last executing test programs: 1.273425646s ago: executing program 1 (id=3578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1.137793219s ago: executing program 1 (id=3582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) 1.01010842s ago: executing program 1 (id=3595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) 953.573702ms ago: executing program 1 (id=3585): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 742.623516ms ago: executing program 1 (id=3589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4ea4, 0x1, @mcast1, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 673.637177ms ago: executing program 1 (id=3597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x110, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x0, 0x80000}) 672.269777ms ago: executing program 3 (id=3599): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) 580.394659ms ago: executing program 2 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 580.085329ms ago: executing program 2 (id=3601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 523.98987ms ago: executing program 3 (id=3603): io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0x4}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_destroy(r0) 468.567431ms ago: executing program 4 (id=3604): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x69}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 416.957602ms ago: executing program 2 (id=3606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) lsm_get_self_attr(0x69, &(0x7f00000000c0)={0x0, 0x0, 0x101, 0xe1, ""/225}, &(0x7f0000000000)=0x101, 0x0) 352.073423ms ago: executing program 2 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) 350.423914ms ago: executing program 3 (id=3617): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 335.855284ms ago: executing program 2 (id=3610): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 299.664265ms ago: executing program 2 (id=3612): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)={0x59, 0x75, 0x2, {0x4e, "e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be"}}, 0x59) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 264.395775ms ago: executing program 0 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 264.190445ms ago: executing program 4 (id=3614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 220.190836ms ago: executing program 0 (id=3615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 168.568697ms ago: executing program 3 (id=3616): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/141) 168.199287ms ago: executing program 0 (id=3618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000280)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x9c, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e25, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f6a906b00b6bf90d20e745268486fbc1d16363fe46a5a201b8c2389cf996bd25", "3e2752ec12474deabdfe7702ff67a1d024151becba0c0d5dfbef19955172cff5d3df484e954a3b8263b0911047b146b5", "773536ec74e261bc708b5a00fe00", {"81c69e3f1364a64f5a0f16f957912a18", "ebd666cf732867b376df02c2690c1478"}}}}}}}}, 0x0) 142.049028ms ago: executing program 0 (id=3619): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0xa, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 141.607438ms ago: executing program 4 (id=3620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 109.340919ms ago: executing program 3 (id=3621): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 84.930879ms ago: executing program 0 (id=3622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 84.377789ms ago: executing program 4 (id=3623): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 44.630559ms ago: executing program 0 (id=3624): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 43.929779ms ago: executing program 3 (id=3634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 19.56866ms ago: executing program 4 (id=3625): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 4 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): syz.4.1188'. [ 63.964244][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 64.298766][ T6332] ipvlan2: entered promiscuous mode [ 64.307633][ T6332] bridge0: port 3(ipvlan2) entered blocking state [ 64.314112][ T6332] bridge0: port 3(ipvlan2) entered disabled state [ 64.325666][ T6332] ipvlan2: entered allmulticast mode [ 64.330998][ T6332] bridge0: entered allmulticast mode [ 64.338136][ T6332] ipvlan2: left allmulticast mode [ 64.343261][ T6332] bridge0: left allmulticast mode [ 64.533646][ T6360] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 65.004225][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 65.428272][ T6414] random: crng reseeded on system resumption [ 65.440147][ T6414] Restarting kernel threads ... [ 65.445333][ T6414] Done restarting kernel threads. [ 65.470958][ T6417] loop0: detected capacity change from 0 to 128 [ 65.908843][ T6470] loop0: detected capacity change from 0 to 8192 [ 66.044232][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 66.079808][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 66.095753][ T6492] veth1_macvtap: left promiscuous mode [ 66.129498][ T6495] serio: Serial port ttyS3 [ 66.137535][ T6496] loop2: detected capacity change from 0 to 128 [ 66.192511][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 66.271233][ T6507] loop1: detected capacity change from 0 to 512 [ 66.279737][ T6507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.291241][ T6507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 66.306121][ T6507] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.320563][ T6507] EXT4-fs (loop1): 1 truncate cleaned up [ 66.363095][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 66.409102][ T6519] loop2: detected capacity change from 0 to 8192 [ 66.437006][ T6523] vhci_hcd: invalid port number 96 [ 66.442276][ T6523] vhci_hcd: default hub control req: 0300 v0800 i0060 l0 [ 67.080524][ T6563] hub 6-0:1.0: USB hub found [ 67.085205][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 67.092418][ T6563] hub 6-0:1.0: 8 ports detected [ 67.250977][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 67.291023][ T6571] loop3: detected capacity change from 0 to 2048 [ 67.355734][ T6581] loop0: detected capacity change from 0 to 1024 [ 67.362956][ T6581] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.373917][ T6581] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.394248][ T6581] JBD2: no valid journal superblock found [ 67.400314][ T6581] EXT4-fs (loop0): Could not load journal inode [ 67.413006][ T6581] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 67.468962][ T6597] rdma_op ffff88811fad9d80 conn xmit_rdma 0000000000000000 [ 67.492451][ T10] hid_parser_main: 8 callbacks suppressed [ 67.492471][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.505862][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.513335][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.520744][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.528243][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.535677][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.543086][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.550732][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.558235][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.565791][ T10] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 67.574160][ T10] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 68.124192][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 68.181857][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 68.320416][ T6705] serio: Serial port ttyS3 [ 68.378777][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 68.378862][ T29] audit: type=1326 audit(68.366:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.409473][ T29] audit: type=1326 audit(68.366:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.433400][ T29] audit: type=1326 audit(68.396:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.456204][ T29] audit: type=1326 audit(68.396:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.479039][ T29] audit: type=1326 audit(68.396:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.501830][ T29] audit: type=1326 audit(68.396:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.524594][ T29] audit: type=1326 audit(68.396:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.547381][ T29] audit: type=1326 audit(68.396:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.570146][ T29] audit: type=1326 audit(68.396:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.592890][ T29] audit: type=1326 audit(68.396:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 68.656496][ T6726] loop4: detected capacity change from 0 to 512 [ 68.720095][ T6739] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.759774][ T6741] loop0: detected capacity change from 0 to 1024 [ 68.810597][ T6741] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 68.919594][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 68.949146][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1403'. [ 68.980814][ T6780] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 68.994689][ T6780] SELinux: failed to load policy [ 69.078870][ T6792] loop4: detected capacity change from 0 to 512 [ 69.097931][ T6792] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.108143][ T6792] EXT4-fs (loop4): invalid journal inode [ 69.125943][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 69.129800][ T6792] EXT4-fs (loop4): can't get journal size [ 69.145220][ T6792] EXT4-fs (loop4): 1 truncate cleaned up [ 69.160580][ T6792] EXT4-fs mount: 32 callbacks suppressed [ 69.160596][ T6792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.174236][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 69.218774][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 69.229438][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.253086][ T3404] kernel write not supported for file /655/clear_refs (pid: 3404 comm: kworker/0:3) [ 69.300662][ T6812] can0: slcan on ttyS3. [ 69.332715][ T2957] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.345100][ T6824] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 69.364768][ T6812] can0 (unregistered): slcan off ttyS3. [ 69.373117][ T6826] can0: slcan on ttyS3. [ 69.424542][ T6826] can0 (unregistered): slcan off ttyS3. [ 69.432488][ T6835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.464036][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 69.466620][ T6826] serio: Serial port ttyS3 [ 69.473216][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 69.473244][ T6837] netlink: 'syz.3.1431': attribute type 20 has an invalid length. [ 69.502296][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 69.503547][ T6835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.540632][ T4741] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.546695][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 69.554367][ T4741] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.558568][ T6837] netlink: 'syz.3.1431': attribute type 20 has an invalid length. [ 69.576706][ T4741] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.617081][ T6835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.632108][ T4741] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.660234][ T6835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.701523][ T6850] netlink: 'syz.4.1437': attribute type 10 has an invalid length. [ 69.756644][ T6850] team0: Device hsr_slave_0 failed to register rx_handler [ 69.767328][ T4730] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.782138][ T4730] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.798602][ T4730] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822767][ T4730] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.894677][ T6868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.901291][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.903384][ T6862] loop4: detected capacity change from 0 to 8192 [ 69.908839][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 69.932416][ T6868] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 69.939058][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.946733][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 69.960008][ T6868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.968969][ T6868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.978077][ T6868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.990778][ T6868] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 69.997415][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.005106][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 70.016627][ T6878] vhci_hcd: connection closed [ 70.016900][ T4730] vhci_hcd: stop threads [ 70.025982][ T4730] vhci_hcd: release socket [ 70.030435][ T4730] vhci_hcd: disconnect device [ 70.035563][ T6873] vhci_hcd: connection closed [ 70.035565][ T6869] vhci_hcd: connection closed [ 70.041504][ T4730] vhci_hcd: stop threads [ 70.050602][ T4730] vhci_hcd: release socket [ 70.055076][ T4730] vhci_hcd: disconnect device [ 70.084248][ T10] vhci_hcd: vhci_device speed not set [ 70.089422][ T4730] vhci_hcd: stop threads [ 70.094012][ T4730] vhci_hcd: release socket [ 70.098485][ T4730] vhci_hcd: disconnect device [ 70.204235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 70.221590][ T6891] loop2: detected capacity change from 0 to 512 [ 70.229139][ T6891] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.239107][ T6891] EXT4-fs (loop2): invalid journal inode [ 70.245642][ T6891] EXT4-fs (loop2): can't get journal size [ 70.261840][ T6891] EXT4-fs (loop2): 1 truncate cleaned up [ 70.268300][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.341385][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.409285][ T6905] loop0: detected capacity change from 0 to 512 [ 70.420059][ T6905] EXT4-fs: Ignoring removed nobh option [ 70.466505][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1460: corrupted inode contents [ 70.478784][ T6905] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1460: mark_inode_dirty error [ 70.499528][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1460: corrupted inode contents [ 70.512027][ T6905] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1460: mark_inode_dirty error [ 70.526694][ T6905] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1460: Failed to acquire dquot type 0 [ 70.539360][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1460: corrupted inode contents [ 70.558313][ T6905] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1460: mark_inode_dirty error [ 70.578435][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1460: corrupted inode contents [ 70.593129][ T6905] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1460: mark_inode_dirty error [ 70.623282][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1460: corrupted inode contents [ 70.638634][ T6923] loop3: detected capacity change from 0 to 512 [ 70.642334][ T6905] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 70.654638][ T6905] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1460: corrupted inode contents [ 70.667823][ T6923] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1468: missing EA_INODE flag [ 70.682169][ T6925] ALSA: seq fatal error: cannot create timer (-19) [ 70.682312][ T6905] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1460: mark_inode_dirty error [ 70.717482][ T6923] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1468: error while reading EA inode 11 err=-117 [ 70.729031][ T6905] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 70.733821][ T6923] EXT4-fs (loop3): 1 orphan inode deleted [ 70.746697][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.754714][ T6905] EXT4-fs (loop0): 1 truncate cleaned up [ 70.777534][ T6905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.789870][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.818380][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.987406][ T6945] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.994071][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.001680][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 71.025416][ T6945] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 71.032013][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.039635][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 71.045528][ T6951] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.047820][ T6945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.066463][ T6956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.080560][ T6952] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.098296][ T6945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.120178][ T6945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.131112][ T6945] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 71.137746][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.145446][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 71.174821][ T6965] vhci_hcd: connection closed [ 71.175003][ T6953] vhci_hcd: connection closed [ 71.175337][ T6949] vhci_hcd: connection closed [ 71.179881][ T4734] vhci_hcd: stop threads [ 71.193418][ T4734] vhci_hcd: release socket [ 71.197983][ T4734] vhci_hcd: disconnect device [ 71.226085][ T4734] vhci_hcd: stop threads [ 71.230376][ T4734] vhci_hcd: release socket [ 71.234857][ T4734] vhci_hcd: disconnect device [ 71.244266][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 71.244540][ T4734] vhci_hcd: stop threads [ 71.251289][ T1041] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 71.255460][ T4734] vhci_hcd: release socket [ 71.267169][ T4734] vhci_hcd: disconnect device [ 71.314791][ T6952] Process accounting resumed [ 71.426804][ T6982] loop0: detected capacity change from 0 to 512 [ 71.447727][ T6982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.556712][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.691097][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.700831][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.768710][ T7021] loop4: detected capacity change from 0 to 512 [ 71.788728][ T7021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.848725][ T7021] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.1508 [ 71.869873][ T4741] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.886611][ T4741] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 71.898862][ T4741] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.898862][ T4741] [ 71.908596][ T4741] EXT4-fs (loop4): Total free blocks count 0 [ 71.914623][ T4741] EXT4-fs (loop4): Free/Dirty block details [ 71.920534][ T4741] EXT4-fs (loop4): free_blocks=65280 [ 71.925885][ T4741] EXT4-fs (loop4): dirty_blocks=2 [ 71.930922][ T4741] EXT4-fs (loop4): Block reservation details [ 71.937005][ T4741] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 71.959021][ T4730] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 72.294223][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 72.365385][ T7085] loop2: detected capacity change from 0 to 512 [ 72.376419][ T7089] rdma_op ffff888126841180 conn xmit_rdma 0000000000000000 [ 72.407860][ T7085] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 72.427768][ T7097] loop4: detected capacity change from 0 to 512 [ 72.449939][ T7099] loop1: detected capacity change from 0 to 2048 [ 72.468207][ T7085] System zones: 0-2, 18-18, 34-35 [ 72.474606][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.490460][ T7097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.508049][ T7085] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.1535: corrupted inode contents [ 72.522429][ T7099] Alternate GPT is invalid, using primary GPT. [ 72.528983][ T7099] loop1: p2 p3 p7 [ 72.544405][ T7085] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm syz.2.1535: mark_inode_dirty error [ 72.578047][ T7085] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.1535: corrupted inode contents [ 72.636848][ T7085] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.1535: mark_inode_dirty error [ 72.661597][ T7085] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.1535: mark inode dirty (error -117) [ 72.690337][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.702059][ T7085] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 72.717269][ T7113] __nla_validate_parse: 2 callbacks suppressed [ 72.717287][ T7113] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1547'. [ 72.738232][ T7113] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1547'. [ 72.750550][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.772508][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 72.880542][ T7134] loop1: detected capacity change from 0 to 512 [ 72.896093][ T7134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.922856][ T7144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 72.929543][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.937125][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 72.945124][ T7144] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 72.951755][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.959508][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 72.968973][ T7144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.977778][ T7144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.986628][ T7144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.987470][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.997225][ T7144] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 73.010324][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.017976][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 73.038680][ T7150] vhci_hcd: connection closed [ 73.039054][ T4712] vhci_hcd: stop threads [ 73.048104][ T4712] vhci_hcd: release socket [ 73.052563][ T4712] vhci_hcd: disconnect device [ 73.063840][ T7145] vhci_hcd: connection closed [ 73.073930][ T7147] vhci_hcd: connection closed [ 73.077514][ T7154] loop4: detected capacity change from 0 to 1024 [ 73.081660][ T4712] vhci_hcd: stop threads [ 73.094087][ T4712] vhci_hcd: release socket [ 73.098606][ T4712] vhci_hcd: disconnect device [ 73.105363][ T4712] vhci_hcd: stop threads [ 73.109704][ T4712] vhci_hcd: release socket [ 73.114207][ T4712] vhci_hcd: disconnect device [ 73.124221][ T36] vhci_hcd: vhci_device speed not set [ 73.125485][ T7154] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1562: Failed to acquire dquot type 0 [ 73.156562][ T7154] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 73.181883][ T7154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1562: corrupted inode contents [ 73.227313][ T7154] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.1562: mark_inode_dirty error [ 73.259677][ T7154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1562: corrupted inode contents [ 73.281829][ T7154] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.1562: mark_inode_dirty error [ 73.302275][ T7180] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 73.302275][ T7180] program syz.3.1574 not setting count and/or reply_len properly [ 73.323293][ T7154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1562: corrupted inode contents [ 73.335865][ T7154] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 73.344194][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 73.354407][ T7154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.1562: corrupted inode contents [ 73.372408][ T7154] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.1562: mark_inode_dirty error [ 73.386724][ T7154] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 73.386846][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 73.386863][ T29] audit: type=1400 audit(73.376:2139): avc: denied { ioctl } for pid=7185 comm="syz.2.1577" path="socket:[16659]" dev="sockfs" ino=16659 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.396395][ T7154] EXT4-fs (loop4): 1 truncate cleaned up [ 73.401954][ T7186] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1577'. [ 73.428597][ T7154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.479246][ T7188] loop3: detected capacity change from 0 to 2048 [ 73.490709][ T29] audit: type=1400 audit(73.476:2140): avc: denied { write } for pid=7152 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.524378][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.541762][ T29] audit: type=1400 audit(73.526:2141): avc: denied { mounton } for pid=7193 comm="syz.2.1582" path="/316/file0" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.563835][ T29] audit: type=1400 audit(73.526:2142): avc: denied { mount } for pid=7193 comm="syz.2.1582" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.588997][ T7188] Alternate GPT is invalid, using primary GPT. [ 73.595508][ T7188] loop3: p2 p3 p7 [ 73.608608][ T29] audit: type=1400 audit(73.596:2143): avc: denied { name_bind } for pid=7200 comm="syz.0.1585" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.686976][ T29] audit: type=1400 audit(73.666:2144): avc: denied { bind } for pid=7210 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.705678][ T29] audit: type=1400 audit(73.666:2145): avc: denied { name_bind } for pid=7210 comm="syz.2.1590" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.726775][ T29] audit: type=1400 audit(73.666:2146): avc: denied { node_bind } for pid=7210 comm="syz.2.1590" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 73.768231][ T7209] loop4: detected capacity change from 0 to 512 [ 73.794806][ T7209] EXT4-fs: Ignoring removed orlov option [ 73.846883][ T7209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.868869][ T29] audit: type=1326 audit(73.846:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd85eec9 code=0x7ffc0000 [ 73.891673][ T29] audit: type=1326 audit(73.846:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd85eec9 code=0x7ffc0000 [ 73.922433][ T7209] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.950379][ T7209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1588: bg 0: block 248: padding at end of block bitmap is not set [ 73.985017][ T7209] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1588: Failed to acquire dquot type 1 [ 73.999100][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 74.008720][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 74.018762][ T7209] EXT4-fs (loop4): 1 truncate cleaned up [ 74.047379][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.071507][ T7227] syz_tun: entered allmulticast mode [ 74.082183][ T7209] EXT4-fs: Ignoring removed orlov option [ 74.088874][ T7209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.099498][ T7209] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 74.109695][ T7226] syz_tun: left allmulticast mode [ 74.121734][ T7209] EXT4-fs error (device loop4): __ext4_remount:6740: comm syz.4.1588: Abort forced by user [ 74.142515][ T7209] EXT4-fs (loop4): Remounting filesystem read-only [ 74.149149][ T7209] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 74.176659][ T7234] loop0: detected capacity change from 0 to 2048 [ 74.219922][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.237047][ T7234] Alternate GPT is invalid, using primary GPT. [ 74.243608][ T7234] loop0: p2 p3 p7 [ 74.364245][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 74.409980][ T7265] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1611'. [ 74.421468][ T7265] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1611'. [ 74.623159][ T7291] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.668319][ T7293] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 74.676266][ T7293] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1625'. [ 74.697256][ T7295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.707714][ T7295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.788048][ T7295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.798478][ T7295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.857324][ T7295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.867769][ T7295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.942864][ T7311] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 74.967176][ T7295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.977559][ T7295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.085568][ T7323] openvswitch: netlink: Message has 6 unknown bytes. [ 75.111197][ T4730] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.119551][ T4730] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131894][ T4730] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.131942][ T4730] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.140566][ T4730] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.140597][ T4730] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143770][ T4730] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.143804][ T4730] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404207][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 75.668865][ T7377] loop2: detected capacity change from 0 to 512 [ 75.681563][ T7377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.695242][ T7377] EXT4-fs (loop2): 1 truncate cleaned up [ 75.702515][ T7377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.747878][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.860443][ T7395] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 75.946443][ T7403] pimreg: entered allmulticast mode [ 75.962016][ T7403] pimreg: left allmulticast mode [ 76.012661][ T3404] hid_parser_main: 35 callbacks suppressed [ 76.012684][ T3404] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 76.034545][ T3404] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.284296][ T1041] usb 3-1: enqueue for inactive port 0 [ 76.294716][ T1041] usb 3-1: enqueue for inactive port 0 [ 76.361155][ T7440] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 76.361155][ T7440] program syz.3.1691 not setting count and/or reply_len properly [ 76.380481][ T1041] vhci_hcd: vhci_device speed not set [ 76.444196][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 76.652236][ T7448] loop3: detected capacity change from 0 to 32768 [ 76.684716][ T7448] loop3: p1 p3 < > [ 76.965439][ T7504] loop2: detected capacity change from 0 to 512 [ 77.017338][ T7504] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1719: missing EA_INODE flag [ 77.066708][ T7504] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1719: error while reading EA inode 11 err=-117 [ 77.106010][ T7504] EXT4-fs (loop2): 1 orphan inode deleted [ 77.112256][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.153113][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.385846][ T7540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.396371][ T7540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.466650][ T7540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.477028][ T7540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.487354][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 77.548168][ T7540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.558565][ T7540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.589122][ T7562] loop4: detected capacity change from 0 to 256 [ 77.601544][ T7540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.611958][ T7540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.674786][ T4730] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.683089][ T4730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.694476][ T4730] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.702850][ T4730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.719483][ T4730] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.727740][ T4730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736633][ T4730] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.744923][ T4730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.868258][ T7594] loop2: detected capacity change from 0 to 128 [ 77.878100][ T7594] EXT4-fs: Ignoring removed nobh option [ 77.893812][ T7594] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.915666][ T7594] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 77.945271][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.113890][ T7613] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.125346][ T7617] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 78.147407][ T7620] __nla_validate_parse: 2 callbacks suppressed [ 78.147425][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 78.173790][ T7613] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.258544][ T7613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.317788][ T7613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.412836][ T4712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.433716][ T4712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.452454][ T4712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461400][ T4712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.524221][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 78.552459][ T7656] loop2: detected capacity change from 0 to 2048 [ 78.598496][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.616622][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 78.616639][ T29] audit: type=1400 audit(78.606:2371): avc: denied { write open } for pid=7655 comm="syz.2.1785" path="/371/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.645378][ T29] audit: type=1400 audit(78.606:2372): avc: denied { mounton } for pid=7655 comm="syz.2.1785" path="/371/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.667658][ T29] audit: type=1400 audit(78.626:2373): avc: denied { create } for pid=7673 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.687253][ T29] audit: type=1400 audit(78.656:2374): avc: denied { bind } for pid=7673 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.706025][ T29] audit: type=1400 audit(78.656:2375): avc: denied { listen } for pid=7673 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.725163][ T29] audit: type=1400 audit(78.656:2376): avc: denied { connect } for pid=7673 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.728339][ T3302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.744166][ T29] audit: type=1400 audit(78.656:2377): avc: denied { write } for pid=7673 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.778041][ T29] audit: type=1400 audit(78.716:2378): avc: denied { remove_name } for pid=3302 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.784919][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 78.800672][ T29] audit: type=1400 audit(78.716:2379): avc: denied { rmdir } for pid=3302 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.809579][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 78.842489][ T3302] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.867297][ T29] audit: type=1400 audit(78.856:2380): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.897080][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.906739][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 78.915758][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 79.075856][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 79.137098][ T7722] sg_write: data in/out 95/8 bytes for SCSI command 0x7a-- guessing data in; [ 79.137098][ T7722] program syz.0.1815 not setting count and/or reply_len properly [ 79.191506][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 79.200462][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 79.220931][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 79.229901][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 79.230352][ T7728] raw_sendmsg: syz.0.1817 forgot to set AF_INET. Fix it! [ 79.267231][ T7732] 0ªX¹¦À: renamed from caif0 [ 79.273958][ T7732] 0ªX¹¦À: entered allmulticast mode [ 79.279425][ T7732] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.564213][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 80.265872][ T7805] Set syz1 is full, maxelem 65536 reached [ 80.299504][ T7811] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.309357][ T7811] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.356345][ T7811] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.366266][ T7811] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.406227][ T7811] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.416065][ T7811] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.448072][ T7811] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.457932][ T7811] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.486098][ T7823] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 80.551575][ T4712] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.559896][ T4712] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.568189][ T7825] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 80.600406][ T4712] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.607216][ T7829] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 80.608707][ T4712] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.616477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 80.630879][ T4712] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.639659][ T4712] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.648034][ T4712] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.656462][ T4712] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.858478][ T7859] SELinux: failed to load policy [ 81.002634][ T7884] netlink: 'syz.4.1890': attribute type 2 has an invalid length. [ 81.010531][ T7884] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 81.151945][ T7903] loop2: detected capacity change from 0 to 512 [ 81.167740][ T7903] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 81.188376][ T7903] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.197650][ T7903] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1899: corrupted inode contents [ 81.211384][ T7903] EXT4-fs (loop2): Remounting filesystem read-only [ 81.218145][ T7903] EXT4-fs (loop2): 1 truncate cleaned up [ 81.223983][ T4734] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.234745][ T4734] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.248039][ T4734] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 81.259013][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.347819][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.373625][ T7910] SELinux: ebitmap: truncated map [ 81.384581][ T7910] SELinux: failed to load policy [ 81.449220][ T7920] loop4: detected capacity change from 0 to 4096 [ 81.459202][ T7920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.508899][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.644195][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.898737][ T7959] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.908647][ T7959] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.025616][ T7959] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.035539][ T7959] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.238525][ T7959] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.248404][ T7959] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.263854][ T7965] 9pnet_fd: Insufficient options for proto=fd [ 82.345997][ T7959] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.355922][ T7959] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.427264][ T4712] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.435649][ T4712] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 82.804672][ T4741] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.813036][ T4741] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.849010][ T4741] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.857300][ T4741] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.923245][ T4741] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.931563][ T4741] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.981953][ T8012] loop2: detected capacity change from 0 to 2048 [ 83.033261][ T8028] loop3: detected capacity change from 0 to 128 [ 83.064842][ T8012] loop2: p1 p3 p4 [ 83.069490][ T8012] loop2: p4 size 589824 extends beyond EOD, truncated [ 83.318301][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.318301][ T3459] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 83.335376][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.335376][ T3459] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 83.351083][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.351083][ T3459] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 83.365629][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.365629][ T3459] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 83.379902][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.379902][ T3459] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 83.393490][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.393490][ T3459] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 83.408781][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.408781][ T3459] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 83.426699][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.426699][ T3459] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 83.456091][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.456091][ T3459] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 83.472913][ T3459] kworker/u8:8: attempt to access beyond end of device [ 83.472913][ T3459] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 83.507438][ T8068] ALSA: seq fatal error: cannot create timer (-19) [ 83.624700][ T8083] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.634625][ T8083] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.707723][ T8083] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.717679][ T8083] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.727966][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 83.833327][ T8083] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.843472][ T8083] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.911925][ T8083] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.921800][ T8083] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.183670][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 84.183714][ T29] audit: type=1326 audit(84.167:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.217880][ T29] audit: type=1326 audit(84.207:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.240769][ T29] audit: type=1326 audit(84.207:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.263558][ T29] audit: type=1326 audit(84.207:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.286297][ T29] audit: type=1326 audit(84.207:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.308995][ T29] audit: type=1326 audit(84.207:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.331720][ T29] audit: type=1326 audit(84.207:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.354492][ T29] audit: type=1326 audit(84.207:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.377254][ T29] audit: type=1326 audit(84.207:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.400355][ T29] audit: type=1326 audit(84.317:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 84.472192][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.479787][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.487355][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.494816][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.502296][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.509842][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.517307][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.524787][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.532201][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.539633][ T1041] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 84.565154][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.573487][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597942][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.602737][ T1041] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 84.606255][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.653387][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.661764][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.679101][ T8152] IPVS: stopping backup sync thread 8153 ... [ 84.710982][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.719360][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.739431][ T8161] __nla_validate_parse: 6 callbacks suppressed [ 84.739453][ T8161] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2018'. [ 84.754946][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2018'. [ 84.764271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 84.847412][ T8167] ALSA: seq fatal error: cannot create timer (-19) [ 85.804202][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 85.867172][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'. [ 86.498193][ T8249] loop3: detected capacity change from 0 to 512 [ 86.521966][ T8249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.563187][ T8249] EXT4-fs (loop3): 1 truncate cleaned up [ 86.574622][ T8249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.662737][ T8248] Process accounting resumed [ 86.691470][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.820875][ T8270] vhci_hcd: invalid port number 236 [ 86.844200][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 87.203753][ T8289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2077'. [ 87.288294][ T8295] nfs: Bad value for 'source' [ 87.348564][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 87.392356][ T8311] loop4: detected capacity change from 0 to 512 [ 87.407823][ T8311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.418425][ T8311] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2088: bad orphan inode 13 [ 87.436034][ T8311] ext4_test_bit(bit=12, block=18) = 1 [ 87.441513][ T8311] is_bad_inode(inode)=0 [ 87.445703][ T8311] NEXT_ORPHAN(inode)=2130706432 [ 87.450564][ T8311] max_ino=32 [ 87.453770][ T8311] i_nlink=1 [ 87.479147][ T8311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.512116][ T8311] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 87.547777][ T8311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2088: bg 0: block 248: padding at end of block bitmap is not set [ 87.563709][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 87.573806][ T8311] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2088: Failed to acquire dquot type 1 [ 87.595271][ T8311] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.670051][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.820115][ T8366] IPVS: Error joining to the multicast group [ 87.884203][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 88.070894][ T8406] hub 9-0:1.0: USB hub found [ 88.080646][ T8406] hub 9-0:1.0: 8 ports detected [ 88.412565][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'. [ 88.421718][ T8441] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2149'. [ 88.430833][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'. [ 88.439861][ T8441] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2149'. [ 88.710097][ T8477] netlink: 'syz.4.2166': attribute type 6 has an invalid length. [ 88.924186][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.267101][ T8541] serio: Serial port ttyS3 [ 89.274127][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 89.280382][ T29] audit: type=1326 audit(89.257:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.1.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc01b77eec9 code=0x7ffc0000 [ 89.333848][ T29] audit: type=1400 audit(89.317:2956): avc: denied { override_creds } for pid=8542 comm="syz.1.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.459364][ T8549] loop3: detected capacity change from 0 to 1024 [ 89.467703][ T8549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.488038][ T8549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.501360][ T8549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.585839][ T29] audit: type=1400 audit(89.567:2957): avc: denied { read } for pid=8564 comm="syz.1.2203" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.608523][ T29] audit: type=1400 audit(89.567:2958): avc: denied { open } for pid=8564 comm="syz.1.2203" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.631574][ T29] audit: type=1400 audit(89.577:2959): avc: denied { ioctl } for pid=8564 comm="syz.1.2203" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.692604][ T29] audit: type=1400 audit(89.677:2960): avc: denied { read write } for pid=8574 comm="syz.3.2208" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.716752][ T29] audit: type=1400 audit(89.677:2961): avc: denied { open } for pid=8574 comm="syz.3.2208" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.820514][ T29] audit: type=1326 audit(89.807:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 89.863453][ T29] audit: type=1326 audit(89.837:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 89.886364][ T29] audit: type=1326 audit(89.837:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.4.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 89.964208][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 90.262763][ T8659] loop0: detected capacity change from 0 to 1024 [ 90.289440][ T8671] __nla_validate_parse: 13 callbacks suppressed [ 90.289521][ T8671] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2252'. [ 90.305069][ T8672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2253'. [ 90.315686][ T8659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.417821][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.431563][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.446399][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.565863][ T8715] loop0: detected capacity change from 0 to 128 [ 90.700711][ T8741] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 90.700711][ T8741] program syz.0.2287 not setting count and/or reply_len properly [ 90.727789][ T8743] loop2: detected capacity change from 0 to 164 [ 90.749978][ T8743] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.795191][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 90.907627][ T8769] SELinux: failed to load policy [ 90.963189][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 91.004293][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 91.093957][ T8809] loop2: detected capacity change from 0 to 512 [ 91.104743][ T8809] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.116064][ T8809] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2315: bg 0: block 248: padding at end of block bitmap is not set [ 91.133066][ T8809] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2315: Failed to acquire dquot type 1 [ 91.146110][ T8809] EXT4-fs (loop2): 1 truncate cleaned up [ 91.152405][ T8809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.171266][ T8809] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 91.186371][ T8809] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.217462][ T8809] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2315: Failed to acquire dquot type 1 [ 91.253348][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.307959][ T8834] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 91.320654][ T8834] team0: Device hsr_slave_0 failed to register rx_handler [ 91.491374][ T8858] pim6reg: entered allmulticast mode [ 91.499825][ T8858] pim6reg: left allmulticast mode [ 91.549304][ T8860] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.587355][ T8864] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 91.888738][ T8898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2355'. [ 92.044227][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 92.157718][ T8912] loop4: detected capacity change from 0 to 32768 [ 92.228520][ T8944] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2375'. [ 92.248672][ T8946] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2376'. [ 92.444989][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 92.454119][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 92.714800][ T8997] bond1: entered promiscuous mode [ 92.719935][ T8997] bond1: entered allmulticast mode [ 92.725633][ T8997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.736622][ T8997] bond1 (unregistering): Released all slaves [ 92.760976][ T9002] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 92.768937][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 92.781793][ T9002] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 92.781879][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.789647][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 92.799594][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.817597][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.827746][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.862127][ T9008] pim6reg: entered allmulticast mode [ 92.872284][ T9010] 9pnet: p9_errstr2errno: server reported unknown error @c$ðÿÿ [ 92.883276][ T9008] pim6reg: left allmulticast mode [ 92.996528][ T9028] loop2: detected capacity change from 0 to 512 [ 93.030909][ T9028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.066628][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.094414][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 93.149933][ T9053] netlink: 'syz.1.2423': attribute type 21 has an invalid length. [ 93.158335][ T9054] loop3: detected capacity change from 0 to 1024 [ 93.169078][ T9054] EXT4-fs: Ignoring removed orlov option [ 93.191337][ T9054] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 93.209968][ T9054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.246084][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.366283][ T9077] loop4: detected capacity change from 0 to 512 [ 93.390875][ T9077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.451140][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.495973][ T9103] netlink: 'syz.2.2446': attribute type 9 has an invalid length. [ 93.503794][ T9103] netlink: 'syz.2.2446': attribute type 9 has an invalid length. [ 93.540504][ T9108] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 93.620718][ T9124] loop3: detected capacity change from 0 to 512 [ 93.649279][ T9124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.728097][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.783448][ T9139] loop3: detected capacity change from 0 to 1024 [ 93.791822][ T9139] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.802880][ T9139] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.874383][ T9139] JBD2: no valid journal superblock found [ 93.880476][ T9139] EXT4-fs (loop3): Could not load journal inode [ 93.894539][ T9139] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 93.938815][ T9163] loop3: detected capacity change from 0 to 2048 [ 93.980462][ T9163] loop3: p2 p3 p7 [ 94.134198][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 94.194850][ T9180] nfs: Bad value for 'source' [ 94.275190][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 94.275209][ T29] audit: type=1326 audit(350.275:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 94.308371][ T29] audit: type=1326 audit(350.275:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 94.331364][ T29] audit: type=1326 audit(350.305:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d584c1785 code=0x7ffc0000 [ 94.355341][ T29] audit: type=1326 audit(350.355:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.2484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d5848eec9 code=0x0 [ 94.378996][ T29] audit: type=1326 audit(350.375:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 94.401833][ T29] audit: type=1326 audit(350.375:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 94.424985][ T29] audit: type=1326 audit(350.375:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 94.447855][ T29] audit: type=1326 audit(350.375:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 94.470827][ T29] audit: type=1326 audit(350.375:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9191 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 94.494371][ T29] audit: type=1326 audit(350.475:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 94.700590][ T9198] loop3: detected capacity change from 0 to 512 [ 94.708546][ T9198] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.715460][ T9198] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2495: bad orphan inode 13 [ 94.716434][ T9200] loop4: detected capacity change from 0 to 2048 [ 94.726633][ T9198] ext4_test_bit(bit=12, block=18) = 1 [ 94.737446][ T9198] is_bad_inode(inode)=0 [ 94.741661][ T9198] NEXT_ORPHAN(inode)=2130706432 [ 94.746550][ T9198] max_ino=32 [ 94.749758][ T9198] i_nlink=1 [ 94.754000][ T9198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.783281][ T9200] loop4: p2 p3 p7 [ 94.792547][ T9198] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 94.837319][ T9198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2495: bg 0: block 248: padding at end of block bitmap is not set [ 94.854122][ T9198] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2495: Failed to acquire dquot type 1 [ 94.865940][ T9198] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.888703][ T9215] loop4: detected capacity change from 0 to 512 [ 94.896877][ T9214] loop2: detected capacity change from 0 to 2048 [ 94.909145][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.927807][ T9215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.939438][ T9214] loop2: p2 p3 p7 [ 94.976637][ T9223] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 94.989230][ T9223] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 94.999003][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.074383][ T9236] loop2: detected capacity change from 0 to 1024 [ 95.092014][ T9236] EXT4-fs: Ignoring removed orlov option [ 95.113118][ T9236] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.135280][ T9236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.164461][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 95.167216][ T9241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.178839][ T9241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.188838][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.203839][ T9241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.211314][ T9241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.318194][ T9259] netlink: 'syz.4.2509': attribute type 9 has an invalid length. [ 95.326058][ T9259] __nla_validate_parse: 10 callbacks suppressed [ 95.326071][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 95.344886][ T9259] netlink: 'syz.4.2509': attribute type 9 has an invalid length. [ 95.352773][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 95.352823][ T4723] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.371251][ T4723] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.379688][ T4723] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.389210][ T4723] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.504052][ T9279] netlink: 'syz.0.2528': attribute type 9 has an invalid length. [ 95.511897][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 95.540315][ T9281] loop4: detected capacity change from 0 to 2048 [ 95.557758][ T9281] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.585807][ T9279] netlink: 'syz.0.2528': attribute type 9 has an invalid length. [ 95.593567][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 95.607686][ T3307] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 95.636654][ T9291] pim6reg1: entered promiscuous mode [ 95.642000][ T9291] pim6reg1: entered allmulticast mode [ 95.663888][ T9293] bond1: entered promiscuous mode [ 95.669009][ T9293] bond1: entered allmulticast mode [ 95.675676][ T9293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.686161][ T9293] bond1 (unregistering): Released all slaves [ 95.747828][ T9300] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 95.755676][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 95.765456][ T9300] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 95.773312][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 95.818801][ T9308] loop4: detected capacity change from 0 to 1024 [ 95.835566][ T9308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.865410][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.982737][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'. [ 95.992487][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2536'. [ 96.035270][ T9332] netlink: 'syz.1.2538': attribute type 9 has an invalid length. [ 96.043089][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 96.052851][ T9332] netlink: 'syz.1.2538': attribute type 9 has an invalid length. [ 96.060785][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 96.204220][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 96.233445][ T9345] loop0: detected capacity change from 0 to 1024 [ 96.266052][ T9345] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.277160][ T9345] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.289889][ T9345] JBD2: no valid journal superblock found [ 96.295709][ T9345] EXT4-fs (loop0): Could not load journal inode [ 96.311500][ T9345] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 96.394909][ T9369] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.510066][ T9389] loop4: detected capacity change from 0 to 1024 [ 96.520209][ T9391] loop2: detected capacity change from 0 to 1024 [ 96.530420][ T9391] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 96.541309][ T9389] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.552315][ T9389] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.564785][ T9389] JBD2: no valid journal superblock found [ 96.570536][ T9389] EXT4-fs (loop4): Could not load journal inode [ 96.579150][ T9393] loop3: detected capacity change from 0 to 128 [ 96.629443][ T9389] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 96.641368][ T9391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.654075][ T9393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.750025][ T9400] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.227229][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.234807][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.244196][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 97.258567][ T9456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.266076][ T9456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.695322][ T9497] sd 0:0:1:0: device reset [ 97.719396][ T9500] loop4: detected capacity change from 0 to 512 [ 97.727490][ T9500] EXT4-fs: Ignoring removed oldalloc option [ 97.744398][ T9500] EXT4-fs (loop4): 1 truncate cleaned up [ 98.211207][ T9533] loop3: detected capacity change from 0 to 512 [ 98.284189][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.083197][ T9640] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.161121][ T9649] loop4: detected capacity change from 0 to 512 [ 99.169385][ T9649] EXT4-fs: Ignoring removed oldalloc option [ 99.187318][ T9649] EXT4-fs mount: 6 callbacks suppressed [ 99.187359][ T9649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.277895][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.287993][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 99.288027][ T29] audit: type=1400 audit(355.285:3675): avc: denied { create } for pid=9658 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.324236][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.364488][ T29] audit: type=1400 audit(355.315:3676): avc: denied { bind } for pid=9658 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.383251][ T29] audit: type=1400 audit(355.315:3677): avc: denied { write } for pid=9658 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.420588][ T29] audit: type=1400 audit(355.415:3678): avc: denied { create } for pid=9669 comm="syz.2.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.443018][ T9668] loop4: detected capacity change from 0 to 1024 [ 99.450744][ T9668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.458423][ T29] audit: type=1400 audit(355.415:3679): avc: denied { write } for pid=9669 comm="syz.2.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.477179][ T29] audit: type=1400 audit(355.445:3680): avc: denied { mount } for pid=9671 comm="syz.0.2692" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.516849][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.541452][ T29] audit: type=1400 audit(355.535:3681): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.572742][ T9678] SELinux: failed to load policy [ 99.580762][ T9668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.594113][ T29] audit: type=1400 audit(355.565:3682): avc: denied { load_policy } for pid=9677 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.642275][ T29] audit: type=1400 audit(355.615:3683): avc: denied { read write } for pid=9681 comm="syz.2.2697" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.666049][ T29] audit: type=1400 audit(355.615:3684): avc: denied { open } for pid=9681 comm="syz.2.2697" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.720017][ T9697] loop0: detected capacity change from 0 to 512 [ 99.733189][ T9697] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.740800][ T9697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.763318][ T9697] EXT4-fs (loop0): 1 truncate cleaned up [ 99.770457][ T9697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.029220][ T9728] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 100.029220][ T9728] program syz.1.2715 not setting count and/or reply_len properly [ 100.076058][ T9730] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 100.085360][ T9730] SELinux: failed to load policy [ 100.374178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 100.571575][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.780149][ T9800] loop4: detected capacity change from 0 to 128 [ 100.879685][ T9808] loop4: detected capacity change from 0 to 512 [ 100.887944][ T9808] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.894673][ T9808] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.2753: inode #218103808: comm syz.4.2753: iget: illegal inode # [ 100.908578][ T9808] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.2753: Bad quota inode: 218103808, type: 2 [ 100.921020][ T9808] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 100.948232][ T9808] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 100.955756][ T9808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.990339][ T9808] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 101.017633][ T9808] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.2753: inode #218103808: comm syz.4.2753: iget: illegal inode # [ 101.067770][ T9808] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.2753: Bad quota inode: 218103808, type: 2 [ 101.107443][ T9808] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 101.259055][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.404241][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 101.418562][ T9872] loop4: detected capacity change from 0 to 512 [ 101.438425][ T9876] pim6reg: entered allmulticast mode [ 101.448047][ T9876] pim6reg: left allmulticast mode [ 101.457506][ T9872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.498775][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.667341][ T9921] loop4: detected capacity change from 0 to 512 [ 101.712795][ T9921] EXT4-fs warning (device loop4): ext4_xattr_inode_get:542: inode #11: comm syz.4.2807: ea_inode file size=0 entry size=6 [ 101.727870][ T9921] ------------[ cut here ]------------ [ 101.733388][ T9921] EA inode 11 i_nlink=2 [ 101.733761][ T9921] WARNING: CPU: 1 PID: 9921 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 101.733846][ T9932] __nla_validate_parse: 23 callbacks suppressed [ 101.733908][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 101.738025][ T9921] Modules linked in: [ 101.767359][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.4.2807 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.777137][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.787374][ T9921] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 101.794063][ T9921] Code: 90 49 8d 7e 40 e8 9c f8 b7 ff 4d 8b 6e 40 4c 89 e7 e8 b0 f3 b7 ff 41 8b 56 48 48 c7 c7 09 a7 54 86 4c 89 ee e8 dd de 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 ee 9c ad 03 66 66 66 66 66 2e 0f 1f [ 101.813856][ T9921] RSP: 0018:ffffc9000ef437c8 EFLAGS: 00010246 [ 101.820037][ T9921] RAX: 5720c3611d266100 RBX: ffff888119c735c8 RCX: 0000000000080000 [ 101.828170][ T9921] RDX: ffffc90003fc0000 RSI: 00000000000043b1 RDI: 00000000000043b2 [ 101.836254][ T9921] RBP: 0000000000000002 R08: 0001c9000ef4363f R09: 0000000000000000 [ 101.844314][ T9921] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119c73578 [ 101.852410][ T9921] R13: 000000000000000b R14: ffff888119c73530 R15: 0000000000000001 [ 101.860435][ T9921] FS: 00007f162ce076c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 101.869479][ T9921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.876107][ T9921] CR2: 00007f4e814b7dac CR3: 0000000125c88000 CR4: 00000000003506f0 [ 101.884190][ T9921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.892280][ T9921] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.900306][ T9921] Call Trace: [ 101.903610][ T9921] [ 101.906639][ T9921] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 101.912581][ T9921] ? errseq_check+0x2c/0x50 [ 101.917157][ T9921] ext4_xattr_delete_inode+0x6b7/0x790 [ 101.922727][ T9921] ? ext4_truncate+0x92e/0xae0 [ 101.927588][ T9921] ext4_evict_inode+0xa6a/0xd90 [ 101.932547][ T9921] ? __pfx_ext4_evict_inode+0x10/0x10 [ 101.937998][ T9921] evict+0x2e0/0x550 [ 101.942061][ T9921] ? __dquot_initialize+0x146/0x7c0 [ 101.947361][ T9921] iput+0x447/0x5b0 [ 101.951276][ T9921] ext4_process_orphan+0x1a9/0x1c0 [ 101.956492][ T9921] ext4_orphan_cleanup+0x6a8/0xa00 [ 101.961636][ T9921] ext4_fill_super+0x3260/0x35d0 [ 101.966689][ T9921] ? set_blocksize+0x1a8/0x310 [ 101.971496][ T9921] ? sb_set_blocksize+0xe3/0x100 [ 101.976506][ T9921] ? setup_bdev_super+0x30e/0x370 [ 101.981565][ T9921] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.986949][ T9921] get_tree_bdev_flags+0x291/0x300 [ 101.992162][ T9921] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.997543][ T9921] get_tree_bdev+0x1f/0x30 [ 102.002167][ T9921] ext4_get_tree+0x1c/0x30 [ 102.006682][ T9921] vfs_get_tree+0x54/0x1d0 [ 102.011137][ T9921] do_new_mount+0x207/0x5e0 [ 102.015701][ T9921] ? security_capable+0x83/0x90 [ 102.020582][ T9921] path_mount+0x4a4/0xb20 [ 102.024965][ T9921] ? user_path_at+0x109/0x130 [ 102.029729][ T9921] __se_sys_mount+0x28f/0x2e0 [ 102.034539][ T9921] __x64_sys_mount+0x67/0x80 [ 102.039263][ T9921] x64_sys_call+0x2b4d/0x2ff0 [ 102.043974][ T9921] do_syscall_64+0xd2/0x200 [ 102.048765][ T9921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.055078][ T9921] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.060866][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.066876][ T9921] RIP: 0033:0x7f162e3a066a [ 102.071369][ T9921] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.091045][ T9921] RSP: 002b:00007f162ce06e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.099566][ T9921] RAX: ffffffffffffffda RBX: 00007f162ce06ef0 RCX: 00007f162e3a066a [ 102.107640][ T9921] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f162ce06eb0 [ 102.115782][ T9921] RBP: 0000200000000180 R08: 00007f162ce06ef0 R09: 0000000000800700 [ 102.123809][ T9921] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 102.131925][ T9921] R13: 00007f162ce06eb0 R14: 0000000000000473 R15: 0000200000000680 [ 102.140011][ T9921] [ 102.143053][ T9921] ---[ end trace 0000000000000000 ]--- [ 102.148873][ T9921] EXT4-fs (loop4): 1 orphan inode deleted [ 102.155061][ T9921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.193789][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.222333][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.231147][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.286120][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.297705][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.444200][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 102.551405][T10002] pimreg: entered allmulticast mode [ 102.559336][T10002] pimreg: left allmulticast mode [ 102.685533][ T2957] kernel write not supported for file bpf-prog (pid: 2957 comm: kworker/1:2) [ 102.710208][T10010] loop3: detected capacity change from 0 to 512 [ 102.718107][T10010] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.724988][T10010] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2846: bg 0: block 248: padding at end of block bitmap is not set [ 102.739712][T10010] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2846: Failed to acquire dquot type 1 [ 102.751962][T10010] EXT4-fs (loop3): 1 truncate cleaned up [ 102.761362][T10010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.778086][T10010] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 102.795092][T10010] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.817513][T10016] loop0: detected capacity change from 0 to 128 [ 102.824344][T10010] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2846: Failed to acquire dquot type 1 [ 102.836679][T10016] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.861619][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.871538][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.089571][T10053] rdma_op ffff8881023a4d80 conn xmit_rdma 0000000000000000 [ 103.420843][T10089] loop3: detected capacity change from 0 to 512 [ 103.451354][T10089] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.484178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 103.516304][T10089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.533067][T10103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10103 comm=syz.1.2888 [ 103.566249][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.715958][T10125] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2899'. [ 104.209429][T10179] loop4: detected capacity change from 0 to 1024 [ 104.268148][T10179] EXT4-fs: Ignoring removed orlov option [ 104.297591][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 104.297606][ T29] audit: type=1400 audit(360.295:4046): avc: denied { append } for pid=10192 comm="syz.3.2928" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.345601][T10179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.435722][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2919'. [ 104.519016][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.528102][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 104.601605][ T29] audit: type=1400 audit(360.595:4047): avc: denied { create } for pid=10214 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.625344][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2937'. [ 104.641358][ T29] audit: type=1400 audit(360.615:4048): avc: denied { connect } for pid=10214 comm="syz.2.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.642067][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2937'. [ 104.714177][ T29] audit: type=1400 audit(360.685:4049): avc: denied { write } for pid=10218 comm="syz.2.2940" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.747291][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.778927][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2944'. [ 104.803885][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.818338][ T29] audit: type=1400 audit(360.755:4050): avc: denied { create } for pid=10222 comm="syz.0.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.837557][ T29] audit: type=1400 audit(360.755:4051): avc: denied { bind } for pid=10222 comm="syz.0.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.856589][ T29] audit: type=1400 audit(360.755:4052): avc: denied { node_bind } for pid=10222 comm="syz.0.2943" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 104.877003][ T29] audit: type=1400 audit(360.755:4053): avc: denied { name_bind } for pid=10222 comm="syz.0.2943" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.897351][ T29] audit: type=1400 audit(360.775:4054): avc: denied { audit_write } for pid=10220 comm="syz.3.2941" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.918115][ T29] audit: type=1107 audit(360.775:4055): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 105.020072][T10237] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 105.246990][T10255] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 105.286125][T10257] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=10257 comm=syz.4.2957 [ 105.311943][T10259] lo speed is unknown, defaulting to 1000 [ 105.324524][T10259] lo speed is unknown, defaulting to 1000 [ 105.331437][T10259] lo speed is unknown, defaulting to 1000 [ 105.345408][T10259] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.367642][T10259] lo speed is unknown, defaulting to 1000 [ 105.373808][T10259] lo speed is unknown, defaulting to 1000 [ 105.400105][T10259] lo speed is unknown, defaulting to 1000 [ 105.409498][T10259] lo speed is unknown, defaulting to 1000 [ 105.417106][T10259] lo speed is unknown, defaulting to 1000 [ 105.564185][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 105.616069][T10286] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 105.691192][T10298] validate_nla: 5 callbacks suppressed [ 105.691212][T10298] netlink: 'syz.4.2977': attribute type 6 has an invalid length. [ 105.775357][T10312] atomic_op ffff8881033a9928 conn xmit_atomic 0000000000000000 [ 105.967135][T10352] random: crng reseeded on system resumption [ 106.019891][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 106.130232][T10373] IPv6: Can't replace route, no match found [ 106.416146][T10419] netlink: 'syz.0.3034': attribute type 1 has an invalid length. [ 106.496165][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b0a200: rx timeout, send abort [ 106.604202][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.688114][T10455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.004457][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b0a200: abort rx timeout. Force session deactivation [ 107.644287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 107.817053][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3064'. [ 107.826179][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3064'. [ 107.882121][T10497] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3067'. [ 107.892244][T10497] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3067'. [ 108.105522][T10534] loop3: detected capacity change from 0 to 512 [ 108.137712][T10534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.159143][T10534] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3082: corrupted inode contents [ 108.171507][T10534] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3082: mark_inode_dirty error [ 108.183983][T10534] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3082: corrupted inode contents [ 108.196688][T10534] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3082: mark_inode_dirty error [ 108.225632][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.274784][T10559] loop3: detected capacity change from 0 to 128 [ 108.295843][T10559] bio_check_eod: 101 callbacks suppressed [ 108.295863][T10559] syz.3.3095: attempt to access beyond end of device [ 108.295863][T10559] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 108.316958][T10559] syz.3.3095: attempt to access beyond end of device [ 108.316958][T10559] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 108.330532][T10559] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 108.340156][T10559] syz.3.3095: attempt to access beyond end of device [ 108.340156][T10559] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 108.356396][T10559] syz.3.3095: attempt to access beyond end of device [ 108.356396][T10559] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 108.369947][T10559] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 108.379161][T10559] syz.3.3095: attempt to access beyond end of device [ 108.379161][T10559] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 108.393334][T10559] syz.3.3095: attempt to access beyond end of device [ 108.393334][T10559] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 108.406914][T10559] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 108.416093][T10559] syz.3.3095: attempt to access beyond end of device [ 108.416093][T10559] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 108.430232][T10559] syz.3.3095: attempt to access beyond end of device [ 108.430232][T10559] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 108.443668][T10559] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 108.459764][T10559] syz.3.3095: attempt to access beyond end of device [ 108.459764][T10559] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 108.473783][T10559] syz.3.3095: attempt to access beyond end of device [ 108.473783][T10559] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 108.487434][T10559] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 108.530187][T10559] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 108.570000][T10559] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 108.579845][T10559] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 108.599558][T10559] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 108.627061][T10559] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 108.684180][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 109.433422][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'. [ 109.458048][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'. [ 109.467795][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 109.467813][ T29] audit: type=1326 audit(365.455:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.497032][ T29] audit: type=1326 audit(365.455:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.704226][ T29] audit: type=1326 audit(365.515:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.727346][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 109.734375][ T29] audit: type=1326 audit(365.515:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.757350][ T29] audit: type=1326 audit(365.515:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.780394][ T29] audit: type=1326 audit(365.515:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.803307][ T29] audit: type=1326 audit(365.515:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.826205][ T29] audit: type=1326 audit(365.515:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.849217][ T29] audit: type=1326 audit(365.515:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.872136][ T29] audit: type=1326 audit(365.515:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 109.983595][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.993446][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.100047][T10719] pim6reg1: entered promiscuous mode [ 110.105488][T10719] pim6reg1: entered allmulticast mode [ 110.764186][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 111.020940][T10757] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 111.804169][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 112.164625][T10795] syz_tun: refused to change device tx_queue_len [ 112.665635][T10815] sd 0:0:1:0: device reset [ 112.831313][T10830] loop2: detected capacity change from 0 to 512 [ 112.844207][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 112.860409][T10830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.948337][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.061265][T10841] loop4: detected capacity change from 0 to 512 [ 113.145363][T10841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.270007][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.326006][T10852] sd 0:0:1:0: device reset [ 113.360166][T10850] loop2: detected capacity change from 0 to 512 [ 113.397378][T10850] EXT4-fs: Ignoring removed oldalloc option [ 113.491184][T10850] EXT4-fs (loop2): 1 truncate cleaned up [ 113.500847][T10850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.615394][T10866] netlink: 'syz.1.3236': attribute type 3 has an invalid length. [ 113.643533][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.884183][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.057360][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 114.506573][T10934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3261'. [ 114.601027][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 114.601042][ T29] audit: type=1400 audit(370.595:4404): avc: denied { load_policy } for pid=10939 comm="syz.0.3264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.627717][T10940] SELinux: failed to load policy [ 114.671564][T10944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3266'. [ 114.712476][T10942] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 114.721354][T10942] SELinux: failed to load policy [ 114.911312][T10954] $Hÿ: renamed from bond0 (while UP) [ 114.924211][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 114.935944][T10954] $Hÿ: entered promiscuous mode [ 114.941012][T10954] bond_slave_0: entered promiscuous mode [ 114.946970][T10954] bond_slave_1: entered promiscuous mode [ 115.303526][ T29] audit: type=1326 audit(371.295:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.335653][ T29] audit: type=1326 audit(371.305:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.358770][ T29] audit: type=1326 audit(371.305:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.381743][ T29] audit: type=1326 audit(371.305:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.404699][ T29] audit: type=1326 audit(371.305:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.427681][ T29] audit: type=1326 audit(371.305:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.450663][ T29] audit: type=1326 audit(371.305:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.473602][ T29] audit: type=1400 audit(371.305:4412): avc: denied { mounton } for pid=10966 comm="syz.1.3276" path="/664/file0" dev="tmpfs" ino=3433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 115.496344][ T29] audit: type=1326 audit(371.305:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.4.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f162e39eec9 code=0x7ffc0000 [ 115.555320][T10977] loop3: detected capacity change from 0 to 1024 [ 115.562696][T10977] EXT4-fs: Ignoring removed nobh option [ 115.568369][T10977] EXT4-fs: inline encryption not supported [ 115.609103][T10977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.624499][T10977] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3280: Allocating blocks 497-513 which overlap fs metadata [ 115.639542][T10977] EXT4-fs (loop3): pa ffff888106ea37e0: logic 16, phys. 129, len 24 [ 115.647580][T10977] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 115.709045][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.710793][T10996] pim6reg1: entered promiscuous mode [ 115.723468][T10996] pim6reg1: entered allmulticast mode [ 115.964209][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.088396][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.111217][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.507172][T11047] vhci_hcd: invalid port number 96 [ 116.512529][T11047] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 116.690100][T11061] SELinux: failed to load policy [ 117.004221][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.041017][T11089] SELinux: failed to load policy [ 118.044248][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 118.190314][T11129] SELinux: failed to load policy [ 118.348387][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 118.356953][T11150] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 118.357428][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 118.366044][T11150] SELinux: failed to load policy [ 118.375046][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'. [ 118.410322][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 118.419387][T11153] netlink: 'syz.1.3358': attribute type 6 has an invalid length. [ 118.652456][T11170] rdma_op ffff8881033ab180 conn xmit_rdma 0000000000000000 [ 118.917415][T11183] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 118.945176][T11183] SELinux: failed to load policy [ 119.084168][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.419884][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 119.428915][T11189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 119.437903][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 119.453047][T11189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 119.462234][T11189] netlink: 'syz.3.3378': attribute type 6 has an invalid length. [ 119.650359][T11212] loop2: detected capacity change from 0 to 164 [ 119.677304][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 119.677321][ T29] audit: type=1400 audit(375.675:4461): avc: denied { mount } for pid=11210 comm="syz.2.3401" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 119.724781][T11212] rock: directory entry would overflow storage [ 119.730995][T11212] rock: sig=0x4f50, size=4, remaining=3 [ 119.736599][T11212] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.780823][ T29] audit: type=1400 audit(375.765:4462): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 119.872077][ T29] audit: type=1400 audit(375.865:4463): avc: denied { create } for pid=11235 comm="syz.1.3411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.881911][ T4760] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 119.922462][ T29] audit: type=1326 audit(375.905:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 119.945441][ T29] audit: type=1326 audit(375.905:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 119.968372][ T29] audit: type=1326 audit(375.905:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 119.991261][ T29] audit: type=1326 audit(375.905:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 120.014182][ T29] audit: type=1326 audit(375.905:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 120.037162][ T29] audit: type=1326 audit(375.905:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 120.060148][ T29] audit: type=1326 audit(375.905:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.3.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8125eec9 code=0x7ffc0000 [ 120.124177][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 120.261317][T11271] loop2: detected capacity change from 0 to 128 [ 120.270595][T11271] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.304716][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.336921][T11276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.819850][T11310] netlink: 'syz.2.3443': attribute type 1 has an invalid length. [ 120.827702][T11310] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3443'. [ 120.979451][T11320] lo speed is unknown, defaulting to 1000 [ 121.174164][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 121.251274][T11346] netlink: 'syz.3.3448': attribute type 1 has an invalid length. [ 121.259100][T11346] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3448'. [ 121.307506][T11349] loop2: detected capacity change from 0 to 512 [ 121.346217][T11349] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.364177][T11349] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.3450: inode #218103808: comm syz.2.3450: iget: illegal inode # [ 121.402722][T11354] lo speed is unknown, defaulting to 1000 [ 121.404394][T11349] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3450: Bad quota inode: 218103808, type: 2 [ 121.441310][T11349] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 121.485478][T11349] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 121.492665][T11349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.509377][T11349] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 121.530490][T11349] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.3450: inode #218103808: comm syz.2.3450: iget: illegal inode # [ 121.545473][T11349] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3450: Bad quota inode: 218103808, type: 2 [ 121.557416][T11349] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 121.589819][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.821068][T11365] lo speed is unknown, defaulting to 1000 [ 121.924916][T11381] loop3: detected capacity change from 0 to 128 [ 121.945755][T11382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.204192][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.028958][T11434] SELinux: failed to load policy [ 123.043185][T11443] SELinux: failed to load policy [ 123.102061][T11452] loop0: detected capacity change from 0 to 128 [ 123.178980][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 123.243672][T11468] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3496'. [ 123.252754][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.347312][T11477] netlink: 'syz.0.3501': attribute type 3 has an invalid length. [ 123.386758][T11485] pim6reg: entered allmulticast mode [ 123.410424][T11485] pim6reg: left allmulticast mode [ 123.437622][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'. [ 123.480329][T11503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11503 comm=syz.1.3511 [ 123.493048][T11503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11503 comm=syz.1.3511 [ 123.589510][T11515] pim6reg: entered allmulticast mode [ 123.610041][T11515] pim6reg: left allmulticast mode [ 123.758979][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 124.091933][T11568] pim6reg: entered allmulticast mode [ 124.103396][T11569] loop2: detected capacity change from 0 to 512 [ 124.115952][T11568] pim6reg: left allmulticast mode [ 124.155524][T11569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.254862][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.284201][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 124.603316][T11629] loop3: detected capacity change from 0 to 512 [ 124.625794][T11629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.699252][T11640] loop2: detected capacity change from 0 to 512 [ 124.708891][T11640] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm syz.2.3567: ea_inode file size=0 entry size=6 [ 124.722227][T11640] EXT4-fs (loop2): 1 orphan inode deleted [ 124.728478][T11640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.746471][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.746701][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 124.746718][ T29] audit: type=1326 audit(380.745:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd85eec9 code=0x7ffc0000 [ 124.799866][ T29] audit: type=1326 audit(380.785:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f0ccd85eec9 code=0x7ffc0000 [ 124.822861][ T29] audit: type=1326 audit(380.785:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.2.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd85eec9 code=0x7ffc0000 [ 124.848279][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.857647][ T29] audit: type=1326 audit(380.825:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.880621][ T29] audit: type=1326 audit(380.825:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.903527][ T29] audit: type=1326 audit(380.825:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.926451][ T29] audit: type=1326 audit(380.825:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.949376][ T29] audit: type=1326 audit(380.825:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.972311][ T29] audit: type=1326 audit(380.835:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 124.995231][ T29] audit: type=1326 audit(380.835:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11645 comm="syz.0.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5848eec9 code=0x7ffc0000 [ 125.031597][T11651] pim6reg: entered allmulticast mode [ 125.054004][T11651] pim6reg: left allmulticast mode [ 125.136637][T11666] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.158561][T11675] pimreg: entered allmulticast mode [ 125.164085][T11673] loop3: detected capacity change from 0 to 512 [ 125.181128][T11673] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.188161][T11673] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.200670][T11675] pimreg: left allmulticast mode [ 125.220085][T11673] EXT4-fs (loop3): 1 truncate cleaned up [ 125.229116][T11673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.323165][T11688] loop0: detected capacity change from 0 to 512 [ 125.324206][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.408774][T11688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.675768][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.872833][T11721] pimreg: entered allmulticast mode [ 125.935581][T11721] pimreg: left allmulticast mode [ 126.170485][T11746] loop0: detected capacity change from 0 to 512 [ 126.195367][T11748] __nla_validate_parse: 1 callbacks suppressed [ 126.195386][T11748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3596'. [ 126.211935][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.226656][T11746] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.3588: ea_inode file size=0 entry size=6 [ 126.269677][T11746] EXT4-fs (loop0): 1 orphan inode deleted [ 126.289777][T11746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.364228][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.434290][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.499655][T11781] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 126.578718][T11791] loop2: detected capacity change from 0 to 512 [ 126.586495][T11791] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.593249][T11791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.606338][T11791] EXT4-fs (loop2): 1 truncate cleaned up [ 126.612944][T11791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.666121][T11802] loop3: detected capacity change from 0 to 512 [ 126.675411][T11802] EXT4-fs warning (device loop3): ext4_xattr_inode_get:542: inode #11: comm syz.3.3616: ea_inode file size=0 entry size=6 [ 126.688624][T11802] EXT4-fs (loop3): 1 orphan inode deleted [ 126.695085][T11802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.759155][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.184689][T11805] ================================================================== [ 127.192841][T11805] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 127.200176][T11805] [ 127.202519][T11805] write to 0xffff888119c739f8 of 4 bytes by task 11791 on cpu 0: [ 127.210254][T11805] touch_atime+0x1e8/0x340 [ 127.214716][T11805] filemap_splice_read+0x6ba/0x740 [ 127.219862][T11805] ext4_file_splice_read+0x8f/0xb0 [ 127.225015][T11805] splice_direct_to_actor+0x26f/0x680 [ 127.230449][T11805] do_splice_direct+0xda/0x150 [ 127.235248][T11805] do_sendfile+0x380/0x650 [ 127.239705][T11805] __x64_sys_sendfile64+0x105/0x150 [ 127.244933][T11805] x64_sys_call+0x2bb0/0x2ff0 [ 127.249637][T11805] do_syscall_64+0xd2/0x200 [ 127.254183][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.260104][T11805] [ 127.262444][T11805] read to 0xffff888119c739f8 of 4 bytes by task 11805 on cpu 1: [ 127.270089][T11805] atime_needs_update+0x25f/0x3e0 [ 127.275158][T11805] touch_atime+0x4a/0x340 [ 127.279541][T11805] filemap_splice_read+0x6ba/0x740 [ 127.284682][T11805] ext4_file_splice_read+0x8f/0xb0 [ 127.289845][T11805] splice_direct_to_actor+0x26f/0x680 [ 127.295259][T11805] do_splice_direct+0xda/0x150 [ 127.300048][T11805] do_sendfile+0x380/0x650 [ 127.304504][T11805] __x64_sys_sendfile64+0x105/0x150 [ 127.309738][T11805] x64_sys_call+0x2bb0/0x2ff0 [ 127.314451][T11805] do_syscall_64+0xd2/0x200 [ 127.318988][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.324908][T11805] [ 127.327248][T11805] value changed: 0x0a773a03 -> 0x0b0fd083 [ 127.332990][T11805] [ 127.335341][T11805] Reported by Kernel Concurrency Sanitizer on: [ 127.341528][T11805] CPU: 1 UID: 0 PID: 11805 Comm: syz.2.3612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.352931][T11805] Tainted: [W]=WARN [ 127.356748][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.366845][T11805] ================================================================== [ 127.404167][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.493308][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.444230][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 129.484208][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.534182][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.564186][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 132.614176][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.654168][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.684214][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.734192][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.774170][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available