last executing test programs: 1.334190221s ago: executing program 4 (id=1995): socketpair(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x58) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.098434951s ago: executing program 3 (id=2003): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.065621963s ago: executing program 3 (id=2004): r0 = socket$unix(0x1, 0x1, 0x0) r1 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x10, 0x2, 0x378}) close_range(r1, r1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 822.558793ms ago: executing program 4 (id=2014): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) 765.492168ms ago: executing program 2 (id=2015): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x12, r1}) r3 = socket(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 723.067931ms ago: executing program 2 (id=2016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 722.703621ms ago: executing program 4 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 722.543602ms ago: executing program 2 (id=2018): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 707.935792ms ago: executing program 1 (id=2019): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) 657.342547ms ago: executing program 2 (id=2020): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x80000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 657.109397ms ago: executing program 4 (id=2021): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 531.739017ms ago: executing program 4 (id=2023): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x160, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 486.95895ms ago: executing program 1 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 486.265291ms ago: executing program 1 (id=2025): r0 = epoll_create1(0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe8, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) epoll_pwait(r0, &(0x7f00000002c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 464.981242ms ago: executing program 4 (id=2026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 426.781065ms ago: executing program 1 (id=2027): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x180000000) 356.068041ms ago: executing program 1 (id=2030): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 352.795251ms ago: executing program 0 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_io_uring_setup(0x747, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0xfffffffd, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0x2e, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 262.639819ms ago: executing program 0 (id=2032): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 262.043309ms ago: executing program 2 (id=2033): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x8800) 174.887866ms ago: executing program 2 (id=2034): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x7, 0x2000008, 0x1, 0x0, 0x80000000000000, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x511000, 0x112) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2}, 0x10) 174.611886ms ago: executing program 3 (id=2035): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 174.378976ms ago: executing program 0 (id=2036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 109.757271ms ago: executing program 0 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 93.133783ms ago: executing program 3 (id=2038): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) 35.091947ms ago: executing program 0 (id=2039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 34.777917ms ago: executing program 3 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 34.458447ms ago: executing program 3 (id=2041): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 20.603898ms ago: executing program 0 (id=2042): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3522deba3 code=0x7ffc0000 [ 33.402151][ T29] audit: type=1326 audit(1753979771.619:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb3522dd61f code=0x7ffc0000 [ 33.521871][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.634935][ T3794] loop0: detected capacity change from 0 to 128 [ 33.650191][ T3797] capability: warning: `syz.1.121' uses 32-bit capabilities (legacy support in use) [ 33.665050][ T3794] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.740808][ T1449] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.876427][ T3819] loop3: detected capacity change from 0 to 2048 [ 33.905436][ T3815] pim6reg1: entered promiscuous mode [ 33.910758][ T3815] pim6reg1: entered allmulticast mode [ 33.958058][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.976789][ T3825] loop7: detected capacity change from 0 to 7 [ 34.056175][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.090280][ T3831] loop4: detected capacity change from 0 to 512 [ 34.113356][ T3831] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.166924][ T3831] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.135: bg 0: block 248: padding at end of block bitmap is not set [ 34.236217][ T3831] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.135: Failed to acquire dquot type 1 [ 34.261529][ T3831] EXT4-fs (loop4): 1 truncate cleaned up [ 34.292805][ T3839] loop3: detected capacity change from 0 to 8192 [ 34.309905][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.381799][ T3831] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 34.417646][ T3831] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 34.481687][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.576638][ T3857] loop0: detected capacity change from 0 to 2048 [ 34.631213][ T3857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.711461][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.800683][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 34.810783][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 34.818582][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 34.875058][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 34.880975][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 34.912940][ T9] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.971999][ T3882] fido_id[3882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.020120][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 35.053391][ T3894] loop0: detected capacity change from 0 to 512 [ 35.093278][ T3893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.100351][ T3894] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.136837][ T3917] macvlan2: entered promiscuous mode [ 35.142185][ T3917] macvlan2: entered allmulticast mode [ 35.165515][ T3894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.155: bg 0: block 248: padding at end of block bitmap is not set [ 35.205094][ T3917] bond1: (slave macvlan2): Opening slave failed [ 35.276134][ T3894] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.155: Failed to acquire dquot type 1 [ 35.301268][ T3934] netlink: 96 bytes leftover after parsing attributes in process `syz.1.162'. [ 35.310645][ T3894] EXT4-fs (loop0): 1 truncate cleaned up [ 35.412433][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.459632][ T3943] loop1: detected capacity change from 0 to 512 [ 35.489338][ T3894] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.501462][ T3894] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 35.509138][ T3943] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.520637][ T3943] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent [ 35.565634][ T3954] loop3: detected capacity change from 0 to 1024 [ 35.592882][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.611738][ T3954] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.157: Failed to acquire dquot type 0 [ 35.659228][ T3954] EXT4-fs (loop3): 1 truncate cleaned up [ 35.680208][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.874022][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 35.966644][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.028672][ T3977] loop1: detected capacity change from 0 to 2048 [ 36.083568][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.245492][ T4006] bridge0: entered promiscuous mode [ 36.248553][ T4007] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.183'. [ 36.250722][ T4006] bridge0: entered allmulticast mode [ 36.265429][ T4007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'. [ 36.490855][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.557548][ T4019] netlink: 'syz.1.190': attribute type 83 has an invalid length. [ 37.067753][ T4039] loop3: detected capacity change from 0 to 512 [ 37.106889][ T4039] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.116024][ T4039] EXT4-fs (loop3): blocks per group (64) and clusters per group (32768) inconsistent [ 37.280493][ T4043] loop4: detected capacity change from 0 to 2048 [ 37.355393][ T4043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.029183][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.216182][ T4078] loop4: detected capacity change from 0 to 1024 [ 38.271739][ T4078] EXT4-fs: Ignoring removed orlov option [ 38.299295][ T4078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.506194][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 38.506209][ T29] audit: type=1400 audit(1753979777.089:455): avc: denied { read write } for pid=4077 comm="syz.4.214" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.534964][ T29] audit: type=1400 audit(1753979777.089:456): avc: denied { open } for pid=4077 comm="syz.4.214" path="/45/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.678813][ T29] audit: type=1400 audit(1753979777.259:457): avc: denied { read } for pid=4086 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.703375][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.791486][ T4091] bridge0: entered promiscuous mode [ 38.796778][ T4091] bridge0: entered allmulticast mode [ 38.846861][ T4093] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 39.008033][ T29] audit: type=1400 audit(1753979777.589:458): avc: denied { mount } for pid=4097 comm="syz.4.220" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.030073][ T29] audit: type=1400 audit(1753979777.589:459): avc: denied { write } for pid=4097 comm="syz.4.220" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.050651][ T29] audit: type=1400 audit(1753979777.589:460): avc: denied { open } for pid=4097 comm="syz.4.220" path="/47/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.101611][ T29] audit: type=1400 audit(1753979777.659:461): avc: denied { ioctl } for pid=4099 comm="syz.2.221" path="socket:[6079]" dev="sockfs" ino=6079 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.175029][ T29] audit: type=1400 audit(1753979777.729:462): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.234512][ T29] audit: type=1326 audit(1753979777.819:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 39.280180][ T4106] loop4: detected capacity change from 0 to 8192 [ 39.286889][ T29] audit: type=1326 audit(1753979777.819:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 39.439817][ T4116] process 'syz.2.229' launched './file0' with NULL argv: empty string added [ 39.539041][ T4120] veth1_macvtap: left promiscuous mode [ 39.594049][ T4120] macsec0: entered allmulticast mode [ 39.698245][ T4127] bridge0: entered promiscuous mode [ 39.703561][ T4127] bridge0: entered allmulticast mode [ 40.613208][ T4171] bridge0: entered promiscuous mode [ 40.635085][ T4114] syz.3.228 (4114) used greatest stack depth: 7160 bytes left [ 40.645256][ T4171] bridge0: port 3(macsec1) entered blocking state [ 40.651803][ T4171] bridge0: port 3(macsec1) entered disabled state [ 40.670249][ T4171] macsec1: entered allmulticast mode [ 40.675668][ T4171] bridge0: entered allmulticast mode [ 40.706673][ T4171] macsec1: left allmulticast mode [ 40.711773][ T4171] bridge0: left allmulticast mode [ 40.717827][ T4171] bridge0: left promiscuous mode [ 40.910208][ T4181] loop3: detected capacity change from 0 to 2048 [ 40.945564][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.172561][ T4199] netlink: 'syz.0.260': attribute type 6 has an invalid length. [ 41.277992][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.579625][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 41.602308][ T4227] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 41.635111][ T4227] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.692252][ T4211] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 41.813200][ T4245] bridge0: port 3(macsec1) entered blocking state [ 41.819680][ T4245] bridge0: port 3(macsec1) entered disabled state [ 41.826254][ T4245] macsec1: entered allmulticast mode [ 41.839765][ T4245] macsec1: left allmulticast mode [ 41.954574][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 41.963462][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 42.021102][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 42.179083][ T4270] loop4: detected capacity change from 0 to 512 [ 42.196110][ T4270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.202765][ T4270] EXT4-fs: Ignoring removed orlov option [ 42.240251][ T4270] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.263496][ T4270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 42.272688][ T4270] System zones: 1-12 [ 42.277094][ T4270] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #15: comm syz.4.289: corrupted in-inode xattr: e_value size too large [ 42.297995][ T4270] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.289: couldn't read orphan inode 15 (err -117) [ 42.332442][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.363936][ T4286] loop3: detected capacity change from 0 to 512 [ 42.414393][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.431117][ T4286] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.559954][ T41] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 42.581173][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 42.593660][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.593660][ T41] [ 42.603307][ T41] EXT4-fs (loop3): Total free blocks count 0 [ 42.609286][ T41] EXT4-fs (loop3): Free/Dirty block details [ 42.615194][ T41] EXT4-fs (loop3): free_blocks=65280 [ 42.620475][ T41] EXT4-fs (loop3): dirty_blocks=1025 [ 42.625885][ T41] EXT4-fs (loop3): Block reservation details [ 42.631981][ T41] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 42.697211][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.060789][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 43.126725][ T4315] Driver unsupported XDP return value 0 on prog (id 262) dev N/A, expect packet loss! [ 43.203365][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 43.240079][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.303136][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 43.312020][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 43.375578][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 43.403724][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 43.476108][ T4338] netlink: 'syz.3.314': attribute type 10 has an invalid length. [ 43.524941][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 43.547708][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 43.562158][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 43.562171][ T29] audit: type=1400 audit(1753979782.149:681): avc: denied { write } for pid=4344 comm="syz.4.318" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.133335][ T29] audit: type=1400 audit(1753979782.719:682): avc: denied { ioctl } for pid=4388 comm="syz.3.336" path="socket:[7741]" dev="sockfs" ino=7741 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.133475][ T4389] syzkaller1: entered promiscuous mode [ 44.163549][ T4389] syzkaller1: entered allmulticast mode [ 44.191233][ T4390] netem: change failed [ 44.546628][ T29] audit: type=1400 audit(1753979783.129:683): avc: denied { ioctl } for pid=4405 comm="syz.3.344" path="socket:[7785]" dev="sockfs" ino=7785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.952437][ T29] audit: type=1400 audit(1753979783.539:684): avc: denied { connect } for pid=4423 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.976501][ T4393] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 45.033847][ T4431] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 45.056443][ T29] audit: type=1400 audit(1753979783.539:685): avc: denied { write } for pid=4423 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.075842][ T29] audit: type=1400 audit(1753979783.609:686): avc: denied { create } for pid=4430 comm="syz.0.354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.096374][ T29] audit: type=1400 audit(1753979783.619:687): avc: denied { mounton } for pid=4430 comm="syz.0.354" path="/68/file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.139344][ T29] audit: type=1400 audit(1753979783.719:688): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 45.202936][ T29] audit: type=1400 audit(1753979783.779:689): avc: denied { associate } for pid=4436 comm="syz.1.356" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.355089][ T29] audit: type=1400 audit(1753979783.929:690): avc: denied { setattr } for pid=4448 comm="syz.3.363" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.437355][ T4459] netem: incorrect gi model size [ 45.442374][ T4459] netem: change failed [ 45.729189][ T4485] loop1: detected capacity change from 0 to 512 [ 46.941877][ T4558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.959973][ T4533] syz.4.400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 46.970909][ T4533] CPU: 1 UID: 0 PID: 4533 Comm: syz.4.400 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 46.970946][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.971044][ T4533] Call Trace: [ 46.971050][ T4533] [ 46.971059][ T4533] __dump_stack+0x1d/0x30 [ 46.971126][ T4533] dump_stack_lvl+0xe8/0x140 [ 46.971143][ T4533] dump_stack+0x15/0x1b [ 46.971158][ T4533] dump_header+0x81/0x220 [ 46.971309][ T4533] oom_kill_process+0x342/0x400 [ 46.971342][ T4533] out_of_memory+0x979/0xb80 [ 46.971427][ T4533] try_charge_memcg+0x5e6/0x9e0 [ 46.971455][ T4533] charge_memcg+0x51/0xc0 [ 46.971526][ T4533] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 46.971549][ T4533] __read_swap_cache_async+0x1df/0x350 [ 46.971625][ T4533] swap_cluster_readahead+0x277/0x3e0 [ 46.971661][ T4533] swapin_readahead+0xde/0x6f0 [ 46.971727][ T4533] ? __filemap_get_folio+0x4f7/0x6b0 [ 46.971802][ T4533] ? swap_cache_get_folio+0x77/0x200 [ 46.971839][ T4533] do_swap_page+0x301/0x2430 [ 46.971863][ T4533] ? css_rstat_updated+0xcd/0x5b0 [ 46.971897][ T4533] ? __pfx_default_wake_function+0x10/0x10 [ 46.971962][ T4533] handle_mm_fault+0x9a5/0x2c20 [ 46.971985][ T4533] ? mas_walk+0xf2/0x120 [ 46.972016][ T4533] do_user_addr_fault+0x636/0x1090 [ 46.972126][ T4533] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 46.972157][ T4533] exc_page_fault+0x62/0xa0 [ 46.972261][ T4533] asm_exc_page_fault+0x26/0x30 [ 46.972279][ T4533] RIP: 0033:0x7fc5a33f55a8 [ 46.972301][ T4533] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 1a 26 35 00 00 0f 8e 09 fe ff ff e8 f3 9d fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d e6 00 e8 00 e8 03 00 00 48 8d 1d e7 09 35 00 e8 02 95 12 00 [ 46.972324][ T4533] RSP: 002b:00007ffe344626e0 EFLAGS: 00010202 [ 46.972339][ T4533] RAX: 000000000000b70c RBX: 00007fc5a3747ba0 RCX: 000000000000b3b0 [ 46.972350][ T4533] RDX: 000000000000035c RSI: 00007ffe344626c0 RDI: 0000000000000001 [ 46.972364][ T4533] RBP: 00007fc5a3747ba0 R08: 00000000334431bb R09: 7fffffffffffffff [ 46.972379][ T4533] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000b78f [ 46.972416][ T4533] R13: 00007fc5a3746080 R14: ffffffffffffffff R15: 00007ffe344627f0 [ 46.972489][ T4533] [ 47.186844][ T4533] memory: usage 307200kB, limit 307200kB, failcnt 146 [ 47.193744][ T4533] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 47.201762][ T4533] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 47.209029][ T4533] Memory cgroup stats for /syz4: [ 47.293732][ T4533] cache 0 [ 47.301662][ T4533] rss 0 [ 47.304495][ T4533] shmem 0 [ 47.307425][ T4533] mapped_file 0 [ 47.310905][ T4533] dirty 0 [ 47.313893][ T4533] writeback 0 [ 47.317159][ T4533] workingset_refault_anon 51 [ 47.321934][ T4533] workingset_refault_file 65 [ 47.326504][ T4533] swap 192512 [ 47.329785][ T4533] swapcached 8192 [ 47.333485][ T4533] pgpgin 15329 [ 47.336835][ T4533] pgpgout 15327 [ 47.340287][ T4533] pgfault 20956 [ 47.343846][ T4533] pgmajfault 28 [ 47.347289][ T4533] inactive_anon 8192 [ 47.351188][ T4533] active_anon 0 [ 47.354642][ T4533] inactive_file 0 [ 47.358400][ T4533] active_file 0 [ 47.361867][ T4533] unevictable 0 [ 47.365322][ T4533] hierarchical_memory_limit 314572800 [ 47.370680][ T4533] hierarchical_memsw_limit 9223372036854771712 [ 47.376833][ T4533] total_cache 0 [ 47.380291][ T4533] total_rss 0 [ 47.383598][ T4533] total_shmem 0 [ 47.387122][ T4533] total_mapped_file 0 [ 47.391201][ T4533] total_dirty 0 [ 47.394653][ T4533] total_writeback 0 [ 47.398468][ T4533] total_workingset_refault_anon 51 [ 47.403650][ T4533] total_workingset_refault_file 65 [ 47.408787][ T4533] total_swap 192512 [ 47.412606][ T4533] total_swapcached 8192 [ 47.416829][ T4533] total_pgpgin 15329 [ 47.420709][ T4533] total_pgpgout 15327 [ 47.424697][ T4533] total_pgfault 20956 [ 47.428682][ T4533] total_pgmajfault 28 [ 47.432697][ T4533] total_inactive_anon 8192 [ 47.437098][ T4533] total_active_anon 0 [ 47.441081][ T4533] total_inactive_file 0 [ 47.445251][ T4533] total_active_file 0 [ 47.449223][ T4533] total_unevictable 0 [ 47.453238][ T4533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.400,pid=4533,uid=0 [ 47.467766][ T4533] Memory cgroup out of memory: Killed process 4533 (syz.4.400) total-vm:95812kB, anon-rss:924kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 47.744455][ T4575] vlan2: entered allmulticast mode [ 48.031465][ T4583] netlink: 'syz.2.419': attribute type 2 has an invalid length. [ 48.146315][ T4589] binfmt_misc: register: failed to install interpreter file ./file2 [ 48.496594][ T4608] loop4: detected capacity change from 0 to 1024 [ 48.522588][ T4608] EXT4-fs: Ignoring removed orlov option [ 48.542236][ T4614] loop3: detected capacity change from 0 to 128 [ 48.561144][ T4608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.641695][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.833855][ T4630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4630 comm=syz.3.439 [ 48.905820][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 48.905834][ T29] audit: type=1400 audit(1753979787.489:792): avc: denied { bind } for pid=4631 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.971128][ T29] audit: type=1400 audit(1753979787.519:793): avc: denied { setopt } for pid=4631 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.989842][ T4636] syzkaller1: entered promiscuous mode [ 48.997339][ T4636] syzkaller1: entered allmulticast mode [ 49.127274][ T4638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.136844][ T4638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.144155][ T29] audit: type=1400 audit(1753979787.699:794): avc: denied { create } for pid=4637 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.164574][ T29] audit: type=1400 audit(1753979787.699:795): avc: denied { write } for pid=4637 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.188265][ T4642] ip6erspan0: entered promiscuous mode [ 49.258992][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.266509][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.273967][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.300195][ T4650] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 49.308529][ T4650] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 49.311146][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.324490][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.331913][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.339368][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.346779][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.354182][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.361587][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.368981][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.376467][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.383990][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.448001][ T4658] syz.1.450: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 49.458699][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.462555][ T4658] CPU: 0 UID: 0 PID: 4658 Comm: syz.1.450 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 49.462584][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.462615][ T4658] Call Trace: [ 49.462622][ T4658] [ 49.462631][ T4658] __dump_stack+0x1d/0x30 [ 49.462654][ T4658] dump_stack_lvl+0xe8/0x140 [ 49.462681][ T4658] dump_stack+0x15/0x1b [ 49.462699][ T4658] warn_alloc+0x12b/0x1a0 [ 49.462724][ T4658] __vmalloc_node_range_noprof+0x9c/0xe00 [ 49.462757][ T4658] ? __futex_wait+0x1ff/0x260 [ 49.462868][ T4658] ? __pfx_futex_wake_mark+0x10/0x10 [ 49.462900][ T4658] ? __rcu_read_unlock+0x4f/0x70 [ 49.462922][ T4658] ? avc_has_perm_noaudit+0x1b1/0x200 [ 49.462945][ T4658] ? should_fail_ex+0x30/0x280 [ 49.462979][ T4658] ? xskq_create+0x36/0xe0 [ 49.463139][ T4658] vmalloc_user_noprof+0x7d/0xb0 [ 49.463161][ T4658] ? xskq_create+0x80/0xe0 [ 49.463181][ T4658] xskq_create+0x80/0xe0 [ 49.463240][ T4658] xsk_init_queue+0x95/0xf0 [ 49.463336][ T4658] xsk_setsockopt+0x477/0x640 [ 49.463370][ T4658] ? __pfx_xsk_setsockopt+0x10/0x10 [ 49.463405][ T4658] __sys_setsockopt+0x184/0x200 [ 49.463484][ T4658] __x64_sys_setsockopt+0x64/0x80 [ 49.463507][ T4658] x64_sys_call+0x20ec/0x2ff0 [ 49.463542][ T4658] do_syscall_64+0xd2/0x200 [ 49.463610][ T4658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.463636][ T4658] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.463692][ T4658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.463715][ T4658] RIP: 0033:0x7f1b87d6eb69 [ 49.463731][ T4658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.463781][ T4658] RSP: 002b:00007f1b863cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.463801][ T4658] RAX: ffffffffffffffda RBX: 00007f1b87f95fa0 RCX: 00007f1b87d6eb69 [ 49.463852][ T4658] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 49.463925][ T4658] RBP: 00007f1b87df1df1 R08: 0000000000000004 R09: 0000000000000000 [ 49.463938][ T4658] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 49.463968][ T4658] R13: 0000000000000000 R14: 00007f1b87f95fa0 R15: 00007ffc5c1bd498 [ 49.463987][ T4658] [ 49.464004][ T4658] Mem-Info: [ 49.469927][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.470034][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.482151][ T4658] active_anon:40498 inactive_anon:1 isolated_anon:0 [ 49.482151][ T4658] active_file:10797 inactive_file:2227 isolated_file:0 [ 49.482151][ T4658] unevictable:0 dirty:152 writeback:0 [ 49.482151][ T4658] slab_reclaimable:3263 slab_unreclaimable:14342 [ 49.482151][ T4658] mapped:29170 shmem:33836 pagetables:1242 [ 49.482151][ T4658] sec_pagetables:0 bounce:0 [ 49.482151][ T4658] kernel_misc_reclaimable:0 [ 49.482151][ T4658] free:1871189 free_pcp:3774 free_cma:0 [ 49.492301][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.492328][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.492351][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.495671][ T4658] Node 0 active_anon:161992kB inactive_anon:4kB active_file:43188kB inactive_file:8908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116680kB dirty:608kB writeback:0kB shmem:135344kB writeback_tmp:0kB kernel_stack:3408kB pagetables:4968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 49.498585][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.502914][ T4658] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 49.507496][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.511633][ T4658] lowmem_reserve[]: [ 49.515940][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.521637][ T4658] 0 2883 7862 7862 [ 49.526392][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.531656][ T4658] [ 49.536579][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.541968][ T4658] Node 0 [ 49.546679][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.551077][ T4658] DMA32 free:2949348kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952980kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 49.556055][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.560430][ T4658] lowmem_reserve[]: 0 [ 49.564679][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.564702][ T3381] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 49.571540][ T3381] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 49.573977][ T4658] 0 [ 49.902177][ T4659] fido_id[4659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.921468][ T4658] 4978 4978 [ 49.976976][ T4658] Node 0 Normal free:4519120kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:162124kB inactive_anon:4kB active_file:43228kB inactive_file:8872kB unevictable:0kB writepending:680kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:12420kB local_pcp:5876kB free_cma:0kB [ 50.009024][ T4658] lowmem_reserve[]: 0 0 0 0 [ 50.013643][ T4658] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 50.026463][ T4658] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949348kB [ 50.042772][ T4658] Node 0 Normal: 374*4kB (UME) 613*8kB (UM) 530*16kB (UME) 407*32kB (UM) 398*64kB (UM) 132*128kB (UME) 118*256kB (UME) 108*512kB (UM) 91*1024kB (UM) 51*2048kB (UME) 1017*4096kB (UM) = 4519040kB [ 50.062227][ T4658] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 50.071529][ T4658] 46868 total pagecache pages [ 50.076190][ T4658] 10 pages in swap cache [ 50.080415][ T4658] Free swap = 124944kB [ 50.084607][ T4658] Total swap = 124996kB [ 50.088747][ T4658] 2097051 pages RAM [ 50.092569][ T4658] 0 pages HighMem/MovableOnly [ 50.097246][ T4658] 80406 pages reserved [ 50.151702][ T4661] __nla_validate_parse: 5 callbacks suppressed [ 50.151718][ T4661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 50.179484][ T29] audit: type=1400 audit(1753979788.759:796): avc: denied { bind } for pid=4662 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.220347][ T4665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.227433][ T29] audit: type=1400 audit(1753979788.789:797): avc: denied { setopt } for pid=4662 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.301066][ T4665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.400650][ T4665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.465433][ T29] audit: type=1400 audit(1753979789.049:798): avc: denied { map } for pid=4670 comm="syz.2.456" path="socket:[8402]" dev="sockfs" ino=8402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.488490][ T29] audit: type=1400 audit(1753979789.049:799): avc: denied { read } for pid=4670 comm="syz.2.456" path="socket:[8402]" dev="sockfs" ino=8402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.516209][ T4687] capability: warning: `syz.1.461' uses deprecated v2 capabilities in a way that may be insecure [ 50.528461][ T4665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.592181][ T29] audit: type=1400 audit(1753979789.179:800): avc: denied { bind } for pid=4690 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.616495][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.623815][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.641204][ T4686] bridge0: left promiscuous mode [ 50.646320][ T4686] bridge0: left allmulticast mode [ 50.666720][ T29] audit: type=1400 audit(1753979789.239:801): avc: denied { create } for pid=4688 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.736521][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.757016][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.829554][ T41] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.838716][ T41] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.900130][ T41] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.950306][ T41] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.980495][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.009073][ T4710] tipc: Started in network mode [ 51.014070][ T4710] tipc: Node identity 5e0a71afec42, cluster identity 4711 [ 51.021343][ T4710] tipc: Enabled bearer , priority 0 [ 51.028213][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.038667][ T4710] syzkaller0: MTU too low for tipc bearer [ 51.044579][ T4710] tipc: Disabling bearer [ 51.109289][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.152518][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.373744][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.381079][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.440779][ T4738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.450244][ T4738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.498797][ T1449] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.553404][ T1449] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.561986][ T4763] loop3: detected capacity change from 0 to 1024 [ 51.569052][ T4763] EXT4-fs: Ignoring removed orlov option [ 51.599574][ T1449] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.619923][ T1449] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.649740][ T4763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.783932][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.791179][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.815229][ T4773] bridge0: left promiscuous mode [ 51.820233][ T4773] bridge0: left allmulticast mode [ 52.039923][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.137274][ T4773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.198789][ T4773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.284690][ T4773] macsec0: left allmulticast mode [ 52.358508][ T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.409044][ T56] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.455562][ T56] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.491162][ T56] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.627707][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 53.636557][ T4867] tipc: Enabled bearer , priority 10 [ 53.651476][ T4868] hub 9-0:1.0: USB hub found [ 53.656998][ T4868] hub 9-0:1.0: 8 ports detected [ 53.704546][ T4867] netlink: 14 bytes leftover after parsing attributes in process `syz.3.544'. [ 53.754723][ T4867] tipc: Resetting bearer [ 53.774707][ T4867] tipc: Disabling bearer [ 53.807439][ T4884] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.921591][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 53.921605][ T29] audit: type=1326 audit(1753979792.509:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc5a351eb69 code=0x7ffc0000 [ 54.051781][ T29] audit: type=1400 audit(1753979792.639:971): avc: denied { relabelfrom } for pid=4904 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.071743][ T29] audit: type=1400 audit(1753979792.639:972): avc: denied { relabelto } for pid=4904 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.294193][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.301452][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346068][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.357250][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.392011][ T4920] netlink: 96 bytes leftover after parsing attributes in process `syz.0.568'. [ 54.402188][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.420530][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.441478][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.461070][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.472829][ T29] audit: type=1326 audit(1753979793.049:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 54.496452][ T29] audit: type=1326 audit(1753979793.049:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 54.519768][ T29] audit: type=1326 audit(1753979793.059:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 54.543140][ T29] audit: type=1326 audit(1753979793.059:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 54.567592][ T29] audit: type=1326 audit(1753979793.149:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ff7b81425 code=0x7ffc0000 [ 54.637158][ T29] audit: type=1326 audit(1753979793.149:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 54.660477][ T29] audit: type=1326 audit(1753979793.149:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff7b4eb69 code=0x7ffc0000 [ 55.569272][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.576590][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.584843][ T4967] bridge0: left promiscuous mode [ 55.589817][ T4967] bridge0: left allmulticast mode [ 55.641661][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.653432][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.683755][ T41] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.704179][ T41] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.731071][ T41] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.739618][ T41] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.832519][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 55.841648][ T4982] netlink: 212 bytes leftover after parsing attributes in process `syz.0.602'. [ 55.907662][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 55.916684][ T4998] tipc: Started in network mode [ 55.921731][ T4998] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 55.928916][ T4998] tipc: Enabled bearer , priority 10 [ 55.978940][ T4998] netlink: 14 bytes leftover after parsing attributes in process `syz.4.598'. [ 55.992648][ T4998] tipc: Disabling bearer [ 56.050889][ T5012] tipc: Enabling of bearer rejected, failed to enable media [ 56.386543][ T5029] netlink: 7 bytes leftover after parsing attributes in process `syz.1.611'. [ 56.396009][ T5029] netlink: 7 bytes leftover after parsing attributes in process `syz.1.611'. [ 56.455249][ T5033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.624'. [ 56.541420][ T5039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.626'. [ 56.752059][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 56.760912][ T5047] tipc: Started in network mode [ 56.765942][ T5047] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 56.773179][ T5047] tipc: Enabled bearer , priority 10 [ 56.781515][ T5047] netlink: 14 bytes leftover after parsing attributes in process `syz.0.631'. [ 56.792147][ T5047] tipc: Disabling bearer [ 57.029646][ T5073] lo speed is unknown, defaulting to 1000 [ 57.043353][ T5073] lo speed is unknown, defaulting to 1000 [ 57.049653][ T5073] lo speed is unknown, defaulting to 1000 [ 57.056994][ T5073] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.071972][ T5073] lo speed is unknown, defaulting to 1000 [ 57.078128][ T5073] lo speed is unknown, defaulting to 1000 [ 57.096882][ T5073] lo speed is unknown, defaulting to 1000 [ 57.103288][ T5079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5079 comm=syz.3.635 [ 57.111518][ T5073] lo speed is unknown, defaulting to 1000 [ 57.131586][ T5073] lo speed is unknown, defaulting to 1000 [ 58.163391][ T5162] loop4: detected capacity change from 0 to 512 [ 58.185429][ T5162] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.669: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 58.208334][ T5162] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.669: Bad quota inode: 3, type: 0 [ 58.221314][ T5162] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.237178][ T5162] EXT4-fs (loop4): mount failed [ 58.400755][ T5182] siw: device registration error -23 [ 58.406922][ T5184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5184 comm=syz.2.676 [ 58.444819][ T5189] siw: device registration error -23 [ 58.750382][ T5274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5274 comm=syz.0.690 [ 59.349893][ T5319] loop3: detected capacity change from 0 to 1024 [ 59.370233][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 59.370249][ T29] audit: type=1400 audit(1753979797.949:1056): avc: denied { getopt } for pid=5320 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.411435][ T5325] loop4: detected capacity change from 0 to 1024 [ 59.428261][ T5325] EXT4-fs: Ignoring removed orlov option [ 59.466677][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.508278][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.700409][ T5319] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 59.808602][ T5344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.966881][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.017897][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.079188][ T29] audit: type=1400 audit(1753979798.659:1057): avc: denied { create } for pid=5352 comm="syz.4.722" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 60.263676][ T29] audit: type=1400 audit(1753979798.849:1058): avc: denied { search } for pid=5370 comm="syz.1.729" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.289493][ T29] audit: type=1400 audit(1753979798.879:1059): avc: denied { search } for pid=5370 comm="syz.1.729" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.311456][ T29] audit: type=1400 audit(1753979798.879:1060): avc: denied { read open } for pid=5370 comm="syz.1.729" path="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.569138][ T29] audit: type=1400 audit(1753979799.149:1061): avc: denied { execute } for pid=5397 comm="syz.4.740" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 60.667779][ T5400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.846672][ T5415] __nla_validate_parse: 16 callbacks suppressed [ 60.846802][ T5415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 60.890313][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 61.073578][ T5432] loop3: detected capacity change from 0 to 512 [ 61.097563][ T5432] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 24 [ 61.146313][ T5432] loop3: detected capacity change from 0 to 544 [ 61.157239][ T5432] EXT4-fs (loop3): failed to parse options in superblock: [ 61.170162][ T5432] EXT4-fs (loop3): Invalid default hash set in the superblock [ 61.296740][ T5438] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 61.319233][ T5438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.377743][ T5443] lo speed is unknown, defaulting to 1000 [ 61.518602][ T5454] netlink: 'syz.0.773': attribute type 39 has an invalid length. [ 61.554683][ T29] audit: type=1400 audit(1753979800.139:1062): avc: denied { read } for pid=5457 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.615194][ T29] audit: type=1400 audit(1753979800.199:1063): avc: denied { mounton } for pid=5461 comm="syz.4.764" path="/150/file0" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.665467][ T5468] SELinux: Context is not valid (left unmapped). [ 63.132326][ T5484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.772'. [ 63.235354][ T5498] lo speed is unknown, defaulting to 1000 [ 63.343654][ T5512] netlink: 'syz.2.789': attribute type 39 has an invalid length. [ 63.344260][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 63.404032][ T5518] lo speed is unknown, defaulting to 1000 [ 63.431662][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 63.460269][ T5525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 63.488597][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 63.605641][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 63.628877][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 63.758244][ T5564] netlink: 'syz.3.811': attribute type 39 has an invalid length. [ 63.802790][ T5568] lo speed is unknown, defaulting to 1000 [ 63.965963][ T5577] loop4: detected capacity change from 0 to 512 [ 63.973573][ T5577] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 24 [ 64.033454][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.048521][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.134820][ T5604] netlink: 'syz.1.827': attribute type 39 has an invalid length. [ 64.143789][ T5606] loop4: detected capacity change from 0 to 1024 [ 64.163442][ T5606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.300268][ T5606] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 64.339060][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.487906][ T5621] lo speed is unknown, defaulting to 1000 [ 64.595666][ T5627] loop4: detected capacity change from 0 to 1024 [ 64.600623][ T5630] lo speed is unknown, defaulting to 1000 [ 64.607165][ T5627] EXT4-fs: Ignoring removed bh option [ 64.619237][ T5631] loop1: detected capacity change from 0 to 512 [ 64.627512][ T5631] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 24 [ 64.640437][ T5627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.702056][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.276162][ T5673] netlink: zone id is out of range [ 65.281561][ T5673] netlink: zone id is out of range [ 65.286874][ T5673] netlink: zone id is out of range [ 65.292067][ T5673] netlink: zone id is out of range [ 65.297399][ T5673] netlink: zone id is out of range [ 65.304097][ T5673] netlink: zone id is out of range [ 65.318010][ T5673] netlink: zone id is out of range [ 65.330296][ T5673] netlink: zone id is out of range [ 65.337213][ T5673] netlink: zone id is out of range [ 65.342445][ T5673] netlink: zone id is out of range [ 65.368622][ T29] audit: type=1400 audit(1753979803.949:1064): avc: denied { bind } for pid=5678 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.407143][ T29] audit: type=1326 audit(1753979803.989:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.431199][ T29] audit: type=1326 audit(1753979803.989:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.454563][ T29] audit: type=1326 audit(1753979803.989:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.477978][ T29] audit: type=1326 audit(1753979803.989:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.501332][ T29] audit: type=1326 audit(1753979803.989:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.524951][ T29] audit: type=1326 audit(1753979803.989:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.548362][ T29] audit: type=1326 audit(1753979803.989:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.571838][ T29] audit: type=1326 audit(1753979803.989:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.595279][ T29] audit: type=1326 audit(1753979803.989:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 65.636765][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.644403][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.794506][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.802776][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.839378][ T5719] loop4: detected capacity change from 0 to 512 [ 65.850928][ T5719] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.864039][ T5719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.874038][ T5719] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 66.276373][ T5753] loop3: detected capacity change from 0 to 512 [ 66.305804][ T5753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.315755][ T5753] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 66.380230][ T5763] __nla_validate_parse: 6 callbacks suppressed [ 66.380245][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 66.407865][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 66.447496][ T5763] netlink: 156 bytes leftover after parsing attributes in process `syz.3.882'. [ 66.493388][ T5773] lo: entered allmulticast mode [ 66.510177][ T5772] lo: left allmulticast mode [ 66.574491][ T5781] netlink: 28 bytes leftover after parsing attributes in process `'. [ 66.601276][ T5781] netem: change failed [ 66.738508][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 66.748307][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 66.764215][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 66.790787][ T5804] netlink: 156 bytes leftover after parsing attributes in process `syz.1.900'. [ 67.078648][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 67.147708][ T5858] lo speed is unknown, defaulting to 1000 [ 67.328589][ T5900] netem: incorrect gi model size [ 67.333732][ T5900] netem: change failed [ 67.457449][ T5922] netlink: 168 bytes leftover after parsing attributes in process `syz.0.935'. [ 67.527538][ T5928] loop3: detected capacity change from 0 to 1024 [ 67.590876][ T5928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.605008][ T5946] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 67.646581][ T5928] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 67.659019][ T5928] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.659019][ T5928] [ 67.668848][ T5928] EXT4-fs (loop3): Total free blocks count 0 [ 67.674995][ T5928] EXT4-fs (loop3): Free/Dirty block details [ 67.681095][ T5928] EXT4-fs (loop3): free_blocks=0 [ 67.686097][ T5928] EXT4-fs (loop3): dirty_blocks=0 [ 67.691175][ T5928] EXT4-fs (loop3): Block reservation details [ 67.697182][ T5928] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 67.735536][ T5957] loop4: detected capacity change from 0 to 1024 [ 67.778623][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.832061][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.841574][ T5957] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.953: Allocating blocks 385-513 which overlap fs metadata [ 67.923438][ T5968] EXT4-fs (loop4): pa ffff888106e905b0: logic 16, phys. 129, len 24 [ 67.931591][ T5968] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 67.962776][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.037770][ T6050] bridge0: port 3(gretap0) entered blocking state [ 69.044396][ T6050] bridge0: port 3(gretap0) entered disabled state [ 69.077944][ T6050] gretap0: entered allmulticast mode [ 69.091364][ T6052] loop4: detected capacity change from 0 to 128 [ 69.104885][ T6050] gretap0: entered promiscuous mode [ 69.118529][ T6050] gretap0: left allmulticast mode [ 69.123720][ T6050] gretap0: left promiscuous mode [ 69.128956][ T6050] bridge0: port 3(gretap0) entered disabled state [ 69.216803][ T6061] loop1: detected capacity change from 0 to 1024 [ 69.244668][ T6063] vlan2: entered allmulticast mode [ 69.260607][ T6061] EXT4-fs: Ignoring removed orlov option [ 69.295690][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.390170][ T6071] loop4: detected capacity change from 0 to 128 [ 69.465430][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.538839][ T6077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6077 comm=syz.1.1003 [ 69.641334][ T6082] binfmt_misc: register: failed to install interpreter file ./file2 [ 69.891393][ T6101] netlink: 'syz.3.1015': attribute type 21 has an invalid length. [ 69.962556][ T6109] tipc: Enabled bearer , priority 0 [ 69.993012][ T6109] syzkaller0: entered promiscuous mode [ 69.998503][ T6109] syzkaller0: entered allmulticast mode [ 70.005191][ T6109] tipc: Resetting bearer [ 70.024411][ T6106] tipc: Resetting bearer [ 70.039149][ T6106] tipc: Disabling bearer [ 70.101328][ T6128] wg2: entered promiscuous mode [ 70.106219][ T6128] wg2: entered allmulticast mode [ 70.130941][ T6132] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 70.139216][ T6132] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 70.169107][ T6136] loop3: detected capacity change from 0 to 512 [ 70.201877][ T6136] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.214826][ T6136] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.222989][ T6136] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.1030: corrupted inode contents [ 70.235857][ T6136] EXT4-fs (loop3): Remounting filesystem read-only [ 70.242688][ T6136] EXT4-fs (loop3): 1 truncate cleaned up [ 70.250718][ T5237] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.261409][ T5237] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.291054][ T5237] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.301808][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.314725][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.571920][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 70.571936][ T29] audit: type=1400 audit(1753979809.159:1090): avc: denied { wake_alarm } for pid=6186 comm="syz.2.1062" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.620159][ T29] audit: type=1400 audit(1753979809.199:1091): avc: denied { mount } for pid=6192 comm="syz.4.1054" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.655802][ T29] audit: type=1400 audit(1753979809.239:1092): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 70.844429][ T29] audit: type=1326 audit(1753979809.429:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.2.1063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ef491eb69 code=0x0 [ 70.935976][ T6213] netlink: 'syz.4.1064': attribute type 7 has an invalid length. [ 70.961503][ T29] audit: type=1400 audit(1753979809.549:1094): avc: denied { read write } for pid=6214 comm="syz.4.1065" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.985194][ T29] audit: type=1400 audit(1753979809.549:1095): avc: denied { open } for pid=6214 comm="syz.4.1065" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.009221][ T29] audit: type=1400 audit(1753979809.549:1096): avc: denied { ioctl } for pid=6214 comm="syz.4.1065" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.269935][ T29] audit: type=1400 audit(1753979809.849:1097): avc: denied { write } for pid=6238 comm="syz.3.1071" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.344810][ T29] audit: type=1400 audit(1753979809.929:1098): avc: denied { create } for pid=6243 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.364726][ T29] audit: type=1400 audit(1753979809.929:1099): avc: denied { connect } for pid=6243 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.641146][ T6249] ref_ctr increment failed for inode: 0x479 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811a27b980 [ 71.652810][ T6247] uprobe: syz.4.1084:6247 failed to unregister, leaking uprobe [ 71.703810][ T6256] loop1: detected capacity change from 0 to 512 [ 71.728141][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.740927][ T6256] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.414363][ T6320] netlink: 'syz.0.1106': attribute type 7 has an invalid length. [ 72.422385][ T6320] __nla_validate_parse: 11 callbacks suppressed [ 72.422399][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 72.548599][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.594268][ T6332] loop4: detected capacity change from 0 to 512 [ 72.609743][ T6331] wg2: entered promiscuous mode [ 72.614744][ T6331] wg2: entered allmulticast mode [ 72.622775][ T6332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.631876][ T6332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.639624][ T6332] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1110: corrupted inode contents [ 72.652260][ T6332] EXT4-fs (loop4): Remounting filesystem read-only [ 72.659013][ T6332] EXT4-fs (loop4): 1 truncate cleaned up [ 72.664828][ T5226] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.675457][ T5226] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.686132][ T5226] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.696671][ T6332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.709892][ T6332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.880675][ T6358] netlink: 'syz.1.1119': attribute type 21 has an invalid length. [ 72.888650][ T6358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1119'. [ 72.897790][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1119'. [ 73.299782][ T6393] netlink: 'syz.2.1132': attribute type 21 has an invalid length. [ 73.311871][ T6393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'. [ 73.321114][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 73.324990][ T6397] loop3: detected capacity change from 0 to 1024 [ 73.341572][ T6397] EXT4-fs: Ignoring removed nobh option [ 73.347163][ T6397] EXT4-fs: Ignoring removed bh option [ 73.357798][ T6401] 9pnet: p9_errstr2errno: server reported unknown error [ 73.376944][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.422667][ T6410] tipc: Enabling of bearer rejected, failed to enable media [ 73.436101][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.751975][ T6440] tipc: Enabling of bearer rejected, failed to enable media [ 73.893783][ T6453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.914209][ T6457] loop4: detected capacity change from 0 to 1024 [ 73.934390][ T6457] EXT4-fs: Ignoring removed orlov option [ 73.951696][ T6457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.237060][ T6475] loop3: detected capacity change from 0 to 128 [ 74.252299][ T6475] loop3: detected capacity change from 0 to 256 [ 74.256403][ T6476] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.1164'. [ 74.365063][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.176260][ T6498] vlan2: entered allmulticast mode [ 75.592073][ T6501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.831961][ T6527] lo speed is unknown, defaulting to 1000 [ 75.994451][ T6542] lo: entered allmulticast mode [ 75.999884][ T6541] lo: left allmulticast mode [ 76.036919][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 76.080707][ T6549] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.194524][ T6568] loop4: detected capacity change from 0 to 128 [ 76.212817][ T6568] loop4: detected capacity change from 0 to 256 [ 76.295318][ T6576] lo speed is unknown, defaulting to 1000 [ 76.756574][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 76.914791][ T6619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1223'. [ 77.027550][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 78.460883][ T6688] __nla_validate_parse: 1 callbacks suppressed [ 78.460897][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 78.478111][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 78.481395][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 78.481409][ T29] audit: type=1326 audit(1753979817.069:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.519733][ T29] audit: type=1326 audit(1753979817.109:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.543421][ T29] audit: type=1326 audit(1753979817.109:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.566832][ T29] audit: type=1326 audit(1753979817.109:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.590294][ T29] audit: type=1326 audit(1753979817.109:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.613831][ T29] audit: type=1326 audit(1753979817.109:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.637137][ T29] audit: type=1326 audit(1753979817.109:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.661117][ T29] audit: type=1326 audit(1753979817.109:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.684614][ T29] audit: type=1326 audit(1753979817.189:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.708156][ T29] audit: type=1326 audit(1753979817.189:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6685 comm="syz.2.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 78.940385][ T6715] lo speed is unknown, defaulting to 1000 [ 79.064649][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 79.280763][ T6749] lo speed is unknown, defaulting to 1000 [ 79.316042][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 79.409853][ T6764] ref_ctr increment failed for inode: 0x53b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811a201140 [ 79.421572][ T6763] uprobe: syz.1.1286:6763 failed to unregister, leaking uprobe [ 79.730136][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 80.723757][ T6835] ref_ctr increment failed for inode: 0x4f9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811a27d080 [ 80.735490][ T6834] uprobe: syz.0.1316:6834 failed to unregister, leaking uprobe [ 80.939976][ T6848] netlink: 'syz.0.1324': attribute type 16 has an invalid length. [ 80.947884][ T6848] netlink: 'syz.0.1324': attribute type 17 has an invalid length. [ 80.961439][ T6852] lo speed is unknown, defaulting to 1000 [ 81.045847][ T6855] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1327'. [ 81.113008][ T6867] lo speed is unknown, defaulting to 1000 [ 81.518496][ T6902] loop3: detected capacity change from 0 to 1024 [ 81.526273][ T6902] EXT4-fs: Ignoring removed orlov option [ 81.540615][ T6902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.586188][ T6908] loop1: detected capacity change from 0 to 512 [ 81.612590][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.625918][ T6908] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.824377][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.920734][ T6930] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1353'. [ 81.998801][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.688378][ T6946] loop4: detected capacity change from 0 to 512 [ 82.706331][ T6946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.719628][ T6946] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.795907][ T6959] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1365'. [ 82.828099][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.048313][ T6972] lo speed is unknown, defaulting to 1000 [ 83.239289][ T6980] netlink: 'syz.4.1374': attribute type 16 has an invalid length. [ 83.247165][ T6980] netlink: 'syz.4.1374': attribute type 17 has an invalid length. [ 83.555547][ T6984] lo speed is unknown, defaulting to 1000 [ 83.801353][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.807886][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.815419][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 83.823766][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 83.830358][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.837935][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 83.851947][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 83.858576][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 83.866222][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 83.884316][ T7017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.909206][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 83.915867][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.923661][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 83.936520][ T7017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.945595][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 83.952208][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.959821][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 83.969875][ T7017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.980395][ T7017] vhci_hcd vhci_hcd.0: port 0 already used [ 83.986921][ T7029] vhci_hcd: connection closed [ 83.986979][ T5237] vhci_hcd: stop threads [ 83.987101][ T7027] vhci_hcd: connection closed [ 83.991712][ T5237] vhci_hcd: release socket [ 84.001058][ T7025] vhci_hcd: connection closed [ 84.001328][ T5237] vhci_hcd: disconnect device [ 84.015233][ T7020] vhci_hcd: connection closed [ 84.015455][ T7018] vhci_hcd: connection closed [ 84.045130][ T5237] vhci_hcd: stop threads [ 84.054174][ T5237] vhci_hcd: release socket [ 84.058693][ T5237] vhci_hcd: disconnect device [ 84.066776][ T7036] lo speed is unknown, defaulting to 1000 [ 84.072609][ T5237] vhci_hcd: stop threads [ 84.072620][ T5237] vhci_hcd: release socket [ 84.072631][ T5237] vhci_hcd: disconnect device [ 84.077201][ T10] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 84.094689][ T7019] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 84.101543][ T5237] vhci_hcd: stop threads [ 84.105823][ T5237] vhci_hcd: release socket [ 84.110333][ T5237] vhci_hcd: disconnect device [ 84.128674][ T5237] vhci_hcd: stop threads [ 84.133026][ T5237] vhci_hcd: release socket [ 84.137460][ T5237] vhci_hcd: disconnect device [ 84.186573][ T7043] loop4: detected capacity change from 0 to 128 [ 84.197692][ T7045] lo speed is unknown, defaulting to 1000 [ 84.464275][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 84.464289][ T29] audit: type=1326 audit(1753979823.049:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.3.1401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x0 [ 84.508654][ T29] audit: type=1400 audit(1753979823.089:1241): avc: denied { unmount } for pid=7064 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 84.548490][ T7068] netlink: 'syz.2.1404': attribute type 13 has an invalid length. [ 84.590263][ T7072] loop1: detected capacity change from 0 to 512 [ 84.599412][ T7072] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 84.608332][ T7072] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 84.707766][ T7080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1411'. [ 84.843837][ T7095] loop1: detected capacity change from 0 to 8192 [ 84.851112][ T7095] msdos: Unknown parameter '' [ 84.974178][ T29] audit: type=1400 audit(1753979823.559:1242): avc: denied { getopt } for pid=7100 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.286735][ T29] audit: type=1400 audit(1753979823.869:1243): avc: denied { ioctl } for pid=7123 comm="syz.1.1430" path="socket:[15205]" dev="sockfs" ino=15205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.324895][ T29] audit: type=1326 audit(1753979823.909:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.349006][ T29] audit: type=1326 audit(1753979823.909:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.372529][ T29] audit: type=1326 audit(1753979823.909:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.396005][ T29] audit: type=1326 audit(1753979823.909:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.419501][ T29] audit: type=1326 audit(1753979823.909:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.443048][ T29] audit: type=1326 audit(1753979823.909:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.3.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3522deb69 code=0x7ffc0000 [ 85.467342][ T7130] syzkaller0: entered allmulticast mode [ 85.484404][ T7130] syzkaller0 (unregistering): left allmulticast mode [ 85.673428][ T7159] netlink: 376 bytes leftover after parsing attributes in process `syz.2.1445'. [ 85.801863][ T7180] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 85.836012][ T7182] futex_wake_op: syz.4.1452 tries to shift op by -1; fix this program [ 86.008775][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 86.081857][ T7205] loop1: detected capacity change from 0 to 512 [ 86.101422][ T7205] EXT4-fs error (device loop1): ext4_iget_extra_inode:5030: inode #15: comm syz.1.1463: corrupted in-inode xattr: invalid ea_ino [ 86.141625][ T7205] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1463: couldn't read orphan inode 15 (err -117) [ 86.192085][ T7205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.230704][ T7220] lo: entered allmulticast mode [ 86.257015][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.257334][ T7217] lo: left allmulticast mode [ 86.638984][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 86.742582][ T7283] ip6gre1: entered allmulticast mode [ 87.161444][ T7320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7320 comm=syz.0.1510 [ 87.614153][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'. [ 87.623165][ T7371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'. [ 87.632214][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'. [ 87.642017][ T7371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'. [ 87.666812][ T7376] netlink: 'syz.2.1539': attribute type 7 has an invalid length. [ 87.674691][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 87.823998][ T7382] lo speed is unknown, defaulting to 1000 [ 87.867994][ T7389] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 87.888839][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.908829][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.916102][ T7389] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 87.927579][ T7389] bond1: (slave vti0): Error -95 calling set_mac_address [ 88.016276][ T7397] mmap: syz.4.1547 (7397) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.131450][ T7411] sctp: [Deprecated]: syz.2.1551 (pid 7411) Use of int in max_burst socket option deprecated. [ 88.131450][ T7411] Use struct sctp_assoc_value instead [ 88.157332][ T7401] lo speed is unknown, defaulting to 1000 [ 88.194767][ T7415] loop1: detected capacity change from 0 to 128 [ 88.248152][ T7419] sd 0:0:1:0: device reset [ 88.501413][ T5226] tipc: Subscription rejected, illegal request [ 88.784909][ T7440] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 88.796910][ T7440] bond2: entered promiscuous mode [ 88.802216][ T7440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.814027][ T7440] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1566'. [ 88.825620][ T7440] batadv0: entered promiscuous mode [ 88.830941][ T7440] batadv0: entered allmulticast mode [ 88.837409][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.846260][ T7440] bond2: (slave batadv0): making interface the new active one [ 88.854264][ T7440] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 88.869711][ T7440] batadv1: entered promiscuous mode [ 88.875037][ T7440] batadv1: entered allmulticast mode [ 88.880653][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.888657][ T7440] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 88.929355][ T7445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7445 comm=syz.2.1568 [ 89.161129][ T10] usb 3-1: enqueue for inactive port 0 [ 89.166750][ T10] usb 3-1: enqueue for inactive port 0 [ 89.231091][ T10] vhci_hcd: vhci_device speed not set [ 89.342451][ T7482] loop4: detected capacity change from 0 to 128 [ 89.364177][ T7482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.380728][ T7482] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.389395][ T7483] netlink: 'syz.3.1584': attribute type 16 has an invalid length. [ 89.399053][ T7483] netlink: 'syz.3.1584': attribute type 17 has an invalid length. [ 89.431968][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.599197][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 89.599211][ T29] audit: type=1400 audit(1753979828.179:1438): avc: denied { write } for pid=7495 comm="syz.4.1592" name="file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.659492][ T29] audit: type=1400 audit(1753979828.179:1439): avc: denied { open } for pid=7495 comm="syz.4.1592" path="/330/file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.810339][ T29] audit: type=1400 audit(1753979828.389:1440): avc: denied { shutdown } for pid=7510 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.858224][ T29] audit: type=1400 audit(1753979828.409:1441): avc: denied { watch } for pid=7511 comm="syz.4.1598" path="/333/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 89.880673][ T29] audit: type=1400 audit(1753979828.429:1442): avc: denied { associate } for pid=7511 comm="syz.4.1598" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 89.942832][ T7517] loop4: detected capacity change from 0 to 128 [ 89.961160][ T29] audit: type=1400 audit(1753979828.459:1443): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.221042][ T29] audit: type=1326 audit(1753979828.799:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.1.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 90.244801][ T29] audit: type=1326 audit(1753979828.799:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.1.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 90.268294][ T29] audit: type=1326 audit(1753979828.799:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.1.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 90.291713][ T29] audit: type=1326 audit(1753979828.799:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.1.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 90.338483][ T7533] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 90.370146][ T7533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.384403][ T7533] bond2 (unregistering): Released all slaves [ 90.490111][ T7542] loop1: detected capacity change from 0 to 512 [ 90.497032][ T7542] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 90.527676][ T7542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 90.550888][ T7542] System zones: 1-12 [ 90.561938][ T7542] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 90.578168][ T7542] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #11: comm syz.1.1622: corrupted inode contents [ 90.591085][ T7542] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #11: comm syz.1.1622: mark_inode_dirty error [ 90.603115][ T7542] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1622: invalid indirect mapped block 1 (level 1) [ 90.616534][ T7542] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #11: comm syz.1.1622: corrupted inode contents [ 90.630356][ T7542] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 90.639286][ T7542] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #11: comm syz.1.1622: corrupted inode contents [ 90.661803][ T7542] EXT4-fs error (device loop1): ext4_truncate:4592: inode #11: comm syz.1.1622: mark_inode_dirty error [ 90.689330][ T7542] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 90.712647][ T7542] EXT4-fs (loop1): 1 truncate cleaned up [ 90.719336][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.754712][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.859819][ T7573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.024240][ T7589] loop4: detected capacity change from 0 to 128 [ 91.075768][ T7595] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 91.091821][ T7589] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.129836][ T7595] bond2: entered promiscuous mode [ 91.139646][ T7589] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.151271][ T7595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.194953][ T7595] __nla_validate_parse: 2 callbacks suppressed [ 91.194971][ T7595] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1634'. [ 91.238446][ T7594] lo speed is unknown, defaulting to 1000 [ 91.272711][ T7595] batadv0: entered promiscuous mode [ 91.277990][ T7595] batadv0: entered allmulticast mode [ 91.293174][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.301872][ T7595] bond2: (slave batadv0): making interface the new active one [ 91.302618][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.310270][ T7595] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 91.328785][ T7602] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1634'. [ 91.351355][ T7602] batadv1: entered promiscuous mode [ 91.356663][ T7602] batadv1: entered allmulticast mode [ 91.367621][ T7602] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.375829][ T7602] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 91.499968][ T7604] lo speed is unknown, defaulting to 1000 [ 91.535411][ T7610] loop3: detected capacity change from 0 to 512 [ 91.582194][ T7610] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.611056][ T7610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 91.640845][ T7610] System zones: 1-12 [ 91.645189][ T7610] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 91.660037][ T7610] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #11: comm syz.3.1637: corrupted inode contents [ 91.687331][ T7610] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #11: comm syz.3.1637: mark_inode_dirty error [ 91.717049][ T7610] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1637: invalid indirect mapped block 1 (level 1) [ 91.740396][ T7610] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #11: comm syz.3.1637: corrupted inode contents [ 91.767619][ T7610] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 91.776707][ T7610] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #11: comm syz.3.1637: corrupted inode contents [ 91.794710][ T7610] EXT4-fs error (device loop3): ext4_truncate:4592: inode #11: comm syz.3.1637: mark_inode_dirty error [ 91.810798][ T7610] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 91.820090][ T7610] EXT4-fs (loop3): 1 truncate cleaned up [ 91.827224][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.920886][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.012139][ T7639] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 92.034384][ T7639] bond2: entered promiscuous mode [ 92.039675][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.080224][ T7639] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1647'. [ 92.093519][ T7639] batadv1: entered promiscuous mode [ 92.098814][ T7639] batadv1: entered allmulticast mode [ 92.106869][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.115275][ T7639] bond2: (slave batadv1): making interface the new active one [ 92.142127][ T7653] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1647'. [ 92.142077][ T7639] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 92.172797][ T7653] batadv2: entered promiscuous mode [ 92.178047][ T7653] batadv2: entered allmulticast mode [ 92.184519][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 92.192937][ T7653] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 92.337662][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 93.029685][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 93.153942][ T7707] sd 0:0:1:0: device reset [ 93.195272][ T5262] tipc: Subscription rejected, illegal request [ 93.270855][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 93.645053][ T7733] lo speed is unknown, defaulting to 1000 [ 93.957398][ T7736] sd 0:0:1:0: device reset [ 94.079520][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 94.095296][ T7751] sctp: [Deprecated]: syz.0.1693 (pid 7751) Use of int in max_burst socket option deprecated. [ 94.095296][ T7751] Use struct sctp_assoc_value instead [ 94.151182][ T7756] lo speed is unknown, defaulting to 1000 [ 94.162876][ T7758] loop1: detected capacity change from 0 to 1024 [ 94.182653][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.207488][ T7758] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 94.227794][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.291237][ T7766] bridge: RTM_NEWNEIGH with invalid ether address [ 94.312018][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 94.321812][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 94.379112][ T5262] tipc: Subscription rejected, illegal request [ 95.598360][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 95.598375][ T29] audit: type=1326 audit(1753979834.179:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.627946][ T29] audit: type=1326 audit(1753979834.179:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.651530][ T29] audit: type=1326 audit(1753979834.199:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.674931][ T29] audit: type=1326 audit(1753979834.199:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.698405][ T29] audit: type=1326 audit(1753979834.199:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.721851][ T29] audit: type=1326 audit(1753979834.199:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.745257][ T29] audit: type=1326 audit(1753979834.199:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.768758][ T29] audit: type=1326 audit(1753979834.199:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.792210][ T29] audit: type=1326 audit(1753979834.199:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.815696][ T29] audit: type=1326 audit(1753979834.199:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef491eb69 code=0x7ffc0000 [ 95.893851][ T7813] loop4: detected capacity change from 0 to 8192 [ 95.909741][ T7813] msdos: Unknown parameter '' [ 95.958549][ T7814] syzkaller0: entered allmulticast mode [ 95.976766][ T7832] loop4: detected capacity change from 0 to 512 [ 95.988411][ T7814] syzkaller0 (unregistering): left allmulticast mode [ 96.009811][ T7832] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 96.023835][ T7832] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 96.434784][ T7868] lo speed is unknown, defaulting to 1000 [ 96.850138][ T7885] lo speed is unknown, defaulting to 1000 [ 96.856562][ T7884] syzkaller0: entered allmulticast mode [ 96.866872][ T7884] syzkaller0 (unregistering): left allmulticast mode [ 97.004247][ T7890] futex_wake_op: syz.2.1753 tries to shift op by -1; fix this program [ 97.300966][ T7863] syz.0.1743 (7863) used greatest stack depth: 5904 bytes left [ 97.399338][ T7907] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 97.399338][ T7907] The task syz.4.1761 (7907) triggered the difference, watch for misbehavior. [ 97.610576][ T7916] syzkaller0: entered allmulticast mode [ 97.657698][ T7916] syzkaller0 (unregistering): left allmulticast mode [ 97.975015][ T7930] netlink: 376 bytes leftover after parsing attributes in process `syz.1.1772'. [ 98.024720][ T7934] lo speed is unknown, defaulting to 1000 [ 98.219789][ T7946] lo speed is unknown, defaulting to 1000 [ 98.301118][ T7942] lo speed is unknown, defaulting to 1000 [ 98.729190][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 98.735729][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.743423][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 98.777119][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 98.783700][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.791373][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 98.827811][ T7986] loop3: detected capacity change from 0 to 512 [ 98.866812][ T7975] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.884401][ T7982] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 98.884449][ T7986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.891097][ T7982] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.891176][ T7982] vhci_hcd vhci_hcd.0: Device attached [ 98.917135][ T7986] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.918728][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 98.927862][ T7963] lo speed is unknown, defaulting to 1000 [ 98.933967][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.934081][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 98.953798][ T7986] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #2: comm syz.3.1789: corrupted inode contents [ 98.992724][ T7986] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #2: comm syz.3.1789: mark_inode_dirty error [ 99.009758][ T7986] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #2: comm syz.3.1789: corrupted inode contents [ 99.021572][ T3389] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 99.038291][ T7975] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.047659][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 99.054314][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.062080][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 99.080940][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.091159][ T7975] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.118406][ T7975] vhci_hcd vhci_hcd.0: port 0 already used [ 99.125099][ T7990] vhci_hcd: connection closed [ 99.125258][ T7983] vhci_hcd: connection closed [ 99.125306][ T7976] vhci_hcd: connection reset by peer [ 99.130016][ T7980] vhci_hcd: connection closed [ 99.136188][ T7993] vhci_hcd: connection closed [ 99.145196][ T5226] vhci_hcd: stop threads [ 99.154167][ T5226] vhci_hcd: release socket [ 99.158592][ T5226] vhci_hcd: disconnect device [ 99.190244][ T8002] loop3: detected capacity change from 0 to 1024 [ 99.191923][ T5226] vhci_hcd: stop threads [ 99.200962][ T5226] vhci_hcd: release socket [ 99.202793][ T8002] EXT4-fs: Ignoring removed nobh option [ 99.205406][ T5226] vhci_hcd: disconnect device [ 99.210927][ T8002] EXT4-fs: Ignoring removed bh option [ 99.231247][ T5226] vhci_hcd: stop threads [ 99.235525][ T5226] vhci_hcd: release socket [ 99.239953][ T5226] vhci_hcd: disconnect device [ 99.246709][ T5226] vhci_hcd: stop threads [ 99.250982][ T5226] vhci_hcd: release socket [ 99.255448][ T5226] vhci_hcd: disconnect device [ 99.262517][ T8002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.277185][ T5226] vhci_hcd: stop threads [ 99.281525][ T5226] vhci_hcd: release socket [ 99.282809][ T8007] vlan2: entered allmulticast mode [ 99.286021][ T5226] vhci_hcd: disconnect device [ 99.291140][ T8007] syz_tun: entered allmulticast mode [ 99.329666][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.378747][ T8015] loop1: detected capacity change from 0 to 512 [ 99.611645][ T8027] loop1: detected capacity change from 0 to 512 [ 99.644673][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.671924][ T8027] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.700849][ T8041] loop4: detected capacity change from 0 to 256 [ 99.709959][ T8027] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.1805: corrupted inode contents [ 99.722215][ T8027] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #2: comm syz.1.1805: mark_inode_dirty error [ 99.734733][ T8027] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.1805: corrupted inode contents [ 99.776794][ T8041] FAT-fs (loop4): Directory bread(block 64) failed [ 99.784078][ T8041] FAT-fs (loop4): Directory bread(block 65) failed [ 99.790819][ T8041] FAT-fs (loop4): Directory bread(block 66) failed [ 99.793058][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.797558][ T8041] FAT-fs (loop4): Directory bread(block 67) failed [ 99.812921][ T8041] FAT-fs (loop4): Directory bread(block 68) failed [ 99.819665][ T8041] FAT-fs (loop4): Directory bread(block 69) failed [ 99.826428][ T8041] FAT-fs (loop4): Directory bread(block 70) failed [ 99.841061][ T8041] FAT-fs (loop4): Directory bread(block 71) failed [ 99.847607][ T8041] FAT-fs (loop4): Directory bread(block 72) failed [ 99.902577][ T8059] loop1: detected capacity change from 0 to 1024 [ 99.912915][ T8041] FAT-fs (loop4): Directory bread(block 73) failed [ 99.979526][ T8059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.993970][ T8041] syz.4.1811: attempt to access beyond end of device [ 99.993970][ T8041] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 100.191598][ T8080] net_ratelimit: 326 callbacks suppressed [ 100.191614][ T8080] openvswitch: netlink: Message has 6 unknown bytes. [ 100.207371][ T8082] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 100.213987][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.221614][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 100.230455][ T8082] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 100.237033][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.244592][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 100.255601][ T8082] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 100.262121][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.269743][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 100.286884][ T8095] loop4: detected capacity change from 0 to 512 [ 100.293363][ T8082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.303829][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.323579][ T8082] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 100.330194][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.337933][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 100.363240][ T8105] loop1: detected capacity change from 0 to 1024 [ 100.374549][ T8095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.391585][ T8105] EXT4-fs: Ignoring removed orlov option [ 100.405001][ T8108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.416163][ T8105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.430228][ T8095] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.434667][ T8082] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 100.447107][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.454797][ T8082] vhci_hcd vhci_hcd.0: Device attached [ 100.471608][ T9] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 100.486354][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #2: comm syz.4.1827: corrupted inode contents [ 100.518357][ T8095] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #2: comm syz.4.1827: mark_inode_dirty error [ 100.537136][ T8082] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.582256][ T8095] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #2: comm syz.4.1827: corrupted inode contents [ 100.601088][ T8082] vhci_hcd vhci_hcd.0: port 0 already used [ 100.607816][ T8092] vhci_hcd: connection closed [ 100.608001][ T8085] vhci_hcd: connection reset by peer [ 100.608036][ T8100] vhci_hcd: connection closed [ 100.612793][ T8088] vhci_hcd: connection closed [ 100.623101][ T8111] vhci_hcd: connection closed [ 100.628238][ T5226] vhci_hcd: stop threads [ 100.637207][ T5226] vhci_hcd: release socket [ 100.641758][ T5226] vhci_hcd: disconnect device [ 100.647879][ T5226] vhci_hcd: stop threads [ 100.648741][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.652162][ T5226] vhci_hcd: release socket [ 100.665521][ T5226] vhci_hcd: disconnect device [ 100.673057][ T5226] vhci_hcd: stop threads [ 100.677396][ T5226] vhci_hcd: release socket [ 100.681878][ T5226] vhci_hcd: disconnect device [ 100.734420][ T5226] vhci_hcd: stop threads [ 100.738698][ T5226] vhci_hcd: release socket [ 100.743262][ T5226] vhci_hcd: disconnect device [ 100.748475][ T5226] vhci_hcd: stop threads [ 100.752764][ T5226] vhci_hcd: release socket [ 100.757173][ T5226] vhci_hcd: disconnect device [ 100.824210][ T8133] pim6reg1: entered promiscuous mode [ 100.829541][ T8133] pim6reg1: entered allmulticast mode [ 100.880089][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.154002][ T8149] vlan2: entered allmulticast mode [ 101.202049][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 101.202065][ T29] audit: type=1326 audit(1753979839.789:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.236593][ T29] audit: type=1326 audit(1753979839.789:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.260072][ T29] audit: type=1326 audit(1753979839.819:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.283555][ T29] audit: type=1326 audit(1753979839.819:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.307240][ T29] audit: type=1326 audit(1753979839.819:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.381278][ T29] audit: type=1326 audit(1753979839.819:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.404944][ T29] audit: type=1326 audit(1753979839.819:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.428457][ T29] audit: type=1326 audit(1753979839.819:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.451884][ T29] audit: type=1326 audit(1753979839.819:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.475332][ T29] audit: type=1326 audit(1753979839.819:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b87d6eb69 code=0x7ffc0000 [ 101.552395][ T8164] loop4: detected capacity change from 0 to 512 [ 101.574271][ T8164] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.582004][ T8164] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1849: bg 0: block 248: padding at end of block bitmap is not set [ 101.611551][ T8164] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1849: Failed to acquire dquot type 1 [ 101.673953][ T8164] EXT4-fs (loop4): 1 truncate cleaned up [ 101.684538][ T8164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.690234][ T8174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 101.705971][ T8174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 101.759116][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.285714][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 102.381681][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 102.396596][ T8215] openvswitch: netlink: Message has 6 unknown bytes. [ 102.919547][ T8261] netlink: zone id is out of range [ 102.924747][ T8261] netlink: zone id is out of range [ 102.929882][ T8261] netlink: zone id is out of range [ 102.935068][ T8261] netlink: zone id is out of range [ 102.940320][ T8261] netlink: zone id is out of range [ 102.945549][ T8261] netlink: zone id is out of range [ 102.950687][ T8261] netlink: zone id is out of range [ 102.956080][ T8261] netlink: zone id is out of range [ 103.002528][ T8267] wg2: left promiscuous mode [ 103.007148][ T8267] wg2: left allmulticast mode [ 103.014864][ T8267] wg2: entered promiscuous mode [ 103.019796][ T8267] wg2: entered allmulticast mode [ 103.054015][ T8271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1897'. [ 103.347067][ T8277] bridge0: entered allmulticast mode [ 103.353758][ T8277] bridge_slave_1: left allmulticast mode [ 103.359490][ T8277] bridge_slave_1: left promiscuous mode [ 103.365219][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.373859][ T8277] bridge_slave_0: left allmulticast mode [ 103.379502][ T8277] bridge_slave_0: left promiscuous mode [ 103.385290][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.505897][ T8290] $H: renamed from bond0 [ 103.512260][ T8290] $H: entered promiscuous mode [ 103.517348][ T8290] bond_slave_0: entered promiscuous mode [ 103.523221][ T8290] bond_slave_1: entered promiscuous mode [ 103.718636][ T8312] loop1: detected capacity change from 0 to 1024 [ 103.727918][ T8312] EXT4-fs: Ignoring removed orlov option [ 103.754813][ T8312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.898367][ T8328] loop4: detected capacity change from 0 to 1024 [ 103.910847][ T8328] EXT4-fs: inline encryption not supported [ 103.916760][ T8328] EXT4-fs: Ignoring removed i_version option [ 103.923752][ T8337] syz_tun: entered allmulticast mode [ 103.941963][ T8337] syz_tun: left allmulticast mode [ 103.951430][ T8328] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.980042][ T8328] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1919: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.007458][ T8328] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.1919: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.059940][ T3389] usb 9-1: enqueue for inactive port 0 [ 104.066351][ T8328] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1919: Failed to acquire dquot type 0 [ 104.066609][ T3389] usb 9-1: enqueue for inactive port 0 [ 104.079269][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.134818][ T8328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 104.151166][ T3389] vhci_hcd: vhci_device speed not set [ 104.156862][ T8328] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1919: mark_inode_dirty error [ 104.203521][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 104.218175][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 104.238524][ T8328] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.282854][ T8328] EXT4-fs (loop4): 1 orphan inode deleted [ 104.289010][ T8328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.305146][ T5226] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.320850][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.322351][ T5226] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 104.330193][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.373648][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.383304][ T8328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.394242][ T8328] EXT4-fs error (device loop4): __ext4_get_inode_loc:4787: comm syz.4.1919: Invalid inode table block 1 in block_group 0 [ 104.431262][ T8328] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 104.441342][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.450663][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.451163][ T8328] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.1919: mark_inode_dirty error [ 104.481941][ T8407] netlink: 'syz.2.1935': attribute type 12 has an invalid length. [ 104.483854][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.535184][ T8328] loop4: detected capacity change from 0 to 512 [ 104.604957][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1932'. [ 104.623360][ T8328] EXT4-fs: Ignoring removed orlov option [ 104.638725][ T8328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.670572][ T8328] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.702752][ T8328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1919: bg 0: block 248: padding at end of block bitmap is not set [ 104.719510][ T8328] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1919: Failed to acquire dquot type 1 [ 104.732950][ T8328] EXT4-fs (loop4): 1 truncate cleaned up [ 104.756363][ T8328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.801257][ T8328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.804405][ T8444] vlan2: entered allmulticast mode [ 104.817546][ T8444] dummy0: entered allmulticast mode [ 104.860388][ T8449] team1: entered promiscuous mode [ 104.865494][ T8449] team1: entered allmulticast mode [ 105.562599][ T9] usb 7-1: enqueue for inactive port 0 [ 105.576496][ T9] usb 7-1: enqueue for inactive port 0 [ 105.661151][ T9] vhci_hcd: vhci_device speed not set [ 105.839515][ T8506] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.927311][ T8512] netlink: 'syz.2.1969': attribute type 27 has an invalid length. [ 105.967167][ T8512] ip6gre1: left allmulticast mode [ 106.006224][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.014534][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.050795][ T8512] net_ratelimit: 4 callbacks suppressed [ 106.050805][ T8512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.071947][ T3355] lo speed is unknown, defaulting to 1000 [ 106.077674][ T3355] syz0: Port: 1 Link ACTIVE [ 106.149407][ T8529] lo speed is unknown, defaulting to 1000 [ 106.162294][ T8531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8531 comm=syz.3.1978 [ 106.202292][ T8536] loop9: detected capacity change from 0 to 7 [ 106.217383][ T8536] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.233734][ T8536] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.241674][ T8536] loop9: unable to read partition table [ 106.247702][ T8536] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.247702][ T8536] ) failed (rc=-5) [ 106.263382][ T4645] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.263783][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 106.263796][ T29] audit: type=1400 audit(1753979844.849:1858): avc: denied { create } for pid=8539 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.271497][ T4645] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.280677][ T29] audit: type=1400 audit(1753979844.859:1859): avc: denied { setopt } for pid=8539 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.319294][ T4645] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.324323][ T29] audit: type=1400 audit(1753979844.859:1860): avc: denied { module_request } for pid=8539 comm="syz.2.1982" kmod="netdev-wg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.354682][ T29] audit: type=1400 audit(1753979844.899:1861): avc: denied { sys_module } for pid=8539 comm="syz.2.1982" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.369940][ T4645] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.375979][ T29] audit: type=1400 audit(1753979844.899:1862): avc: denied { bind } for pid=8539 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.391186][ T4645] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.402971][ T29] audit: type=1400 audit(1753979844.939:1863): avc: denied { setopt } for pid=8537 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.402995][ T29] audit: type=1400 audit(1753979844.939:1864): avc: denied { bind } for pid=8537 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.403016][ T29] audit: type=1400 audit(1753979844.939:1865): avc: denied { node_bind } for pid=8537 comm="syz.3.1981" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 106.502869][ T8536] lo speed is unknown, defaulting to 1000 [ 106.618296][ T29] audit: type=1400 audit(1753979844.939:1866): avc: denied { map } for pid=8539 comm="syz.2.1982" path="socket:[21919]" dev="sockfs" ino=21919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.641690][ T29] audit: type=1400 audit(1753979844.939:1867): avc: denied { read } for pid=8539 comm="syz.2.1982" path="socket:[21919]" dev="sockfs" ino=21919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.792251][ T8558] lo speed is unknown, defaulting to 1000 [ 107.034969][ T8576] lo speed is unknown, defaulting to 1000 [ 107.036742][ T8587] : renamed from bond0 (while UP) [ 107.207035][ T8601] tipc: Started in network mode [ 107.211997][ T8601] tipc: Node identity ac14140f, cluster identity 4711 [ 107.219274][ T8601] tipc: New replicast peer: 255.255.255.255 [ 107.225577][ T8601] tipc: Enabled bearer , priority 10 [ 107.288921][ T8606] loop1: detected capacity change from 0 to 1024 [ 107.336798][ T8606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.452630][ T8624] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 107.460426][ T8624] netlink: 'syz.2.2018': attribute type 4 has an invalid length. [ 107.472014][ T8624] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 107.479853][ T8624] netlink: 'syz.2.2018': attribute type 4 has an invalid length. [ 107.489605][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.093270][ T8679] 9pnet_fd: Insufficient options for proto=fd [ 108.148935][ T8686] loop3: detected capacity change from 0 to 2048 [ 108.189641][ T8691] pim6reg1: entered promiscuous mode [ 108.195007][ T8691] pim6reg1: entered allmulticast mode [ 108.202009][ T4645] loop3: p1 < > p4 [ 108.221052][ T3389] tipc: Node number set to 2886997007 [ 108.230249][ T4645] loop3: p4 size 8388608 extends beyond EOD, truncated [ 108.245825][ T8686] loop3: p1 < > p4 [ 108.250159][ T8686] loop3: p4 size 8388608 extends beyond EOD, truncated [ 108.268293][ T4645] ================================================================== [ 108.276413][ T4645] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 108.283715][ T4645] [ 108.286047][ T4645] write to 0xffff8881048020e8 of 4 bytes by task 4646 on cpu 1: [ 108.293663][ T4645] touch_atime+0x1e8/0x340 [ 108.298096][ T4645] shmem_file_read_iter+0x477/0x540 [ 108.303302][ T4645] vfs_read+0x5ca/0x6f0 [ 108.307449][ T4645] ksys_read+0xda/0x1a0 [ 108.311702][ T4645] __x64_sys_read+0x40/0x50 [ 108.316202][ T4645] x64_sys_call+0x27bc/0x2ff0 [ 108.320876][ T4645] do_syscall_64+0xd2/0x200 [ 108.325384][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.331281][ T4645] [ 108.333598][ T4645] read to 0xffff8881048020e8 of 4 bytes by task 4645 on cpu 0: [ 108.341130][ T4645] atime_needs_update+0x25f/0x3e0 [ 108.346153][ T4645] touch_atime+0x4a/0x340 [ 108.350474][ T4645] shmem_file_read_iter+0x477/0x540 [ 108.355750][ T4645] vfs_read+0x5ca/0x6f0 [ 108.360336][ T4645] ksys_read+0xda/0x1a0 [ 108.364483][ T4645] __x64_sys_read+0x40/0x50 [ 108.368999][ T4645] x64_sys_call+0x27bc/0x2ff0 [ 108.373674][ T4645] do_syscall_64+0xd2/0x200 [ 108.378190][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.384096][ T4645] [ 108.386408][ T4645] value changed: 0x335bc027 -> 0x3373e826 [ 108.392107][ T4645] [ 108.394415][ T4645] Reported by Kernel Concurrency Sanitizer on: [ 108.400547][ T4645] CPU: 0 UID: 0 PID: 4645 Comm: udevd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 108.412348][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.422500][ T4645] ================================================================== [ 108.579609][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.579677][ T4645] udevd[4645]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.605803][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.616066][ T4645] udevd[4645]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.631659][ T4646] udevd[4646]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.636247][ T4645] udevd[4645]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory