last executing test programs: 1m44.156228238s ago: executing program 3 (id=3067): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) sync() 1m44.032154714s ago: executing program 3 (id=3075): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=""/15, 0xf}, 0x7}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) 1m43.964992523s ago: executing program 3 (id=3083): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) brk(0x20ffc004) 1m43.927865228s ago: executing program 3 (id=3086): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m43.876221884s ago: executing program 3 (id=3088): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m43.688317568s ago: executing program 3 (id=3096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={r1, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) 1m43.680743629s ago: executing program 32 (id=3096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={r1, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) 46.086625336s ago: executing program 2 (id=5924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 46.044414881s ago: executing program 2 (id=5925): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 45.960456992s ago: executing program 2 (id=5930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 45.921146467s ago: executing program 2 (id=5931): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 45.908276369s ago: executing program 2 (id=5933): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000045000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/255}, 0x20) 45.865034754s ago: executing program 2 (id=5934): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 29.662339924s ago: executing program 33 (id=5934): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 22.412349229s ago: executing program 0 (id=6586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0xffffffff, 0x4) 22.41058179s ago: executing program 0 (id=6588): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 21.439085795s ago: executing program 0 (id=6625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000f2000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) 21.296637384s ago: executing program 0 (id=6630): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x1b) 20.953525048s ago: executing program 0 (id=6635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1000) 20.727065017s ago: executing program 0 (id=6648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000009000038008000140000000007c0003801400010076657468305f746f5f626174616476001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669fd1300000000007468305f746f5f626f6e64000000080002"], 0x188}}, 0x0) 20.726939227s ago: executing program 34 (id=6648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000009000038008000140000000007c0003801400010076657468305f746f5f626174616476001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669fd1300000000007468305f746f5f626f6e64000000080002"], 0x188}}, 0x0) 14.96992987s ago: executing program 7 (id=6855): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) 14.921055856s ago: executing program 7 (id=6859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000680001"], 0x48}}, 0x44010) 14.848378325s ago: executing program 7 (id=6862): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800fc00b7040000000000008500000033000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 14.848178525s ago: executing program 7 (id=6863): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 14.848050585s ago: executing program 7 (id=6864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 14.635753442s ago: executing program 7 (id=6876): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) 14.609487986s ago: executing program 35 (id=6876): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) 2.346236738s ago: executing program 8 (id=7435): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r0) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xe, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.452313143s ago: executing program 8 (id=7444): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 1.450424303s ago: executing program 4 (id=7448): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x7ff, 0x3) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.299150843s ago: executing program 4 (id=7451): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00='], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r0}, 0x20) 1.299009033s ago: executing program 4 (id=7452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) 1.298887823s ago: executing program 4 (id=7453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000540)) 777.99319ms ago: executing program 6 (id=7476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0x66}, &(0x7f0000000240)=[{&(0x7f0000000380)=""/102, 0x100000}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 725.079437ms ago: executing program 6 (id=7478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x86) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 678.845473ms ago: executing program 6 (id=7479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 600.361223ms ago: executing program 6 (id=7483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x84, 0x200000000000008, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) 536.206931ms ago: executing program 6 (id=7484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000980)="fc", 0x1}], 0x1) 515.201974ms ago: executing program 6 (id=7494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100003"], 0x44}}, 0x0) 514.915094ms ago: executing program 8 (id=7485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 489.092868ms ago: executing program 1 (id=7486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 443.362303ms ago: executing program 1 (id=7487): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) 413.348277ms ago: executing program 8 (id=7488): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x800000000) 368.673523ms ago: executing program 1 (id=7501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f00000001c0)) 300.188302ms ago: executing program 1 (id=7493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) 299.852102ms ago: executing program 4 (id=7495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) 265.429536ms ago: executing program 5 (id=7496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 255.364388ms ago: executing program 4 (id=7497): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 222.123042ms ago: executing program 5 (id=7498): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r1) clock_adjtime(0x0, 0x0) 193.106836ms ago: executing program 5 (id=7499): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0xc202}], 0x1, 0x0, 0x0, 0x0) 144.980032ms ago: executing program 5 (id=7500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 98.248808ms ago: executing program 5 (id=7502): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 97.186818ms ago: executing program 8 (id=7503): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1, 0x0, 0x1}, 0x18) syz_io_uring_setup(0x17bc, &(0x7f0000000500)={0x0, 0xa502, 0x2, 0x3, 0x3c7}, &(0x7f0000000580), &(0x7f00000005c0)) 79.24235ms ago: executing program 1 (id=7504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x600) 74.455151ms ago: executing program 5 (id=7505): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="66000000000000000000000000a5"]) 57.775173ms ago: executing program 1 (id=7506): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, r1, 0xc000, 0x973f, 0x81, 0x1}) 0s ago: executing program 8 (id=7507): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88aa973d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15573 comm="syz.2.5434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dd9e8f749 code=0x0 [ 138.583731][ T29] audit: type=1400 audit(1768427209.658:6396): avc: denied { read } for pid=15578 comm="syz.4.5436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.691479][T15597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.698700][T15597] IPv6: NLM_F_CREATE should be set when creating new route [ 138.705940][T15597] IPv6: NLM_F_CREATE should be set when creating new route [ 138.713151][T15597] IPv6: NLM_F_CREATE should be set when creating new route [ 138.738125][T15600] netlink: 'syz.0.5445': attribute type 6 has an invalid length. [ 138.746017][ T29] audit: type=1400 audit(1768427209.799:6397): avc: denied { listen } for pid=15601 comm="syz.5.5446" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.769481][T15600] netlink: 'syz.0.5445': attribute type 6 has an invalid length. [ 138.810426][ T29] audit: type=1326 audit(1768427209.864:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15611 comm="syz.4.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ff5f749 code=0x7ffc0000 [ 138.834215][ T29] audit: type=1326 audit(1768427209.864:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15611 comm="syz.4.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ff5f749 code=0x7ffc0000 [ 138.998520][T15638] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 139.063666][T15652] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 139.333753][T15700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.443553][T15710] loop2: detected capacity change from 0 to 736 [ 139.547365][T15718] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.556178][T15718] vhci_hcd vhci_hcd.2: invalid port number 96 [ 139.562434][T15718] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 139.979408][T15743] __nla_validate_parse: 1 callbacks suppressed [ 139.979425][T15743] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5509'. [ 140.074516][T15752] loop4: detected capacity change from 0 to 256 [ 140.249459][T15770] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5522'. [ 140.270155][T15770] ipvlan2: entered promiscuous mode [ 140.328738][T15781] loop2: detected capacity change from 0 to 1024 [ 140.335978][T15781] EXT4-fs: Ignoring removed nobh option [ 140.341729][T15781] EXT4-fs: inline encryption not supported [ 140.376967][T15781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.395614][T15781] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5527: Allocating blocks 385-513 which overlap fs metadata [ 140.411556][T15780] EXT4-fs (loop2): pa ffff888107694690: logic 16, phys. 129, len 24 [ 140.419589][T15780] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 140.433741][T15790] program syz.4.5528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.485015][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.562492][T15804] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.5537'. [ 140.571731][T15804] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.5537'. [ 140.610058][T15809] loop2: detected capacity change from 0 to 512 [ 140.626085][T15809] EXT4-fs: Ignoring removed i_version option [ 140.635619][T15809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.906036][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.061900][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5546'. [ 141.124480][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.133474][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.254506][T15847] netlink: 182 bytes leftover after parsing attributes in process `syz.1.5555'. [ 141.490167][T15886] loop2: detected capacity change from 0 to 512 [ 141.497064][T15886] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 141.506524][T15886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5574: bg 0: block 255: padding at end of block bitmap is not set [ 141.522213][T15886] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 141.531181][T15886] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5574: invalid indirect mapped block 1 (level 1) [ 141.545914][T15886] EXT4-fs (loop2): 1 truncate cleaned up [ 141.551988][T15886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.577130][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.686466][T15893] netlink: 'syz.2.5577': attribute type 2 has an invalid length. [ 141.695088][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5577'. [ 141.851025][T15911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 141.857571][T15911] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.865845][T15911] vhci_hcd vhci_hcd.0: Device attached [ 141.874281][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5586'. [ 141.889712][T15912] vhci_hcd: connection closed [ 141.889864][ T5147] vhci_hcd vhci_hcd.2: stop threads [ 141.899881][ T5147] vhci_hcd vhci_hcd.2: release socket [ 141.905382][ T5147] vhci_hcd vhci_hcd.2: disconnect device [ 141.916617][T15915] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5587'. [ 141.987329][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5591'. [ 142.105169][T15936] tun0: tun_chr_ioctl cmd 2147767507 [ 142.564970][T15997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.625516][T16007] loop2: detected capacity change from 0 to 512 [ 142.634605][T16007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.652492][T16007] EXT4-fs (loop2): 1 truncate cleaned up [ 142.669728][T16007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.690506][T16007] EXT4-fs (loop2): shut down requested (0) [ 142.700215][T16007] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 142.709480][T16007] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 142.731895][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.806876][T16036] loop4: detected capacity change from 0 to 512 [ 142.871695][T16051] netlink: 'syz.1.5649': attribute type 30 has an invalid length. [ 142.893829][T16051] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 142.908448][T16051] bond1 (unregistering): Released all slaves [ 143.146632][T16071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.204105][T16071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.269133][T16071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.320548][T16071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.331315][T16084] siw: device registration error -23 [ 143.391165][ T5096] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.418863][ T5096] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.427629][ T5096] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.445839][ T5099] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.454276][T16080] loop5: detected capacity change from 0 to 32768 [ 143.510668][T16080] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 143.516706][T16080] loop5: p1 start 460800 is beyond EOD, truncated [ 143.523495][T16080] loop5: p2 size 83886080 extends beyond EOD, truncated [ 143.533728][T16080] loop5: p5 start 460800 is beyond EOD, truncated [ 143.540493][T16080] loop5: p6 size 83886080 extends beyond EOD, truncated [ 143.643540][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 143.643560][ T29] audit: type=1326 audit(1768427214.382:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16116 comm="syz.1.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 143.716445][ T29] audit: type=1326 audit(1768427214.382:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16116 comm="syz.1.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 143.740061][ T29] audit: type=1326 audit(1768427214.382:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16116 comm="syz.1.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 143.763806][ T29] audit: type=1326 audit(1768427214.401:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16116 comm="syz.1.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 143.878958][ T29] audit: type=1400 audit(1768427214.606:6651): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=30036 daddr=10.128.0.164 dest=34408 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 143.905498][ T29] audit: type=1400 audit(1768427214.606:6652): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.919068][T16139] loop2: detected capacity change from 0 to 128 [ 143.930527][ T29] audit: type=1400 audit(1768427214.606:6653): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.049016][ T29] audit: type=1400 audit(1768427214.606:6654): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.075437][ T29] audit: type=1400 audit(1768427214.644:6655): avc: denied { module_request } for pid=16133 comm="syz.1.5688" kmod="crypto-echainiv(authenc(digest_null,cbc(aes)))-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 144.101592][ T29] audit: type=1400 audit(1768427214.663:6656): avc: denied { map_create } for pid=16137 comm="syz.4.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.166396][T16153] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 144.336526][T16182] loop2: detected capacity change from 0 to 512 [ 144.346886][T16182] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 144.376400][T16182] EXT4-fs (loop2): invalid journal inode [ 144.382722][T16182] EXT4-fs (loop2): can't get journal size [ 144.393208][T16187] netlink: 'syz.4.5708': attribute type 6 has an invalid length. [ 144.401019][T16187] netlink: 'syz.4.5708': attribute type 5 has an invalid length. [ 144.412483][T16182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 144.440091][T16182] System zones: 1-12, 13-13 [ 144.453243][T16182] EXT4-fs (loop2): 1 truncate cleaned up [ 144.499062][T16182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.598856][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.858268][T16222] loop2: detected capacity change from 0 to 512 [ 144.886808][T16222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.956555][T16222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.992727][T16222] ext4 filesystem being mounted at /1148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.012593][T16228] random: crng reseeded on system resumption [ 145.052206][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.140235][T16238] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.294437][T16258] loop5: detected capacity change from 0 to 256 [ 145.303969][T16258] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.316063][T16260] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.335511][T16258] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.421416][T16275] __nla_validate_parse: 20 callbacks suppressed [ 145.421432][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5748'. [ 145.496556][T16286] loop2: detected capacity change from 0 to 512 [ 145.512258][T16286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.524882][T16286] ext4 filesystem being mounted at /1156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.548546][T16286] EXT4-fs error (device loop2): ext4_get_first_dir_block:3527: inode #12: comm syz.2.5755: Attempting to read directory block (0) that is past i_size (3) [ 145.594381][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.610831][T16303] loop5: detected capacity change from 0 to 128 [ 145.619738][T16303] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.632670][T16303] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.659998][T13931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.725530][T16317] loop2: detected capacity change from 0 to 764 [ 145.748570][T16317] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.786387][T16317] Symlink component flag not implemented [ 145.794941][T16317] Symlink component flag not implemented (7) [ 145.968908][T16366] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.978807][T16366] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 146.087743][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5803'. [ 146.379106][T16427] EXT4-fs: Ignoring removed oldalloc option [ 146.521250][T16445] team0 (unregistering): Port device team_slave_0 removed [ 146.536348][T16445] team0 (unregistering): Port device team_slave_1 removed [ 146.632800][T16463] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 146.752038][T16494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5853'. [ 146.762064][T16494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.769357][T16494] IPv6: NLM_F_CREATE should be set when creating new route [ 146.772256][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.776785][T16494] IPv6: NLM_F_CREATE should be set when creating new route [ 146.789985][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.806440][T16498] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 146.997147][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5863'. [ 147.103748][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.110996][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.124007][T16528] netlink: 'syz.1.5869': attribute type 2 has an invalid length. [ 147.131925][T16528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5869'. [ 147.141523][T16528] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 147.262447][T16541] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.328548][T16541] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.396951][T16543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5876'. [ 147.409282][T16541] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.488917][T16541] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.679226][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.688118][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.721966][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.730280][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.903941][T16570] Process accounting resumed [ 147.998772][T16582] netlink: 'syz.1.5895': attribute type 13 has an invalid length. [ 148.006791][T16582] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5895'. [ 148.049306][T16582] syz_tun: refused to change device tx_queue_len [ 148.056693][T16582] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 148.209563][T16598] set_capacity_and_notify: 6 callbacks suppressed [ 148.209636][T16598] loop4: detected capacity change from 0 to 512 [ 148.282070][T16602] bond1 (unregistering): Released all slaves [ 148.564036][T16632] loop2: detected capacity change from 0 to 512 [ 148.589890][T16632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.630015][T16632] ext4 filesystem being mounted at /1202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.668971][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.890589][T16661] loop2: detected capacity change from 0 to 128 [ 149.003629][T16669] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.5935'. [ 149.013090][T16669] netlink: zone id is out of range [ 149.018289][T16669] netlink: zone id is out of range [ 149.033318][T16669] netlink: set zone limit has 8 unknown bytes [ 149.145846][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 149.145860][ T29] audit: type=1400 audit(1768427219.536:6990): avc: denied { read } for pid=16674 comm="syz.5.5937" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.177520][ T29] audit: type=1400 audit(1768427219.536:6991): avc: denied { open } for pid=16674 comm="syz.5.5937" path="net:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.200986][ T29] audit: type=1400 audit(1768427219.536:6992): avc: denied { create } for pid=16674 comm="syz.5.5937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.222983][ T29] audit: type=1400 audit(1768427219.611:6993): avc: denied { bind } for pid=16674 comm="syz.5.5937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.266240][ T29] audit: type=1400 audit(1768427219.648:6994): avc: denied { create } for pid=16676 comm="syz.5.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.266854][T16677] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5938'. [ 149.323379][ T29] audit: type=1400 audit(1768427219.648:6995): avc: denied { write } for pid=16676 comm="syz.5.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.343611][ T29] audit: type=1400 audit(1768427219.648:6996): avc: denied { nlmsg_write } for pid=16676 comm="syz.5.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.378716][ T29] audit: type=1326 audit(1768427219.742:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16680 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 149.403093][ T29] audit: type=1326 audit(1768427219.742:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16680 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 149.438529][ T29] audit: type=1326 audit(1768427219.742:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16680 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 149.557750][T16702] macvlan0: entered promiscuous mode [ 149.565925][T16702] syz_tun: entered promiscuous mode [ 149.572374][T16702] hsr1: entered promiscuous mode [ 149.625594][T16709] loop5: detected capacity change from 0 to 1024 [ 149.633868][T16709] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.645420][T16709] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.686530][T16709] JBD2: no valid journal superblock found [ 149.693176][T16709] EXT4-fs (loop5): Could not load journal inode [ 149.704786][T16709] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 149.722638][T16717] bond0 (unregistering): Released all slaves [ 149.926241][T16746] SELinux: failed to load policy [ 150.025667][T16754] loop5: detected capacity change from 0 to 1024 [ 150.055518][T16754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.089002][T16761] bond2 (unregistering): Released all slaves [ 150.108703][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.172480][T16776] vxcan0: tx drop: invalid sa for name 0x0001000000000000 [ 150.325440][T16797] loop4: detected capacity change from 0 to 2048 [ 150.333369][T16797] EXT4-fs: Ignoring removed nobh option [ 150.335419][T16799] loop5: detected capacity change from 0 to 2048 [ 150.367565][T16799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.389068][T16799] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.404030][T16799] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 150.416471][T16799] EXT4-fs (loop5): This should not happen!! Data will be lost [ 150.416471][T16799] [ 150.426151][T16799] EXT4-fs (loop5): Total free blocks count 0 [ 150.432186][T16799] EXT4-fs (loop5): Free/Dirty block details [ 150.438125][T16799] EXT4-fs (loop5): free_blocks=2415919504 [ 150.443878][T16799] EXT4-fs (loop5): dirty_blocks=48 [ 150.448984][T16799] EXT4-fs (loop5): Block reservation details [ 150.455074][T16799] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 150.484586][ T5147] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 150.902257][ T3574] IPVS: starting estimator thread 0... [ 151.014739][T16837] IPVS: using max 2976 ests per chain, 148800 per kthread [ 151.145925][T16865] $Hÿ: left promiscuous mode [ 151.151036][T16865] bond_slave_0: left promiscuous mode [ 151.156679][T16865] bond_slave_1: left promiscuous mode [ 151.177025][T16865] 1ªX¹¦À: left allmulticast mode [ 151.225696][T16865] veth0_to_team: left promiscuous mode [ 151.248208][T16865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.263848][T16865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.276724][T16876] 9p: Bad value for 'rfdno' [ 151.280730][T16865] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 151.310792][T16865] veth3: left promiscuous mode [ 151.321231][T16865] gtp0: left promiscuous mode [ 151.326957][T16865] gtp0: left allmulticast mode [ 151.333428][ T5133] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.342017][ T5133] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.351553][ T5133] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.361377][ T5133] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.439681][T16885] netlink: 'syz.0.6033': attribute type 10 has an invalid length. [ 151.462978][T16885] dummy0: left allmulticast mode [ 151.468622][T16885] dummy0: left promiscuous mode [ 151.473764][T16885] bridge0: port 3(dummy0) entered disabled state [ 151.489200][T16885] team0: Port device dummy0 added [ 151.493829][T16889] netlink: 'syz.0.6033': attribute type 10 has an invalid length. [ 151.520465][T16889] team0: Port device dummy0 removed [ 151.528266][T16889] dummy0: entered promiscuous mode [ 151.537613][T16889] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 151.580366][T16895] netlink: 'syz.5.6038': attribute type 1 has an invalid length. [ 151.588972][T16895] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6038'. [ 151.818849][T16920] loop5: detected capacity change from 0 to 512 [ 151.825470][T16920] EXT4-fs: Ignoring removed oldalloc option [ 151.831470][T16920] EXT4-fs: test_dummy_encryption option not supported [ 152.099761][T16946] loop5: detected capacity change from 0 to 1024 [ 152.108532][T16946] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.6060: bad orphan inode 134217728 [ 152.119844][T16946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.178880][T16949] loop4: detected capacity change from 0 to 1024 [ 152.186645][T16949] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.198803][T16949] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.213232][T16949] JBD2: no valid journal superblock found [ 152.218993][T16949] EXT4-fs (loop4): Could not load journal inode [ 152.240356][T16949] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 152.277403][T16951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.343258][T16951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.388744][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.417734][T16951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.459495][T16955] netlink: 'syz.5.6064': attribute type 13 has an invalid length. [ 152.541050][T16955] bridge0: port 3(dummy0) entered disabled state [ 152.547441][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.554617][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.627270][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.638979][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.737141][T16951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.770124][ T3498] syz1: Port: 1 Link DOWN [ 152.770361][ T5234] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.800529][ T5234] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.809489][ T5234] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.819756][ T5234] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.833570][T16974] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.6074: corrupted in-inode xattr: e_value size too large [ 152.835620][ T5234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.866603][ T5234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.875317][ T5234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.883557][ T5234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.896350][T16974] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6074: couldn't read orphan inode 15 (err -117) [ 152.932436][T16974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.999058][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.017423][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 153.022329][T16984] SELinux: policydb version 0 does not match my version range 15-35 [ 153.022416][T16984] SELinux: failed to load policy [ 153.063142][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6079'. [ 153.063167][T16988] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 153.104832][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6081'. [ 153.154934][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6085'. [ 153.591177][ T3574] delete_channel: no stack [ 153.767335][T17082] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 154.203535][T17101] block device autoloading is deprecated and will be removed. [ 154.533698][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 154.542712][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 154.571239][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 154.571257][ T29] audit: type=1400 audit(1768427224.606:7186): avc: denied { listen } for pid=17132 comm="syz.4.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.597678][ T29] audit: type=1400 audit(1768427224.606:7187): avc: denied { accept } for pid=17132 comm="syz.4.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.630540][T17088] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 154.730760][ T29] audit: type=1326 audit(1768427224.756:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.754862][ T29] audit: type=1326 audit(1768427224.756:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.778518][ T29] audit: type=1326 audit(1768427224.756:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.802018][ T29] audit: type=1326 audit(1768427224.756:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.825955][ T29] audit: type=1326 audit(1768427224.756:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.849678][ T29] audit: type=1326 audit(1768427224.756:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.873269][ T29] audit: type=1326 audit(1768427224.756:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 154.896753][ T29] audit: type=1326 audit(1768427224.756:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17139 comm="syz.5.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 155.045803][T17157] tap0: tun_chr_ioctl cmd 1074025678 [ 155.051139][T17157] tap0: group set to 0 [ 155.124636][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6153'. [ 155.136743][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6154'. [ 155.235854][T17182] netlink: 'syz.1.6159': attribute type 3 has an invalid length. [ 155.247965][T17184] $Hÿ: left promiscuous mode [ 155.252811][T17184] bond_slave_0: left promiscuous mode [ 155.258331][T17184] bond_slave_1: left promiscuous mode [ 155.264184][T17184] dummy0: left promiscuous mode [ 155.298123][T17184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.308582][T17184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.333249][T17193] SELinux: failed to load policy [ 155.345418][T17184] bridge1: left promiscuous mode [ 155.350405][T17184] bridge1: left allmulticast mode [ 155.357604][ T5096] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.366882][ T5096] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.375813][ T5096] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.385742][ T5096] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.495069][T17208] netlink: 'syz.4.6170': attribute type 3 has an invalid length. [ 155.859810][T17240] set_capacity_and_notify: 1 callbacks suppressed [ 155.859827][T17240] loop4: detected capacity change from 0 to 512 [ 155.875187][T17241] netlink: 'syz.5.6184': attribute type 3 has an invalid length. [ 156.300285][T17279] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6202'. [ 156.300405][T17279] 0ªX¹¦À: renamed from caif0 [ 156.315409][T17279] 0ªX¹¦À: entered allmulticast mode [ 156.320966][T17279] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 156.413436][ T3392] IPVS: starting estimator thread 0... [ 156.509742][T17288] IPVS: using max 2736 ests per chain, 136800 per kthread [ 156.553584][T17308] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 156.689524][T17323] loop5: detected capacity change from 0 to 2048 [ 157.023341][T17323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.050973][T17323] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.066412][T17323] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 157.078819][T17323] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.078819][T17323] [ 157.088570][T17323] EXT4-fs (loop5): Total free blocks count 0 [ 157.094598][T17323] EXT4-fs (loop5): Free/Dirty block details [ 157.100709][T17323] EXT4-fs (loop5): free_blocks=2415919104 [ 157.106527][T17323] EXT4-fs (loop5): dirty_blocks=32 [ 157.111703][T17323] EXT4-fs (loop5): Block reservation details [ 157.117762][T17323] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 157.139942][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.175268][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6234'. [ 157.480153][T17357] netlink: 'syz.0.6236': attribute type 13 has an invalid length. [ 157.541475][T17359] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 158.089046][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'. [ 158.167429][T17389] netlink: 'syz.4.6252': attribute type 13 has an invalid length. [ 158.239119][T17389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.250400][T17389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.265504][T17389] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 158.290126][ T5234] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.305797][ T5234] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.314301][ T5234] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.344118][ T5234] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.354294][T17393] loop4: detected capacity change from 0 to 1024 [ 158.449193][T17405] loop5: detected capacity change from 0 to 512 [ 158.456351][T17405] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.490019][T17405] EXT4-fs (loop5): 1 truncate cleaned up [ 158.496403][T17405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.550349][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.601192][T17420] netlink: 'syz.1.6267': attribute type 13 has an invalid length. [ 158.601365][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 158.618800][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 158.627986][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 158.655809][T17403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.669295][T17403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.729258][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 158.738258][T17430] netem: unknown loss type 0 [ 158.742903][T17430] netem: change failed [ 158.755285][T17431] loop0: detected capacity change from 0 to 512 [ 158.771756][T17435] netlink: 'syz.5.6275': attribute type 39 has an invalid length. [ 158.782257][T17437] 9p: Bad value for 'source' [ 158.783556][T17431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.799980][T17431] ext4 filesystem being mounted at /1289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.814437][T17431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6272: bg 0: block 217: padding at end of block bitmap is not set [ 158.829133][T17431] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 158.847929][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.168631][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 165.168647][ T29] audit: type=1400 audit(1768427490.513:7336): avc: denied { mount } for pid=17443 comm="syz.5.6278" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.208541][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6280'. [ 165.217499][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6280'. [ 165.235851][ T29] audit: type=1400 audit(1768427490.531:7337): avc: denied { mounton } for pid=17448 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 165.248502][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6280'. [ 165.257960][ T29] audit: type=1400 audit(1768427490.578:7338): avc: denied { listen } for pid=17453 comm="syz.5.6281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.344723][ T29] audit: type=1400 audit(1768427490.690:7339): avc: denied { watch } for pid=17455 comm="syz.4.6282" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 165.493575][T17448] chnl_net:caif_netlink_parms(): no params data found [ 165.514409][T17482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17482 comm=syz.4.6290 [ 165.533547][ T29] audit: type=1107 audit(1768427490.868:7340): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 165.549076][T17483] netlink: 'syz.1.6291': attribute type 12 has an invalid length. [ 165.598506][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.605627][T17448] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.614176][T17490] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6293'. [ 165.623769][T17490] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6293'. [ 165.633318][T17448] bridge_slave_0: entered allmulticast mode [ 165.641418][T17448] bridge_slave_0: entered promiscuous mode [ 165.648554][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.656587][T17448] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.684598][T17448] bridge_slave_1: entered allmulticast mode [ 165.693316][T17448] bridge_slave_1: entered promiscuous mode [ 165.724337][T17448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.738951][T17448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.775766][T17448] team0: Port device team_slave_0 added [ 165.785388][T17448] team0: Port device team_slave_1 added [ 165.812046][T17448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.819044][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.845498][T17448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.856282][ T29] audit: type=1400 audit(1768427491.168:7341): avc: denied { listen } for pid=17500 comm="syz.0.6299" lport=53793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.878639][ T29] audit: type=1400 audit(1768427491.186:7342): avc: denied { accept } for pid=17500 comm="syz.0.6299" lport=53793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.899911][T17448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.906958][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.933049][T17448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.976131][T17448] hsr_slave_0: entered promiscuous mode [ 165.983529][T17448] hsr_slave_1: entered promiscuous mode [ 165.989844][T17448] debugfs: 'hsr0' already exists in 'hsr' [ 165.995902][T17448] Cannot create hsr debugfs directory [ 166.009709][T17525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6307'. [ 166.019035][T17525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6307'. [ 166.067602][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6310'. [ 166.076599][T17530] netlink: 'syz.1.6310': attribute type 11 has an invalid length. [ 166.084492][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6310'. [ 166.092718][T17448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.105184][T17448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.123931][T17448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.137782][T17448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.171073][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.178277][T17448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.186184][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.193605][T17448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.193742][T17542] loop5: detected capacity change from 0 to 8192 [ 166.213230][T17544] loop4: detected capacity change from 0 to 164 [ 166.222237][T17544] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.232359][T17448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.241572][T17546] syz_tun: entered allmulticast mode [ 166.248433][T17545] syz_tun: left allmulticast mode [ 166.258984][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.268951][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.273944][T17548] loop4: detected capacity change from 0 to 512 [ 166.295536][T17448] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.310751][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.317865][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.352357][T17556] loop5: detected capacity change from 0 to 1024 [ 166.359880][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.366997][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.398147][T17556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.399572][T17448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.433193][ T29] audit: type=1400 audit(1768427491.701:7343): avc: denied { read } for pid=17555 comm="syz.5.6319" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 166.460407][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.511240][T17564] SELinux: failed to load policy [ 166.571332][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.700168][T17594] netlink: 'syz.0.6331': attribute type 13 has an invalid length. [ 166.715974][T17598] loop5: detected capacity change from 0 to 512 [ 166.727025][T17598] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.6333: iget: bad extra_isize 90 (inode size 256) [ 166.740841][T17598] EXT4-fs (loop5): Remounting filesystem read-only [ 166.740992][T17594] gretap0: refused to change device tx_queue_len [ 166.747650][T17598] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 166.763818][T17598] EXT4-fs (loop5): 1 orphan inode deleted [ 166.770140][T17598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.801990][T17594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.818568][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.826652][T17603] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6334'. [ 166.837193][T17603] netlink: zone id is out of range [ 166.842313][T17603] netlink: zone id is out of range [ 166.877101][T17603] netlink: zone id is out of range [ 166.883174][ T29] audit: type=1326 audit(1768427492.131:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.5.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 166.919322][T17448] veth0_vlan: entered promiscuous mode [ 166.929639][T17603] netlink: set zone limit has 8 unknown bytes [ 166.933991][T17448] veth1_vlan: entered promiscuous mode [ 166.950026][ T29] audit: type=1326 audit(1768427492.131:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.5.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f833f749 code=0x7ffc0000 [ 166.989356][T17448] veth0_macvtap: entered promiscuous mode [ 166.997576][T17448] veth1_macvtap: entered promiscuous mode [ 167.011982][T17448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.022734][T17619] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 167.033538][T17448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.048113][ T5099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.067036][ T5099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.085057][ T5099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.107390][ T5099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.126281][T17633] xt_hashlimit: max too large, truncated to 1048576 [ 167.239995][T17657] loop5: detected capacity change from 0 to 512 [ 167.246524][T17652] loop0: detected capacity change from 0 to 2048 [ 167.276703][T17657] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 167.285299][T17657] EXT4-fs (loop5): orphan cleanup on readonly fs [ 167.293134][T17652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.305814][T17657] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.6356: corrupted inode contents [ 167.335122][T17657] EXT4-fs (loop5): Remounting filesystem read-only [ 167.343212][T17657] EXT4-fs (loop5): 1 truncate cleaned up [ 167.349112][ T5147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.360060][ T5147] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.370740][ T5147] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.381230][ T3378] IPVS: starting estimator thread 0... [ 167.381681][T17657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.402578][T17668] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.415238][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.431798][T17657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.478235][T17675] IPVS: using max 2784 ests per chain, 139200 per kthread [ 167.762712][T17717] netlink: 'syz.0.6380': attribute type 7 has an invalid length. [ 168.118229][T17759] atomic_op ffff88810b173128 conn xmit_atomic 0000000000000000 [ 168.256300][T17781] loop6: detected capacity change from 0 to 1024 [ 168.263249][T17781] EXT4-fs: Ignoring removed orlov option [ 168.271180][T17781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.271498][T17783] xt_hashlimit: max too large, truncated to 1048576 [ 168.319617][T17783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.332119][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.451524][T17796] loop6: detected capacity change from 0 to 1024 [ 168.467132][T17796] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.481246][T17796] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 168.489822][T17796] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.497518][T17796] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6419: Invalid inode table block 0 in block_group 0 [ 168.515373][T17796] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.534137][T17803] loop0: detected capacity change from 0 to 1024 [ 168.540690][T17796] EXT4-fs error (device loop6): ext4_quota_write:7375: inode #3: comm syz.6.6419: mark_inode_dirty error [ 168.566315][T17796] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6419: Failed to acquire dquot type 0 [ 168.569091][T17803] EXT4-fs: Ignoring removed bh option [ 168.591929][T17796] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6419: Invalid inode table block 0 in block_group 0 [ 168.606205][T17803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.619195][T17796] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.629267][T17796] EXT4-fs error (device loop6): ext4_ext_truncate:4475: inode #15: comm syz.6.6419: mark_inode_dirty error [ 168.641026][T17796] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6419: Invalid inode table block 0 in block_group 0 [ 168.654111][T17796] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.663957][T17796] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 168.675844][T17796] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.6419: Invalid inode table block 0 in block_group 0 [ 168.688797][T17796] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 168.698347][T17796] EXT4-fs error (device loop6): ext4_truncate:4635: inode #15: comm syz.6.6419: mark_inode_dirty error [ 168.709724][T17796] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 168.719102][T17796] EXT4-fs (loop6): 1 truncate cleaned up [ 168.725397][T17796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.771247][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.782915][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.845164][T17820] xt_hashlimit: max too large, truncated to 1048576 [ 168.857878][T17820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.896182][T17831] netlink: 'syz.5.6433': attribute type 13 has an invalid length. [ 168.943167][T17831] gretap0: refused to change device tx_queue_len [ 168.949691][T17831] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.993944][T17845] random: crng reseeded on system resumption [ 169.039945][T17851] netlink: 'syz.6.6445': attribute type 4 has an invalid length. [ 169.085758][T17851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.202895][T17870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.222467][T17870] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.235823][T17870] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 169.258462][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.446040][ T3574] kernel write not supported for file bpf-prog (pid: 3574 comm: kworker/1:10) [ 169.496788][ T3574] hid_parser_main: 8 callbacks suppressed [ 169.496805][ T3574] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.522912][ T3574] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.765639][T17914] netlink: 'syz.6.6471': attribute type 1 has an invalid length. [ 169.791916][T17916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.832073][T17916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.853424][T17916] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.964145][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.166046][T17942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.174850][T17942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.237029][T17946] Falling back ldisc for ttyS3. [ 170.359728][T17957] x_tables: duplicate underflow at hook 1 [ 170.474595][T17970] macvtap0: entered promiscuous mode [ 170.483591][T17970] macvtap0: left promiscuous mode [ 170.517543][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 170.517558][ T29] audit: type=1400 audit(1768427495.526:7557): avc: denied { relabelfrom } for pid=17974 comm="syz.0.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.550246][ T29] audit: type=1400 audit(1768427495.526:7558): avc: denied { relabelto } for pid=17974 comm="syz.0.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.605529][T17979] __nla_validate_parse: 10 callbacks suppressed [ 170.605612][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6512'. [ 170.624010][T17979] IPVS: Error connecting to the multicast addr [ 170.649339][T17985] C: renamed from team_slave_0 (while UP) [ 170.657271][T17985] netlink: 'syz.6.6504': attribute type 1 has an invalid length. [ 170.665124][T17985] netlink: 'syz.6.6504': attribute type 8 has an invalid length. [ 170.672976][T17985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.696145][ T29] audit: type=1326 audit(1768427495.685:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c880665e7 code=0x7ffc0000 [ 170.740904][T17990] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6506'. [ 170.756628][ T29] audit: type=1326 audit(1768427495.695:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c8800b829 code=0x7ffc0000 [ 170.780099][ T29] audit: type=1326 audit(1768427495.695:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c880665e7 code=0x7ffc0000 [ 170.786884][T17993] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 170.803996][ T29] audit: type=1326 audit(1768427495.695:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c8800b829 code=0x7ffc0000 [ 170.804025][ T29] audit: type=1326 audit(1768427495.695:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8806f749 code=0x7ffc0000 [ 170.804097][ T29] audit: type=1326 audit(1768427495.695:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8806f749 code=0x7ffc0000 [ 170.847069][T17994] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 170.861404][ T29] audit: type=1326 audit(1768427495.695:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8806f749 code=0x7ffc0000 [ 170.910084][T17994] EXT4-fs (loop6): orphan cleanup on readonly fs [ 170.916317][ T29] audit: type=1326 audit(1768427495.695:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17986 comm="syz.0.6505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8806f749 code=0x7ffc0000 [ 170.954250][T17994] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6507: corrupted inode contents [ 170.992166][T17994] EXT4-fs (loop6): Remounting filesystem read-only [ 171.007757][T17994] EXT4-fs (loop6): 1 truncate cleaned up [ 171.013810][ T5096] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.024382][ T5096] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.085994][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6516'. [ 171.088234][ T5096] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.114889][T17994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.132738][T18011] IPVS: Unknown mcast interface: ipvlan1 [ 171.144962][T18013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 171.180998][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.190211][T18013] System zones: 0-1, 3-12 [ 171.196834][T18013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.212934][T18013] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 171.238943][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6523'. [ 171.259646][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.285501][T18033] openvswitch: netlink: Missing key (keys=40, expected=80) [ 171.307955][T18035] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.5.6524: corrupted xattr block 95: invalid header [ 171.324162][T18035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.6524: bg 0: block 7: invalid block bitmap [ 171.336601][T18035] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 171.345685][T18035] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.6524: corrupted xattr block 95: invalid header [ 171.356766][T18040] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.359987][T18035] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 171.380358][T18035] EXT4-fs (loop5): 1 orphan inode deleted [ 171.386691][T18035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.433160][T18040] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.482543][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.501054][T18051] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6535'. [ 171.514899][T18051] 0ªX¹¦À: renamed from 61ªX¹¦À [ 171.533386][T18051] 0ªX¹¦À: entered allmulticast mode [ 171.581596][T18061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.596582][T18063] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.713568][T18082] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6546'. [ 171.726791][T18083] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 171.744849][T18085] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.753282][T18085] vhci_hcd vhci_hcd.2: invalid port number 96 [ 171.759751][T18085] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 171.772237][T18089] xt_hashlimit: max too large, truncated to 1048576 [ 171.789827][T18089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.827019][T18095] set_capacity_and_notify: 7 callbacks suppressed [ 171.827035][T18095] loop5: detected capacity change from 0 to 512 [ 171.851517][T18095] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 171.861662][T18095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.881571][T18095] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.6554: corrupted inode contents [ 171.894461][T18095] EXT4-fs (loop5): Remounting filesystem read-only [ 171.901106][T18095] EXT4-fs (loop5): 1 truncate cleaned up [ 171.912770][ T5097] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.923421][ T5097] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.947087][ T5097] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.958078][T18095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.984475][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.009721][T18113] loop6: detected capacity change from 0 to 512 [ 172.046385][T18113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.075966][T18128] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 172.087516][T18130] netlink: 'syz.1.6568': attribute type 1 has an invalid length. [ 172.105666][T18132] netlink: 'syz.5.6571': attribute type 21 has an invalid length. [ 172.113817][T18132] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6571'. [ 172.115768][T18113] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.122973][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6571'. [ 172.203515][T18113] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 172.222885][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.318699][T18154] 8021q: VLANs not supported on ip6_vti0 [ 172.367639][T18164] raw_sendmsg: syz.0.6585 forgot to set AF_INET. Fix it! [ 172.421085][T18171] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6587'. [ 172.527060][T18182] loop4: detected capacity change from 0 to 512 [ 172.599977][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.607487][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.615476][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.623228][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.630802][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.638285][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.646327][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.653763][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.661299][ T3498] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.717060][ T3498] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.827888][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6603'. [ 173.690195][T18266] loop0: detected capacity change from 0 to 2048 [ 173.824748][T18266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.947263][ T7941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.014257][T18300] syzkaller1: entered promiscuous mode [ 174.019734][T18300] syzkaller1: entered allmulticast mode [ 174.093151][T18304] ªªªªªª: renamed from wg2 (while UP) [ 174.340473][T18305] chnl_net:caif_netlink_parms(): no params data found [ 174.384088][ T5130] bridge_slave_1: left allmulticast mode [ 174.389871][ T5130] bridge_slave_1: left promiscuous mode [ 174.395609][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.415526][ T5130] bridge_slave_0: left allmulticast mode [ 174.421359][ T5130] bridge_slave_0: left promiscuous mode [ 174.427155][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.441192][T18351] loop6: detected capacity change from 0 to 1024 [ 174.447919][T18351] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.466351][T18351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.497300][ T5130] team0: Port device geneve1 removed [ 174.511758][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.530094][T18359] loop6: detected capacity change from 0 to 128 [ 174.546184][ T3498] kernel write not supported for file bpf-prog (pid: 3498 comm: kworker/0:5) [ 174.575342][T18366] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.587622][T18369] loop6: detected capacity change from 0 to 512 [ 174.595371][T18369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 174.604256][ T5130] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.613594][T18369] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #11: block 1: comm syz.6.6675: lblock 0 mapped to illegal pblock 1 (length 1) [ 174.628670][ T5130] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.638922][ T5130] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 174.647271][T18369] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.660938][ T5130] $Hÿ (unregistering): Released all slaves [ 174.680013][T18369] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.6675: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 174.696175][T18369] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.6.6675: ea_inode dec ref err=-117 [ 174.709302][T18369] EXT4-fs (loop6): 1 orphan inode deleted [ 174.715836][T18369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.744487][ T5130] hsr_slave_0: left promiscuous mode [ 174.750689][ T5130] hsr_slave_1: left promiscuous mode [ 174.750918][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.756354][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.772881][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.808644][ T5130] team0 (unregistering): Port device team_slave_1 removed [ 174.818895][ T5130] team0 (unregistering): Port device team_slave_0 removed [ 174.865204][T18305] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.872351][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.883009][T18305] bridge_slave_0: entered allmulticast mode [ 174.889378][T18305] bridge_slave_0: entered promiscuous mode [ 174.898507][T18387] bridge0: entered promiscuous mode [ 174.905102][T18387] bridge0: port 3(macvtap1) entered blocking state [ 174.911719][T18387] bridge0: port 3(macvtap1) entered disabled state [ 174.921939][T18387] macvtap1: entered allmulticast mode [ 174.927307][T18387] bridge0: entered allmulticast mode [ 174.932956][T18387] macvtap1: left allmulticast mode [ 174.938050][T18387] bridge0: left allmulticast mode [ 174.944097][T18387] bridge0: left promiscuous mode [ 174.952507][T18391] netlink: 'syz.1.6683': attribute type 2 has an invalid length. [ 174.960816][T18305] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.967920][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.975527][T18305] bridge_slave_1: entered allmulticast mode [ 174.982010][T18305] bridge_slave_1: entered promiscuous mode [ 175.003638][T18305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.014373][T18305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.054037][T18305] team0: Port device team_slave_0 added [ 175.061401][T18305] team0: Port device team_slave_1 added [ 175.084508][T18305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.091593][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.117858][T18305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.131339][T18305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.138620][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.164734][T18305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.206892][T18305] hsr_slave_0: entered promiscuous mode [ 175.214624][T18305] hsr_slave_1: entered promiscuous mode [ 175.222021][T18305] debugfs: 'hsr0' already exists in 'hsr' [ 175.227935][T18305] Cannot create hsr debugfs directory [ 175.311649][T18305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.321070][T18305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.330195][T18305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.340891][T18305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.388560][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.403837][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.423924][T18305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.434414][T18305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.450300][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.457438][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.475344][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.482448][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.550641][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.686613][T18305] veth0_vlan: entered promiscuous mode [ 175.698323][T18305] veth1_vlan: entered promiscuous mode [ 175.715950][T18305] veth0_macvtap: entered promiscuous mode [ 175.724206][T18305] veth1_macvtap: entered promiscuous mode [ 175.736663][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.754188][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.765745][ T5234] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.775107][ T5234] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.797722][ T5234] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.808265][ T5234] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.938495][T18465] SELinux: syz.4.6704 (18465) set checkreqprot to 1. This is no longer supported. [ 175.938607][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 175.938653][ T29] audit: type=1400 audit(1768427500.596:7678): avc: denied { setcheckreqprot } for pid=18464 comm="syz.4.6704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.078542][ T29] audit: type=1326 audit(1768427500.727:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.102679][ T29] audit: type=1326 audit(1768427500.727:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.126438][ T29] audit: type=1326 audit(1768427500.727:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.150083][ T29] audit: type=1326 audit(1768427500.727:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.173774][ T29] audit: type=1326 audit(1768427500.727:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.197492][ T29] audit: type=1326 audit(1768427500.727:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.221017][ T29] audit: type=1326 audit(1768427500.727:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.244699][ T29] audit: type=1326 audit(1768427500.727:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.280442][ T29] audit: type=1326 audit(1768427500.746:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.6.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbe01f749 code=0x7ffc0000 [ 176.557857][T18516] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 176.568416][T18516] bond2 (unregistering): Released all slaves [ 176.572721][T18519] loop5: detected capacity change from 0 to 512 [ 176.582941][T18519] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 176.591253][T18519] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.6727: iget: bad i_size value: 12154757448730 [ 176.604377][T18519] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6727: couldn't read orphan inode 13 (err -117) [ 176.616913][T18519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.637715][T18519] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.657100][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.713864][ T3498] hid_parser_main: 23 callbacks suppressed [ 176.713885][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.727675][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.735421][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.743429][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.751483][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.751519][T18531] __nla_validate_parse: 3 callbacks suppressed [ 176.751532][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6732'. [ 176.759304][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.782123][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x1 [ 176.789943][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.797820][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.805595][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: unknown main item tag 0x0 [ 176.816504][T18533] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 176.834573][T18535] loop4: detected capacity change from 0 to 512 [ 176.838039][T18537] netlink: 'syz.7.6735': attribute type 1 has an invalid length. [ 176.851579][ T3498] hid-generic 0000:0000:FFFFFFFC.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 176.860437][T18537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.902147][T18544] loop7: detected capacity change from 0 to 128 [ 176.941075][T18549] netlink: 792 bytes leftover after parsing attributes in process `syz.1.6741'. [ 176.951752][T18549] netlink: 792 bytes leftover after parsing attributes in process `syz.1.6741'. [ 176.960956][T18549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6741'. [ 176.978881][T18551] EXT4-fs: inline encryption not supported [ 176.992605][T18552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 177.002500][T18552] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.021455][T18552] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 177.030219][ T5126] bio_check_eod: 219 callbacks suppressed [ 177.030365][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.030365][ T5126] loop7: rw=1, sector=145, nr_sectors = 32 limit=128 [ 177.035446][T18552] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 177.037916][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.037916][ T5126] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 177.050780][T18552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.070484][T18551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.097815][T18557] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 177.112003][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.112003][ T5126] loop7: rw=1, sector=201, nr_sectors = 24 limit=128 [ 177.112703][T18551] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 177.132541][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.132541][ T5126] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 177.154435][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.154435][ T5126] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 177.168362][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.168362][ T5126] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 177.170949][T18551] EXT4-fs (loop5): Remounting filesystem read-only [ 177.182307][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.182307][ T5126] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 177.202538][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.202538][ T5126] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 177.207439][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.216409][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.216409][ T5126] loop7: rw=1, sector=313, nr_sectors = 8 limit=128 [ 177.238704][ T5126] kworker/u8:44: attempt to access beyond end of device [ 177.238704][ T5126] loop7: rw=1, sector=329, nr_sectors = 8 limit=128 [ 177.246798][T18559] SELinux: Context system_u:object is not valid (left unmapped). [ 177.346768][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.474647][T18590] set_capacity_and_notify: 2 callbacks suppressed [ 177.474661][T18590] loop7: detected capacity change from 0 to 512 [ 177.495122][T18590] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.6758: inode has both inline data and extents flags [ 177.510452][T18590] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6758: couldn't read orphan inode 15 (err -117) [ 177.523273][T18590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.558401][T18305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.933266][T18618] loop6: detected capacity change from 0 to 1024 [ 177.940169][T18618] EXT4-fs: Ignoring removed bh option [ 177.945619][T18618] EXT4-fs: inline encryption not supported [ 177.951781][T18618] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.962683][T18618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 177.971566][T18618] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.6769: lblock 2 mapped to illegal pblock 2 (length 1) [ 177.985863][T18618] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.6769: lblock 0 mapped to illegal pblock 48 (length 1) [ 178.000944][T18618] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6769: Failed to acquire dquot type 0 [ 178.012569][T18618] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 178.022243][T18618] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.6769: mark_inode_dirty error [ 178.033715][T18618] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 178.044018][T18618] EXT4-fs (loop6): 1 orphan inode deleted [ 178.050340][T18618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.063016][ T5130] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.078456][ T5130] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:48: Failed to release dquot type 0 [ 178.103768][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.113204][T17448] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 178.126288][T17448] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 178.135887][T17448] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 178.214056][T18621] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.226637][T18621] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 178.237257][T18621] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 178.299374][T18629] Cannot find add_set index 0 as target [ 178.332873][T18636] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 178.411826][T18650] bridge0: port 3(macvtap1) entered blocking state [ 178.418585][T18650] bridge0: port 3(macvtap1) entered disabled state [ 178.425823][T18650] macvtap1: entered allmulticast mode [ 178.431401][T18650] bridge0: entered allmulticast mode [ 178.437583][T18650] macvtap1: left allmulticast mode [ 178.442860][T18650] bridge0: left allmulticast mode [ 178.734726][T18675] netlink: 'syz.7.6795': attribute type 21 has an invalid length. [ 178.837646][T18677] SELinux: failed to load policy [ 178.938948][T18675] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6795'. [ 178.948072][T18675] netlink: 'syz.7.6795': attribute type 1 has an invalid length. [ 179.016041][T18688] loop7: detected capacity change from 0 to 1024 [ 179.026088][T18688] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 179.043268][T18688] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.058253][T18688] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 179.077651][T18688] EXT4-fs (loop7): orphan cleanup on readonly fs [ 179.085808][T18688] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.6801: Inode bitmap for bg 0 marked uninitialized [ 179.099849][T18688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.101172][T18701] tipc: Started in network mode [ 179.117712][T18701] tipc: Node identity 4, cluster identity 4711 [ 179.123974][T18701] tipc: Node number set to 4 [ 179.129018][T18688] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 179.169265][T18305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.194978][T18708] net_ratelimit: 2 callbacks suppressed [ 179.194994][T18708] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 179.225827][T18713] netlink: 'syz.1.6814': attribute type 1 has an invalid length. [ 179.233808][T18713] netlink: 'syz.1.6814': attribute type 2 has an invalid length. [ 179.243457][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6814'. [ 179.354907][T18739] ALSA: seq fatal error: cannot create timer (-19) [ 179.473664][T18751] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 179.481269][T18751] SELinux: failed to load policy [ 179.857439][ T3522] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 180.067794][T18815] Process accounting paused [ 180.117242][T18831] binfmt_misc: register: failed to install interpreter file ./file0 [ 180.163065][ T1572] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.184141][T18844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18844 comm=syz.1.6877 [ 180.217638][ T1572] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.279223][ T1572] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.308255][T18865] loop4: detected capacity change from 0 to 256 [ 180.321860][T18867] macvtap1: entered promiscuous mode [ 180.327362][T18867] bridge0: entered promiscuous mode [ 180.332910][T18867] macvtap1: entered allmulticast mode [ 180.338291][T18867] bridge0: entered allmulticast mode [ 180.344045][T18867] bridge0: port 3(macvtap1) entered blocking state [ 180.350680][T18867] bridge0: port 3(macvtap1) entered disabled state [ 180.358022][T18867] bridge0: left allmulticast mode [ 180.363106][T18867] bridge0: left promiscuous mode [ 180.374640][ T1572] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.487427][T18885] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 180.522902][ T1572] bridge_slave_1: left allmulticast mode [ 180.528573][ T1572] bridge_slave_1: left promiscuous mode [ 180.534424][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.546764][ T1572] bridge_slave_0: left allmulticast mode [ 180.552484][ T1572] bridge_slave_0: left promiscuous mode [ 180.558374][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.635304][T18899] loop4: detected capacity change from 0 to 512 [ 180.699358][ T1572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.712565][ T1572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.731186][ T1572] bond0 (unregistering): Released all slaves [ 180.744799][ T1572] bond1 (unregistering): Released all slaves [ 180.790107][ T1572] hsr_slave_0: left promiscuous mode [ 180.803980][ T1572] hsr_slave_1: left promiscuous mode [ 180.819155][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.823948][T18911] netlink: 'syz.4.6903': attribute type 29 has an invalid length. [ 180.826720][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.843983][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.851389][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.861869][ T1572] veth1_macvtap: left promiscuous mode [ 180.925143][ T1572] veth0_macvtap: left promiscuous mode [ 180.937573][ T1572] veth1_vlan: left promiscuous mode [ 180.960600][ T1572] veth0_vlan: left promiscuous mode [ 181.016111][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6906'. [ 181.341630][T18935] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 181.351514][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 181.351569][ T29] audit: type=1400 audit(1768427505.657:7815): avc: denied { relabelto } for pid=18934 comm="syz.1.6914" name="file0" dev="tmpfs" ino=7636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 181.384312][ T29] audit: type=1400 audit(1768427505.657:7816): avc: denied { associate } for pid=18934 comm="syz.1.6914" name="file0" dev="tmpfs" ino=7636 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0" [ 181.489058][T18939] sd 0:0:1:0: device reset [ 181.496230][ T29] audit: type=1400 audit(1768427505.797:7817): avc: denied { block_suspend } for pid=18940 comm="syz.4.6916" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.520520][T18943] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6917'. [ 181.529611][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6917'. [ 181.551077][ T29] audit: type=1400 audit(1768427505.835:7818): avc: denied { module_load } for pid=18940 comm="syz.4.6916" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 181.575872][ T1572] team0 (unregistering): Port device team_slave_1 removed [ 181.585648][ T1572] team0 (unregistering): Port device team_slave_0 removed [ 181.633707][T18945] bridge0: entered promiscuous mode [ 181.639299][T18945] macvtap1: entered promiscuous mode [ 181.644805][T18945] macvtap1: entered allmulticast mode [ 181.650269][T18945] bridge0: entered allmulticast mode [ 181.657553][T18945] bridge0: port 3(macvtap1) entered blocking state [ 181.664120][T18945] bridge0: port 3(macvtap1) entered disabled state [ 181.672311][T18945] bridge0: left allmulticast mode [ 181.677505][T18945] bridge0: left promiscuous mode [ 181.695145][T18858] chnl_net:caif_netlink_parms(): no params data found [ 181.724767][T18957] program syz.1.6932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.769322][T18963] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6924'. [ 181.788617][T18963] 0ªX¹¦À: renamed from caif0 [ 181.795381][T18963] 0ªX¹¦À: entered allmulticast mode [ 181.800685][T18963] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 181.827978][T18858] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.835253][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.844795][T18858] bridge_slave_0: entered allmulticast mode [ 181.851766][T18858] bridge_slave_0: entered promiscuous mode [ 181.868237][T18858] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.875306][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.884453][T18858] bridge_slave_1: entered allmulticast mode [ 181.891129][T18858] bridge_slave_1: entered promiscuous mode [ 181.923443][T18858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.936291][T18858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.958422][T18858] team0: Port device team_slave_0 added [ 181.964217][ T29] audit: type=1326 audit(1768427506.237:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18974 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 181.975812][T18858] team0: Port device team_slave_1 added [ 181.988003][ T29] audit: type=1326 audit(1768427506.256:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18974 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 182.019487][ T29] audit: type=1400 audit(1768427506.284:7821): avc: denied { getattr } for pid=18974 comm="syz.1.6928" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 182.042083][ T29] audit: type=1326 audit(1768427506.284:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18974 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 182.065632][ T29] audit: type=1326 audit(1768427506.284:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18974 comm="syz.1.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9cb7df749 code=0x7ffc0000 [ 182.097159][T18858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.104235][T18858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.130192][T18858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.141707][T18858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.148893][T18858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.175850][T18858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.195920][ T29] audit: type=1400 audit(1768427506.443:7824): avc: denied { firmware_load } for pid=18982 comm="syz.1.6934" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 182.229798][T18858] hsr_slave_0: entered promiscuous mode [ 182.236056][T18858] hsr_slave_1: entered promiscuous mode [ 182.242380][T18858] debugfs: 'hsr0' already exists in 'hsr' [ 182.248189][T18858] Cannot create hsr debugfs directory [ 182.320116][T18858] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 182.329637][T18858] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 182.343169][T18858] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 182.344120][T18992] loop6: detected capacity change from 0 to 512 [ 182.360361][T18992] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.6937: error while reading EA inode 32 err=-116 [ 182.361106][T18858] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 182.379562][T18992] EXT4-fs (loop6): Remounting filesystem read-only [ 182.386292][T18992] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 182.399311][T18992] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 182.413363][T18992] EXT4-fs (loop6): 1 orphan inode deleted [ 182.419866][T18992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.432740][T18992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.508615][T18858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.542052][T18858] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.561819][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.568976][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.602894][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.610316][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.618050][T19029] netlink: 'syz.6.6952': attribute type 6 has an invalid length. [ 182.644930][T18858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.655439][T18858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.680175][T19033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6954'. [ 182.689252][T19033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6954'. [ 182.729067][T19041] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6957'. [ 182.744480][T19041] 0ªX¹¦À: renamed from caif0 [ 182.751031][T19041] 0ªX¹¦À: entered allmulticast mode [ 182.756315][T19041] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.794117][T18858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.917316][T18858] veth0_vlan: entered promiscuous mode [ 182.933528][T18858] veth1_vlan: entered promiscuous mode [ 182.955772][T18858] veth0_macvtap: entered promiscuous mode [ 182.971032][T18858] veth1_macvtap: entered promiscuous mode [ 182.993133][T18858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.023370][T18858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.048283][ T946] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.077037][ T946] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.108136][ T946] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.193926][ T946] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.231743][T19080] loop8: detected capacity change from 0 to 512 [ 183.318329][T19088] team_slave_0: entered promiscuous mode [ 183.324029][T19088] team_slave_1: entered promiscuous mode [ 183.331613][T19088] macvtap1: entered promiscuous mode [ 183.337150][T19088] team0: entered promiscuous mode [ 183.352349][T19088] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 183.359747][T19088] team0: Device macvtap1 is already an upper device of the team interface [ 183.372758][T19088] team0: left promiscuous mode [ 183.377942][T19088] team_slave_0: left promiscuous mode [ 183.383384][T19088] team_slave_1: left promiscuous mode [ 183.476912][T19102] loop4: detected capacity change from 0 to 512 [ 183.504643][T19107] netlink: 'syz.5.6977': attribute type 15 has an invalid length. [ 183.615044][T19121] loop4: detected capacity change from 0 to 512 [ 183.806223][T19141] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6994'. [ 183.875903][T19152] loop5: detected capacity change from 0 to 128 [ 183.899825][T19152] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.920604][T19152] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.963128][ T1572] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.001064][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7001'. [ 184.379392][T19182] loop4: detected capacity change from 0 to 1024 [ 184.386613][T19182] EXT4-fs: dax option not supported [ 184.454638][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7015'. [ 184.463572][T19189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7015'. [ 184.485136][T19189] bridge1: entered promiscuous mode [ 184.490465][T19189] bridge1: entered allmulticast mode [ 184.774942][T19211] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7026'. [ 185.025043][T19220] netlink: 'syz.4.7030': attribute type 6 has an invalid length. [ 185.039258][T19240] loop6: detected capacity change from 0 to 512 [ 185.046386][T19240] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.074312][T19240] EXT4-fs (loop6): 1 truncate cleaned up [ 185.086106][T19240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.174166][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7046'. [ 185.183343][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7046'. [ 185.212973][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.479083][T19288] loop4: detected capacity change from 0 to 512 [ 185.777880][T19324] loop8: detected capacity change from 0 to 1024 [ 185.784722][T19324] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.796729][T19324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.817508][T19324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.841150][T19332] pim6reg1: entered promiscuous mode [ 185.846647][T19332] pim6reg1: entered allmulticast mode [ 185.937758][T19343] netlink: 'syz.5.7083': attribute type 29 has an invalid length. [ 185.983428][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.000472][T19349] macvtap1: entered promiscuous mode [ 186.005870][T19349] team0: entered promiscuous mode [ 186.010914][T19349] team_slave_0: entered promiscuous mode [ 186.016664][T19349] team_slave_1: entered promiscuous mode [ 186.022364][T19349] geneve1: entered promiscuous mode [ 186.029126][T19349] dummy0: entered promiscuous mode [ 186.035438][T19349] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.042907][T19349] team0: Device macvtap1 is already an upper device of the team interface [ 186.052317][T19352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19352 comm=syz.6.7088 [ 186.065566][T19349] team0: left promiscuous mode [ 186.070410][T19349] team_slave_0: left promiscuous mode [ 186.075917][T19349] team_slave_1: left promiscuous mode [ 186.081475][T19349] geneve1: left promiscuous mode [ 186.086647][T19349] dummy0: left promiscuous mode [ 186.210522][T19374] sctp: [Deprecated]: syz.1.7097 (pid 19374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.210522][T19374] Use struct sctp_sack_info instead [ 186.704637][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 186.704684][ T29] audit: type=1326 audit(1768427510.671:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.710974][ T29] audit: type=1326 audit(1768427510.671:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.711081][ T29] audit: type=1326 audit(1768427510.680:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.712219][ T29] audit: type=1326 audit(1768427510.680:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.713425][ T29] audit: type=1326 audit(1768427510.680:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.715492][ T29] audit: type=1326 audit(1768427510.680:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.715811][ T29] audit: type=1326 audit(1768427510.680:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.717039][ T29] audit: type=1326 audit(1768427510.680:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.718524][ T29] audit: type=1326 audit(1768427510.680:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 186.720266][ T29] audit: type=1326 audit(1768427510.680:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.5.7092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f8372005 code=0x7ffc0000 [ 187.132698][T19457] loop6: detected capacity change from 0 to 1024 [ 187.158474][T19457] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.173611][T19457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.258676][T19473] netlink: 'syz.8.7144': attribute type 3 has an invalid length. [ 187.279918][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.319491][T19483] SELinux: failed to load policy [ 187.402333][T19499] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 187.416381][T19501] netlink: 'syz.6.7157': attribute type 1 has an invalid length. [ 187.424142][T19501] netlink: 'syz.6.7157': attribute type 2 has an invalid length. [ 187.532864][T19517] loop8: detected capacity change from 0 to 1024 [ 187.553842][T19517] EXT4-fs: Ignoring removed orlov option [ 187.583136][T19517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.606861][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.729873][T19545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.775377][T19551] macvtap1: entered promiscuous mode [ 187.780840][T19551] team0: entered promiscuous mode [ 187.785927][T19551] team_slave_0: entered promiscuous mode [ 187.788367][T19545] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.791806][T19551] team_slave_1: entered promiscuous mode [ 187.830040][T19551] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 187.837981][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.847719][T19551] team0: Device macvtap1 is already an upper device of the team interface [ 187.877321][T19551] team0: left promiscuous mode [ 187.882118][T19551] team_slave_0: left promiscuous mode [ 187.887741][T19551] team_slave_1: left promiscuous mode [ 187.985758][T19575] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 187.988138][T19573] pim6reg: entered allmulticast mode [ 188.004889][T19573] pim6reg: left allmulticast mode [ 188.011313][T19575] EXT4-fs (loop8): 1 orphan inode deleted [ 188.017191][T19575] EXT4-fs (loop8): 1 truncate cleaned up [ 188.023542][T19575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.041672][T19580] __nla_validate_parse: 6 callbacks suppressed [ 188.041690][T19580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7193'. [ 188.058319][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.084004][T19585] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.090965][T19585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.102089][T19585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.137043][T19590] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 188.187945][T19590] EXT4-fs (loop8): 1 truncate cleaned up [ 188.194214][T19590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.240437][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.267015][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.335680][T19614] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 188.349585][T19606] SELinux: failed to load policy [ 188.367207][T19612] netlink: 'syz.4.7206': attribute type 3 has an invalid length. [ 188.453617][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7218'. [ 188.478680][T19643] netlink: 'syz.5.7219': attribute type 1 has an invalid length. [ 188.486586][T19643] netlink: 'syz.5.7219': attribute type 2 has an invalid length. [ 188.580529][T19659] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.595667][T19659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.610224][T19664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19664 comm=syz.5.7228 [ 188.622907][T19664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19664 comm=syz.5.7228 [ 188.639733][T19665] atomic_op ffff88811a2b8528 conn xmit_atomic 0000000000000000 [ 188.656784][T18858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.678435][T19668] set_capacity_and_notify: 6 callbacks suppressed [ 188.678446][T19668] loop5: detected capacity change from 0 to 512 [ 188.701191][T19668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.714555][T19668] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.744061][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.744081][T19677] netlink: 'syz.4.7234': attribute type 1 has an invalid length. [ 188.753178][T19677] netlink: 'syz.4.7234': attribute type 2 has an invalid length. [ 188.783881][T19679] loop4: detected capacity change from 0 to 1024 [ 188.791121][T19679] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.876901][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7240'. [ 188.907123][T19692] loop5: detected capacity change from 0 to 1024 [ 188.914527][T19692] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.931212][T19692] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 188.939755][T19692] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.947813][T19692] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7241: Failed to acquire dquot type 0 [ 188.960187][T19692] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7241: Failed to acquire dquot type 0 [ 188.971782][T19692] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.7241: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.985692][T19692] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7241: Failed to acquire dquot type 0 [ 188.997382][T19692] EXT4-fs (loop5): 1 orphan inode deleted [ 189.003668][T19692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.030198][T13931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.048825][T19702] dvmrp1: entered allmulticast mode [ 189.056174][T19702] dvmrp1: left allmulticast mode [ 189.197316][T19708] loop4: detected capacity change from 0 to 128 [ 189.263679][T19724] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7254'. [ 189.349890][T19742] loop5: detected capacity change from 0 to 128 [ 189.357320][T19740] loop6: detected capacity change from 0 to 512 [ 189.376409][T19740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.408673][T19740] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.470139][T19758] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7270'. [ 189.492710][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.622880][T19774] loop6: detected capacity change from 0 to 1024 [ 189.658661][T19774] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.672954][T19774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.706857][T19774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.844138][T19804] SELinux: failed to load policy [ 189.872742][T17448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.935929][T19820] syzkaller1: entered promiscuous mode [ 189.941414][T19820] syzkaller1: entered allmulticast mode [ 189.976839][T19822] loop6: detected capacity change from 0 to 8192 [ 190.094192][T19838] SELinux: failed to load policy [ 190.105513][T19846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.167241][T19859] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.342792][T19898] loop5: detected capacity change from 0 to 1024 [ 190.351941][T19898] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.362950][T19898] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 190.378278][T19898] JBD2: no valid journal superblock found [ 190.384018][T19898] EXT4-fs (loop5): Could not load journal inode [ 190.393807][T19898] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 190.678786][T19960] validate_nla: 2 callbacks suppressed [ 190.678804][T19960] netlink: 'syz.8.7359': attribute type 3 has an invalid length. [ 190.954046][T19969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=19969 comm=syz.6.7364 [ 191.136185][T19978] netlink: 'syz.6.7369': attribute type 6 has an invalid length. [ 191.231217][T19990] loop8: detected capacity change from 0 to 2048 [ 191.233860][T19990] EXT4-fs: Ignoring removed bh option [ 191.260641][T19990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.264368][T19990] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.275529][T19990] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 191.300909][T19990] EXT4-fs (loop8): This should not happen!! Data will be lost [ 191.300909][T19990] [ 191.310603][T19990] EXT4-fs (loop8): Total free blocks count 0 [ 191.316578][T19990] EXT4-fs (loop8): Free/Dirty block details [ 191.316592][T19990] EXT4-fs (loop8): free_blocks=2415919104 [ 191.316612][T19990] EXT4-fs (loop8): dirty_blocks=32 [ 191.316626][T19990] EXT4-fs (loop8): Block reservation details [ 191.316674][T19990] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 191.383798][ T946] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.437570][T20006] netlink: 'syz.8.7378': attribute type 5 has an invalid length. [ 191.496265][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7386'. [ 191.617679][T20039] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7396'. [ 191.666665][T20046] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 191.748256][T20061] openvswitch: netlink: Missing key (keys=40, expected=80) [ 191.762443][T20064] netlink: 'syz.1.7407': attribute type 21 has an invalid length. [ 191.874277][T20082] netlink: 'syz.8.7416': attribute type 1 has an invalid length. [ 191.909747][T20084] EXT4-fs: Ignoring removed nobh option [ 191.928696][T20084] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 191.940609][T20084] EXT4-fs (loop8): 1 truncate cleaned up [ 192.060079][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 192.060100][ T29] audit: type=1400 audit(1768427515.675:9031): avc: denied { write } for pid=20095 comm="syz.4.7422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.073652][ T29] audit: type=1326 audit(1768427515.694:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.8.7423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.157304][ T29] audit: type=1326 audit(1768427515.731:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.8.7423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.157334][ T29] audit: type=1326 audit(1768427515.731:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.8.7423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.157403][ T29] audit: type=1326 audit(1768427515.731:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.8.7423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.157425][ T29] audit: type=1326 audit(1768427515.731:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.8.7423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.287797][T20114] openvswitch: netlink: Missing key (keys=40, expected=80) [ 192.309370][ T29] audit: type=1326 audit(1768427515.909:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20115 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.346212][T20120] netlink: 'syz.1.7432': attribute type 1 has an invalid length. [ 192.354034][T20120] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7432'. [ 192.356224][ T29] audit: type=1326 audit(1768427515.909:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20115 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.386708][ T29] audit: type=1326 audit(1768427515.909:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20115 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.410313][ T29] audit: type=1326 audit(1768427515.909:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20115 comm="syz.8.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5839f749 code=0x7ffc0000 [ 192.508356][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7439'. [ 192.517503][T20135] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 193.372166][T20151] GUP no longer grows the stack in syz.1.7445 (20151): 200000004000-200000008000 (200000002000) [ 193.382679][T20151] CPU: 0 UID: 0 PID: 20151 Comm: syz.1.7445 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.382719][T20151] Tainted: [W]=WARN [ 193.382778][T20151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.382791][T20151] Call Trace: [ 193.382798][T20151] [ 193.382805][T20151] __dump_stack+0x1d/0x30 [ 193.382831][T20151] dump_stack_lvl+0x95/0xd0 [ 193.382852][T20151] dump_stack+0x15/0x1b [ 193.382873][T20151] __get_user_pages+0x1979/0x1ed0 [ 193.382909][T20151] ? __rcu_read_unlock+0x4f/0x70 [ 193.382949][T20151] get_user_pages_remote+0x1d5/0x6c0 [ 193.383016][T20151] __access_remote_vm+0x15c/0x590 [ 193.383048][T20151] access_remote_vm+0x32/0x40 [ 193.383121][T20151] proc_pid_cmdline_read+0x32b/0x6c0 [ 193.383146][T20151] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 193.383205][T20151] vfs_readv+0x3fb/0x690 [ 193.383274][T20151] __x64_sys_preadv+0xfd/0x1c0 [ 193.383294][T20151] x64_sys_call+0x2805/0x3000 [ 193.383337][T20151] do_syscall_64+0xca/0x2b0 [ 193.383368][T20151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.383438][T20151] RIP: 0033:0x7fe9cb7df749 [ 193.383452][T20151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.383500][T20151] RSP: 002b:00007fe9ca23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 193.383517][T20151] RAX: ffffffffffffffda RBX: 00007fe9cba35fa0 RCX: 00007fe9cb7df749 [ 193.383528][T20151] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 193.383554][T20151] RBP: 00007fe9cb863f91 R08: 0000000000000007 R09: 0000000000000000 [ 193.383636][T20151] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 193.383647][T20151] R13: 00007fe9cba36038 R14: 00007fe9cba35fa0 R15: 00007ffee834ca28 [ 193.383663][T20151] [ 193.385475][T20153] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7447'. [ 193.656676][T20177] SELinux: failed to load policy [ 193.707577][T20179] netlink: 'syz.6.7458': attribute type 1 has an invalid length. [ 193.764009][T20187] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 193.764009][T20187] program syz.6.7462 not setting count and/or reply_len properly [ 193.838044][T20195] geneve2: entered promiscuous mode [ 193.844240][T20195] team0: Device geneve2 is up. Set it down before adding it as a team port [ 194.000751][T20207] EXT4-fs: Ignoring removed bh option [ 194.017784][T20207] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.064829][T20207] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 194.064931][T20207] EXT4-fs (loop5): This should not happen!! Data will be lost [ 194.064931][T20207] [ 194.064946][T20207] EXT4-fs (loop5): Total free blocks count 0 [ 194.064957][T20207] EXT4-fs (loop5): Free/Dirty block details [ 194.065001][T20207] EXT4-fs (loop5): free_blocks=2415919104 [ 194.065102][T20207] EXT4-fs (loop5): dirty_blocks=32 [ 194.065114][T20207] EXT4-fs (loop5): Block reservation details [ 194.065184][T20207] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 194.140045][ T5142] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.140076][ T5142] EXT4-fs (loop5): This should not happen!! Data will be lost [ 194.140076][ T5142] [ 194.174162][T20225] netlink: 'syz.5.7480': attribute type 29 has an invalid length. [ 194.356107][T20256] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7494'. [ 194.358751][T20254] SELinux: Context @ is not valid (left unmapped). [ 194.798976][T20299] set_capacity_and_notify: 4 callbacks suppressed [ 194.798994][T20299] loop5: detected capacity change from 0 to 4096 [ 194.856538][T13931] ================================================================== [ 194.864736][T13931] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 194.872128][T13931] [ 194.874450][T13931] read-write to 0xffff88811ae5a6c0 of 8 bytes by interrupt on cpu 0: [ 194.882506][T13931] __xa_clear_mark+0xf5/0x1e0 [ 194.887174][T13931] __folio_end_writeback+0xf4/0x360 [ 194.892384][T13931] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 194.898638][T13931] folio_end_writeback+0x1c/0x70 [ 194.903590][T13931] end_buffer_async_write+0x156/0x1f0 [ 194.908976][T13931] end_bio_bh_io_sync+0x79/0xa0 [ 194.913849][T13931] bio_endio+0x37e/0x420 [ 194.918101][T13931] blk_update_request+0x336/0x730 [ 194.923154][T13931] blk_mq_end_request+0x26/0x50 [ 194.928031][T13931] lo_complete_rq+0x98/0x140 [ 194.932625][T13931] blk_done_softirq+0x77/0xb0 [ 194.937315][T13931] handle_softirqs+0xba/0x290 [ 194.942001][T13931] run_ksoftirqd+0x1c/0x30 [ 194.946427][T13931] smpboot_thread_fn+0x32b/0x530 [ 194.951527][T13931] kthread+0x489/0x510 [ 194.955614][T13931] ret_from_fork+0x149/0x290 [ 194.960216][T13931] ret_from_fork_asm+0x1a/0x30 [ 194.964988][T13931] [ 194.967314][T13931] read to 0xffff88811ae5a6c0 of 8 bytes by task 13931 on cpu 1: [ 194.975028][T13931] xas_find_marked+0x218/0x620 [ 194.979874][T13931] find_get_entry+0x5d/0x380 [ 194.984477][T13931] filemap_get_folios_tag+0x13b/0x210 [ 194.989854][T13931] filemap_write_and_wait_range+0x1d3/0x340 [ 194.995757][T13931] sync_blockdev+0x35/0x50 [ 195.000178][T13931] sync_filesystem+0x162/0x190 [ 195.004952][T13931] generic_shutdown_super+0x44/0x210 [ 195.010249][T13931] kill_block_super+0x2a/0x70 [ 195.014926][T13931] ext4_kill_sb+0x42/0x80 [ 195.019259][T13931] deactivate_locked_super+0x75/0x1c0 [ 195.024667][T13931] deactivate_super+0x97/0xa0 [ 195.029357][T13931] cleanup_mnt+0x2a9/0x320 [ 195.033785][T13931] __cleanup_mnt+0x19/0x20 [ 195.038205][T13931] task_work_run+0x131/0x1a0 [ 195.042811][T13931] exit_to_user_mode_loop+0x1fe/0x740 [ 195.048190][T13931] do_syscall_64+0x1dd/0x2b0 [ 195.052799][T13931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.058684][T13931] [ 195.061080][T13931] value changed: 0x0000000000000003 -> 0x0000000000000000 [ 195.068174][T13931] [ 195.070499][T13931] Reported by Kernel Concurrency Sanitizer on: [ 195.076654][T13931] CPU: 1 UID: 0 PID: 13931 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.088187][T13931] Tainted: [W]=WARN [ 195.091993][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.102052][T13931] ==================================================================