last executing test programs: 1.390035974s ago: executing program 1 (id=3939): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="50040402070b03"], 0x7) 1.176590033s ago: executing program 1 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 921.494863ms ago: executing program 0 (id=3955): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r3}}, 0x30) 886.295065ms ago: executing program 3 (id=3957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 862.245996ms ago: executing program 0 (id=3958): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fremovexattr(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) 794.624008ms ago: executing program 3 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) pipe(&(0x7f0000000340)) 782.996639ms ago: executing program 1 (id=3963): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) 775.55936ms ago: executing program 0 (id=3964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 775.170599ms ago: executing program 4 (id=3965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 746.07541ms ago: executing program 0 (id=3966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f0000000100)=""/206) 737.837641ms ago: executing program 3 (id=3967): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) mlockall(0x7) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 718.458271ms ago: executing program 1 (id=3968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 717.993011ms ago: executing program 4 (id=3969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 674.272433ms ago: executing program 1 (id=3970): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 671.130363ms ago: executing program 0 (id=3971): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 668.076044ms ago: executing program 4 (id=3972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) open$dir(&(0x7f0000000180)='./file0\x00', 0x80a40, 0x14) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 637.675005ms ago: executing program 3 (id=3973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xabf, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7ea, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x5, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x1ff, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x3, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x9}, {0x5, 0xc, 0x3, 0x80, 0x5, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0xb, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x800, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x802, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x1, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 600.720336ms ago: executing program 1 (id=3974): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 600.211896ms ago: executing program 4 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x65}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c844) 595.988926ms ago: executing program 3 (id=3975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 504.92517ms ago: executing program 0 (id=3976): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 500.64035ms ago: executing program 3 (id=3977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 492.05953ms ago: executing program 4 (id=3978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 422.758023ms ago: executing program 4 (id=3979): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214", 0x9) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 165.143834ms ago: executing program 2 (id=3985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 146.953704ms ago: executing program 2 (id=3986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x18) utime(&(0x7f0000000200)='./file0\x00', 0x0) 78.079807ms ago: executing program 2 (id=3987): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x000'], 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 49.381639ms ago: executing program 2 (id=3988): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 26.709359ms ago: executing program 2 (id=3989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3990): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') kernel console output (not intermixed with test programs): pressed [ 67.032982][ T29] audit: type=1400 audit(1758186426.749:964): avc: denied { name_connect } for pid=5764 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 67.070716][ T29] audit: type=1400 audit(1758186426.749:965): avc: denied { accept } for pid=5764 comm="syz.0.986" lport=53420 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.093560][ T29] audit: type=1400 audit(1758186426.749:966): avc: denied { write } for pid=5764 comm="syz.0.986" lport=53420 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.117083][ T29] audit: type=1400 audit(1758186426.749:967): avc: denied { setopt } for pid=5764 comm="syz.0.986" lport=53420 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.143063][ T5767] syz.0.987 (5767) used greatest stack depth: 9264 bytes left [ 67.234224][ T29] audit: type=1400 audit(1758186426.949:968): avc: denied { bind } for pid=5770 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.385838][ T29] audit: type=1400 audit(1758186427.099:969): avc: denied { read } for pid=5782 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.431312][ T29] audit: type=1326 audit(1758186427.149:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 67.464132][ T29] audit: type=1326 audit(1758186427.149:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 67.487431][ T29] audit: type=1326 audit(1758186427.149:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 67.510819][ T29] audit: type=1326 audit(1758186427.169:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.0.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 67.612580][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 67.631781][ T5802] xfrm1: entered promiscuous mode [ 67.636862][ T5802] xfrm1: entered allmulticast mode [ 67.662115][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 68.839600][ T5874] vlan2: entered allmulticast mode [ 70.359042][ T5947] vlan2: entered allmulticast mode [ 70.457583][ T5961] 9pnet: p9_errstr2errno: server reported unknown error  [ 71.216598][ T6014] vlan2: entered allmulticast mode [ 73.104466][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 73.104483][ T29] audit: type=1400 audit(1758186432.819:988): avc: denied { create } for pid=6107 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.778387][ T29] audit: type=1400 audit(1758186433.489:989): avc: denied { read } for pid=6132 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.873682][ T29] audit: type=1400 audit(1758186433.589:990): avc: denied { write } for pid=6156 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.133352][ T29] audit: type=1326 audit(1758186433.839:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.156835][ T29] audit: type=1326 audit(1758186433.839:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.180281][ T29] audit: type=1326 audit(1758186433.839:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.203700][ T29] audit: type=1326 audit(1758186433.839:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.227201][ T29] audit: type=1326 audit(1758186433.839:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.250709][ T29] audit: type=1326 audit(1758186433.849:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.274228][ T29] audit: type=1326 audit(1758186433.849:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 74.525613][ T6230] netlink: 'syz.1.1138': attribute type 3 has an invalid length. [ 74.785125][ T6249] hub 9-0:1.0: USB hub found [ 74.793923][ T6249] hub 9-0:1.0: 8 ports detected [ 74.966392][ T6267] netlink: 'syz.4.1154': attribute type 3 has an invalid length. [ 75.233155][ T6288] hub 9-0:1.0: USB hub found [ 75.243246][ T6288] hub 9-0:1.0: 8 ports detected [ 75.478774][ T6324] hub 9-0:1.0: USB hub found [ 75.521426][ T6324] hub 9-0:1.0: 8 ports detected [ 76.451385][ T6379] vhci_hcd: invalid port number 96 [ 76.456548][ T6379] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 77.151663][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 77.353975][ T6464] syzkaller0: entered promiscuous mode [ 77.359580][ T6464] syzkaller0: entered allmulticast mode [ 77.382259][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 77.391287][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'. [ 77.400263][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 77.414285][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'. [ 77.423375][ T6469] netlink: 'syz.2.1248': attribute type 6 has an invalid length. [ 77.433308][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'. [ 77.585605][ T6503] hub 9-0:1.0: USB hub found [ 77.607081][ T6503] hub 9-0:1.0: 8 ports detected [ 77.632026][ T6523] program syz.4.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.659242][ T6523] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.723091][ T6539] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 78.132352][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 78.132371][ T29] audit: type=1326 audit(1758186437.849:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 78.166967][ T6638] vhci_hcd: invalid port number 96 [ 78.172265][ T6638] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 78.179759][ T29] audit: type=1326 audit(1758186437.849:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 78.203365][ T29] audit: type=1326 audit(1758186437.849:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 78.226949][ T29] audit: type=1326 audit(1758186437.849:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 78.250479][ T29] audit: type=1326 audit(1758186437.849:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 78.320915][ T29] audit: type=1400 audit(1758186438.039:1220): avc: denied { create } for pid=6648 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.350754][ T29] audit: type=1400 audit(1758186438.039:1221): avc: denied { setopt } for pid=6648 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.370270][ T29] audit: type=1400 audit(1758186438.039:1222): avc: denied { bind } for pid=6648 comm="syz.0.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.391679][ T29] audit: type=1400 audit(1758186438.109:1223): avc: denied { write } for pid=6652 comm="syz.1.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.391693][ T6653] rdma_op ffff88811ca6b180 conn xmit_rdma 0000000000000000 [ 78.418643][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1304'. [ 78.427783][ T6651] netem: change failed [ 78.473561][ T29] audit: type=1326 audit(1758186438.189:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 79.000373][ T6737] wireguard0: entered promiscuous mode [ 79.006006][ T6737] wireguard0: entered allmulticast mode [ 79.139130][ T6769] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.271845][ T6793] serio: Serial port ptm0 [ 79.276670][ T6795] rdma_op ffff88811ca69d80 conn xmit_rdma 0000000000000000 [ 79.306932][ T6798] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 79.338548][ T6805] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 79.536106][ T6844] 9pnet_fd: Insufficient options for proto=fd [ 79.644713][ T6860] SELinux: failed to load policy [ 79.725932][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 79.742551][ T6875] SELinux: ebitmap: empty map [ 79.749155][ T6875] SELinux: failed to load policy [ 79.879953][ T6898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.934036][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 79.943212][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 79.958094][ T6908] bridge0: port 3(vlan2) entered blocking state [ 79.964655][ T6908] bridge0: port 3(vlan2) entered disabled state [ 79.972666][ T6908] vlan2: entered allmulticast mode [ 79.977922][ T6908] bridge0: entered allmulticast mode [ 79.985358][ T6908] vlan2: left allmulticast mode [ 79.990265][ T6908] bridge0: left allmulticast mode [ 80.028050][ T6925] block device autoloading is deprecated and will be removed. [ 80.038029][ T6925] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.048038][ T6925] FAT-fs (loop3): unable to read boot sector [ 80.576195][ T6988] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.602693][ T6991] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 80.611029][ T6991] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 80.705329][ T7001] SELinux: failed to load policy [ 80.784717][ T7002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 80.811859][ T7002] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 80.824001][ T7017] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.888886][ T7011] loop3: detected capacity change from 0 to 2048 [ 80.935741][ T7042] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 81.132779][ T7080] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 81.415037][ T7125] SELinux: ebitmap: empty map [ 81.420002][ T7125] SELinux: failed to load policy [ 81.444478][ T7129] vhci_hcd: invalid port number 96 [ 81.449689][ T7129] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 81.549083][ T7153] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 81.557371][ T7153] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 81.599701][ T7160] bridge0: port 3(vlan2) entered blocking state [ 81.606112][ T7160] bridge0: port 3(vlan2) entered disabled state [ 81.621823][ T7160] vlan2: entered allmulticast mode [ 81.627049][ T7160] bridge0: entered allmulticast mode [ 81.661519][ T7160] vlan2: left allmulticast mode [ 81.666503][ T7160] bridge0: left allmulticast mode [ 81.677970][ T7166] SELinux: ebitmap: empty map [ 81.683135][ T7166] SELinux: failed to load policy [ 81.820828][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 81.980848][ T7196] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.989012][ T7196] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.094626][ T7220] bridge0: port 3(vlan2) entered blocking state [ 82.101178][ T7220] bridge0: port 3(vlan2) entered disabled state [ 82.107848][ T7220] vlan2: entered allmulticast mode [ 82.113016][ T7220] bridge0: entered allmulticast mode [ 82.119799][ T7220] vlan2: left allmulticast mode [ 82.124892][ T7220] bridge0: left allmulticast mode [ 82.708422][ T7238] SELinux: ebitmap: empty map [ 82.713411][ T7238] SELinux: failed to load policy [ 82.789922][ T7262] loop3: detected capacity change from 0 to 128 [ 83.016504][ T7297] __nla_validate_parse: 11 callbacks suppressed [ 83.016524][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 83.031941][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 83.063319][ T7297] bridge0: port 3(vlan2) entered blocking state [ 83.069733][ T7297] bridge0: port 3(vlan2) entered disabled state [ 83.083605][ T7297] vlan2: entered allmulticast mode [ 83.088819][ T7297] bridge0: entered allmulticast mode [ 83.096510][ T7297] vlan2: left allmulticast mode [ 83.101586][ T7297] bridge0: left allmulticast mode [ 83.148126][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 83.148145][ T29] audit: type=1400 audit(1758186442.859:1667): avc: denied { ioctl } for pid=7313 comm="syz.2.1566" path="socket:[16862]" dev="sockfs" ino=16862 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.179367][ T29] audit: type=1400 audit(1758186442.859:1668): avc: denied { write } for pid=7313 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.244607][ T29] audit: type=1326 audit(1758186442.959:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.283630][ T29] audit: type=1326 audit(1758186442.969:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.307142][ T29] audit: type=1326 audit(1758186442.969:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.330789][ T29] audit: type=1326 audit(1758186442.969:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.354432][ T29] audit: type=1326 audit(1758186442.969:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.378202][ T29] audit: type=1326 audit(1758186442.969:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.401833][ T29] audit: type=1326 audit(1758186442.969:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.425297][ T29] audit: type=1326 audit(1758186442.979:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 83.468783][ T7339] rdma_op ffff88811ca01580 conn xmit_rdma 0000000000000000 [ 83.613699][ T7359] 9pnet_fd: Insufficient options for proto=fd [ 83.944424][ T7385] serio: Serial port ptm0 [ 84.100530][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1598'. [ 84.109737][ T7398] wireguard1: entered promiscuous mode [ 84.115446][ T7398] wireguard1: entered allmulticast mode [ 84.170001][ T7407] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 84.272629][ T7421] serio: Serial port ptm0 [ 84.279579][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 84.288768][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 84.300495][ T7420] bridge0: port 3(vlan2) entered blocking state [ 84.306942][ T7420] bridge0: port 3(vlan2) entered disabled state [ 84.313704][ T7420] vlan2: entered allmulticast mode [ 84.318851][ T7420] bridge0: entered allmulticast mode [ 84.325021][ T7420] vlan2: left allmulticast mode [ 84.330019][ T7420] bridge0: left allmulticast mode [ 84.499638][ T7442] loop3: detected capacity change from 0 to 2048 [ 84.508449][ T7448] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 84.561963][ T7442] loop3: p1 < > p4 [ 84.569415][ T7442] loop3: p4 size 8388608 extends beyond EOD, truncated [ 84.724890][ T7478] serio: Serial port ptm0 [ 85.004555][ T7523] vhci_hcd: invalid port number 96 [ 85.009785][ T7523] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 85.165645][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 85.341066][ T7559] program syz.0.1657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.379047][ T7559] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.555579][ T7578] rdma_op ffff88811c875980 conn xmit_rdma 0000000000000000 [ 85.671930][ T7582] loop3: detected capacity change from 0 to 8192 [ 85.685885][ T7582] msdos: Unknown parameter 'A' [ 85.826740][ T7650] loop3: detected capacity change from 0 to 512 [ 85.835158][ T7650] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 85.845336][ T7639] wireguard1: entered promiscuous mode [ 85.851077][ T7639] wireguard1: entered allmulticast mode [ 85.858161][ T7650] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.868777][ T7650] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.888683][ T7650] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1676: Invalid block bitmap block 0 in block_group 0 [ 85.911297][ T7650] EXT4-fs (loop3): Remounting filesystem read-only [ 85.918331][ T7650] EXT4-fs (loop3): 1 orphan inode deleted [ 85.927199][ T7650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.008898][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.078881][ T7661] syzkaller0: entered promiscuous mode [ 86.084509][ T7661] syzkaller0: entered allmulticast mode [ 86.236205][ T7698] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 86.438845][ T7719] program syz.3.1698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.455122][ T7722] wireguard0: entered promiscuous mode [ 86.460865][ T7722] wireguard0: entered allmulticast mode [ 86.675748][ T7770] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 87.486488][ T7807] syzkaller0: entered promiscuous mode [ 87.492063][ T7807] syzkaller0: entered allmulticast mode [ 87.808412][ T7839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7839 comm=syz.4.1735 [ 87.844384][ T7845] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 87.850941][ T7845] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.858733][ T7845] vhci_hcd vhci_hcd.0: Device attached [ 87.875386][ T7845] random: crng reseeded on system resumption [ 87.887404][ T7846] vhci_hcd: connection closed [ 87.888976][ T31] vhci_hcd: stop threads [ 87.897981][ T31] vhci_hcd: release socket [ 87.902626][ T31] vhci_hcd: disconnect device [ 87.918984][ T7854] veth0_to_bridge: entered promiscuous mode [ 87.934595][ T7852] veth0_to_bridge: left promiscuous mode [ 88.073142][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 88.143623][ T7890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7890 comm=syz.0.1756 [ 88.174140][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 88.183304][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 88.195231][ T7892] bridge0: port 3(vlan2) entered blocking state [ 88.201590][ T7892] bridge0: port 3(vlan2) entered disabled state [ 88.208166][ T7892] vlan2: entered allmulticast mode [ 88.213382][ T7892] bridge0: entered allmulticast mode [ 88.219183][ T7892] vlan2: left allmulticast mode [ 88.224195][ T7892] bridge0: left allmulticast mode [ 88.277977][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 88.277997][ T29] audit: type=1326 audit(1758186447.989:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f369cf2eba9 code=0x7fc00000 [ 88.496404][ T29] audit: type=1400 audit(1758186448.209:1996): avc: denied { create } for pid=7910 comm="syz.1.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.523474][ T29] audit: type=1400 audit(1758186448.229:1997): avc: denied { write } for pid=7910 comm="syz.1.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.576121][ T29] audit: type=1400 audit(1758186448.289:1998): avc: denied { mounton } for pid=7912 comm="syz.0.1764" path="/339/file0" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 88.576180][ T7913] 9pnet_fd: Insufficient options for proto=fd [ 88.880970][ T29] audit: type=1400 audit(1758186448.589:1999): avc: denied { cpu } for pid=7923 comm="syz.4.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.958322][ T29] audit: type=1326 audit(1758186448.669:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 88.982423][ T29] audit: type=1400 audit(1758186448.669:2001): avc: denied { append } for pid=7939 comm="syz.3.1775" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.006191][ T29] audit: type=1326 audit(1758186448.669:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 89.029669][ T29] audit: type=1326 audit(1758186448.669:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 89.053113][ T29] audit: type=1326 audit(1758186448.669:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 89.095480][ T7949] SELinux: Context is not valid (left unmapped). [ 89.118711][ T7951] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1778'. [ 89.143492][ T7951] batadv1: entered promiscuous mode [ 89.148736][ T7951] batadv1: entered allmulticast mode [ 89.182234][ T7966] netlink: 'syz.4.1783': attribute type 10 has an invalid length. [ 89.190247][ T7966] ipvlan0: entered allmulticast mode [ 89.195705][ T7966] veth0_vlan: entered allmulticast mode [ 89.204925][ T7966] team0: Device ipvlan0 failed to register rx_handler [ 89.245642][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 89.254834][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 89.274149][ T7972] bridge0: port 3(vlan2) entered blocking state [ 89.280546][ T7972] bridge0: port 3(vlan2) entered disabled state [ 89.290380][ T7972] vlan2: entered allmulticast mode [ 89.295758][ T7972] bridge0: entered allmulticast mode [ 89.304302][ T7972] vlan2: left allmulticast mode [ 89.309225][ T7972] bridge0: left allmulticast mode [ 89.370370][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'. [ 89.592139][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 89.601438][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 89.617168][ T8025] bridge0: port 3(vlan2) entered blocking state [ 89.623618][ T8025] bridge0: port 3(vlan2) entered disabled state [ 89.630476][ T8025] vlan2: entered allmulticast mode [ 89.635696][ T8025] bridge0: entered allmulticast mode [ 89.641932][ T8025] vlan2: left allmulticast mode [ 89.646859][ T8025] bridge0: left allmulticast mode [ 89.844564][ T8053] SELinux: failed to load policy [ 89.848909][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1818'. [ 90.301061][ T8116] SELinux: failed to load policy [ 90.488560][ T8142] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1862'. [ 90.551487][ T8154] SELinux: failed to load policy [ 90.592108][ T8164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.599790][ T8164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.762534][ T8188] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 90.770597][ T8188] ipvlan0: entered allmulticast mode [ 90.776011][ T8188] veth0_vlan: entered allmulticast mode [ 90.784473][ T8188] team0: Device ipvlan0 failed to register rx_handler [ 91.348059][ T8244] SELinux: failed to load policy [ 91.356930][ T8246] siw: device registration error -23 [ 91.376426][ T8240] SELinux: failed to load policy [ 91.585251][ T8280] SELinux: failed to load policy [ 91.911545][ T8329] SELinux: failed to load policy [ 92.078060][ T8352] loop3: detected capacity change from 0 to 512 [ 92.086633][ T8352] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.095477][ T8352] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1926: bg 0: block 248: padding at end of block bitmap is not set [ 92.130876][ T8352] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1926: Failed to acquire dquot type 1 [ 92.144692][ T8352] EXT4-fs (loop3): 1 truncate cleaned up [ 92.151945][ T8352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.194190][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.208547][ T8359] hsr_slave_1 (unregistering): left promiscuous mode [ 93.044921][ T8464] syzkaller1: entered promiscuous mode [ 93.050475][ T8464] syzkaller1: entered allmulticast mode [ 93.182537][ T8482] SELinux: failed to load policy [ 93.188132][ T8487] hsr_slave_1 (unregistering): left promiscuous mode [ 93.220319][ T8497] loop3: detected capacity change from 0 to 128 [ 93.268617][ T8497] syz.3.1978: attempt to access beyond end of device [ 93.268617][ T8497] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 93.303120][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 93.303138][ T29] audit: type=1326 audit(1758186453.019:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.333743][ T29] audit: type=1326 audit(1758186453.049:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.357291][ T29] audit: type=1326 audit(1758186453.049:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.380935][ T29] audit: type=1326 audit(1758186453.049:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.404485][ T29] audit: type=1326 audit(1758186453.049:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.427928][ T29] audit: type=1326 audit(1758186453.049:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.451422][ T29] audit: type=1326 audit(1758186453.049:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 93.540487][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881001b4600: rx timeout, send abort [ 93.548726][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881001b4800: rx timeout, send abort [ 93.557037][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881001b4600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.571381][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881001b4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.596934][ T29] audit: type=1400 audit(1758186453.249:2188): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 93.617060][ T29] audit: type=1400 audit(1758186453.299:2189): avc: denied { read } for pid=2976 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.639178][ T29] audit: type=1400 audit(1758186453.299:2190): avc: denied { search } for pid=2976 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.898356][ T8563] __nla_validate_parse: 12 callbacks suppressed [ 93.898376][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 93.924197][ T8566] vhci_hcd: invalid port number 255 [ 93.929444][ T8566] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 93.956699][ T8563] hsr_slave_1 (unregistering): left promiscuous mode [ 94.088289][ T8599] syzkaller1: entered promiscuous mode [ 94.094087][ T8599] syzkaller1: entered allmulticast mode [ 94.253138][ T8627] loop3: detected capacity change from 0 to 512 [ 94.379531][ T8627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.399455][ T8627] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.443729][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.750242][ T8715] program syz.3.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.900989][ T8732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.983767][ T8747] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2060'. [ 95.109253][ T8755] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 95.433366][ T8663] 9pnet_fd: p9_fd_create_tcp (8663): problem connecting socket to 127.0.0.1 [ 95.507416][ T8784] loop3: detected capacity change from 0 to 128 [ 95.615315][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.623241][ T8784] FAT-fs (loop3): Filesystem has been set read-only [ 95.643695][ T8784] syz.3.2073: attempt to access beyond end of device [ 95.643695][ T8784] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 95.673970][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.681876][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.690448][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.705058][ T8784] syz.3.2073: attempt to access beyond end of device [ 95.705058][ T8784] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 95.709038][ T8798] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 95.720253][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.720253][ T8799] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 95.741743][ T8799] Buffer I/O error on dev loop3, logical block 2065, async page read [ 95.789763][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.790779][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.790779][ T8799] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 95.797796][ T8784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 95.810958][ T8799] Buffer I/O error on dev loop3, logical block 2066, async page read [ 95.844332][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.844332][ T8799] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 95.857726][ T8799] Buffer I/O error on dev loop3, logical block 2067, async page read [ 95.881038][ T8810] program syz.4.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.881137][ T8811] siw: device registration error -23 [ 95.895771][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.895771][ T8799] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 95.909078][ T8799] Buffer I/O error on dev loop3, logical block 2068, async page read [ 95.930291][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.930291][ T8799] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 95.943666][ T8799] Buffer I/O error on dev loop3, logical block 2069, async page read [ 95.958244][ T8799] syz.3.2073: attempt to access beyond end of device [ 95.958244][ T8799] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 95.971550][ T8799] Buffer I/O error on dev loop3, logical block 2070, async page read [ 96.006259][ T8799] syz.3.2073: attempt to access beyond end of device [ 96.006259][ T8799] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 96.019713][ T8799] Buffer I/O error on dev loop3, logical block 2071, async page read [ 96.031407][ T8799] Buffer I/O error on dev loop3, logical block 2072, async page read [ 96.039618][ T8784] Buffer I/O error on dev loop3, logical block 2065, async page read [ 96.054795][ T8784] Buffer I/O error on dev loop3, logical block 2066, async page read [ 96.101567][ T8828] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 96.379772][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2102'. [ 96.485497][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'. [ 96.515293][ T8882] netem: change failed [ 96.553245][ T8885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2111'. [ 96.629738][ T8900] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 96.726564][ T8918] netlink: 'syz.2.2124': attribute type 12 has an invalid length. [ 96.734772][ T8918] netlink: 'syz.2.2124': attribute type 29 has an invalid length. [ 96.742774][ T8918] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2124'. [ 96.751904][ T8918] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2124'. [ 96.861065][ T8933] siw: device registration error -23 [ 97.655660][ T8988] debugfs: 'ttyS3' already exists in 'caif_serial' [ 97.779689][ T9022] loop3: detected capacity change from 0 to 736 [ 97.826687][ T9033] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 97.846528][ T9035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.866666][ T9033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.926029][ T9033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.963453][ T9084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2171'. [ 97.982686][ T9033] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.000580][ T9033] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 98.062279][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 98.071362][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2176'. [ 98.082931][ T9121] netlink: 'syz.2.2176': attribute type 6 has an invalid length. [ 98.152334][ T9141] netlink: 'syz.0.2179': attribute type 12 has an invalid length. [ 98.160220][ T9141] netlink: 'syz.0.2179': attribute type 29 has an invalid length. [ 98.203417][ T9147] netlink: 'syz.0.2182': attribute type 30 has an invalid length. [ 98.225333][ T9154] ref_ctr_offset mismatch. inode: 0x8f0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 98.320101][ T9162] infiniband syz!: set active [ 98.324954][ T9162] infiniband syz!: added team_slave_0 [ 98.349807][ T9162] RDS/IB: syz!: added [ 98.353922][ T9162] smc: adding ib device syz! with port count 1 [ 98.360256][ T9162] smc: ib device syz! port 1 has pnetid [ 98.426471][ T9188] loop3: detected capacity change from 0 to 164 [ 98.436050][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 98.436096][ T29] audit: type=1400 audit(1758186458.149:2514): avc: denied { read } for pid=9189 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.473386][ T9188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.489016][ T29] audit: type=1400 audit(1758186458.199:2515): avc: denied { bind } for pid=9192 comm="syz.2.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.655861][ T9206] loop3: detected capacity change from 0 to 8192 [ 98.667112][ T9206] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.684106][ T9206] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 98.692777][ T9206] FAT-fs (loop3): Filesystem has been set read-only [ 98.750482][ T29] audit: type=1400 audit(1758186458.459:2516): avc: denied { execute } for pid=9221 comm="syz.0.2206" path="/425/file2" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.812214][ T29] audit: type=1400 audit(1758186458.529:2517): avc: denied { create } for pid=9232 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.863987][ T29] audit: type=1326 audit(1758186458.579:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 98.887558][ T29] audit: type=1326 audit(1758186458.579:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 98.911053][ T29] audit: type=1326 audit(1758186458.579:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 98.934855][ T29] audit: type=1326 audit(1758186458.579:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 98.958807][ T29] audit: type=1326 audit(1758186458.579:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 98.982277][ T29] audit: type=1326 audit(1758186458.579:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 99.141922][ T2957] IPVS: starting estimator thread 0... [ 99.167712][ T9269] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 99.193918][ T9269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.232684][ T9266] IPVS: using max 2016 ests per chain, 100800 per kthread [ 99.242176][ T9269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.249340][ T9269] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 99.262449][ T9269] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 99.271361][ T9316] __nla_validate_parse: 5 callbacks suppressed [ 99.271450][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 99.367606][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 99.376678][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 99.385740][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 99.411531][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 99.420763][ T9342] netlink: 'syz.3.2240': attribute type 6 has an invalid length. [ 99.593149][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 99.642131][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 99.668971][ T9371] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.676835][ T9373] netlink: 'syz.4.2256': attribute type 30 has an invalid length. [ 99.966319][ T9425] loop3: detected capacity change from 0 to 512 [ 99.996882][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 100.007357][ T9425] journal_path: Non-blockdev passed as './bus' [ 100.013717][ T9425] EXT4-fs: error: could not find journal device path [ 100.088334][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 100.145448][ T9451] syzkaller1: entered promiscuous mode [ 100.151132][ T9451] syzkaller1: entered allmulticast mode [ 100.169256][ T9458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2279'. [ 100.856995][ T9576] loop3: detected capacity change from 0 to 512 [ 100.883940][ T9576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.904025][ T9576] EXT4-fs (loop3): 1 truncate cleaned up [ 100.922748][ T9576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.947201][ T9576] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.2329: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 100.957053][ T3398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3398 comm=kworker/1:4 [ 101.015394][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.161918][ T9623] syzkaller1: entered promiscuous mode [ 101.167643][ T9623] syzkaller1: entered allmulticast mode [ 101.271008][ T9646] syzkaller1: entered promiscuous mode [ 101.276545][ T9646] syzkaller1: entered allmulticast mode [ 101.364192][ T9656] loop3: detected capacity change from 0 to 8192 [ 101.549529][ T9689] syzkaller1: entered promiscuous mode [ 101.555137][ T9689] syzkaller1: entered allmulticast mode [ 101.663530][ T9713] ALSA: seq fatal error: cannot create timer (-22) [ 101.962341][ T9746] vlan2: entered allmulticast mode [ 102.446466][ T9797] syzkaller1: entered promiscuous mode [ 102.452078][ T9797] syzkaller1: entered allmulticast mode [ 103.121208][ T9877] /dev/loop0: Can't lookup blockdev [ 103.252979][ T9904] netdevsim netdevsim4 5: renamed from netdevsim0 (while UP) [ 103.426335][ T9932] atomic_op ffff888104cf5928 conn xmit_atomic 0000000000000000 [ 103.460462][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 103.460480][ T29] audit: type=1326 audit(1758186463.169:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.529392][ T29] audit: type=1326 audit(1758186463.209:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.553194][ T29] audit: type=1326 audit(1758186463.209:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.576641][ T29] audit: type=1326 audit(1758186463.209:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.600184][ T29] audit: type=1326 audit(1758186463.209:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.623674][ T29] audit: type=1326 audit(1758186463.209:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.647356][ T29] audit: type=1326 audit(1758186463.209:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.670804][ T29] audit: type=1326 audit(1758186463.209:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.694450][ T29] audit: type=1326 audit(1758186463.209:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.718159][ T29] audit: type=1326 audit(1758186463.209:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 103.748870][ T9948] netdevsim netdevsim1 5: renamed from netdevsim0 (while UP) [ 103.902385][ T9974] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 103.988480][ T9984] netdevsim netdevsim3 5: renamed from netdevsim0 (while UP) [ 104.316998][T10018] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 104.426063][T10031] __nla_validate_parse: 12 callbacks suppressed [ 104.426085][T10031] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2503'. [ 104.473937][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'. [ 104.483042][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2506'. [ 104.763373][T10075] sd 0:0:1:0: device reset [ 104.822463][T10079] bridge0: entered promiscuous mode [ 104.827737][T10079] macsec1: entered promiscuous mode [ 104.839108][T10079] bridge0: port 3(macsec1) entered blocking state [ 104.845737][T10079] bridge0: port 3(macsec1) entered disabled state [ 104.854869][T10079] macsec1: entered allmulticast mode [ 104.860331][T10079] bridge0: entered allmulticast mode [ 104.870881][T10079] macsec1: left allmulticast mode [ 104.876044][T10079] bridge0: left allmulticast mode [ 104.884957][T10088] validate_nla: 2 callbacks suppressed [ 104.884974][T10088] netlink: 'syz.4.2528': attribute type 21 has an invalid length. [ 104.901474][T10079] bridge0: left promiscuous mode [ 104.912411][T10088] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 104.920268][T10088] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2528'. [ 105.107063][ T2957] kernel write not supported for file bpf-prog (pid: 2957 comm: kworker/0:2) [ 105.420236][T10174] macvtap0: refused to change device tx_queue_len [ 105.458116][T10179] netlink: 'syz.0.2566': attribute type 1 has an invalid length. [ 105.482409][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.504567][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.513535][T10179] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.525525][T10179] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 106.208560][ T2957] IPVS: starting estimator thread 0... [ 106.215132][T10238] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 106.268125][T10246] loop0: detected capacity change from 0 to 164 [ 106.320805][T10239] IPVS: using max 2352 ests per chain, 117600 per kthread [ 106.357680][T10263] loop3: detected capacity change from 0 to 512 [ 106.375738][T10263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.389493][T10263] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.440934][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.645491][T10306] SELinux: failed to load policy [ 106.800907][T10323] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2608'. [ 106.814311][T10327] program syz.2.2610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.983662][T10352] loop3: detected capacity change from 0 to 128 [ 107.022894][T10352] FAT-fs (loop3): Directory bread(block 32) failed [ 107.046996][T10352] FAT-fs (loop3): Directory bread(block 33) failed [ 107.057975][T10352] FAT-fs (loop3): Directory bread(block 34) failed [ 107.064889][T10352] FAT-fs (loop3): Directory bread(block 35) failed [ 107.073446][T10352] FAT-fs (loop3): Directory bread(block 36) failed [ 107.093830][T10352] FAT-fs (loop3): Directory bread(block 37) failed [ 107.100474][T10352] FAT-fs (loop3): Directory bread(block 38) failed [ 107.109013][T10352] FAT-fs (loop3): Directory bread(block 39) failed [ 107.117798][T10352] FAT-fs (loop3): Directory bread(block 40) failed [ 107.120056][T10377] capability: warning: `syz.1.2627' uses 32-bit capabilities (legacy support in use) [ 107.125051][T10352] FAT-fs (loop3): Directory bread(block 41) failed [ 107.177583][T10352] bio_check_eod: 10025 callbacks suppressed [ 107.177604][T10352] syz.3.2619: attempt to access beyond end of device [ 107.177604][T10352] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 107.197001][T10352] buffer_io_error: 10022 callbacks suppressed [ 107.197016][T10352] Buffer I/O error on dev loop3, logical block 1028, async page read [ 107.211652][T10352] syz.3.2619: attempt to access beyond end of device [ 107.211652][T10352] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 107.225163][T10352] Buffer I/O error on dev loop3, logical block 41991, async page read [ 107.233350][T10352] FAT-fs (loop3): Filesystem has been set read-only [ 107.239340][T10383] bridge0: entered promiscuous mode [ 107.240136][T10352] syz.3.2619: attempt to access beyond end of device [ 107.240136][T10352] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 107.245706][T10383] macvtap1: entered allmulticast mode [ 107.258499][T10352] Buffer I/O error on dev loop3, logical block 1028, async page read [ 107.258591][T10352] syz.3.2619: attempt to access beyond end of device [ 107.258591][T10352] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 107.263972][T10383] bridge0: entered allmulticast mode [ 107.272055][T10352] Buffer I/O error on dev loop3, logical block 41991, async page read [ 107.287036][T10383] bridge0: port 3(macvtap1) entered blocking state [ 107.305667][T10383] bridge0: port 3(macvtap1) entered disabled state [ 107.331425][T10383] bridge0: left allmulticast mode [ 107.336584][T10383] bridge0: left promiscuous mode [ 107.363509][T10395] $H: renamed from bond0 (while UP) [ 107.370582][T10395] $H: entered promiscuous mode [ 107.375907][T10395] bond_slave_0: entered promiscuous mode [ 107.381739][T10395] bond_slave_1: entered promiscuous mode [ 107.431603][ T1036] hid_parser_main: 54 callbacks suppressed [ 107.431642][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.444978][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.452566][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.459979][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.467610][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.475045][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.482609][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.490102][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.497514][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.505022][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.513469][ T1036] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 107.652756][T10418] uprobe: syz.3.2638:10418 failed to unregister, leaking uprobe [ 107.691805][T10423] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2642'. [ 107.702497][T10423] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2642'. [ 107.950945][T10437] siw: device registration error -23 [ 108.248480][T10459] netlink: 'syz.4.2660': attribute type 2 has an invalid length. [ 108.256411][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2660'. [ 108.406939][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2665'. [ 108.431590][T10469] netem: change failed [ 108.482427][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2667'. [ 108.529246][T10479] netlink: 'syz.4.2669': attribute type 1 has an invalid length. [ 108.548203][T10480] netlink: 'syz.1.2670': attribute type 21 has an invalid length. [ 108.603951][T10479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.675561][T10488] bond1: (slave geneve2): making interface the new active one [ 108.714329][T10417] syz.2.2640 (10417) used greatest stack depth: 6928 bytes left [ 108.722113][T10488] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.737309][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 108.737326][ T29] audit: type=1400 audit(1758186468.449:3235): avc: denied { setopt } for pid=10524 comm="syz.2.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.843960][ T29] audit: type=1326 audit(1758186468.559:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 108.878443][ T29] audit: type=1326 audit(1758186468.559:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 108.902107][ T29] audit: type=1326 audit(1758186468.559:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 108.925728][ T29] audit: type=1326 audit(1758186468.559:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 108.949311][ T29] audit: type=1326 audit(1758186468.559:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 108.972948][ T29] audit: type=1326 audit(1758186468.559:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 109.005899][ T29] audit: type=1400 audit(1758186468.589:3242): avc: denied { create } for pid=10534 comm="syz.4.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.025553][ T29] audit: type=1326 audit(1758186468.589:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 109.049111][ T29] audit: type=1400 audit(1758186468.719:3244): avc: denied { bind } for pid=10534 comm="syz.4.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.318108][T10566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.333783][T10566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.450297][T10578] siw: device registration error -23 [ 109.698807][T10597] loop0: detected capacity change from 0 to 512 [ 109.724053][T10597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.737938][T10597] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.765863][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.067460][T10647] pimreg: entered allmulticast mode [ 110.096882][T10653] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 110.109170][T10653] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 110.119590][T10647] pimreg: left allmulticast mode [ 110.166604][T10658] vhci_hcd: invalid port number 96 [ 110.172037][T10658] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 110.260570][T10683] batadv_slave_1: entered promiscuous mode [ 110.267443][T10682] batadv_slave_1: left promiscuous mode [ 110.555157][T10725] vhci_hcd: invalid port number 96 [ 110.560336][T10725] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 110.672151][T10742] uprobe: syz.4.2760:10742 failed to unregister, leaking uprobe [ 110.790879][T10758] __nla_validate_parse: 1 callbacks suppressed [ 110.790892][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 110.806216][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 111.088153][T10787] loop0: detected capacity change from 0 to 512 [ 111.095335][T10787] journal_path: Non-blockdev passed as './bus' [ 111.101589][T10787] EXT4-fs: error: could not find journal device path [ 111.229651][T10806] syz_tun: refused to change device tx_queue_len [ 111.380143][T10824] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 111.488223][T10844] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 111.928520][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 111.937673][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 111.962865][T10870] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2816'. [ 112.506070][T10908] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2833'. [ 112.549676][T10917] netlink: 'syz.3.2834': attribute type 21 has an invalid length. [ 112.558824][T10917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2834'. [ 112.568067][T10917] netlink: 'syz.3.2834': attribute type 1 has an invalid length. [ 112.652455][T10927] program syz.3.2839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.147144][T10963] program syz.4.2853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.148495][T10962] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 113.175568][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.198233][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.206665][T10962] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.218801][T10962] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 113.251839][T11009] uprobe: syz.2.2854:11009 failed to unregister, leaking uprobe [ 113.358307][T11018] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 113.419477][T11018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.497137][T11072] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 113.505683][T11051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.518648][ T3383] IPVS: starting estimator thread 0... [ 113.537922][T11051] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.568945][T11078] loop0: detected capacity change from 0 to 2048 [ 113.575424][T11051] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 113.603936][T11078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.616565][T11075] IPVS: using max 1968 ests per chain, 98400 per kthread [ 113.626718][T11078] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.654875][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.735275][T11109] bridge0: entered promiscuous mode [ 113.740568][T11109] macsec1: entered promiscuous mode [ 113.746907][T11109] bridge0: port 3(macsec1) entered blocking state [ 113.753401][T11109] bridge0: port 3(macsec1) entered disabled state [ 113.759995][T11109] macsec1: entered allmulticast mode [ 113.765388][T11109] bridge0: entered allmulticast mode [ 113.772120][T11109] macsec1: left allmulticast mode [ 113.777232][T11109] bridge0: left allmulticast mode [ 113.783745][T11109] bridge0: left promiscuous mode [ 114.019345][T11137] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 114.037027][T11137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.041641][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 114.041661][ T29] audit: type=1400 audit(114.021:3527): avc: denied { read } for pid=11136 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.083323][T11137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.090585][T11137] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.103261][T11137] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 114.116409][T11177] loop0: detected capacity change from 0 to 512 [ 114.123438][T11177] EXT4-fs: inline encryption not supported [ 114.129608][T11177] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.137676][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.2887: inode #13: comm syz.0.2887: iget: illegal inode # [ 114.150652][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2887: couldn't read orphan inode 13 (err -117) [ 114.163253][T11177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.178343][ T29] audit: type=1400 audit(114.161:3528): avc: denied { remount } for pid=11176 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.181613][T11177] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.2887: Abort forced by user [ 114.209004][T11177] EXT4-fs (loop0): Remounting filesystem read-only [ 114.215595][T11177] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.263525][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.280486][T11191] bridge0: entered promiscuous mode [ 114.287248][T11191] macsec1: entered promiscuous mode [ 114.292148][T11194] loop1: detected capacity change from 0 to 2048 [ 114.306427][T11191] bridge0: port 3(macsec1) entered blocking state [ 114.313190][T11191] bridge0: port 3(macsec1) entered disabled state [ 114.319855][T11191] macsec1: entered allmulticast mode [ 114.325245][T11191] bridge0: entered allmulticast mode [ 114.334200][T11194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.346575][T11191] macsec1: left allmulticast mode [ 114.351829][T11191] bridge0: left allmulticast mode [ 114.357757][T11194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.373203][T11191] bridge0: left promiscuous mode [ 114.395420][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.446795][ T29] audit: type=1400 audit(114.421:3529): avc: denied { mac_admin } for pid=11208 comm="syz.4.2894" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.520342][ T29] audit: type=1404 audit(114.491:3530): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 114.534781][ T29] audit: type=1404 audit(114.491:3531): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 114.584004][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 114.598524][T11219] IPVS: Error joining to the multicast group [ 114.609770][ T29] audit: type=1400 audit(114.541:3532): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.632459][ T29] audit: type=1400 audit(114.541:3533): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.655123][ T29] audit: type=1400 audit(114.541:3534): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=739 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.679171][ T29] audit: type=1400 audit(114.541:3535): avc: denied { map_create } for pid=11218 comm="syz.4.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.697841][ T29] audit: type=1400 audit(114.541:3536): avc: denied { bpf } for pid=11218 comm="syz.4.2909" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.811606][T11237] uprobe: syz.0.2900:11237 failed to unregister, leaking uprobe [ 115.057372][T11273] bridge0: entered promiscuous mode [ 115.077347][T11273] macsec1: entered promiscuous mode [ 115.101759][T11273] bridge0: port 3(macsec1) entered blocking state [ 115.108510][T11273] bridge0: port 3(macsec1) entered disabled state [ 115.137590][T11273] macsec1: entered allmulticast mode [ 115.143003][T11273] bridge0: entered allmulticast mode [ 115.196205][T11324] futex_wake_op: syz.0.2915 tries to shift op by -1; fix this program [ 115.232104][T11273] macsec1: left allmulticast mode [ 115.237210][T11273] bridge0: left allmulticast mode [ 115.249894][T11273] bridge0: left promiscuous mode [ 115.256645][T11328] loop0: detected capacity change from 0 to 1024 [ 115.271810][T11328] EXT4-fs: Ignoring removed bh option [ 115.280617][T11328] EXT4-fs: inline encryption not supported [ 115.286577][T11328] EXT4-fs: Ignoring removed nobh option [ 115.301316][T11328] ext4: Unknown parameter 'uid' [ 115.545613][T11350] uprobe: syz.4.2924:11350 failed to unregister, leaking uprobe [ 115.713391][T11360] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2930'. [ 115.760619][T11362] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2932'. [ 115.961789][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'. [ 116.034275][T11403] netlink: 'syz.4.2951': attribute type 22 has an invalid length. [ 116.042224][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 116.082619][T11403] netlink: 'syz.4.2951': attribute type 22 has an invalid length. [ 116.090569][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 116.153781][T11420] sd 0:0:1:0: device reset [ 116.170608][T11424] loop1: detected capacity change from 0 to 1024 [ 116.192956][T11424] EXT4-fs: Ignoring removed bh option [ 116.215131][T11424] EXT4-fs: inline encryption not supported [ 116.221257][T11424] EXT4-fs: Ignoring removed nobh option [ 116.266145][T11424] ext4: Unknown parameter 'uid' [ 116.314026][T11435] vhci_hcd: invalid port number 96 [ 116.319306][T11435] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 116.400393][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2966'. [ 116.496435][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2973'. [ 116.564715][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 116.650898][T11465] vhci_hcd: invalid port number 96 [ 116.656104][T11465] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 117.127373][T11481] sd 0:0:1:0: device reset [ 117.199645][T11492] loop3: detected capacity change from 0 to 512 [ 117.231847][T11492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.308462][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.459262][T11516] dvmrp0: entered allmulticast mode [ 117.482968][T11534] bridge0: entered promiscuous mode [ 117.488246][T11534] macsec1: entered promiscuous mode [ 117.497001][T11534] bridge0: port 3(macsec1) entered blocking state [ 117.503502][T11534] bridge0: port 3(macsec1) entered disabled state [ 117.510258][T11534] macsec1: entered allmulticast mode [ 117.515649][T11534] bridge0: entered allmulticast mode [ 117.521612][T11534] macsec1: left allmulticast mode [ 117.526699][T11534] bridge0: left allmulticast mode [ 117.532867][T11534] bridge0: left promiscuous mode [ 117.598116][T11559] loop0: detected capacity change from 0 to 2048 [ 117.643642][T11559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.662013][T11609] netlink: 'syz.2.3004': attribute type 1 has an invalid length. [ 117.683697][T11609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.710123][T11646] netlink: 'syz.1.3006': attribute type 3 has an invalid length. [ 117.713917][T11609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.725256][T11609] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.737701][T11609] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 117.751636][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.859907][T11670] netlink: 'syz.4.3015': attribute type 10 has an invalid length. [ 117.885669][T11675] block device autoloading is deprecated and will be removed. [ 117.999826][T11692] ALSA: seq fatal error: cannot create timer (-19) [ 118.042335][T11707] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 118.058147][T11707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.077580][T11707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.093324][T11751] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3029'. [ 118.103561][T11707] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 118.115636][T11707] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 118.149654][T11758] loop0: detected capacity change from 0 to 1024 [ 118.163585][T11758] EXT4-fs: Ignoring removed i_version option [ 118.169636][T11758] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.228111][T11765] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 118.235893][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 118.250011][T11758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.272551][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 118.289739][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.903148][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 118.909073][T11786] loop3: detected capacity change from 0 to 1024 [ 118.928717][T11786] EXT4-fs: Ignoring removed bh option [ 118.935601][T11786] EXT4-fs: inline encryption not supported [ 118.941744][T11786] EXT4-fs: Ignoring removed nobh option [ 118.952380][T11786] ext4: Unknown parameter 'uid' [ 118.966703][T11789] bridge0: entered promiscuous mode [ 118.972313][T11789] macsec1: entered promiscuous mode [ 118.978976][T11789] bridge0: port 3(macsec1) entered blocking state [ 118.985531][T11789] bridge0: port 3(macsec1) entered disabled state [ 118.992412][T11789] macsec1: entered allmulticast mode [ 118.997730][T11789] bridge0: entered allmulticast mode [ 119.004106][T11789] macsec1: left allmulticast mode [ 119.009191][T11789] bridge0: left allmulticast mode [ 119.015679][T11789] bridge0: left promiscuous mode [ 119.041975][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'. [ 119.188716][T11826] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3057'. [ 119.206684][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 119.206704][ T29] audit: type=1400 audit(119.181:3767): avc: denied { read } for pid=11827 comm="syz.4.3058" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.207239][T11828] loop9: detected capacity change from 0 to 7 [ 119.213162][ T29] audit: type=1400 audit(119.181:3768): avc: denied { open } for pid=11827 comm="syz.4.3058" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.240122][T11828] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.267320][ T29] audit: type=1400 audit(119.181:3769): avc: denied { ioctl } for pid=11827 comm="syz.4.3058" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.300010][T11828] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.307966][T11828] loop9: unable to read partition table [ 119.315328][T11828] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 119.315328][T11828] ) failed (rc=-5) [ 119.351823][ T29] audit: type=1400 audit(119.331:3770): avc: denied { write } for pid=11836 comm="syz.1.3061" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.388052][T11841] bridge0: entered promiscuous mode [ 119.392522][ T29] audit: type=1400 audit(119.331:3771): avc: denied { connect } for pid=11830 comm="syz.2.3060" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.398644][T11841] macsec0: entered promiscuous mode [ 119.421695][T11841] bridge0: port 3(macsec0) entered blocking state [ 119.428239][T11841] bridge0: port 3(macsec0) entered disabled state [ 119.436129][T11841] macsec0: entered allmulticast mode [ 119.441485][T11841] bridge0: entered allmulticast mode [ 119.448686][T11841] macsec0: left allmulticast mode [ 119.453950][T11841] bridge0: left allmulticast mode [ 119.466046][T11841] bridge0: left promiscuous mode [ 119.480429][T11849] block device autoloading is deprecated and will be removed. [ 119.577679][T11861] loop4: detected capacity change from 0 to 512 [ 119.585405][T11861] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 119.621542][T11869] loop1: detected capacity change from 0 to 512 [ 119.634265][T11861] EXT4-fs (loop4): failed to open journal device unknown-block(0,4) -6 [ 119.645321][T11869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.677909][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.694713][ T29] audit: type=1326 audit(119.671:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 119.717771][ T29] audit: type=1326 audit(119.671:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 119.742473][ T29] audit: type=1326 audit(119.721:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 119.765412][ T29] audit: type=1326 audit(119.721:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 119.788410][ T29] audit: type=1326 audit(119.721:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c004eba9 code=0x7ffc0000 [ 119.855489][T11890] bridge0: entered promiscuous mode [ 119.860898][T11890] macsec1: entered promiscuous mode [ 119.868667][T11890] bridge0: port 3(macsec1) entered blocking state [ 119.870498][ T3398] hid_parser_main: 33 callbacks suppressed [ 119.870695][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.875287][T11890] bridge0: port 3(macsec1) entered disabled state [ 119.881007][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.893490][T11890] macsec1: entered allmulticast mode [ 119.894793][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.902165][T11890] bridge0: entered allmulticast mode [ 119.926662][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.934170][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.941651][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.949364][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.956865][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.964519][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.972133][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 119.979913][T11890] macsec1: left allmulticast mode [ 119.982463][ T3398] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 119.985046][T11890] bridge0: left allmulticast mode [ 120.036193][T11890] bridge0: left promiscuous mode [ 120.143848][ T2957] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 120.220772][T11952] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 120.227360][T11952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.235080][T11952] vhci_hcd vhci_hcd.0: Device attached [ 120.262411][T11952] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 120.268964][T11952] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.276792][T11952] vhci_hcd vhci_hcd.0: Device attached [ 120.288255][T11952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.317329][T11952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.326545][T11952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.389357][T11952] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 120.396720][T11952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.404540][T11952] vhci_hcd vhci_hcd.0: Device attached [ 120.414136][T11989] vhci_hcd: connection closed [ 120.414216][T11246] vhci_hcd: stop threads [ 120.414711][T11958] vhci_hcd: connection closed [ 120.418954][T11246] vhci_hcd: release socket [ 120.424505][T11953] vhci_hcd: connection closed [ 120.427931][T11246] vhci_hcd: disconnect device [ 120.476505][T11995] bridge0: entered promiscuous mode [ 120.485874][T11995] macsec1: entered promiscuous mode [ 120.495549][T11995] bridge0: port 3(macsec1) entered blocking state [ 120.502098][T11995] bridge0: port 3(macsec1) entered disabled state [ 120.508610][ T2957] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 120.516160][T11954] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 120.525681][T11995] macsec1: entered allmulticast mode [ 120.531141][T11995] bridge0: entered allmulticast mode [ 120.537324][T11246] vhci_hcd: stop threads [ 120.541683][T11246] vhci_hcd: release socket [ 120.546122][T11246] vhci_hcd: disconnect device [ 120.551289][T11995] macsec1: left allmulticast mode [ 120.556362][T11995] bridge0: left allmulticast mode [ 120.563439][T11995] bridge0: left promiscuous mode [ 120.570182][T11246] vhci_hcd: stop threads [ 120.574594][T11246] vhci_hcd: release socket [ 120.579082][T11246] vhci_hcd: disconnect device [ 121.082795][T12034] __nla_validate_parse: 1 callbacks suppressed [ 121.082811][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3120'. [ 121.098186][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3120'. [ 121.141700][T12036] vhci_hcd: invalid port number 96 [ 121.146998][T12036] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 121.230842][T12051] bridge0: entered promiscuous mode [ 121.238617][T12051] macsec0: entered promiscuous mode [ 121.252914][T12051] bridge0: port 3(macsec0) entered blocking state [ 121.259408][T12051] bridge0: port 3(macsec0) entered disabled state [ 121.280924][T12051] macsec0: entered allmulticast mode [ 121.286313][T12051] bridge0: entered allmulticast mode [ 121.309540][T12051] macsec0: left allmulticast mode [ 121.312260][T12062] 9pnet: p9_errstr2errno: server reported unknown error [ 121.314818][T12051] bridge0: left allmulticast mode [ 121.329304][T12051] bridge0: left promiscuous mode [ 121.420195][T12074] loop3: detected capacity change from 0 to 512 [ 121.439597][T12074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.471063][ T3398] kernel write not supported for file bpf-prog (pid: 3398 comm: kworker/1:4) [ 121.482969][T12085] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3143'. [ 121.495665][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.723464][T12120] loop0: detected capacity change from 0 to 512 [ 121.740296][T12120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.767405][T12120] EXT4-fs error (device loop0): ext4_init_orphan_info:611: comm syz.0.3159: orphan file block 0: bad magic [ 121.792603][T12120] EXT4-fs (loop0): Remounting filesystem read-only [ 121.830881][T12120] EXT4-fs (loop0): mount failed [ 121.890458][T12144] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3168'. [ 122.099722][T12182] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3182'. [ 122.293629][T12203] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.327146][T12209] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 123.196208][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 123.432598][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 123.487890][T12288] loop0: detected capacity change from 0 to 732 [ 123.500211][T12288] 9pnet: p9_errstr2errno: server reported unknown error [ 123.803312][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'. [ 123.943410][T12369] loop1: detected capacity change from 0 to 1024 [ 123.956641][T12369] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.967610][T12369] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.979226][T12369] JBD2: no valid journal superblock found [ 123.983858][T12379] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 123.985205][T12369] EXT4-fs (loop1): Could not load journal inode [ 124.024254][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'. [ 124.033359][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 124.034447][T12379] SELinux: failed to load policy [ 124.044258][T12386] netlink: 'syz.2.3256': attribute type 6 has an invalid length. [ 124.055505][T12369] SELinux: policydb version 680626974 does not match my version range 15-35 [ 124.080123][T12369] SELinux: failed to load policy [ 124.115218][T12398] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 124.144972][T12408] 9pnet: Could not find request transport: 0xffffffffffffffff [ 124.208174][T12415] loop4: detected capacity change from 0 to 512 [ 124.231287][T12415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3262: bg 0: block 104: invalid block bitmap [ 124.287737][T12415] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.297955][T12433] netlink: 'syz.0.3270': attribute type 4 has an invalid length. [ 124.311022][T12415] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3262: invalid indirect mapped block 1 (level 1) [ 124.326124][T12415] EXT4-fs (loop4): 1 truncate cleaned up [ 124.341176][T12415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.364430][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 124.364450][ T29] audit: type=1326 audit(124.336:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.393762][ T29] audit: type=1326 audit(124.336:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.416858][ T29] audit: type=1326 audit(124.336:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.439834][ T29] audit: type=1326 audit(124.336:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.463003][ T29] audit: type=1326 audit(124.336:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.486397][ T29] audit: type=1326 audit(124.336:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.509414][ T29] audit: type=1326 audit(124.336:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.532422][ T29] audit: type=1326 audit(124.336:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.555555][ T29] audit: type=1326 audit(124.336:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.578596][ T29] audit: type=1326 audit(124.336:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369cf2eba9 code=0x7ffc0000 [ 124.607977][T12452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12452 comm=syz.2.3278 [ 124.639296][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.903055][T12491] rdma_op ffff88811c90d180 conn xmit_rdma 0000000000000000 [ 124.946724][T12498] : renamed from vlan0 (while UP) [ 125.011483][T12511] loop0: detected capacity change from 0 to 1024 [ 125.069171][T12511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.146697][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.202625][T12538] loop4: detected capacity change from 0 to 1024 [ 125.209275][T12538] EXT4-fs: Ignoring removed orlov option [ 125.246961][T12538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.362422][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.531185][ T2957] usb 3-1: enqueue for inactive port 0 [ 125.548528][ T2957] usb 3-1: enqueue for inactive port 0 [ 125.565961][T12601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12601 comm=syz.4.3333 [ 125.630857][ T2957] vhci_hcd: vhci_device speed not set [ 125.693523][T12618] loop0: detected capacity change from 0 to 512 [ 125.711250][T12618] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.842653][T12641] ip6gre1: entered allmulticast mode [ 125.862722][T12637] loop4: detected capacity change from 0 to 1024 [ 125.887128][T12637] EXT4-fs: Ignoring removed nobh option [ 125.933426][T12637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.959624][T12660] SELinux: Context @ is not valid (left unmapped). [ 125.971999][T12637] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 125.993680][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.263882][T12723] netlink: 'syz.0.3383': attribute type 29 has an invalid length. [ 126.284089][T12723] netlink: 'syz.0.3383': attribute type 29 has an invalid length. [ 126.298610][T12723] __nla_validate_parse: 3 callbacks suppressed [ 126.298629][T12723] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3383'. [ 126.419732][T12752] loop1: detected capacity change from 0 to 164 [ 126.429584][T12752] syz.1.3396: attempt to access beyond end of device [ 126.429584][T12752] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.444380][T12752] syz.1.3396: attempt to access beyond end of device [ 126.444380][T12752] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 126.496873][T12763] loop0: detected capacity change from 0 to 1024 [ 126.513323][T12763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.537266][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.556128][T12770] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 126.634472][T12780] loop3: detected capacity change from 0 to 8192 [ 126.682659][T12793] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 126.994290][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 127.018177][T12822] netlink: 'syz.4.3425': attribute type 29 has an invalid length. [ 127.027073][T12822] netlink: 'syz.4.3425': attribute type 29 has an invalid length. [ 127.036749][T12822] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3425'. [ 127.161795][T12828] bond4: entered promiscuous mode [ 127.166887][T12828] bond4: entered allmulticast mode [ 127.172266][T12828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.186331][T12828] bond4 (unregistering): Released all slaves [ 127.444265][T12906] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.553046][T12938] atomic_op ffff88811ca62128 conn xmit_atomic 0000000000000000 [ 127.672043][T12947] netlink: 'syz.0.3453': attribute type 10 has an invalid length. [ 127.679981][T12947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3453'. [ 127.691398][T12947] dummy0: entered promiscuous mode [ 127.697526][T12947] bridge0: port 3(dummy0) entered blocking state [ 127.704084][T12947] bridge0: port 3(dummy0) entered disabled state [ 127.712157][T12947] dummy0: entered allmulticast mode [ 127.718396][T12947] bridge0: port 3(dummy0) entered blocking state [ 127.724980][T12947] bridge0: port 3(dummy0) entered forwarding state [ 127.732020][T12948] vhci_hcd: invalid port number 96 [ 127.737198][T12948] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 127.849959][T12954] loop0: detected capacity change from 0 to 1024 [ 127.881162][T12954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.897715][T12964] SELinux: failed to load policy [ 127.983689][T12975] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 128.071559][T12996] loop4: detected capacity change from 0 to 164 [ 128.083510][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.117180][T12996] syz.4.3454: attempt to access beyond end of device [ 128.117180][T12996] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 128.154475][T12996] syz.4.3454: attempt to access beyond end of device [ 128.154475][T12996] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 128.232487][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 128.245359][T13016] loop4: detected capacity change from 0 to 512 [ 128.287246][T13016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.336408][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.423239][T13044] loop3: detected capacity change from 0 to 164 [ 128.438623][T13044] syz.3.3470: attempt to access beyond end of device [ 128.438623][T13044] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 128.465241][T13044] syz.3.3470: attempt to access beyond end of device [ 128.465241][T13044] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 128.559268][ T3391] kernel write not supported for file bpf-prog (pid: 3391 comm: kworker/1:3) [ 128.583772][T13065] loop0: detected capacity change from 0 to 8192 [ 128.612581][T13073] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 128.623497][T13073] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 129.233216][T13088] netlink: 8460 bytes leftover after parsing attributes in process `syz.0.3497'. [ 129.370702][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 129.370720][ T29] audit: type=1326 audit(129.346:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.399799][ T29] audit: type=1326 audit(129.346:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.463984][T13107] atomic_op ffff88811ca0c528 conn xmit_atomic 0000000000000000 [ 129.467522][ T29] audit: type=1326 audit(129.346:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.494624][ T29] audit: type=1326 audit(129.406:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.517451][ T29] audit: type=1326 audit(129.406:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.545833][ T29] audit: type=1326 audit(129.406:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.568792][ T29] audit: type=1326 audit(129.426:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.591640][ T29] audit: type=1326 audit(129.426:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.614577][ T29] audit: type=1326 audit(129.426:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13099 comm="syz.0.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d18beba9 code=0x7ffc0000 [ 129.661343][T13114] rdma_op ffff88811ca60580 conn xmit_rdma 0000000000000000 [ 129.717296][T13123] netlink: 'syz.2.3501': attribute type 4 has an invalid length. [ 129.763086][ T29] audit: type=1326 audit(129.746:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13124 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f51eba9 code=0x7ffc0000 [ 129.826519][T13127] bond1: entered promiscuous mode [ 129.831707][T13127] bond1: entered allmulticast mode [ 129.839227][T13127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.852499][T13127] bond1 (unregistering): Released all slaves [ 129.992649][ T3383] Process accounting resumed [ 130.079759][T13221] atomic_op ffff88811ae1a128 conn xmit_atomic 0000000000000000 [ 130.404439][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 130.572232][T13298] rdma_op ffff88811a558580 conn xmit_rdma 0000000000000000 [ 130.635505][ T2957] IPVS: starting estimator thread 0... [ 130.662568][T13314] netlink: 'syz.4.3555': attribute type 1 has an invalid length. [ 130.670371][T13314] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3555'. [ 130.717237][T13320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13320 comm=syz.1.3558 [ 130.740743][T13310] IPVS: using max 2256 ests per chain, 112800 per kthread [ 130.820500][T13352] netlink: 'syz.0.3563': attribute type 10 has an invalid length. [ 130.831998][T13352] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.965162][T13366] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.981989][T13366] FAT-fs (loop1): unable to read boot sector [ 131.126007][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 131.135223][T13396] netlink: 'syz.3.3584': attribute type 1 has an invalid length. [ 131.143095][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 131.162611][T13396] netlink: 'syz.3.3584': attribute type 1 has an invalid length. [ 131.345147][T13431] netlink: 'syz.1.3598': attribute type 21 has an invalid length. [ 131.353175][T13431] __nla_validate_parse: 2 callbacks suppressed [ 131.353189][T13431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3598'. [ 131.368483][T13431] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 131.405277][T13433] bridge_slave_0: left promiscuous mode [ 131.411063][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.421421][T13433] bridge_slave_1: left allmulticast mode [ 131.427180][T13433] bridge_slave_1: left promiscuous mode [ 131.432980][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.443160][T13433] bond0: (slave bond_slave_0): Releasing backup interface [ 131.462773][T13433] bond0: (slave bond_slave_1): Releasing backup interface [ 131.486488][T13433] team0: Port device team_slave_0 removed [ 131.514258][T13433] team0: Port device team_slave_1 removed [ 131.532158][T13433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.539785][T13433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.551032][T13433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.558474][T13433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.709732][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3611'. [ 131.897430][T13481] loop0: detected capacity change from 0 to 1024 [ 131.905345][T13481] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.919009][T13481] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3619: bg 0: block 10: padding at end of block bitmap is not set [ 131.935436][T13481] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3619: Failed to acquire dquot type 0 [ 131.966399][T13481] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3619: Failed to acquire dquot type 0 [ 131.982117][T13481] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.3619: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.996128][T13481] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3619: Failed to acquire dquot type 0 [ 132.009734][T13481] EXT4-fs (loop0): 1 orphan inode deleted [ 132.016682][T13481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.019309][T13497] netlink: 'syz.1.3621': attribute type 1 has an invalid length. [ 132.050488][T13497] bond2: entered promiscuous mode [ 132.057143][T13497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.095602][T13497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.103086][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.150280][T13497] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 132.160561][T13497] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 132.190366][T13497] bond2: (slave vxcan3): making interface the new active one [ 132.197874][T13497] vxcan3: entered promiscuous mode [ 132.217892][T13497] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 132.256341][T13554] netlink: 'syz.3.3631': attribute type 3 has an invalid length. [ 132.349527][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3636'. [ 132.405050][T13580] macvlan1: entered promiscuous mode [ 132.414081][T13580] ipvlan0: entered promiscuous mode [ 132.422235][T13580] ipvlan0: left promiscuous mode [ 132.428539][T13580] macvlan1: left promiscuous mode [ 132.684913][T13606] wg2: entered promiscuous mode [ 132.689862][T13606] wg2: entered allmulticast mode [ 133.141045][T13676] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 133.335805][T13699] futex_wake_op: syz.4.3680 tries to shift op by -1; fix this program [ 133.714518][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3695'. [ 133.831091][T13704] Set syz1 is full, maxelem 65536 reached [ 134.056676][T13794] loop0: detected capacity change from 0 to 512 [ 134.098200][T13794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.126132][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.333399][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'. [ 134.384397][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 134.402125][T13818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3721'. [ 134.448517][T13822] ref_ctr_offset mismatch. inode: 0xf29 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 134.487603][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 134.487619][ T29] audit: type=1326 audit(134.466:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 134.518577][ T29] audit: type=1326 audit(134.466:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 134.541584][ T29] audit: type=1326 audit(134.466:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f065bffd510 code=0x7ffc0000 [ 134.564753][ T29] audit: type=1326 audit(134.466:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 134.587720][ T29] audit: type=1326 audit(134.466:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f065bffd80a code=0x7ffc0000 [ 134.612294][ T29] audit: type=1326 audit(134.596:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f065c031465 code=0x7ffc0000 [ 134.657720][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'. [ 134.685334][T13837] atomic_op ffff88811a558528 conn xmit_atomic 0000000000000000 [ 134.745397][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 134.811900][ T29] audit: type=1326 audit(134.796:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 134.835006][ T29] audit: type=1326 audit(134.796:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.1.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 134.860504][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 134.917903][ T29] audit: type=1400 audit(134.896:4344): avc: denied { read } for pid=13862 comm="syz.4.3737" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.940834][ T29] audit: type=1400 audit(134.896:4345): avc: denied { open } for pid=13862 comm="syz.4.3737" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.051493][T13866] vhci_hcd: invalid port number 11 [ 135.056651][T13866] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 135.347188][T13909] dummy0: left allmulticast mode [ 135.352322][T13909] bridge0: port 3(dummy0) entered disabled state [ 135.367641][T13909] bridge_slave_0: left allmulticast mode [ 135.373488][T13909] bridge_slave_0: left promiscuous mode [ 135.379246][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.393241][T13909] bridge_slave_1: left allmulticast mode [ 135.398942][T13909] bridge_slave_1: left promiscuous mode [ 135.404731][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.421513][T13909] .`: (slave bond_slave_0): Releasing backup interface [ 135.443445][T13909] .`: (slave bond_slave_1): Releasing backup interface [ 135.467709][T13909] team0: Port device team_slave_0 removed [ 135.491725][T13909] team0: Port device team_slave_1 removed [ 135.508836][T13909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.516318][T13909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.553711][T13909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.561225][T13909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.793758][T13939] loop4: detected capacity change from 0 to 512 [ 135.824972][T13939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.876601][T13939] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3756: corrupted inode contents [ 135.911998][T13939] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3756: mark_inode_dirty error [ 135.932339][T13939] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3756: corrupted inode contents [ 135.951534][T13958] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3756: corrupted inode contents [ 135.987089][T13958] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3756: mark_inode_dirty error [ 135.999108][T13958] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3756: corrupted inode contents [ 136.067784][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.143703][T13976] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.153590][T13976] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 136.197129][T13983] loop4: detected capacity change from 0 to 128 [ 136.227749][T13983] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.256443][T13983] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.406977][T14004] netem: change failed [ 136.539579][T14019] loop3: detected capacity change from 0 to 512 [ 136.565105][T14019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.599780][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.649248][ T3383] Process accounting resumed [ 136.876501][T14062] loop3: detected capacity change from 0 to 8192 [ 136.951612][T14062] loop3: p1 p4 [ 136.955178][T14062] loop3: p1 size 196608 extends beyond EOD, truncated [ 136.974625][T14062] loop3: p4 size 50331648 extends beyond EOD, truncated [ 137.147965][T14088] __nla_validate_parse: 5 callbacks suppressed [ 137.147984][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 137.388726][T14093] loop1: detected capacity change from 0 to 512 [ 137.402005][T14078] Set syz1 is full, maxelem 65536 reached [ 137.408846][T14093] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.440388][T14093] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.3819: corrupted xattr entries [ 137.477564][T14093] EXT4-fs (loop1): 1 truncate cleaned up [ 137.489658][T14093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.578062][T14105] netlink: 'syz.3.3823': attribute type 21 has an invalid length. [ 137.586018][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 137.598288][T14107] netlink: 'syz.2.3822': attribute type 1 has an invalid length. [ 137.599078][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.606133][T14107] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3822'. [ 137.619492][T14105] netlink: 'syz.3.3823': attribute type 21 has an invalid length. [ 137.632724][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 137.644654][T14109] loop4: detected capacity change from 0 to 512 [ 137.654084][T14109] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.689619][T14109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.709103][T14114] loop1: detected capacity change from 0 to 8192 [ 137.727058][T14109] EXT4-fs (loop4): 1 truncate cleaned up [ 137.729509][T14114] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.737177][T14109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.757837][T14114] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3825'. [ 137.758973][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 137.771033][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 137.975861][T14142] loop3: detected capacity change from 0 to 512 [ 137.984434][T14142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.006065][T14142] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.3836: corrupted xattr entries [ 138.018688][T14142] EXT4-fs (loop3): 1 truncate cleaned up [ 138.025146][T14142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.086209][T14154] loop1: detected capacity change from 0 to 1024 [ 138.087286][T14152] bridge_slave_0: left promiscuous mode [ 138.096253][T14154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.098573][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.120310][T14154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3841: bg 0: block 10: padding at end of block bitmap is not set [ 138.121215][T14152] bridge_slave_1: left allmulticast mode [ 138.136497][T14154] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3841: Failed to acquire dquot type 0 [ 138.140213][T14152] bridge_slave_1: left promiscuous mode [ 138.140365][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.153381][T14154] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3841: Failed to acquire dquot type 0 [ 138.176886][T14154] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.3841: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.191228][T14152] bond0: (slave bond_slave_0): Releasing backup interface [ 138.192537][T14154] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3841: Failed to acquire dquot type 0 [ 138.210399][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.220337][T14152] bond0: (slave bond_slave_1): Releasing backup interface [ 138.235107][T14152] team0: Port device team_slave_0 removed [ 138.248710][T14154] EXT4-fs (loop1): 1 orphan inode deleted [ 138.256771][T14152] team0: Port device team_slave_1 removed [ 138.263733][T14154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.278785][T14160] loop3: detected capacity change from 0 to 512 [ 138.286731][T14152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.294221][T14152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.313603][T14152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.321189][T14152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.343429][T14160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.357141][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.369173][T14160] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3842: corrupted inode contents [ 138.412946][T14160] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3842: mark_inode_dirty error [ 138.454563][T14160] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3842: corrupted inode contents [ 138.472606][T14170] loop1: detected capacity change from 0 to 512 [ 138.507320][T14169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3842: corrupted inode contents [ 138.510550][T14175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.546372][T14169] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3842: mark_inode_dirty error [ 138.560368][T14170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.577766][T14175] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.586214][T14169] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3842: corrupted inode contents [ 138.626851][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.655587][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.668490][T14191] loop0: detected capacity change from 0 to 1024 [ 138.692711][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.704873][T14191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.763503][T14191] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.816323][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.833687][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 138.845363][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 138.952637][T14252] loop0: detected capacity change from 0 to 2048 [ 138.969875][T14245] loop1: detected capacity change from 0 to 8192 [ 138.980766][T14252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.005581][T14263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.032285][T14245] loop1: p1 p4 [ 139.035904][T14245] loop1: p1 size 196608 extends beyond EOD, truncated [ 139.043626][T14245] loop1: p4 size 50331648 extends beyond EOD, truncated [ 139.202964][T14293] loop1: detected capacity change from 0 to 1024 [ 139.223726][T14293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.235302][T14295] loop3: detected capacity change from 0 to 8192 [ 139.242746][T14293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.249004][T14295] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.263445][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.264376][T14295] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3881'. [ 139.275153][T14293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.375913][T14311] IPVS: stopping master sync thread 14313 ... [ 139.376057][T14313] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 139.394503][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.490722][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 139.490799][ T29] audit: type=1326 audit(139.476:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.525536][ T29] audit: type=1326 audit(139.476:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.548588][ T29] audit: type=1326 audit(139.476:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.571627][ T29] audit: type=1326 audit(139.476:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.594700][ T29] audit: type=1326 audit(139.496:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.617647][ T29] audit: type=1326 audit(139.506:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.640711][ T29] audit: type=1326 audit(139.516:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.663583][ T29] audit: type=1326 audit(139.516:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.686469][ T29] audit: type=1326 audit(139.516:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14328 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065bffeba9 code=0x7ffc0000 [ 139.728340][ T29] audit: type=1400 audit(139.706:4434): avc: denied { create } for pid=14340 comm="syz.3.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.873213][T14361] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 139.925288][T14366] loop1: detected capacity change from 0 to 2048 [ 139.953083][T14366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.979629][T14368] loop4: detected capacity change from 0 to 8192 [ 140.132496][T14389] bridge0: port 1(batadv1) entered blocking state [ 140.138992][T14389] bridge0: port 1(batadv1) entered disabled state [ 140.166576][T14389] batadv1: entered allmulticast mode [ 140.177277][T14389] batadv1: entered promiscuous mode [ 140.203060][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.295494][T14427] IPv4: Oversized IP packet from 127.202.26.0 [ 140.317864][T14429] random: crng reseeded on system resumption [ 140.378116][T14439] loop4: detected capacity change from 0 to 2048 [ 140.404800][T14439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.502249][T14461] ALSA: seq fatal error: cannot create timer (-22) [ 140.622982][T14472] sd 0:0:1:0: device reset [ 140.642140][T11248] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 140.651521][T11248] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 140.727321][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.773623][T14486] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 141.020150][T14514] loop0: detected capacity change from 0 to 128 [ 141.060444][T14521] netlink: 'syz.4.3961': attribute type 3 has an invalid length. [ 141.209887][T14544] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 141.284265][T14561] loop1: detected capacity change from 0 to 512 [ 141.291411][T14563] random: crng reseeded on system resumption [ 141.326268][T14561] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.335613][T14561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.413624][T14561] EXT4-fs (loop1): 1 truncate cleaned up [ 141.419762][T14561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.543977][T14576] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 141.904755][T14579] ================================================================== [ 141.912877][T14579] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 141.921146][T14579] [ 141.923480][T14579] write to 0xffff8881071ff6ac of 4 bytes by task 14561 on cpu 0: [ 141.931194][T14579] xas_set_mark+0x12b/0x140 [ 141.935740][T14579] __folio_start_writeback+0x1dd/0x440 [ 141.941207][T14579] ext4_bio_write_folio+0x5ad/0x9f0 [ 141.946412][T14579] mpage_process_page_bufs+0x4a1/0x620 [ 141.951874][T14579] mpage_prepare_extent_to_map+0x786/0xc00 [ 141.957714][T14579] ext4_do_writepages+0x708/0x2750 [ 141.962861][T14579] ext4_writepages+0x176/0x300 [ 141.967624][T14579] do_writepages+0x1c3/0x310 [ 141.972224][T14579] file_write_and_wait_range+0x156/0x2c0 [ 141.977872][T14579] generic_buffers_fsync_noflush+0x45/0x120 [ 141.983869][T14579] ext4_sync_file+0x1ab/0x690 [ 141.988542][T14579] vfs_fsync_range+0x10a/0x130 [ 141.993313][T14579] ext4_buffered_write_iter+0x34f/0x3c0 [ 141.998877][T14579] ext4_file_write_iter+0xdbf/0xf00 [ 142.004087][T14579] iter_file_splice_write+0x666/0xa60 [ 142.009457][T14579] direct_splice_actor+0x156/0x2a0 [ 142.014567][T14579] splice_direct_to_actor+0x312/0x680 [ 142.019945][T14579] do_splice_direct+0xda/0x150 [ 142.024714][T14579] do_sendfile+0x380/0x650 [ 142.029164][T14579] __x64_sys_sendfile64+0x105/0x150 [ 142.034394][T14579] x64_sys_call+0x2bb0/0x2ff0 [ 142.039079][T14579] do_syscall_64+0xd2/0x200 [ 142.043621][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.049516][T14579] [ 142.051845][T14579] read to 0xffff8881071ff6ac of 4 bytes by task 14579 on cpu 1: [ 142.059501][T14579] filemap_write_and_wait_range+0xfc/0x340 [ 142.065326][T14579] filemap_invalidate_pages+0xa4/0x1a0 [ 142.070791][T14579] kiocb_invalidate_pages+0x6e/0x80 [ 142.075989][T14579] __iomap_dio_rw+0x5d4/0x1250 [ 142.080765][T14579] iomap_dio_rw+0x40/0x90 [ 142.085098][T14579] ext4_file_write_iter+0xad9/0xf00 [ 142.090329][T14579] iter_file_splice_write+0x666/0xa60 [ 142.095708][T14579] direct_splice_actor+0x156/0x2a0 [ 142.100824][T14579] splice_direct_to_actor+0x312/0x680 [ 142.106220][T14579] do_splice_direct+0xda/0x150 [ 142.110985][T14579] do_sendfile+0x380/0x650 [ 142.115419][T14579] __x64_sys_sendfile64+0x105/0x150 [ 142.120633][T14579] x64_sys_call+0x2bb0/0x2ff0 [ 142.125323][T14579] do_syscall_64+0xd2/0x200 [ 142.129838][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.135735][T14579] [ 142.138055][T14579] value changed: 0x0a000021 -> 0x04000021 [ 142.143767][T14579] [ 142.146091][T14579] Reported by Kernel Concurrency Sanitizer on: [ 142.152258][T14579] CPU: 1 UID: 0 PID: 14579 Comm: syz.1.3974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.162108][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.172182][T14579] ================================================================== [ 142.290080][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.