2bb4/0x3000 [ 105.688433][ T8495] do_syscall_64+0xd2/0x200 [ 105.692969][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.698887][ T8495] [ 105.701235][ T8495] read to 0xffff88811a469d14 of 4 bytes by task 8495 on cpu 0: [ 105.708798][ T8495] xas_find_marked+0x5dc/0x620 [ 105.713598][ T8495] find_get_entry+0x5d/0x380 [ 105.718222][ T8495] filemap_get_folios_tag+0x92/0x210 [ 105.723555][ T8495] writeback_iter+0x4bb/0x820 [ 105.728261][ T8495] mpage_writepages+0x87/0x1250 [ 105.733160][ T8495] fat_writepages+0x24/0x30 [ 105.737706][ T8495] do_writepages+0x1c6/0x310 [ 105.742331][ T8495] file_write_and_wait_range+0x156/0x2c0 [ 105.748054][ T8495] __generic_file_fsync+0x46/0x140 [ 105.753204][ T8495] fat_file_fsync+0x49/0x100 [ 105.757824][ T8495] vfs_fsync_range+0x10d/0x130 [ 105.762630][ T8495] generic_file_write_iter+0x1b8/0x2f0 [ 105.768175][ T8495] iter_file_splice_write+0x666/0xa60 [ 105.773571][ T8495] direct_splice_actor+0x156/0x2a0 [ 105.778705][ T8495] splice_direct_to_actor+0x312/0x680 [ 105.784105][ T8495] do_splice_direct+0xda/0x150 [ 105.788895][ T8495] do_sendfile+0x380/0x650 [ 105.793361][ T8495] __x64_sys_sendfile64+0x105/0x150 [ 105.798607][ T8495] x64_sys_call+0x2bb4/0x3000 [ 105.803341][ T8495] do_syscall_64+0xd2/0x200 [ 105.806778][ T8505] bio_check_eod: 3 callbacks suppressed [ 105.806796][ T8505] syz.6.1834: attempt to access beyond end of device [ 105.806796][ T8505] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.807873][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.807903][ T8495] [ 105.807907][ T8495] value changed: 0x0a000021 -> 0x04000021 [ 105.813469][ T8505] buffer_io_error: 1 callbacks suppressed [ 105.813514][ T8505] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 105.826810][ T8495] [ 105.826817][ T8495] Reported by Kernel Concurrency Sanitizer on: [ 105.826843][ T8495] CPU: 0 UID: 0 PID: 8495 Comm: syz.6.1834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.826890][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.883493][ T8495] ================================================================== [ 105.927740][ T8495] syz.6.1834: attempt to access beyond end of device [ 105.927740][ T8495] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.941449][ T8495] Buffer I/O error on dev loop6, logical block 128, lost async page write