last executing test programs: 2m11.241149736s ago: executing program 4 (id=2168): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x2f}}, 0x75, 0xad}, &(0x7f0000000080)=0x90) 2m11.179754187s ago: executing program 4 (id=2169): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d64ab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101800, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m10.893306458s ago: executing program 4 (id=2177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200000d1) close_range(r1, 0xffffffffffffffff, 0x0) 2m10.810805839s ago: executing program 4 (id=2181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m10.522862551s ago: executing program 4 (id=2185): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2m10.278621583s ago: executing program 4 (id=2196): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m10.266143623s ago: executing program 32 (id=2196): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m7.680286561s ago: executing program 5 (id=2198): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m7.617103532s ago: executing program 5 (id=2263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x27, 0x10, 0xfe, r2}, [@IFA_LABEL={0x14, 0x3, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x88c0) 1m52.592589089s ago: executing program 33 (id=2263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x27, 0x10, 0xfe, r2}, [@IFA_LABEL={0x14, 0x3, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x88c0) 1m41.691424296s ago: executing program 2 (id=3396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB='system_u:object_r:dhcpc_state_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x66) 1m41.656983827s ago: executing program 2 (id=3401): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x2) 1m41.559868387s ago: executing program 2 (id=3408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x10, 0xffffffff) 1m41.502370108s ago: executing program 2 (id=3412): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008a00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000008a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf252300000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x80) 1m41.486252068s ago: executing program 2 (id=3414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000003c0)="323e7824d82d", 0x6}], 0x1}}], 0x1, 0x4011) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x80000000, 0xd7c7}, &(0x7f0000000140)=0x10) 1m41.382430728s ago: executing program 2 (id=3422): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m26.116952307s ago: executing program 34 (id=3422): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m16.526042965s ago: executing program 0 (id=4035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0, 0x0, 0xe91}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m16.297757317s ago: executing program 0 (id=4043): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.753106131s ago: executing program 0 (id=4055): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0xc4}}, 0x44800) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff10000140000000000800024000000001080003400000000008"], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20060814) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m15.645269451s ago: executing program 0 (id=4057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xe, 0x0, 0x2, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000080)}, 0xea12, 0x0, 0x400, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m15.493416053s ago: executing program 0 (id=4062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m15.412470913s ago: executing program 0 (id=4065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 1m0.084851842s ago: executing program 35 (id=4065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 42.19315043s ago: executing program 3 (id=5188): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 42.16091956s ago: executing program 3 (id=5192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 42.13042304s ago: executing program 3 (id=5194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 42.10961358s ago: executing program 3 (id=5196): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) 41.937656421s ago: executing program 3 (id=5200): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 41.918467972s ago: executing program 3 (id=5202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000001f40)="28d715", 0x3}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 41.907151482s ago: executing program 36 (id=5202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000001f40)="28d715", 0x3}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 1.205798151s ago: executing program 8 (id=6954): r0 = socket(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 1.096681552s ago: executing program 8 (id=6959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x34048814) 1.048063432s ago: executing program 8 (id=6962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.032910512s ago: executing program 8 (id=6964): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 983.079733ms ago: executing program 8 (id=6966): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f3) fallocate(r0, 0x8, 0x0, 0x10000) 831.505274ms ago: executing program 8 (id=6974): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1, &(0x7f0000001c80)={0x0, 0x989680}) 737.719025ms ago: executing program 7 (id=6985): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 670.236685ms ago: executing program 7 (id=6988): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d15422}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x7fffffe, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 638.624285ms ago: executing program 1 (id=6990): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 618.149106ms ago: executing program 1 (id=6991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000380)={'system_u:object_r:dmidecode_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x9}, 0x4b) 577.750146ms ago: executing program 1 (id=6993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 430.224547ms ago: executing program 7 (id=6995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 428.093457ms ago: executing program 1 (id=7005): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 407.100497ms ago: executing program 7 (id=6998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 358.530117ms ago: executing program 6 (id=6999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 358.040917ms ago: executing program 7 (id=7001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 357.695087ms ago: executing program 6 (id=7002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x8, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x81, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3df, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x4, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10003, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x7fffffff, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 306.771108ms ago: executing program 6 (id=7004): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) 302.082228ms ago: executing program 1 (id=7006): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 242.636728ms ago: executing program 6 (id=7007): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='netlink_extack\x00', r1, 0x0, 0x3}, 0x18) 242.333918ms ago: executing program 1 (id=7008): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfffb, r1, 0x0, 0x0, 0xc}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0) 148.323209ms ago: executing program 9 (id=7010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 82.765769ms ago: executing program 9 (id=7011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0xd) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 75.711069ms ago: executing program 9 (id=7015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) personality(0x4000000) 53.75536ms ago: executing program 9 (id=7016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 29.38821ms ago: executing program 7 (id=7017): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 0s ago: executing program 9 (id=7018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4) kernel console output (not intermixed with test programs): T18076] EXT4-fs (loop6): 1 truncate cleaned up [ 149.592832][T18076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.605610][ T3552] __quota_error: 166 callbacks suppressed [ 149.605624][ T3552] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 149.628877][ T3552] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.639534][ T3552] Quota error (device loop6): write_blk: dquota write failed [ 149.646906][ T3552] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 149.657165][ T3552] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.668174][ T3552] Quota error (device loop6): write_blk: dquota write failed [ 149.675564][ T3552] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 149.686022][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.687247][ T3552] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 149.705091][ T3552] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 149.713883][ T3552] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 149.726225][ T3552] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 149.750726][ T29] audit: type=1326 audit(1688.730:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17a757f6c9 code=0x7fc00000 [ 149.786196][ T29] audit: type=1326 audit(1688.760:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.6.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 150.017274][T18132] wireguard0: entered promiscuous mode [ 150.022963][T18132] wireguard0: entered allmulticast mode [ 150.052403][T18148] netlink: 'syz.7.4584': attribute type 39 has an invalid length. [ 150.336544][T18180] __nla_validate_parse: 2 callbacks suppressed [ 150.336555][T18180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4597'. [ 150.594593][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 150.751668][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4620'. [ 150.760846][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4620'. [ 150.770167][T18233] veth0_to_batadv: entered promiscuous mode [ 150.776995][T18232] veth0_to_batadv: left promiscuous mode [ 151.111026][T18301] syz_tun: entered allmulticast mode [ 151.125649][T18299] loop3: detected capacity change from 0 to 2048 [ 151.131151][T18301] pimreg: entered allmulticast mode [ 151.148643][T18301] netlink: 'syz.1.4647': attribute type 39 has an invalid length. [ 151.159878][T18299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.190941][T18301] syz_tun (unregistering): left allmulticast mode [ 151.207009][T18320] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 151.227133][T18322] loop6: detected capacity change from 0 to 512 [ 151.229378][T18320] SELinux: failed to load policy [ 151.250122][T18322] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.299603][T12096] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 151.395435][T18349] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4655'. [ 151.425004][T18349] 0X: renamed from caif0 [ 151.437042][T18349] 0X: entered allmulticast mode [ 151.442436][T18349] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 151.461709][T18353] wireguard0: entered promiscuous mode [ 151.467216][T18353] wireguard0: entered allmulticast mode [ 151.474384][ T9477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.756992][T18406] binfmt_misc: register: failed to install interpreter file ./file2 [ 151.782463][T18411] netlink: 'syz.1.4668': attribute type 1 has an invalid length. [ 151.790977][T18411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4668'. [ 152.009541][T18441] loop8: detected capacity change from 0 to 512 [ 152.019490][T18441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.039623][T18441] EXT4-fs (loop8): orphan cleanup on readonly fs [ 152.047683][T18441] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4674: bg 0: block 248: padding at end of block bitmap is not set [ 152.079957][T18441] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.4674: Failed to acquire dquot type 1 [ 152.098565][T18441] EXT4-fs (loop8): 1 truncate cleaned up [ 152.109664][T18441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.171576][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.244498][T18482] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4683'. [ 152.358218][T18499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18499 comm=syz.3.4686 [ 152.810188][T18578] 9pnet: Could not find request transport: d [ 153.031564][T18613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4716'. [ 153.040643][T18613] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 153.324230][T18645] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.364188][T18645] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.455490][T18645] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.492329][T18668] syzkaller1: entered promiscuous mode [ 153.497910][T18668] syzkaller1: entered allmulticast mode [ 153.522236][T18645] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.582204][ T3549] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.606596][ T3549] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.615124][ T3549] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.629664][ T3549] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.649942][T18706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4743'. [ 153.699244][T18712] netlink: 'syz.7.4746': attribute type 21 has an invalid length. [ 153.722993][T18714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18714 comm=syz.3.4747 [ 153.735655][T18714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18714 comm=syz.3.4747 [ 153.827334][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 153.838082][T18732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4756'. [ 153.888306][T18736] loop7: detected capacity change from 0 to 2048 [ 153.906411][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.906691][T18736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.914318][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.934845][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.942638][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.951123][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.958864][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.966641][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.974473][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.982920][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 153.990681][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 154.000051][ T3394] hid-generic 0000:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [] on [ 154.010630][T18751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 154.017201][T18751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.025076][T18751] vhci_hcd vhci_hcd.0: Device attached [ 154.034170][T18753] vhci_hcd: connection closed [ 154.034430][ T3552] vhci_hcd: stop threads [ 154.043446][ T3552] vhci_hcd: release socket [ 154.047846][ T3552] vhci_hcd: disconnect device [ 154.080753][T18760] loop6: detected capacity change from 0 to 164 [ 154.151274][T18774] loop8: detected capacity change from 0 to 1024 [ 154.151370][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.183199][T18774] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.227811][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.281275][T18796] macvtap0: refused to change device tx_queue_len [ 154.316419][T18802] SELinux: policydb version 1152 does not match my version range 15-35 [ 154.332019][T18805] loop6: detected capacity change from 0 to 2048 [ 154.335141][T18802] SELinux: failed to load policy [ 154.347393][T18808] loop7: detected capacity change from 0 to 1024 [ 154.354755][T18808] EXT4-fs: Ignoring removed orlov option [ 154.364785][T18808] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 154.377471][T18805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.381528][T18808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.431759][T18808] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 154.444552][T18808] EXT4-fs (loop7): This should not happen!! Data will be lost [ 154.444552][T18808] [ 154.454371][T18808] EXT4-fs (loop7): Total free blocks count 0 [ 154.460584][T18808] EXT4-fs (loop7): Free/Dirty block details [ 154.466493][T18808] EXT4-fs (loop7): free_blocks=0 [ 154.471482][T18808] EXT4-fs (loop7): dirty_blocks=0 [ 154.476522][T18808] EXT4-fs (loop7): Block reservation details [ 154.482647][T18808] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 154.504569][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.676156][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 154.676171][ T29] audit: type=1400 audit(1693.650:3655): avc: denied { setopt } for pid=18853 comm="syz.3.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.713919][T18858] netlink: 'syz.8.4798': attribute type 29 has an invalid length. [ 154.721273][ T29] audit: type=1400 audit(1693.690:3656): avc: denied { read } for pid=18853 comm="syz.3.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.741919][T18858] netlink: 'syz.8.4798': attribute type 29 has an invalid length. [ 154.772296][T18860] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.791247][ T29] audit: type=1400 audit(1693.770:3657): avc: denied { write } for pid=18864 comm="syz.3.4804" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.832840][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.845732][ T29] audit: type=1400 audit(1693.790:3658): avc: denied { connect } for pid=18864 comm="syz.3.4804" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.865885][ T29] audit: type=1400 audit(1693.790:3659): avc: denied { write } for pid=18864 comm="syz.3.4804" laddr=172.20.20.11 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.889198][ T29] audit: type=1400 audit(1693.820:3660): avc: denied { ioctl } for pid=18870 comm="syz.7.4807" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.915945][ T29] audit: type=1400 audit(1693.850:3661): avc: denied { map } for pid=18864 comm="syz.3.4804" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.977066][ T29] audit: type=1326 audit(1693.950:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 155.000191][ T29] audit: type=1326 audit(1693.950:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 155.023180][ T29] audit: type=1326 audit(1693.950:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 155.185458][T18908] bond1: entered promiscuous mode [ 155.190779][T18908] bond1: entered allmulticast mode [ 155.191929][T18945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.201798][T18908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.230659][T18908] bond1 (unregistering): Released all slaves [ 155.414401][T19005] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.422293][ T3387] IPVS: starting estimator thread 0... [ 155.484481][T19023] loop8: detected capacity change from 0 to 512 [ 155.502136][T19023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.519303][T19014] IPVS: using max 2640 ests per chain, 132000 per kthread [ 155.547402][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.551269][T19035] loop6: detected capacity change from 0 to 512 [ 155.564199][T19035] EXT4-fs: Ignoring removed nobh option [ 155.579558][T19035] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4848: iget: bad i_size value: 38620345925642 [ 155.606732][T19043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45840 sclass=netlink_audit_socket pid=19043 comm=wޣ [ 155.616834][T19042] syzkaller0: entered promiscuous mode [ 155.624714][T19042] syzkaller0: entered allmulticast mode [ 155.635935][T19035] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4848: couldn't read orphan inode 15 (err -117) [ 155.651588][T19035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.678148][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.700374][T19049] __nla_validate_parse: 2 callbacks suppressed [ 155.700396][T19049] netlink: 16 bytes leftover after parsing attributes in process `'. [ 155.866503][T19076] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4863'. [ 155.929920][T19096] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.991312][T19112] loop3: detected capacity change from 0 to 512 [ 156.034506][T19112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.079844][T19112] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 156.089622][T19119] loop6: detected capacity change from 0 to 4096 [ 156.104466][T19119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.126085][T19119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.144095][ T9477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.235822][T19144] IPv6: Can't replace route, no match found [ 156.285324][T19146] loop3: detected capacity change from 0 to 1024 [ 156.304987][T19146] EXT4-fs: Ignoring removed orlov option [ 156.311460][T19146] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 156.344262][T19146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.367105][T19146] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 156.380229][T19146] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.380229][T19146] [ 156.389909][T19146] EXT4-fs (loop3): Total free blocks count 0 [ 156.395962][T19146] EXT4-fs (loop3): Free/Dirty block details [ 156.401928][T19146] EXT4-fs (loop3): free_blocks=0 [ 156.406856][T19146] EXT4-fs (loop3): dirty_blocks=0 [ 156.412535][T19146] EXT4-fs (loop3): Block reservation details [ 156.418585][T19146] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 156.474214][ T9477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.496837][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.553721][T19166] netlink: 'syz.3.4884': attribute type 6 has an invalid length. [ 156.627527][T19177] xt_CT: No such helper "pptp" [ 156.650175][T19183] SELinux: Context  is not valid (left unmapped). [ 156.691746][T19187] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 156.723928][T19193] vhci_hcd: invalid port number 23 [ 156.769133][T19201] loop8: detected capacity change from 0 to 1024 [ 156.776543][T19203] binfmt_misc: register: failed to install interpreter file ./file0 [ 156.791185][T19201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.832437][T19216] tipc: Started in network mode [ 156.837424][T19216] tipc: Node identity ac14140f, cluster identity 4711 [ 156.844453][T19216] tipc: New replicast peer: 255.255.255.255 [ 156.850726][T19216] tipc: Enabled bearer , priority 10 [ 156.867385][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.918621][T19230] sd 0:0:1:0: device reset [ 156.925018][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4914'. [ 156.947641][T19229] IPVS: Error connecting to the multicast addr [ 156.954503][T19236] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.970191][ T3552] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.024134][T19252] loop8: detected capacity change from 0 to 256 [ 157.119327][T19259] netlink: 'syz.8.4927': attribute type 3 has an invalid length. [ 157.212317][T19266] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.284331][T19266] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.313877][T19282] xt_hashlimit: max too large, truncated to 1048576 [ 157.334492][T19266] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.412128][T19266] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.443194][T19306] loop6: detected capacity change from 0 to 128 [ 157.450477][T19306] vfat: Unknown parameter '017777777777777777777770000000000000000000000018446744073709551615' [ 157.479356][ T3552] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.502597][ T3552] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.520033][ T3552] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.528464][ T3552] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.579822][T19325] vhci_hcd: invalid port number 96 [ 157.584973][T19325] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 157.608796][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4954'. [ 157.617858][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4954'. [ 157.626862][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4954'. [ 157.696467][T19345] loop6: detected capacity change from 0 to 2048 [ 157.743446][T19360] netlink: 'syz.1.4966': attribute type 21 has an invalid length. [ 157.751460][T19360] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4966'. [ 157.761999][T19345] loop6: p1 < > p4 [ 157.784150][T19345] loop6: p4 size 8388608 extends beyond EOD, truncated [ 157.798148][T19366] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 157.818957][T19369] loop3: detected capacity change from 0 to 1024 [ 157.833083][T19362] SELinux: failed to load policy [ 157.842313][T19369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.854585][ T3394] tipc: Node number set to 2886997007 [ 157.890402][ T9477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.022630][T19418] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 158.025504][T19417] loop6: detected capacity change from 0 to 512 [ 158.046785][T19417] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 158.062259][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4989'. [ 158.162165][T19441] loop6: detected capacity change from 0 to 512 [ 158.171326][T19441] EXT4-fs (loop6): orphan cleanup on readonly fs [ 158.181889][T19441] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 158.194480][T19441] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.207994][T19441] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm +}[@: corrupted inode contents [ 158.221018][T19441] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm +}[@: mark_inode_dirty error [ 158.235448][T19441] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm +}[@: corrupted inode contents [ 158.257513][T19441] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 158.275316][T19441] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 158.289257][T19441] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 158.300268][T19441] EXT4-fs (loop6): 1 orphan inode deleted [ 158.307801][T19441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.334888][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.392182][T19469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.416362][T19478] loop6: detected capacity change from 0 to 1024 [ 158.431391][T19478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.455489][T19469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.509529][T19469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.521684][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.580875][T19469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.648074][ T3547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.667907][ T3547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.676711][ T3547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.685949][ T3547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.742637][T19506] xt_hashlimit: max too large, truncated to 1048576 [ 158.949615][T19536] 9pnet_fd: Insufficient options for proto=fd [ 158.999475][T15205] Bluetooth: hci0: command 0x1003 tx timeout [ 158.999689][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.157617][T19568] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5041'. [ 159.561534][T19626] loop8: detected capacity change from 0 to 512 [ 159.568132][T19626] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 159.705339][T19645] loop9: detected capacity change from 0 to 7 [ 159.727767][T19645] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.745876][T19645] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.753820][T19645] loop9: unable to read partition table [ 159.777115][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 159.777132][ T29] audit: type=1400 audit(1698.750:3975): avc: denied { read } for pid=19649 comm="syz.1.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.809267][T19645] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.809267][T19645] ) failed (rc=-5) [ 159.943600][ T29] audit: type=1326 audit(1698.920:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 159.966786][ T29] audit: type=1326 audit(1698.920:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 159.990111][ T29] audit: type=1326 audit(1698.920:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.013281][ T29] audit: type=1326 audit(1698.920:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.036389][ T29] audit: type=1326 audit(1698.920:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.060946][ T29] audit: type=1326 audit(1699.020:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.083939][ T29] audit: type=1326 audit(1699.020:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.107116][ T29] audit: type=1326 audit(1699.020:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.130200][ T29] audit: type=1326 audit(1699.040:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 160.226996][T19684] rdma_op ffff88811ba62180 conn xmit_rdma 0000000000000000 [ 160.262754][T19677] SELinux: failed to load policy [ 160.308721][T19698] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5097'. [ 160.415947][T19710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19710 comm=syz.6.5104 [ 160.429179][T19710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19710 comm=syz.6.5104 [ 160.515319][T19720] loop7: detected capacity change from 0 to 512 [ 160.532468][T19720] EXT4-fs (loop7): orphan cleanup on readonly fs [ 160.540199][T19720] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 160.569448][T19720] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm +}[@: corrupted inode contents [ 160.589511][T19720] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #15: comm +}[@: mark_inode_dirty error [ 160.616042][T19720] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #15: comm +}[@: corrupted inode contents [ 160.647857][T19720] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 160.670479][T19720] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 160.698318][T19720] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 160.717745][T19720] EXT4-fs (loop7): 1 orphan inode deleted [ 160.724348][T19720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.789628][T19757] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5123'. [ 160.811953][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.944445][T19786] loop3: detected capacity change from 0 to 2048 [ 160.982375][T19788] vhci_hcd: invalid port number 96 [ 160.987585][T19788] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 161.005241][T19786] loop3: p2 p3 p7 [ 161.015707][T19797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 161.022298][T19797] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.030578][T19797] vhci_hcd vhci_hcd.0: Device attached [ 161.047790][T19800] vhci_hcd: connection closed [ 161.048066][ T3562] vhci_hcd: stop threads [ 161.057143][ T3562] vhci_hcd: release socket [ 161.061670][ T3562] vhci_hcd: disconnect device [ 161.231573][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.300784][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.311584][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.323120][T19847] loop9: detected capacity change from 0 to 7 [ 161.330436][T19847] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.338593][T19847] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.347193][T19847] loop9: unable to read partition table [ 161.353332][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.362561][T19847] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.362561][T19847] ) failed (rc=-5) [ 161.362566][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.411213][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5153'. [ 161.473199][T19861] loop8: detected capacity change from 0 to 4096 [ 161.480778][T19861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.489633][T19861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.593514][T19874] sd 0:0:1:0: device reset [ 161.626317][T19877] program syz.6.5167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.776435][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.910742][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5181'. [ 161.939687][T19910] netlink: 'syz.7.5182': attribute type 10 has an invalid length. [ 161.954722][T19910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.970625][T19910] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.000721][T19910] netlink: 'syz.7.5182': attribute type 10 has an invalid length. [ 162.008553][T19910] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5182'. [ 162.020858][T19891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.030603][T19891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.038385][T19910] batadv0: entered promiscuous mode [ 162.043643][T19910] batadv0: entered allmulticast mode [ 162.060701][T19910] bond0: (slave batadv0): Releasing backup interface [ 162.070511][T19910] bridge0: port 3(batadv0) entered blocking state [ 162.077010][T19910] bridge0: port 3(batadv0) entered disabled state [ 162.171727][T19931] rdma_op ffff88811b465580 conn xmit_rdma 0000000000000000 [ 162.184568][T19935] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5193'. [ 162.223133][T19947] loop3: detected capacity change from 0 to 512 [ 162.237601][T19947] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.5196: inode has both inline data and extents flags [ 162.258043][T19947] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5196: couldn't read orphan inode 15 (err -117) [ 162.260728][T19952] loop7: detected capacity change from 0 to 1024 [ 162.277827][T19947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.284887][T19956] macvlan1: entered promiscuous mode [ 162.297024][T19956] ipvlan0: entered promiscuous mode [ 162.303642][T19956] ipvlan0: left promiscuous mode [ 162.306963][T19952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.309043][ T9477] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 162.335441][T19956] macvlan1: left promiscuous mode [ 162.357556][T19959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.367580][ T3552] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.368181][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.386832][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.396217][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.473161][ T3552] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.520877][ T3552] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.576144][ T3552] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.692669][T19975] chnl_net:caif_netlink_parms(): no params data found [ 162.763893][T19975] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.771178][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.794488][T19975] bridge_slave_0: entered allmulticast mode [ 162.801946][T19975] bridge_slave_0: entered promiscuous mode [ 162.811838][T20170] loop6: detected capacity change from 0 to 512 [ 162.823167][T19975] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.830274][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.838326][T19975] bridge_slave_1: entered allmulticast mode [ 162.863057][T19975] bridge_slave_1: entered promiscuous mode [ 162.907697][T19975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.917592][ T3552] bridge_slave_1: left allmulticast mode [ 162.923308][ T3552] bridge_slave_1: left promiscuous mode [ 162.929040][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.938424][ T3552] bridge_slave_0: left allmulticast mode [ 162.944472][ T3552] bridge_slave_0: left promiscuous mode [ 162.945196][ T2967] kernel read not supported for file /eth0 (pid: 2967 comm: kworker/1:2) [ 162.950220][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.041776][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.051746][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.061174][ T3552] bond0 (unregistering): Released all slaves [ 163.070911][T19975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.115136][T19975] team0: Port device team_slave_0 added [ 163.125814][ T3552] hsr_slave_0: left promiscuous mode [ 163.132360][ T3552] hsr_slave_1: left promiscuous mode [ 163.138022][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.145470][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.153472][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.161853][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.174764][ T3552] veth1_vlan: left allmulticast mode [ 163.180228][ T3552] veth1_macvtap: left promiscuous mode [ 163.185750][ T3552] veth0_macvtap: left promiscuous mode [ 163.192057][ T3552] veth1_vlan: left promiscuous mode [ 163.197476][ T3552] veth0_vlan: left promiscuous mode [ 163.234907][ T3552] pimreg (unregistering): left allmulticast mode [ 163.270107][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 163.279465][ T3552] team0 (unregistering): Port device C removed [ 163.308885][T19975] team0: Port device team_slave_1 added [ 163.339652][T19975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.346636][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.372559][T19975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.387073][T19975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.394145][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.420533][T19975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.477669][T19975] hsr_slave_0: entered promiscuous mode [ 163.494447][T19975] hsr_slave_1: entered promiscuous mode [ 163.507406][T19975] debugfs: 'hsr0' already exists in 'hsr' [ 163.513860][T19975] Cannot create hsr debugfs directory [ 163.619397][T20398] loop8: detected capacity change from 0 to 2048 [ 163.635661][ T3552] IPVS: stop unused estimator thread 0... [ 163.638667][T19975] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.652732][T19975] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.666815][T19975] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.674224][T20398] loop8: p2 p3 p7 [ 163.680033][T19975] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.728279][T19975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.772601][T19975] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.784213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.791391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.810902][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.818077][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.840943][T20455] SELinux: policydb version 0 does not match my version range 15-35 [ 163.858511][T20455] SELinux: failed to load policy [ 163.906072][T19975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.992847][T19975] veth0_vlan: entered promiscuous mode [ 164.000668][T19975] veth1_vlan: entered promiscuous mode [ 164.014664][T19975] veth0_macvtap: entered promiscuous mode [ 164.021676][T19975] veth1_macvtap: entered promiscuous mode [ 164.032922][T19975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.044063][T19975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.054278][ T3552] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.064817][ T3552] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.074263][ T3552] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.084733][ T3552] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.124092][T20482] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 164.170122][T20486] loop9: detected capacity change from 0 to 4096 [ 164.176835][T20486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.188787][T20486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.243275][T20498] loop6: detected capacity change from 0 to 2048 [ 164.254050][T20500] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.254050][T20500] program syz.8.5257 not setting count and/or reply_len properly [ 164.307253][T20498] loop6: p2 p3 p7 [ 164.480583][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.537227][T20531] loop9: detected capacity change from 0 to 7 [ 164.559459][T20531] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.574452][T20531] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.582343][T20531] loop9: unable to read partition table [ 164.590367][T20531] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 164.590367][T20531] ) failed (rc=-5) [ 164.705144][T20567] loop6: detected capacity change from 0 to 256 [ 164.813149][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 164.813163][ T29] audit: type=1326 audit(1703.790:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20564 comm="syz.9.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 164.851219][ T29] audit: type=1326 audit(1703.790:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20564 comm="syz.9.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 164.874367][ T29] audit: type=1326 audit(1703.790:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20564 comm="syz.9.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 164.897519][ T29] audit: type=1326 audit(1703.790:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20564 comm="syz.9.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 165.014187][T20590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.023571][T20590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.284458][ T29] audit: type=1326 audit(1960.267:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20662 comm="syz.7.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.307520][ T29] audit: type=1326 audit(1960.267:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20662 comm="syz.7.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.332714][ T29] audit: type=1326 audit(1960.297:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20662 comm="syz.7.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.355730][ T29] audit: type=1326 audit(1960.297:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20662 comm="syz.7.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.378857][ T29] audit: type=1326 audit(1960.297:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20662 comm="syz.7.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.402557][ T29] audit: type=1326 audit(1960.337:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a757f6c9 code=0x7ffc0000 [ 165.454378][T20684] loop7: detected capacity change from 0 to 1024 [ 165.486484][T20684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.502018][T20684] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.5296: lblock 0 mapped to illegal pblock 0 (length 1) [ 165.517354][T20684] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 165.530409][T20684] EXT4-fs (loop7): This should not happen!! Data will be lost [ 165.530409][T20684] [ 165.547170][T20684] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #15: comm syz.7.5296: lblock 0 mapped to illegal pblock 0 (length 1) [ 165.612069][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.625538][T20724] $H: renamed from bond0 (while UP) [ 165.635134][T20724] $H: entered promiscuous mode [ 165.640941][T20724] bond_slave_0: entered promiscuous mode [ 165.646841][T20724] bond_slave_1: entered promiscuous mode [ 165.653956][T20725] netlink: 'syz.8.5304': attribute type 1 has an invalid length. [ 165.703931][T20739] loop6: detected capacity change from 0 to 512 [ 165.717196][T20739] EXT4-fs: dax option not supported [ 166.070080][T20818] 9pnet_fd: Insufficient options for proto=fd [ 166.604828][T20889] bridge0: entered promiscuous mode [ 166.611557][T20889] bridge0: port 3(macsec1) entered blocking state [ 166.618023][T20889] bridge0: port 3(macsec1) entered disabled state [ 166.624883][T20889] macsec1: entered allmulticast mode [ 166.630269][T20889] bridge0: entered allmulticast mode [ 166.636411][T20889] macsec1: left allmulticast mode [ 166.641583][T20889] bridge0: left allmulticast mode [ 166.647840][T20889] bridge0: left promiscuous mode [ 166.909982][T20913] loop6: detected capacity change from 0 to 512 [ 166.917992][T20913] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.5357: inode has both inline data and extents flags [ 166.932095][T20913] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5357: couldn't read orphan inode 15 (err -117) [ 166.944530][T20913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.968323][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.178478][T20947] __nla_validate_parse: 1 callbacks suppressed [ 167.178497][T20947] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5369'. [ 167.306320][T20969] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.5377'. [ 167.316636][T20969] netlink: zone id is out of range [ 167.322084][T20969] netlink: zone id is out of range [ 167.327336][T20969] netlink: zone id is out of range [ 167.350638][T20969] netlink: zone id is out of range [ 167.364029][T20969] netlink: set zone limit has 8 unknown bytes [ 167.377623][T20971] loop6: detected capacity change from 0 to 1024 [ 167.418713][T20976] SELinux: Context system_u:object_r:dmesg_exec_t:s0 is not valid (left unmapped). [ 167.443528][T20971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.505057][T20971] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.5378: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.543261][T20971] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 167.555591][T20971] EXT4-fs (loop6): This should not happen!! Data will be lost [ 167.555591][T20971] [ 167.632432][T20991] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.5378: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.667334][T20998] loop7: detected capacity change from 0 to 2048 [ 167.699932][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.751597][T20998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.791996][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5392'. [ 167.801757][T21031] netlink: 312 bytes leftover after parsing attributes in process `syz.8.5392'. [ 167.810964][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5392'. [ 167.837663][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.886258][T21061] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.907783][T21071] loop7: detected capacity change from 0 to 128 [ 167.982927][T21061] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.052767][T21061] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.117228][T21098] loop6: detected capacity change from 0 to 2048 [ 168.149861][T21098] loop6: p1 p3 [ 168.155041][T21098] loop6: p1 start 458752 is beyond EOD, truncated [ 168.155818][T21061] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.161543][T21098] loop6: p3 start 8388352 is beyond EOD, truncated [ 168.233375][T21111] loop6: detected capacity change from 0 to 512 [ 168.262545][T21111] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.5406: Failed to acquire dquot type 1 [ 168.280119][ T3547] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.306157][T21111] EXT4-fs (loop6): 1 truncate cleaned up [ 168.319317][ T3547] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.338193][T21111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.350845][ T3547] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.359050][ T3547] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.467654][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.525968][T21175] loop7: detected capacity change from 0 to 512 [ 168.814881][T21211] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.899292][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5435'. [ 168.949363][T21229] loop7: detected capacity change from 0 to 512 [ 168.959205][T21227] netlink: 'syz.8.5436': attribute type 1 has an invalid length. [ 168.960442][T21229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.966964][T21227] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5436'. [ 169.018155][T21233] 9pnet_fd: Insufficient options for proto=fd [ 169.038726][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.218165][T21275] nfs4: Bad value for 'source' [ 169.273247][T21279] loop9: detected capacity change from 0 to 764 [ 169.295282][T21279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.319508][T21279] Symlink component flag not implemented [ 169.334744][T21279] Symlink component flag not implemented (7) [ 169.502459][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5466'. [ 170.153575][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 170.153591][ T29] audit: type=1326 audit(1965.137:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febcd256567 code=0x7ffc0000 [ 170.185452][ T29] audit: type=1326 audit(1965.137:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febcd1fb779 code=0x7ffc0000 [ 170.208457][ T29] audit: type=1326 audit(1965.137:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febcd256567 code=0x7ffc0000 [ 170.231594][ T29] audit: type=1326 audit(1965.137:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febcd1fb779 code=0x7ffc0000 [ 170.254513][ T29] audit: type=1326 audit(1965.137:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 170.277773][ T29] audit: type=1326 audit(1965.137:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 170.302666][ T29] audit: type=1326 audit(1965.167:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febcd25f6c9 code=0x7ffc0000 [ 170.325686][ T29] audit: type=1326 audit(1965.167:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febcd256567 code=0x7ffc0000 [ 170.348585][ T29] audit: type=1326 audit(1965.167:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febcd1fb779 code=0x7ffc0000 [ 170.371845][ T29] audit: type=1326 audit(1965.167:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febcd256567 code=0x7ffc0000 [ 170.403405][T21360] loop8: detected capacity change from 0 to 512 [ 170.410079][T21360] EXT4-fs: Ignoring removed oldalloc option [ 170.458099][T21360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5485: Parent and EA inode have the same ino 15 [ 170.487362][T21360] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.514686][T21360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.5485: Parent and EA inode have the same ino 15 [ 170.528913][T21360] EXT4-fs (loop8): 1 orphan inode deleted [ 170.537364][T21360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.601199][T21379] loop7: detected capacity change from 0 to 164 [ 170.601515][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.634922][T21379] Unable to read rock-ridge attributes [ 170.645368][T21379] Unable to read rock-ridge attributes [ 170.800211][T21418] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.860339][T21424] netlink: 'syz.8.5509': attribute type 298 has an invalid length. [ 170.939523][T21438] atomic_op ffff888142a70d28 conn xmit_atomic 0000000000000000 [ 170.952262][T21437] : renamed from vlan1 (while UP) [ 171.161919][T21490] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 171.184611][T21490] SELinux: failed to load policy [ 171.235378][T21501] loop8: detected capacity change from 0 to 1024 [ 171.250409][T21501] EXT4-fs: Ignoring removed bh option [ 171.261746][T21501] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.281797][T21507] mmap: syz.1.5545 (21507): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 171.315222][T21501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.372260][T21537] IPv6: Can't replace route, no match found [ 171.376516][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.389740][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5548'. [ 171.409926][T21541] loop9: detected capacity change from 0 to 512 [ 171.419613][T21548] loop8: detected capacity change from 0 to 128 [ 171.436989][T21548] FAT-fs (loop8): Directory bread(block 414) failed [ 171.444949][T21555] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5554'. [ 171.454073][T21548] FAT-fs (loop8): Directory bread(block 415) failed [ 171.465519][T21548] FAT-fs (loop8): Directory bread(block 416) failed [ 171.484225][T21548] FAT-fs (loop8): Directory bread(block 417) failed [ 171.491024][T21548] FAT-fs (loop8): Directory bread(block 418) failed [ 171.509061][T21548] FAT-fs (loop8): Directory bread(block 419) failed [ 171.515947][T21548] FAT-fs (loop8): Directory bread(block 420) failed [ 171.523223][T21548] FAT-fs (loop8): Directory bread(block 421) failed [ 171.545494][T21572] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 171.553355][T21571] IPVS: stopping master sync thread 21572 ... [ 171.576916][T21548] FAT-fs (loop8): FAT read failed (blocknr 128) [ 171.892368][T21632] : renamed from vlan1 (while UP) [ 172.128741][T21663] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.128741][T21663] The task syz.8.5593 (21663) triggered the difference, watch for misbehavior. [ 172.585773][T21669] : renamed from vlan1 (while UP) [ 172.626695][T21675] loop7: detected capacity change from 0 to 512 [ 172.634124][T21675] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.645785][T21675] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 172.658924][T21675] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 172.668063][T21675] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm gtp: attempt to clear invalid blocks 983261 len 1 [ 172.681172][T21675] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 172.694648][T21675] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 172.704389][T21675] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 172.713248][T21675] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 172.726676][T21675] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 172.736434][T21675] EXT4-fs error (device loop7): ext4_truncate:4637: inode #11: comm gtp: mark_inode_dirty error [ 172.747383][T21675] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 172.757330][T21675] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 172.771508][T21675] EXT4-fs (loop7): 1 truncate cleaned up [ 172.777688][T21675] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.810940][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.878336][T21696] : renamed from vlan1 (while UP) [ 172.949036][T21712] netlink: 'syz.8.5615': attribute type 2 has an invalid length. [ 172.952866][T21714] loop7: detected capacity change from 0 to 512 [ 172.964523][T21714] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.997220][T21714] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 173.005862][T21714] FAT-fs (loop7): Filesystem has been set read-only [ 173.013852][T21714] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 173.022223][T21721] loop6: detected capacity change from 0 to 512 [ 173.029488][T21721] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.041128][T21721] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 173.055179][T21721] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 173.064720][T21721] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm gtp: attempt to clear invalid blocks 983261 len 1 [ 173.079408][T21721] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 173.094903][T21721] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 173.106038][T21721] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 173.114905][T21721] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 173.128095][T21721] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 173.138064][T21721] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm gtp: mark_inode_dirty error [ 173.149000][T21721] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 173.158795][T21721] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm gtp: Invalid inode table block 0 in block_group 0 [ 173.171781][T21721] EXT4-fs (loop6): 1 truncate cleaned up [ 173.177928][T21721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.212759][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.384510][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5630'. [ 173.560462][ T2967] hid_parser_main: 53 callbacks suppressed [ 173.560481][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.573909][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.581345][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.589461][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.596973][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.604381][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.612375][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.619856][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.627299][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.634823][ T2967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.645005][ T2967] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 173.709914][T21807] netlink: 'syz.9.5651': attribute type 13 has an invalid length. [ 173.791672][T21807] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.798954][T21807] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.846189][T21807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.859211][T21807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.901179][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5661'. [ 173.910514][ T3539] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.918980][ T3539] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.945740][ T3539] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.957676][ T3539] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.129203][T21873] loop8: detected capacity change from 0 to 2048 [ 174.140994][T21873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.192242][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.260438][T21894] loop8: detected capacity change from 0 to 1024 [ 174.271571][T21894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.286309][T21894] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.5684: lblock 0 mapped to illegal pblock 0 (length 6) [ 174.302204][T21894] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.5684: lblock 0 mapped to illegal pblock 0 (length 1) [ 174.315856][T21894] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 174.328280][T21894] EXT4-fs (loop8): This should not happen!! Data will be lost [ 174.328280][T21894] [ 174.348546][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.417092][T21917] ALSA: seq fatal error: cannot create timer (-22) [ 174.520795][T21930] can0: slcan on ttyS3. [ 174.549981][T21930] can0 (unregistered): slcan off ttyS3. [ 174.570874][T21938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.579404][T21938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.072673][T21966] loop9: detected capacity change from 0 to 128 [ 175.081327][T21966] FAT-fs (loop9): Directory bread(block 414) failed [ 175.087991][T21966] FAT-fs (loop9): Directory bread(block 415) failed [ 175.099724][T21966] FAT-fs (loop9): Directory bread(block 416) failed [ 175.115763][T21966] FAT-fs (loop9): Directory bread(block 417) failed [ 175.126073][T21966] FAT-fs (loop9): Directory bread(block 418) failed [ 175.133619][T21966] FAT-fs (loop9): Directory bread(block 419) failed [ 175.141212][T21966] FAT-fs (loop9): Directory bread(block 420) failed [ 175.148398][T21966] FAT-fs (loop9): Directory bread(block 421) failed [ 175.198054][T21966] FAT-fs (loop9): FAT read failed (blocknr 128) [ 175.235566][T21979] loop9: detected capacity change from 0 to 512 [ 175.248871][T21979] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 175.275050][T21979] EXT4-fs (loop9): 1 truncate cleaned up [ 175.285495][T21979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.301068][T21983] loop8: detected capacity change from 0 to 512 [ 175.313950][T21983] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.340569][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 175.340585][ T29] audit: type=1400 audit(1970.327:4676): avc: denied { map } for pid=21978 comm="syz.9.5710" path="/56/file2/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.357962][T21983] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 175.377215][T21983] FAT-fs (loop8): Filesystem has been set read-only [ 175.387522][ T29] audit: type=1400 audit(1970.327:4677): avc: denied { execute } for pid=21978 comm="syz.9.5710" path="/56/file2/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.407265][T21983] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 175.520940][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.531199][ T29] audit: type=1400 audit(1970.517:4678): avc: denied { setopt } for pid=21994 comm="syz.8.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.575601][T21999] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.635186][T22005] SELinux: failed to load policy [ 175.635246][ T29] audit: type=1400 audit(1970.617:4679): avc: denied { load_policy } for pid=22004 comm="syz.7.5719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.699440][ T29] audit: type=1400 audit(1970.677:4680): avc: denied { connect } for pid=22006 comm="syz.9.5720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.758203][ T29] audit: type=1326 audit(1970.737:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 175.781932][ T29] audit: type=1326 audit(1970.737:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 175.804890][ T29] audit: type=1326 audit(1970.737:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.6.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 175.868404][ T29] audit: type=1400 audit(1970.827:4684): avc: denied { create } for pid=22016 comm="syz.7.5724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.888321][ T29] audit: type=1400 audit(1970.827:4685): avc: denied { write } for pid=22016 comm="syz.7.5724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.021162][T22046] loop8: detected capacity change from 0 to 128 [ 176.028388][T22046] FAT-fs (loop8): bogus sectors per cluster 0 [ 176.034533][T22046] FAT-fs (loop8): Can't find a valid FAT filesystem [ 176.150753][T22060] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5739'. [ 176.243100][T22072] loop7: detected capacity change from 0 to 128 [ 176.271328][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5745'. [ 176.543660][T22100] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5754'. [ 176.569128][T22102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.971516][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5764'. [ 177.103805][T22132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5771'. [ 177.377668][T22154] loop7: detected capacity change from 0 to 128 [ 177.681292][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5766'. [ 177.765017][T22182] netlink: 'syz.6.5790': attribute type 6 has an invalid length. [ 177.844742][T22186] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 177.960251][T22200] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.967865][T22194] SELinux: failed to load policy [ 178.182967][T22246] binfmt_misc: register: failed to install interpreter file ./file0 [ 178.350307][T22285] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.383930][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5835'. [ 178.401184][T22289] sd 0:0:1:0: device reset [ 178.442847][T22297] loop8: detected capacity change from 0 to 128 [ 178.481312][T22309] erspan0: entered promiscuous mode [ 178.486981][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5844'. [ 178.499082][T22304] SELinux: ebitmap start bit (65535) is not a multiple of the map unit size (64) [ 178.509636][T22304] SELinux: failed to load policy [ 178.521273][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 178.530433][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 178.539860][T22311] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5846'. [ 178.549046][T22311] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5846'. [ 178.564270][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5844'. [ 178.586380][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 178.605435][T22320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22320 comm=syz.1.5849 [ 178.679171][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 178.706824][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5856'. [ 178.727524][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5856'. [ 178.799439][ T3529] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.991350][T22372] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 178.997907][T22372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.006505][T22372] vhci_hcd vhci_hcd.0: Device attached [ 179.035424][T22377] vhci_hcd: connection closed [ 179.035700][ T3514] vhci_hcd: stop threads [ 179.044683][ T3514] vhci_hcd: release socket [ 179.049108][ T3514] vhci_hcd: disconnect device [ 179.299104][T22406] sd 0:0:1:0: device reset [ 179.449012][T22421] netlink: 'syz.1.5890': attribute type 3 has an invalid length. [ 179.553292][T22439] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.761393][T22473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.825338][T22473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.885488][T22473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.923179][T22473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.999454][ T3514] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.015641][ T3514] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.024391][ T3514] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.036628][ T3514] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.089235][T22545] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 180.089235][T22545] program syz.7.5932 not setting count and/or reply_len properly [ 180.402257][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 180.402274][ T29] audit: type=1400 audit(1975.386:4964): avc: denied { read } for pid=22591 comm="syz.1.5950" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.433655][ T29] audit: type=1400 audit(1975.386:4965): avc: denied { open } for pid=22591 comm="syz.1.5950" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.457736][ T29] audit: type=1400 audit(1975.386:4966): avc: denied { ioctl } for pid=22591 comm="syz.1.5950" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.485025][ T29] audit: type=1400 audit(1975.466:4967): avc: denied { create } for pid=22595 comm="syz.1.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.519110][ T29] audit: type=1400 audit(1975.486:4968): avc: denied { write } for pid=22595 comm="syz.1.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.539767][ T29] audit: type=1400 audit(1975.486:4969): avc: denied { read } for pid=22595 comm="syz.1.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.561384][ T29] audit: type=1400 audit(1975.496:4970): avc: denied { open } for pid=22600 comm="syz.1.5954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.580612][ T29] audit: type=1400 audit(1975.496:4971): avc: denied { kernel } for pid=22600 comm="syz.1.5954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.630805][ T29] audit: type=1400 audit(1975.616:4972): avc: denied { create } for pid=22608 comm="syz.1.5957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.650306][ T29] audit: type=1400 audit(1975.616:4973): avc: denied { read } for pid=22610 comm="syz.7.5958" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 180.840538][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.840562][T15205] Bluetooth: hci0: command 0x1003 tx timeout [ 180.952490][T22654] Falling back ldisc for ttyS3. [ 182.082622][T22721] cgroup: fork rejected by pids controller in /syz6 [ 182.260927][T22793] netlink: 'syz.1.5996': attribute type 1 has an invalid length. [ 182.715981][T22866] loop9: detected capacity change from 0 to 512 [ 182.758341][T22866] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 26 (err -116) [ 182.770503][T22866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.786105][T22866] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm gtp: corrupted inode contents [ 182.797551][T22866] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #3: comm gtp: mark_inode_dirty error [ 182.808849][T22866] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm gtp: bg 0: block 64: padding at end of block bitmap is not set [ 182.822918][T22866] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm gtp: Failed to acquire dquot type 0 [ 182.847252][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.203625][T22909] lo speed is unknown, defaulting to 1000 [ 183.209662][T22909] lo speed is unknown, defaulting to 1000 [ 183.215831][T22909] lo speed is unknown, defaulting to 1000 [ 183.229323][T22909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.242611][T22909] lo speed is unknown, defaulting to 1000 [ 183.248938][T22909] lo speed is unknown, defaulting to 1000 [ 183.259432][T22909] lo speed is unknown, defaulting to 1000 [ 183.269816][T22909] lo speed is unknown, defaulting to 1000 [ 183.276322][T22909] lo speed is unknown, defaulting to 1000 [ 183.475184][T22948] pim6reg1: entered promiscuous mode [ 183.480526][T22948] pim6reg1: entered allmulticast mode [ 183.549614][T22960] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 183.808800][T22982] bond0: (slave vlan1): Opening slave failed [ 184.062864][T23005] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 184.170065][T23013] loop8: detected capacity change from 0 to 512 [ 184.201731][T23013] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.219881][T23013] EXT4-fs (loop8): mount failed [ 184.243020][T23013] __nla_validate_parse: 3 callbacks suppressed [ 184.243048][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6076'. [ 184.281548][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6076'. [ 184.823533][T23091] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6106'. [ 185.004288][T15205] Bluetooth: hci0: command 0x1003 tx timeout [ 185.010503][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.045254][T23107] syzkaller1: entered promiscuous mode [ 185.050770][T23107] syzkaller1: entered allmulticast mode [ 185.099864][T23115] loop9: detected capacity change from 0 to 1024 [ 185.110824][T23115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.125407][T23115] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.211591][T23124] lo speed is unknown, defaulting to 1000 [ 185.237758][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.437153][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 185.437181][ T29] audit: type=1326 audit(1980.415:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.503521][ T29] audit: type=1326 audit(1980.415:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.527271][ T29] audit: type=1326 audit(1980.415:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.551926][ T29] audit: type=1326 audit(1980.415:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.575474][ T29] audit: type=1326 audit(1980.415:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.599784][ T29] audit: type=1326 audit(1980.415:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.624084][ T29] audit: type=1326 audit(1980.415:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.647833][ T29] audit: type=1326 audit(1980.415:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 185.672104][ T29] audit: type=1400 audit(1980.455:5229): avc: denied { ioctl } for pid=23167 comm="syz.9.6126" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.697363][ T29] audit: type=1326 audit(1980.455:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23166 comm="syz.8.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc31b29f6c9 code=0x7ffc0000 [ 186.245191][T23240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6154'. [ 186.621355][T23265] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 186.909934][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6171'. [ 186.909958][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6171'. [ 186.984962][T23290] tipc: MTU too low for tipc bearer [ 187.407809][T23339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23339 comm=wޣ [ 187.435809][T23341] tap0: tun_chr_ioctl cmd 1074025675 [ 187.441204][T23341] tap0: persist enabled [ 187.451343][T23341] tap0: tun_chr_ioctl cmd 1074025675 [ 187.456655][T23341] tap0: persist enabled [ 187.688197][T23375] 9pnet: Could not find request transport: f [ 187.894907][T23402] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6211'. [ 188.434038][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6224'. [ 188.747660][T23460] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6238'. [ 188.847650][T23476] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6246'. [ 188.920281][T23484] lo speed is unknown, defaulting to 1000 [ 189.008858][T23520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.063952][T23538] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 189.094841][T23541] loop7: detected capacity change from 0 to 512 [ 189.105804][T23542] netlink: 'syz.6.6263': attribute type 29 has an invalid length. [ 189.115512][T23542] netlink: 'syz.6.6263': attribute type 29 has an invalid length. [ 189.125289][T23541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.146135][T23541] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 189.161960][T23542] netlink: 'syz.6.6263': attribute type 29 has an invalid length. [ 189.180543][T23542] netlink: 'syz.6.6263': attribute type 29 has an invalid length. [ 189.216152][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.399210][T23590] loop6: detected capacity change from 0 to 512 [ 189.433773][T23590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.503674][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.602736][T23615] __nla_validate_parse: 2 callbacks suppressed [ 189.602753][T23615] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6292'. [ 189.744790][T23627] random: crng reseeded on system resumption [ 189.756463][T23627] Restarting kernel threads ... [ 189.762990][T23627] Done restarting kernel threads. [ 189.830477][T23641] loop7: detected capacity change from 0 to 512 [ 189.847143][T23641] EXT4-fs: Ignoring removed i_version option [ 189.853441][T23641] EXT4-fs: Ignoring removed bh option [ 189.872596][T23641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.897710][T23654] loop6: detected capacity change from 0 to 2048 [ 189.904436][T23654] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.911013][T23654] EXT4-fs: Ignoring removed i_version option [ 189.925528][T23654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.976729][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.062117][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.093467][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6321'. [ 190.112978][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6321'. [ 190.324690][T23702] loop9: detected capacity change from 0 to 32768 [ 190.516526][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 190.516572][ T29] audit: type=1400 audit(1985.495:5494): avc: granted { setsecparam } for pid=23746 comm="syz.6.6350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 190.565110][T23751] ALSA: seq fatal error: cannot create timer (-19) [ 190.746401][ T29] audit: type=1400 audit(1985.725:5495): avc: denied { getopt } for pid=23769 comm="syz.8.6360" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.789515][ T29] audit: type=1326 audit(1985.765:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23781 comm="syz.6.6366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x0 [ 190.853119][ T36] IPVS: starting estimator thread 0... [ 190.875077][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6370'. [ 190.885236][T23791] netlink: 23 bytes leftover after parsing attributes in process `syz.9.6370'. [ 190.894548][T23791] netlink: 'syz.9.6370': attribute type 5 has an invalid length. [ 190.902520][T23791] netlink: 23 bytes leftover after parsing attributes in process `syz.9.6370'. [ 190.972688][T23789] IPVS: using max 2640 ests per chain, 132000 per kthread [ 190.980765][T23805] loop7: detected capacity change from 0 to 128 [ 190.991185][ T29] audit: type=1400 audit(1985.965:5497): avc: denied { mount } for pid=23804 comm="syz.7.6376" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 191.015560][T23805] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 191.023509][T23805] FAT-fs (loop7): Filesystem has been set read-only [ 191.028378][ T29] audit: type=1400 audit(1985.995:5498): avc: denied { unmount } for pid=19975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.030551][T23805] bio_check_eod: 96 callbacks suppressed [ 191.030564][T23805] syz.7.6376: attempt to access beyond end of device [ 191.030564][T23805] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 191.069496][T23805] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 191.078460][T23805] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 191.086840][ T29] audit: type=1400 audit(1986.065:5499): avc: denied { watch } for pid=23812 comm="syz.9.6377" path="/213" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 191.090693][T23805] syz.7.6376: attempt to access beyond end of device [ 191.090693][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.110703][ T29] audit: type=1400 audit(1986.065:5500): avc: denied { unlink } for pid=19975 comm="syz-executor" name="file0" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 191.144940][T23805] syz.7.6376: attempt to access beyond end of device [ 191.144940][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.144998][T23805] syz.7.6376: attempt to access beyond end of device [ 191.144998][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145038][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145038][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145112][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145112][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145223][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145223][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145325][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145325][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145413][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145413][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.145449][T23805] syz.7.6376: attempt to access beyond end of device [ 191.145449][T23805] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 191.276333][ T29] audit: type=1400 audit(1986.255:5501): avc: denied { mount } for pid=23818 comm="syz.9.6381" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 191.317885][T23821] loop9: detected capacity change from 0 to 512 [ 191.333721][T23821] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.381180][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.439490][T23832] loop9: detected capacity change from 0 to 1024 [ 191.453481][T23832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.482350][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.616712][ T29] audit: type=1326 audit(1986.595:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.9.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 191.666924][ T29] audit: type=1326 audit(1986.625:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.9.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 191.792623][T23863] IPv6: Can't replace route, no match found [ 191.921958][T23884] loop9: detected capacity change from 0 to 1024 [ 191.929167][T23884] EXT4-fs: Ignoring removed nobh option [ 191.934941][T23884] EXT4-fs: Ignoring removed bh option [ 191.943493][T23884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.034938][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.110575][T23913] loop9: detected capacity change from 0 to 128 [ 192.131261][T23913] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.170755][T19975] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.210142][T23927] IPv6: Can't replace route, no match found [ 192.271599][T23939] loop6: detected capacity change from 0 to 128 [ 192.394879][T23963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23963 comm=syz.6.6437 [ 192.407570][T23963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23963 comm=syz.6.6437 [ 192.474064][T23973] team0 (unregistering): Port device C removed [ 192.481754][T23973] team0 (unregistering): Port device team_slave_1 removed [ 192.507746][T24009] loop9: detected capacity change from 0 to 128 [ 192.548193][T24016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 192.573299][T24018] loop6: detected capacity change from 0 to 512 [ 192.580839][T24018] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 192.589595][T24018] EXT4-fs (loop6): orphan cleanup on readonly fs [ 192.596557][T24018] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.6447: Failed to acquire dquot type 1 [ 192.608231][T24018] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6447: bg 0: block 40: padding at end of block bitmap is not set [ 192.622835][T24018] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 192.631832][T24018] EXT4-fs (loop6): 1 truncate cleaned up [ 192.638103][T24018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.702478][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.737530][T24030] loop6: detected capacity change from 0 to 512 [ 192.778765][T24030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.794516][T24032] lo speed is unknown, defaulting to 1000 [ 192.837632][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.859868][T24064] loop9: detected capacity change from 0 to 256 [ 192.902293][T24077] SELinux: failed to load policy [ 192.946127][T24081] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24081 comm=syz.6.6460 [ 193.010111][T24094] loop7: detected capacity change from 0 to 128 [ 193.029098][T24094] vfat: Unknown parameter '017777777777777777777770000000000000000000000018446744073709551615' [ 193.051735][T24103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24103 comm=syz.9.6469 [ 193.052355][T24099] random: crng reseeded on system resumption [ 193.082352][T15205] Bluetooth: hci0: command 0x1003 tx timeout [ 193.088415][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.202600][T24128] loop9: detected capacity change from 0 to 512 [ 193.212866][T24128] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 193.398927][T24171] loop8: detected capacity change from 0 to 512 [ 193.408963][T24171] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.6496: iget: bad i_size value: 38620345925642 [ 193.421985][T24171] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6496: couldn't read orphan inode 15 (err -117) [ 193.435345][T24171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.455678][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.533320][T24187] loop8: detected capacity change from 0 to 164 [ 193.543338][T24187] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6502'. [ 193.566797][T24192] 9pnet_fd: Insufficient options for proto=fd [ 194.153894][T24254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6526'. [ 194.188569][T24258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6529'. [ 194.197774][T24258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6529'. [ 194.215451][T24263] loop7: detected capacity change from 0 to 512 [ 194.228476][T24263] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 194.283206][T24278] loop7: detected capacity change from 0 to 256 [ 194.380054][ T1034] kernel read not supported for file /1038/coredump_filter (pid: 1034 comm: kworker/0:2) [ 194.423399][T24303] vhci_hcd: invalid port number 96 [ 194.428552][T24303] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 194.446121][T24312] netlink: 'syz.9.6552': attribute type 1 has an invalid length. [ 194.544173][T24334] loop6: detected capacity change from 0 to 512 [ 194.551073][T24334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.563628][T24334] EXT4-fs (loop6): 1 orphan inode deleted [ 194.569381][T24334] EXT4-fs (loop6): 1 truncate cleaned up [ 194.580097][T24334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.595275][T24344] loop9: detected capacity change from 0 to 512 [ 194.604109][T24344] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.6565: bad orphan inode 15 [ 194.609167][T24334] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.6562: iget: bad extra_isize 46 (inode size 256) [ 194.614403][T24344] ext4_test_bit(bit=14, block=5) = 0 [ 194.633463][T24344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.635392][T24334] EXT4-fs (loop6): Remounting filesystem read-only [ 194.667854][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.668019][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.696184][T24354] loop6: detected capacity change from 0 to 164 [ 194.703408][T24354] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.712011][T24354] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.720610][T24354] Symlink component flag not implemented [ 194.726357][T24354] Symlink component flag not implemented [ 194.732504][T24354] Symlink component flag not implemented (7) [ 194.738502][T24354] Symlink component flag not implemented (116) [ 194.771304][T24364] bond1: Unable to set up delay as MII monitoring is disabled [ 194.780753][T24364] bond1 (unregistering): Released all slaves [ 194.891025][T24453] netlink: 'syz.6.6582': attribute type 34 has an invalid length. [ 194.938014][ T36] hid_parser_main: 22 callbacks suppressed [ 194.938034][ T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 194.951688][ T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 194.960492][ T36] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 194.969213][ T36] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 195.108411][T24494] netlink: 'syz.9.6598': attribute type 4 has an invalid length. [ 195.157366][T24500] GUP no longer grows the stack in syz.1.6601 (24500): 200000004000-200000008000 (200000002000) [ 195.167895][T24500] CPU: 0 UID: 0 PID: 24500 Comm: syz.1.6601 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.168000][T24500] Tainted: [W]=WARN [ 195.168008][T24500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.168026][T24500] Call Trace: [ 195.168038][T24500] [ 195.168045][T24500] __dump_stack+0x1d/0x30 [ 195.168073][T24500] dump_stack_lvl+0xe8/0x140 [ 195.168100][T24500] dump_stack+0x15/0x1b [ 195.168155][T24500] __get_user_pages+0x1968/0x1ed0 [ 195.168194][T24500] get_user_pages_remote+0x1d5/0x6c0 [ 195.168229][T24500] __access_remote_vm+0x15c/0x590 [ 195.168265][T24500] access_remote_vm+0x32/0x40 [ 195.168309][T24500] proc_pid_cmdline_read+0x32b/0x6c0 [ 195.168348][T24500] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 195.168384][T24500] vfs_readv+0x3fb/0x690 [ 195.168460][T24500] __x64_sys_preadv+0xfd/0x1c0 [ 195.168494][T24500] x64_sys_call+0x282e/0x3000 [ 195.168520][T24500] do_syscall_64+0xd2/0x200 [ 195.168617][T24500] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.168650][T24500] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 195.168691][T24500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.168716][T24500] RIP: 0033:0x7febcd25f6c9 [ 195.168809][T24500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.168827][T24500] RSP: 002b:00007febcbcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 195.168919][T24500] RAX: ffffffffffffffda RBX: 00007febcd4b5fa0 RCX: 00007febcd25f6c9 [ 195.168932][T24500] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 195.168999][T24500] RBP: 00007febcd2e1f91 R08: 0000000000000007 R09: 0000000000000000 [ 195.169014][T24500] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 195.169027][T24500] R13: 00007febcd4b6038 R14: 00007febcd4b5fa0 R15: 00007fffa1486438 [ 195.169046][T24500] [ 195.463060][T24534] __nla_validate_parse: 3 callbacks suppressed [ 195.463078][T24534] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6614'. [ 195.530393][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 195.530415][ T29] audit: type=1326 audit(1990.504:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.538212][T24541] loop7: detected capacity change from 0 to 1024 [ 195.573367][T24541] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 195.584548][ T29] audit: type=1326 audit(1990.544:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.608273][ T29] audit: type=1326 audit(1990.544:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.631447][ T29] audit: type=1326 audit(1990.544:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.663534][T24541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.684712][T24541] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.6618: missing EA_INODE flag [ 195.701131][T24541] EXT4-fs (loop7): Remounting filesystem read-only [ 195.719432][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.844502][ T29] audit: type=1400 audit(1990.824:5640): avc: denied { bind } for pid=24575 comm="syz.6.6627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.863523][ T29] audit: type=1400 audit(1990.824:5641): avc: denied { listen } for pid=24575 comm="syz.6.6627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.929572][ T29] audit: type=1326 audit(1990.894:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24584 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.952606][ T29] audit: type=1326 audit(1990.894:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24584 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.975603][ T29] audit: type=1326 audit(1990.894:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24584 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 195.998828][ T29] audit: type=1326 audit(1990.894:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24584 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d0e1df6c9 code=0x7ffc0000 [ 196.044424][ T1034] kernel read not supported for file /newroot/497 (pid: 1034 comm: kworker/0:2) [ 196.244929][T24644] loop7: detected capacity change from 0 to 1024 [ 196.252000][T24644] EXT4-fs: Ignoring removed nobh option [ 196.257687][T24644] EXT4-fs: Ignoring removed bh option [ 196.276376][T24644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.308456][T24644] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6654: Allocating blocks 385-513 which overlap fs metadata [ 196.325333][T24644] EXT4-fs (loop7): pa ffff88810075a540: logic 16, phys. 129, len 24 [ 196.325553][T24652] netlink: 'syz.9.6657': attribute type 10 has an invalid length. [ 196.333623][T24644] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 196.352514][T24652] ipvlan0: entered allmulticast mode [ 196.357924][T24652] veth0_vlan: entered allmulticast mode [ 196.364040][T24652] team0: Device ipvlan0 failed to register rx_handler [ 196.364873][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.391219][T24657] atomic_op ffff88813c286d28 conn xmit_atomic 0000000000000000 [ 196.415764][T24661] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.422162][T24661] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.503850][T24677] netlink: 63 bytes leftover after parsing attributes in process `syz.9.6669'. [ 196.535163][T24687] 9pnet_fd: Insufficient options for proto=fd [ 196.670905][T24721] loop9: detected capacity change from 0 to 764 [ 196.679667][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6687'. [ 196.692742][T24725] vlan1: entered allmulticast mode [ 196.721482][T24733] loop9: detected capacity change from 0 to 1024 [ 196.728207][T24733] EXT4-fs: Ignoring removed orlov option [ 196.736066][T24733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.923897][T24747] bond2: entered promiscuous mode [ 196.928967][T24747] bond2: entered allmulticast mode [ 196.944069][T24747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.969041][T24747] bond2 (unregistering): Released all slaves [ 197.154175][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.263386][T24855] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 197.339747][T24865] syzkaller0: entered promiscuous mode [ 197.344511][T24871] netlink: 'syz.8.6714': attribute type 3 has an invalid length. [ 197.345315][T24865] syzkaller0: entered allmulticast mode [ 197.398392][T24880] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 197.429389][T24885] loop8: detected capacity change from 0 to 512 [ 197.444201][T24885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.523930][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.620277][T24908] 9pnet: Could not find request transport: t [ 197.770005][T24929] loop7: detected capacity change from 0 to 512 [ 197.796382][T24929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.805629][T24936] loop8: detected capacity change from 0 to 256 [ 197.826594][T24936] FAT-fs (loop8): bogus number of FAT sectors [ 197.832833][T24936] FAT-fs (loop8): Can't find a valid FAT filesystem [ 197.882975][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.303353][T24976] random: crng reseeded on system resumption [ 198.313885][T24976] Restarting kernel threads ... [ 198.318992][T24976] Done restarting kernel threads. [ 198.339530][T24978] loop6: detected capacity change from 0 to 512 [ 198.354924][T24978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.426194][T24989] vhci_hcd: invalid port number 9 [ 198.431252][T24989] vhci_hcd: invalid port number 9 [ 198.437138][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.758603][T24999] loop8: detected capacity change from 0 to 512 [ 198.778340][T24999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.839453][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.874371][T25020] random: crng reseeded on system resumption [ 198.890781][T25020] Restarting kernel threads ... [ 198.897651][T25020] Done restarting kernel threads. [ 198.990590][T25043] loop8: detected capacity change from 0 to 512 [ 199.014428][T25043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.096610][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.117504][T25062] loop8: detected capacity change from 0 to 512 [ 199.140123][T25065] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.150254][T25062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.168485][T25069] random: crng reseeded on system resumption [ 199.179899][T25069] Restarting kernel threads ... [ 199.185298][T25069] Done restarting kernel threads. [ 199.185841][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.268201][T25088] xt_l2tp: invalid flags combination: 0 [ 199.454476][T25106] loop8: detected capacity change from 0 to 512 [ 199.475599][T25106] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.516521][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.606403][T25131] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 199.614705][T25131] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 199.690512][T25144] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 199.784677][T25153] netlink: 'syz.9.6824': attribute type 10 has an invalid length. [ 199.794749][T25153] batadv0: entered allmulticast mode [ 199.800730][T25153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.809391][T25153] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.820116][T25158] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6826'. [ 199.830220][T25158] 0X: renamed from caif0 [ 199.837904][T25158] 0X: entered allmulticast mode [ 199.843305][T25158] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 199.898963][T25169] loop8: detected capacity change from 0 to 512 [ 199.932095][T25165] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.940575][ T3421] IPVS: starting estimator thread 0... [ 199.955060][T25169] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6831: bg 0: block 248: padding at end of block bitmap is not set [ 199.970953][T25169] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.6831: Failed to acquire dquot type 1 [ 199.986439][T25169] EXT4-fs (loop8): 1 truncate cleaned up [ 199.993551][T25169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.025521][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.034764][ T3542] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:50: Failed to release dquot type 1 [ 200.053739][T25175] IPVS: using max 2256 ests per chain, 112800 per kthread [ 200.083851][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6840'. [ 200.145515][T25217] loop6: detected capacity change from 0 to 1024 [ 200.152446][T25217] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 200.188498][T25228] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6847'. [ 200.212453][T25230] loop9: detected capacity change from 0 to 512 [ 200.223199][T25230] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6848: bg 0: block 248: padding at end of block bitmap is not set [ 200.238340][T25230] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6848: Failed to acquire dquot type 1 [ 200.250615][T25230] EXT4-fs (loop9): 1 truncate cleaned up [ 200.256894][T25230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.290657][T19975] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.299970][ T3508] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:17: Failed to release dquot type 1 [ 200.307702][T25243] loop6: detected capacity change from 0 to 736 [ 200.438733][T25265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=25265 comm=syz.6.6858 [ 200.570948][T25283] loop6: detected capacity change from 0 to 512 [ 200.588092][T25288] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 200.598416][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 200.598431][ T29] audit: type=1400 audit(1995.564:5883): avc: denied { relabelfrom } for pid=25286 comm="syz.8.6864" name="" dev="pipefs" ino=57085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.626924][ T29] audit: type=1400 audit(1995.564:5884): avc: denied { mac_admin } for pid=25286 comm="syz.8.6864" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.647752][ T29] audit: type=1400 audit(1995.584:5885): avc: denied { relabelto } for pid=25286 comm="syz.8.6864" name="" dev="pipefs" ino=57085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:pam_var_run_t:s0" [ 200.685241][ T29] audit: type=1400 audit(1995.584:5886): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 200.708218][ T29] audit: type=1400 audit(1995.584:5887): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 200.748182][T25283] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6862: bg 0: block 248: padding at end of block bitmap is not set [ 200.767739][T25283] Quota error (device loop6): write_blk: dquota write failed [ 200.769400][T25299] veth1_to_batadv: entered promiscuous mode [ 200.775233][T25283] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 200.791253][T25283] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.6862: Failed to acquire dquot type 1 [ 200.791999][T25299] batadv_slave_0: entered promiscuous mode [ 200.803880][T25283] EXT4-fs (loop6): 1 truncate cleaned up [ 200.809382][T25299] batadv_slave_0: left promiscuous mode [ 200.815237][T25283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.836203][ T29] audit: type=1326 audit(1995.814:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 200.875111][ T29] audit: type=1326 audit(1995.814:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 200.898150][ T29] audit: type=1326 audit(1995.814:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25305 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff4f8a7f6c9 code=0x7ffc0000 [ 200.923753][T25299] veth1_to_batadv: left promiscuous mode [ 200.957878][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.969771][ T3535] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 1 [ 200.991474][T25313] netlink: 'syz.7.6877': attribute type 1 has an invalid length. [ 201.213396][T25330] lo speed is unknown, defaulting to 1000 [ 201.308319][T25361] infiniband syz!: set down [ 201.312867][T25361] infiniband syz!: added team_slave_0 [ 201.362292][T25361] RDS/IB: syz!: added [ 201.370177][T25411] loop8: detected capacity change from 0 to 8192 [ 201.377350][T25361] smc: adding ib device syz! with port count 1 [ 201.384711][T25361] smc: ib device syz! port 1 has no pnetid [ 201.387996][T25330] chnl_net:caif_netlink_parms(): no params data found [ 201.485124][T25330] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.492312][T25330] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.519734][T25330] bridge_slave_0: entered allmulticast mode [ 201.528274][T25330] bridge_slave_0: entered promiscuous mode [ 201.543369][T25330] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.550453][T25330] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.573833][T25330] bridge_slave_1: entered allmulticast mode [ 201.583625][T25330] bridge_slave_1: entered promiscuous mode [ 201.632758][T25330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.653583][T25330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.693245][T25330] team0: Port device team_slave_0 added [ 201.700175][T25330] team0: Port device team_slave_1 added [ 201.741792][T25330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.748890][T25330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.774896][T25330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.786819][T25330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.793877][T25330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.819873][T25330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.859387][T25330] hsr_slave_0: entered promiscuous mode [ 201.872143][T25330] hsr_slave_1: entered promiscuous mode [ 201.885667][T25330] debugfs: 'hsr0' already exists in 'hsr' [ 201.891416][T25330] Cannot create hsr debugfs directory [ 202.005089][T25330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.017289][T25712] SELinux: failed to load policy [ 202.085718][T25330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.149285][T25330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.195725][T25330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.215423][T25737] loop8: detected capacity change from 0 to 1024 [ 202.234226][T25737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 202.243199][T25737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.257006][T25737] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6917: bg 0: block 88: padding at end of block bitmap is not set [ 202.287677][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.307803][T25330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.324700][T25330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.338595][T25330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 202.348857][T25330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.372139][T25330] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.379335][T25330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.386691][T25330] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.393738][T25330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.402486][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.410727][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.445269][T25330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.458497][T25330] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.467857][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.475030][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.497177][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.504334][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.575618][T25330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.664259][T25330] veth0_vlan: entered promiscuous mode [ 202.672192][T25330] veth1_vlan: entered promiscuous mode [ 202.705754][T25330] veth0_macvtap: entered promiscuous mode [ 202.714486][T25330] veth1_macvtap: entered promiscuous mode [ 202.725826][T25330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.739324][T25330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.750591][ T3535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.780553][ T3535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.803005][ T3508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.811951][T25815] loop8: detected capacity change from 0 to 2048 [ 202.813307][ T3508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.818969][T25815] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.833480][T25815] EXT4-fs: Ignoring removed i_version option [ 202.846470][T25815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.911322][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6940'. [ 202.926256][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.941916][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6940'. [ 203.092118][T25859] loop7: detected capacity change from 0 to 2048 [ 203.094483][T25861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6954'. [ 203.099303][T25859] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.114017][T25859] EXT4-fs: Ignoring removed i_version option [ 203.120998][T25861] team0: Port device team_slave_1 removed [ 203.124731][T25859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.187162][T14659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.217104][T25880] IPv6: Can't replace route, no match found [ 203.253893][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6961'. [ 203.276204][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6961'. [ 203.343197][T25895] loop8: detected capacity change from 0 to 512 [ 203.362831][T25895] EXT4-fs: Ignoring removed i_version option [ 203.368943][T25895] EXT4-fs: Ignoring removed bh option [ 203.398683][T25895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.417720][T25906] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6970'. [ 203.437238][T25906] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6970'. [ 203.490334][T17214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.585123][T25935] netlink: 'syz.1.6984': attribute type 4 has an invalid length. [ 203.632077][T25944] loop6: detected capacity change from 0 to 512 [ 203.643224][T25944] EXT4-fs: Ignoring removed i_version option [ 203.649479][T25944] EXT4-fs: Ignoring removed bh option [ 203.665949][T25944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.727842][T12096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.977492][T25978] loop7: detected capacity change from 0 to 4096 [ 203.985874][T25978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.988122][T25982] loop9: detected capacity change from 0 to 512 [ 204.000613][T25978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.024182][T25982] EXT4-fs: Ignoring removed i_version option [ 204.030215][T25982] EXT4-fs: Ignoring removed bh option [ 204.048528][T25982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.130862][T26008] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7009'. [ 204.140100][T26008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.274414][T26026] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 204.284779][T26026] SELinux: failed to load policy [ 204.300016][T14659] ================================================================== [ 204.308561][T14659] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 204.316011][T14659] [ 204.318331][T14659] read-write to 0xffff88810484a908 of 8 bytes by task 3507 on cpu 1: [ 204.326396][T14659] __xa_clear_mark+0xf5/0x1e0 [ 204.331079][T14659] __folio_end_writeback+0xf7/0x3b0 [ 204.336283][T14659] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 204.342545][T14659] folio_end_writeback+0x1c/0x70 [ 204.347500][T14659] ext4_finish_bio+0x459/0x8c0 [ 204.352704][T14659] ext4_release_io_end+0x9f/0x1f0 [ 204.357745][T14659] ext4_end_io_end+0x18d/0x240 [ 204.362516][T14659] ext4_end_io_rsv_work+0x151/0x1e0 [ 204.367714][T14659] process_scheduled_works+0x4ce/0x9d0 [ 204.373172][T14659] worker_thread+0x582/0x770 [ 204.377750][T14659] kthread+0x489/0x510 [ 204.381812][T14659] ret_from_fork+0x122/0x1b0 [ 204.386397][T14659] ret_from_fork_asm+0x1a/0x30 [ 204.391215][T14659] [ 204.393523][T14659] read to 0xffff88810484a908 of 8 bytes by task 14659 on cpu 0: [ 204.401137][T14659] xas_find_marked+0x218/0x620 [ 204.405892][T14659] find_get_entry+0x5d/0x380 [ 204.410487][T14659] filemap_get_folios_tag+0x13b/0x210 [ 204.415860][T14659] filemap_fdatawait_keep_errors+0x6c/0x180 [ 204.421751][T14659] sync_inodes_sb+0x39c/0x440 [ 204.426427][T14659] sync_filesystem+0x102/0x190 [ 204.431187][T14659] generic_shutdown_super+0x44/0x210 [ 204.436464][T14659] kill_block_super+0x2a/0x70 [ 204.441136][T14659] ext4_kill_sb+0x42/0x80 [ 204.445455][T14659] deactivate_locked_super+0x75/0x1c0 [ 204.450818][T14659] deactivate_super+0x97/0xa0 [ 204.455484][T14659] cleanup_mnt+0x269/0x2e0 [ 204.459898][T14659] __cleanup_mnt+0x19/0x20 [ 204.464316][T14659] task_work_run+0x131/0x1a0 [ 204.468917][T14659] exit_to_user_mode_loop+0xed/0x110 [ 204.474199][T14659] do_syscall_64+0x1d6/0x200 [ 204.478781][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.484666][T14659] [ 204.486972][T14659] value changed: 0xffffffffffffffff -> 0xfffffffffff00000 [ 204.494072][T14659] [ 204.496386][T14659] Reported by Kernel Concurrency Sanitizer on: [ 204.502524][T14659] CPU: 0 UID: 0 PID: 14659 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.514079][T14659] Tainted: [W]=WARN [ 204.517877][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.527925][T14659] ================================================================== [ 206.146036][ T3508] bridge_slave_1: left allmulticast mode [ 206.151910][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.159716][ T3508] bridge_slave_0: left promiscuous mode [ 206.165745][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.236326][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.246153][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.255381][ T3508] bond0 (unregistering): Released all slaves [ 206.263734][ T3508] bond1 (unregistering): Released all slaves [ 206.309782][ T3508] hsr_slave_0: left promiscuous mode [ 206.315530][ T3508] hsr_slave_1: left promiscuous mode [ 206.321020][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.328399][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.335952][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.343322][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.350860][ T3508] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 206.357730][ T3508] batman_adv: batadv0: Removing interface: ipvlan2 [ 206.369297][ T3508] veth1_macvtap: left promiscuous mode [ 206.374820][ T3508] veth0_macvtap: left promiscuous mode [ 206.380501][ T3508] veth1_vlan: left promiscuous mode [ 206.385808][ T3508] veth0_vlan: left promiscuous mode [ 206.418989][ T3508] pimreg (unregistering): left allmulticast mode [ 206.457065][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 206.466849][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 206.726189][ T3508] IPVS: stop unused estimator thread 0...