last executing test programs: 1m22.877527533s ago: executing program 4 (id=2357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001f80)=""/4103, 0x1007) 1m22.822126153s ago: executing program 4 (id=2371): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 1m22.790753674s ago: executing program 4 (id=2363): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) unshare(0x2c040000) 1m22.704008925s ago: executing program 4 (id=2369): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x405, 0x2, 0x0, 0x12, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e22000000c3f414818381199c01000100", [0x204]}) 1m22.509668688s ago: executing program 4 (id=2376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m22.38618601s ago: executing program 4 (id=2381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) 1m22.38605611s ago: executing program 32 (id=2381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) 23.147025483s ago: executing program 0 (id=4599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r1) 23.116545853s ago: executing program 0 (id=4610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.969374025s ago: executing program 0 (id=4603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) getrandom(0x0, 0x0, 0x2) 22.941174515s ago: executing program 0 (id=4605): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 22.914557776s ago: executing program 0 (id=4607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22.795337418s ago: executing program 0 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 22.795120428s ago: executing program 33 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 1.766576474s ago: executing program 2 (id=5379): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1.630016966s ago: executing program 6 (id=5386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x2}], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1.613480786s ago: executing program 2 (id=5388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000e8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') read$msr(r2, &(0x7f0000000280)=""/182, 0xb6) 1.559124187s ago: executing program 2 (id=5389): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 1.302215981s ago: executing program 6 (id=5392): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) creat(&(0x7f00000001c0)='./bus\x00', 0x4e) 1.301959171s ago: executing program 2 (id=5394): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x118}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.210366642s ago: executing program 1 (id=5401): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1.209561352s ago: executing program 2 (id=5411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) 1.001881465s ago: executing program 1 (id=5402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) 1.001778255s ago: executing program 2 (id=5403): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.001698635s ago: executing program 5 (id=5404): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100b062e0676fbd371098a74f32d00000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='B'], 0x144}}, 0x0) 966.946216ms ago: executing program 5 (id=5405): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/17]}, 0x89) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 953.214286ms ago: executing program 1 (id=5406): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 935.697886ms ago: executing program 6 (id=5407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8410b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x1721, 0x0, 0x3, 0x1, 0x9, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 925.179496ms ago: executing program 1 (id=5408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 638.076081ms ago: executing program 1 (id=5409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x2}], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 637.82999ms ago: executing program 3 (id=5410): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 637.376441ms ago: executing program 6 (id=5424): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) creat(&(0x7f00000001c0)='./bus\x00', 0x4e) 636.924481ms ago: executing program 5 (id=5425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 353.378525ms ago: executing program 3 (id=5414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sysinfo(&(0x7f0000000000)=""/52) 288.529355ms ago: executing program 5 (id=5415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='rxrpc_peer\x00', r0, 0x0, 0x5}, 0x18) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 172.857157ms ago: executing program 6 (id=5417): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000dc0)=ANY=[], 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000940], 0x0, 0x0, 0x0}, 0x135) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 172.693617ms ago: executing program 3 (id=5418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 93.578408ms ago: executing program 3 (id=5419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 93.283619ms ago: executing program 5 (id=5420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 92.571688ms ago: executing program 1 (id=5432): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) creat(&(0x7f00000001c0)='./bus\x00', 0x4e) 42.398329ms ago: executing program 6 (id=5421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000004000100040808004149004001040800", 0x58}], 0x1) 41.922249ms ago: executing program 3 (id=5423): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 441.11µs ago: executing program 5 (id=5426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 0s ago: executing program 3 (id=5427): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) kernel console output (not intermixed with test programs): 7370][T12808] netlink: 'syz.3.3715': attribute type 30 has an invalid length. [ 126.198004][T12825] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 126.205884][T12825] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3724'. [ 126.237547][T12836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3728'. [ 126.276800][T12836] netlink: 'syz.2.3728': attribute type 5 has an invalid length. [ 126.284733][T12836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3728'. [ 126.302888][T12845] loop3: detected capacity change from 0 to 512 [ 126.321154][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 126.346643][T12845] EXT4-fs (loop3): too many log groups per flexible block group [ 126.354639][T12845] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 126.363652][T12845] EXT4-fs (loop3): mount failed [ 126.417987][T12861] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in; [ 126.417987][T12861] program syz.1.3738 not setting count and/or reply_len properly [ 126.633704][T12893] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 126.660853][T12896] netlink: 'syz.1.3755': attribute type 6 has an invalid length. [ 126.999573][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 127.688299][T12909] netlink: 'syz.2.3758': attribute type 4 has an invalid length. [ 127.835164][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 127.835215][ T29] audit: type=1400 audit(1749264255.601:4185): avc: denied { mount } for pid=12929 comm="syz.1.3770" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.878934][ T29] audit: type=1400 audit(1749264255.641:4186): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.919709][T12937] loop1: detected capacity change from 0 to 164 [ 127.993484][T12939] netlink: 'syz.5.3773': attribute type 30 has an invalid length. [ 128.006428][T12939] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.015342][T12939] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.024114][T12939] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.032913][T12939] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.064721][T12939] netlink: 'syz.5.3773': attribute type 30 has an invalid length. [ 128.231673][ T29] audit: type=1400 audit(1749264256.001:4187): avc: denied { create } for pid=12953 comm="syz.1.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.283825][ T29] audit: type=1400 audit(1749264256.021:4188): avc: denied { read write } for pid=12947 comm="syz.5.3778" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.307476][ T29] audit: type=1400 audit(1749264256.021:4189): avc: denied { open } for pid=12947 comm="syz.5.3778" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.331408][ T29] audit: type=1400 audit(1749264256.041:4190): avc: denied { setopt } for pid=12953 comm="syz.1.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.467568][ T29] audit: type=1326 audit(1749264256.231:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8278e0e929 code=0x7ffc0000 [ 128.560917][ T29] audit: type=1326 audit(1749264256.261:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8278e0e929 code=0x7ffc0000 [ 128.584598][ T29] audit: type=1326 audit(1749264256.261:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.0.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8278e0e929 code=0x7ffc0000 [ 128.608156][ T29] audit: type=1326 audit(1749264256.311:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.0.3787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8278e0e929 code=0x7ffc0000 [ 128.669593][T12971] loop2: detected capacity change from 0 to 128 [ 128.752677][T12971] EXT4-fs mount: 22 callbacks suppressed [ 128.752754][T12971] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.792104][T12971] ext4 filesystem being mounted at /742/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.853436][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.919343][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.230301][T12997] ALSA: seq fatal error: cannot create timer (-19) [ 129.319335][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.780782][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 129.788521][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 129.796625][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.804420][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.812607][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.820459][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.828181][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.836191][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.843924][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.851895][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.859774][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.867459][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.875249][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.883040][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.890922][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.898718][ T3401] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 129.907252][ T3401] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 129.957447][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.964996][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.972571][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.990252][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.997800][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.005253][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.012796][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.020236][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.027652][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.035193][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.042737][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.050260][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.057767][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.065198][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.074664][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.082112][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.089667][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.097087][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.104574][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.112018][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.119527][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.127162][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.130820][T13052] loop3: detected capacity change from 0 to 128 [ 130.134599][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.148247][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.155755][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.163301][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.170824][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.178250][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.194146][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 130.196402][T13052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 130.211799][T13052] FAT-fs (loop3): Filesystem has been set read-only [ 130.238231][T13052] syz.3.3821: attempt to access beyond end of device [ 130.238231][T13052] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 130.254714][T13052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 130.262704][T13052] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 130.271619][T13052] syz.3.3821: attempt to access beyond end of device [ 130.271619][T13052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 130.285566][T13052] syz.3.3821: attempt to access beyond end of device [ 130.285566][T13052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 130.299331][T13052] syz.3.3821: attempt to access beyond end of device [ 130.299331][T13052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 130.312721][T13052] syz.3.3821: attempt to access beyond end of device [ 130.312721][T13052] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 130.934435][T13067] Set syz1 is full, maxelem 65536 reached [ 131.204341][T13114] __nla_validate_parse: 7 callbacks suppressed [ 131.204366][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3850'. [ 131.219526][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'. [ 131.262208][T13114] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.271131][T13114] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.279945][T13114] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.288743][T13114] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.348465][T13124] syz.0.3864: attempt to access beyond end of device [ 131.348465][T13124] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.446319][T13144] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 131.481478][T13144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.540798][T13144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.549689][T13144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.558459][T13144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.567300][T13144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.578404][T13144] bond1: (slave geneve2): making interface the new active one [ 131.587499][T13144] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 131.759045][T13182] atomic_op ffff888104550128 conn xmit_atomic 0000000000000000 [ 131.807301][T13187] atomic_op ffff888104550128 conn xmit_atomic 0000000000000000 [ 131.958420][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3889'. [ 132.016834][T13199] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.026005][T13199] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.035044][T13199] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.044026][T13199] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.079527][T13201] netlink: 'syz.3.3891': attribute type 21 has an invalid length. [ 132.175473][T13215] loop5: detected capacity change from 0 to 1024 [ 132.183667][T13215] EXT4-fs: Ignoring removed orlov option [ 132.189559][T13215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.201391][T13215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.240556][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.249219][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.288373][T13225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13225 comm=syz.1.3899 [ 132.301237][T13225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13225 comm=syz.1.3899 [ 132.352779][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.384123][T13232] loop1: detected capacity change from 0 to 512 [ 132.395843][T13232] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3904: invalid block [ 132.410353][T13232] EXT4-fs (loop1): Remounting filesystem read-only [ 132.420050][T13232] EXT4-fs (loop1): 2 truncates cleaned up [ 132.426524][T13232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.539394][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.645526][T13249] loop1: detected capacity change from 0 to 1024 [ 132.671286][T13249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.720006][T13249] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 132.729606][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3911'. [ 132.732510][T13249] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.732510][T13249] [ 132.751100][T13249] EXT4-fs (loop1): Total free blocks count 0 [ 132.757097][T13249] EXT4-fs (loop1): Free/Dirty block details [ 132.763368][T13249] EXT4-fs (loop1): free_blocks=0 [ 132.768350][T13249] EXT4-fs (loop1): dirty_blocks=0 [ 132.773469][T13249] EXT4-fs (loop1): Block reservation details [ 132.779538][T13249] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 132.845913][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.904738][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 132.904756][ T29] audit: type=1326 audit(1749264260.672:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13265 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c92de929 code=0x7ffc0000 [ 132.955194][ T29] audit: type=1326 audit(1749264260.672:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13265 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f88c92de929 code=0x7ffc0000 [ 132.978833][ T29] audit: type=1326 audit(1749264260.672:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13265 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c92de929 code=0x7ffc0000 [ 133.002396][ T29] audit: type=1326 audit(1749264260.692:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13265 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c92de929 code=0x7ffc0000 [ 133.035102][ T29] audit: type=1400 audit(1749264260.802:4358): avc: denied { create } for pid=13272 comm="syz.3.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.063746][ T29] audit: type=1400 audit(1749264260.832:4359): avc: denied { create } for pid=13274 comm="syz.2.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.083757][ T29] audit: type=1400 audit(1749264260.832:4360): avc: denied { setopt } for pid=13274 comm="syz.2.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.105302][ T29] audit: type=1400 audit(1749264260.872:4361): avc: denied { write } for pid=13272 comm="syz.3.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.139646][ T29] audit: type=1400 audit(1749264260.902:4362): avc: denied { ioctl } for pid=13274 comm="syz.2.3919" path="socket:[32316]" dev="sockfs" ino=32316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.164757][ T29] audit: type=1400 audit(1749264260.902:4363): avc: denied { write } for pid=13274 comm="syz.2.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.206953][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3922'. [ 133.329105][T13291] vhci_hcd: default hub control req: 4001 v0008 i0003 l0 [ 133.378074][T13295] SELinux: failed to load policy [ 133.414968][T13307] loop1: detected capacity change from 0 to 128 [ 133.476967][T13319] loop2: detected capacity change from 0 to 512 [ 133.489573][T13319] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3940: corrupted in-inode xattr: invalid ea_ino [ 133.504616][T13319] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3940: couldn't read orphan inode 15 (err -117) [ 133.517452][T13319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.542637][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.556423][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 133.656555][T13338] loop1: detected capacity change from 0 to 512 [ 133.664140][T13338] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.671331][T13338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.683777][T13338] EXT4-fs (loop1): 1 truncate cleaned up [ 133.690582][T13338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.835560][T13348] loop0: detected capacity change from 0 to 512 [ 133.847575][T13348] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3948: casefold flag without casefold feature [ 133.872166][T13348] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3948: couldn't read orphan inode 15 (err -117) [ 133.875764][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.886201][T13348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.952096][T13361] loop2: detected capacity change from 0 to 512 [ 133.972568][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.975225][T13361] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3955: invalid block [ 133.994170][T13361] EXT4-fs (loop2): Remounting filesystem read-only [ 134.004269][T13361] EXT4-fs (loop2): 2 truncates cleaned up [ 134.010874][T13361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.040267][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'. [ 134.060845][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.101324][T13378] veth1_to_bond: entered allmulticast mode [ 134.107884][T13378] veth1_to_bond: left allmulticast mode [ 134.118629][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 134.156317][T13384] netlink: 'syz.5.3963': attribute type 5 has an invalid length. [ 134.224350][T13395] loop5: detected capacity change from 0 to 512 [ 134.233093][T13395] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3970: invalid block [ 134.245614][T13395] EXT4-fs (loop5): Remounting filesystem read-only [ 134.252548][T13395] EXT4-fs (loop5): 2 truncates cleaned up [ 134.258856][T13395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.293485][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.311122][T13398] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 134.958714][T13426] loop3: detected capacity change from 0 to 512 [ 134.976197][T13426] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3982: invalid block [ 134.994197][T13426] EXT4-fs (loop3): Remounting filesystem read-only [ 135.028120][T13426] EXT4-fs (loop3): 2 truncates cleaned up [ 135.059787][T13437] loop5: detected capacity change from 0 to 512 [ 135.069230][T13426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.099561][T13437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.151592][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.164686][T13437] EXT4-fs (loop5): 1 truncate cleaned up [ 135.179834][T13437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.195273][T13441] SELinux: ebitmap: truncated map [ 135.200791][T13441] SELinux: failed to load policy [ 135.325216][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.818947][T13450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.829167][T13451] loop5: detected capacity change from 0 to 512 [ 135.844582][T13451] EXT4-fs (loop5): 1 orphan inode deleted [ 135.861917][ T3614] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1 [ 135.879013][T13451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.921340][T13451] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.984985][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.213266][T13501] loop0: detected capacity change from 0 to 512 [ 136.241665][T13501] EXT4-fs (loop0): 1 orphan inode deleted [ 136.254042][T13501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.268211][T13501] ext4 filesystem being mounted at /800/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.281254][ T3614] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1 [ 136.314528][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.393832][T13517] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.055245][T13557] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 137.055245][T13557] C<+ [ 137.230063][T13568] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4040'. [ 137.245469][T13572] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 137.318247][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.325903][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.387124][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4052'. [ 137.508920][T13621] loop2: detected capacity change from 0 to 512 [ 137.520178][T13621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.533538][T13621] ext4 filesystem being mounted at /799/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.583108][T13621] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.4060: corrupted inode contents [ 137.600301][T13621] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.4060: mark_inode_dirty error [ 137.612190][T13621] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.4060: corrupted inode contents [ 137.625699][T13621] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.4060: mark_inode_dirty error [ 137.640376][T13621] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.4060: mark inode dirty (error -117) [ 137.655882][T13621] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 137.681675][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.741071][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4073'. [ 137.750108][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4073'. [ 137.802450][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4076'. [ 138.369319][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 138.379988][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 138.380004][ T29] audit: type=1400 audit(1749264266.152:4576): avc: denied { mount } for pid=13661 comm="syz.5.4081" name="/" dev="configfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 138.409057][ T29] audit: type=1400 audit(1749264266.152:4577): avc: denied { search } for pid=13661 comm="syz.5.4081" name="/" dev="configfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.431432][ T29] audit: type=1400 audit(1749264266.152:4578): avc: denied { search } for pid=13661 comm="syz.5.4081" name="/" dev="configfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.436435][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4082'. [ 138.453829][ T29] audit: type=1400 audit(1749264266.152:4579): avc: denied { read open } for pid=13661 comm="syz.5.4081" path="/" dev="configfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.485871][ T29] audit: type=1400 audit(1749264266.152:4580): avc: denied { read } for pid=13665 comm="syz.0.4079" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.509339][ T29] audit: type=1400 audit(1749264266.152:4581): avc: denied { open } for pid=13665 comm="syz.0.4079" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.536621][ T29] audit: type=1400 audit(1749264266.302:4582): avc: denied { execute } for pid=13669 comm="syz.5.4083" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 138.613844][ T29] audit: type=1400 audit(1749264266.372:4583): avc: denied { create } for pid=13673 comm="syz.2.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.633941][ T29] audit: type=1326 audit(1749264266.372:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.5.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 138.657505][ T29] audit: type=1326 audit(1749264266.372:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.5.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 138.739012][T13688] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.841755][T13705] netlink: 'syz.5.4097': attribute type 4 has an invalid length. [ 138.973728][T13722] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 138.981559][T13722] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4107'. [ 139.028557][T13726] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4108'. [ 139.052545][T13726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.064346][T13726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.073926][T13726] bond0 (unregistering): Released all slaves [ 139.232961][T13742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4115'. [ 139.337445][T13752] syz_tun: entered allmulticast mode [ 139.345324][T13752] syz_tun: left allmulticast mode [ 139.455670][T13772] loop3: detected capacity change from 0 to 1024 [ 139.463279][T13772] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.474349][T13772] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 139.492870][T13772] JBD2: no valid journal superblock found [ 139.498684][T13772] EXT4-fs (loop3): Could not load journal inode [ 139.509907][T13772] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 139.584520][T13789] loop2: detected capacity change from 0 to 1024 [ 139.600544][T13789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.656655][T13802] loop3: detected capacity change from 0 to 512 [ 139.667314][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.679166][T13802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 139.698641][T13802] ext4 filesystem being mounted at /891/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.767730][T13802] EXT4-fs (loop3): shut down requested (2) [ 139.786603][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 139.820333][T13822] loop2: detected capacity change from 0 to 512 [ 139.827446][T13822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.840883][T13822] EXT4-fs (loop2): 1 truncate cleaned up [ 139.847090][T13822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.873804][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.973230][T13842] loop3: detected capacity change from 0 to 512 [ 140.004372][T13842] EXT4-fs (loop3): 1 orphan inode deleted [ 140.015248][T13842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.028913][T13842] ext4 filesystem being mounted at /894/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.039630][ T3586] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 140.109255][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.122734][T13853] loop1: detected capacity change from 0 to 2048 [ 140.151017][T13853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.241116][T13863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.249123][T13863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.257317][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.710635][T13883] loop0: detected capacity change from 0 to 512 [ 140.741568][T13883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 140.741682][T13883] ext4 filesystem being mounted at /818/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.834062][T13883] EXT4-fs (loop0): shut down requested (2) [ 140.857309][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.067514][T13909] loop3: detected capacity change from 0 to 128 [ 141.071272][T13909] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.087080][T13909] ext4 filesystem being mounted at /908/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.159248][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.221661][T13916] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 141.325677][T13926] loop3: detected capacity change from 0 to 512 [ 141.360338][T13926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.373236][T13926] ext4 filesystem being mounted at /912/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.429703][T13937] loop2: detected capacity change from 0 to 1024 [ 141.447341][T13937] EXT4-fs: Ignoring removed bh option [ 141.452821][T13937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.463240][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.475930][T13937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.508359][T13942] loop5: detected capacity change from 0 to 128 [ 141.557246][T13942] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.569924][T13942] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.610457][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.699648][ T9750] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.572320][T14005] loop1: detected capacity change from 0 to 128 [ 142.597146][T14004] loop2: detected capacity change from 0 to 2048 [ 142.613620][T14005] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.626843][T14005] ext4 filesystem being mounted at /870/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.646130][T14004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.736131][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.762443][T14028] atomic_op ffff888119ff4d28 conn xmit_atomic 0000000000000000 [ 142.792065][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.446543][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 143.446560][ T29] audit: type=1400 audit(1749264271.213:4794): avc: denied { create } for pid=14089 comm="syz.3.4256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.483031][ T29] audit: type=1400 audit(1749264271.213:4795): avc: denied { connect } for pid=14089 comm="syz.3.4256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.503024][ T29] audit: type=1400 audit(1749264271.213:4796): avc: denied { write } for pid=14089 comm="syz.3.4256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.531354][T14092] netlink: 'syz.2.4255': attribute type 21 has an invalid length. [ 143.543872][T14099] __nla_validate_parse: 1 callbacks suppressed [ 143.543888][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4260'. [ 143.601897][ T29] audit: type=1326 audit(1749264271.363:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.3.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 143.625612][ T29] audit: type=1326 audit(1749264271.363:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.3.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 143.649314][ T29] audit: type=1326 audit(1749264271.363:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.3.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 143.696601][ T29] audit: type=1400 audit(1749264271.423:4800): avc: denied { kexec_image_load } for pid=14106 comm="syz.0.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 143.785130][T14117] tun0: tun_chr_ioctl cmd 2147767521 [ 143.854607][ T29] audit: type=1400 audit(1749264271.623:4801): avc: denied { sqpoll } for pid=14127 comm="syz.3.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.874098][ T29] audit: type=1400 audit(1749264271.623:4802): avc: denied { setopt } for pid=14126 comm="syz.2.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.893974][ T29] audit: type=1400 audit(1749264271.623:4803): avc: denied { setopt } for pid=14127 comm="syz.3.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.914875][T14132] netlink: 'syz.0.4273': attribute type 21 has an invalid length. [ 143.926464][T14135] loop1: detected capacity change from 0 to 512 [ 143.982519][T14141] ip6gre1: entered allmulticast mode [ 144.082405][T14135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.098939][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.105171][T14135] ext4 filesystem being mounted at /882/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.106174][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.236742][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.316551][T14143] wg2: left promiscuous mode [ 144.321332][T14143] wg2: left allmulticast mode [ 144.445350][T14143] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.454527][T14143] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.463546][T14143] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.472442][T14143] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.513893][T14143] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.522995][T14143] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.532065][T14143] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.541154][T14143] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.628468][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4289'. [ 144.673294][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4289'. [ 145.045623][T14208] loop1: detected capacity change from 0 to 512 [ 145.061136][T14208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.089289][T14208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.116664][T14208] ext4 filesystem being mounted at /887/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.144051][T14208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.243541][T14214] loop2: detected capacity change from 0 to 1024 [ 145.265405][T14214] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.276494][T14214] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 145.288678][T14214] JBD2: no valid journal superblock found [ 145.294471][T14214] EXT4-fs (loop2): Could not load journal inode [ 145.298084][T14218] 0{X: left allmulticast mode [ 145.357944][T14218] 0X: left allmulticast mode [ 145.422046][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.434163][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.495027][T14218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.504047][T14218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.513269][T14218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.522960][T14218] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.536777][T14218] bond1: left promiscuous mode [ 145.541654][T14218] bond1: left allmulticast mode [ 145.606965][T14214] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 145.815737][T14231] infiniband syz0: set down [ 145.820472][T14231] infiniband syz0: added batadv_slave_1 [ 145.833115][T14231] RDS/IB: syz0: added [ 145.837219][T14231] smc: adding ib device syz0 with port count 1 [ 145.843454][T14231] smc: ib device syz0 port 1 has pnetid [ 146.107913][T14255] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4316'. [ 146.148718][T14261] loop3: detected capacity change from 0 to 512 [ 146.170683][T14261] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4319: corrupted in-inode xattr: invalid ea_ino [ 146.186268][T14268] 0XD: left allmulticast mode [ 146.197762][T14268] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.206700][T14268] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.215663][T14268] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.224735][T14268] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.247447][T14261] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4319: couldn't read orphan inode 15 (err -117) [ 146.270150][T14268] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.279218][T14268] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.288145][T14268] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.290272][T14261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.297023][T14268] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.338424][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.399001][T14279] loop3: detected capacity change from 0 to 512 [ 146.410464][T14279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.437571][T14279] ext4 filesystem being mounted at /938/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.439280][T14285] program ex is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.487785][T14285] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.524115][T14279] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.558882][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.636738][T14303] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 146.647240][T14310] 0XD: left allmulticast mode [ 146.671272][T14310] bond1: left allmulticast mode [ 146.712492][T14310] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.721733][T14310] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.730752][T14310] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.739754][T14310] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.781693][T11618] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 146.789280][T11618] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 146.798119][T11618] hid-generic 0000:0003:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 146.811094][T14310] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.820109][T14310] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.829046][T14310] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.837943][T14310] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.882390][T14327] loop1: detected capacity change from 0 to 512 [ 146.909939][T14327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.972126][T14327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 146.980654][T14327] System zones: 1-12 [ 146.985204][T14327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.4344: missing EA_INODE flag [ 146.998397][T14338] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 146.998838][T14327] EXT4-fs (loop1): Remounting filesystem read-only [ 147.015308][T14327] EXT4-fs (loop1): 1 orphan inode deleted [ 147.022638][T14327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.028082][T14342] veth1_to_bond: entered allmulticast mode [ 147.057899][T14342] veth1_to_bond: left allmulticast mode [ 147.070214][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.209128][T14371] loop5: detected capacity change from 0 to 2048 [ 147.218718][T14371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.233880][T14371] EXT4-fs (loop5): shut down requested (0) [ 147.248550][T14375] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4362'. [ 147.263950][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.363366][T14389] SELinux: ebitmap: truncated map [ 147.369245][T14389] SELinux: failed to load policy [ 147.847399][T14397] loop5: detected capacity change from 0 to 512 [ 147.854232][T14397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.868722][T14397] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.138422][T14418] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 148.389015][T14443] loop5: detected capacity change from 0 to 128 [ 148.455752][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 148.455768][ T29] audit: type=1400 audit(1749264276.223:4884): avc: denied { read write } for pid=14447 comm="syz.5.4398" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.501465][ T29] audit: type=1400 audit(1749264276.223:4885): avc: denied { open } for pid=14447 comm="syz.5.4398" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.526845][ T29] audit: type=1326 audit(1749264276.233:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.550483][ T29] audit: type=1326 audit(1749264276.233:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.551421][T14454] loop1: detected capacity change from 0 to 512 [ 148.574110][ T29] audit: type=1326 audit(1749264276.233:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.604173][ T29] audit: type=1326 audit(1749264276.233:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.627840][ T29] audit: type=1326 audit(1749264276.233:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.651567][ T29] audit: type=1326 audit(1749264276.243:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.675624][ T29] audit: type=1326 audit(1749264276.243:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 148.677583][T14454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.700300][ T29] audit: type=1400 audit(1749264276.283:4893): avc: denied { create } for pid=14452 comm="syz.0.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.724476][T14454] EXT4-fs (loop1): 1 truncate cleaned up [ 148.944430][T14478] loop0: detected capacity change from 0 to 128 [ 149.116602][T14504] netlink: 128 bytes leftover after parsing attributes in process `wޣ'. [ 149.134085][T14504] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 149.143243][T14508] loop0: detected capacity change from 0 to 128 [ 149.170245][T14512] loop3: detected capacity change from 0 to 512 [ 149.177284][T14508] ext4 filesystem being mounted at /875/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.178169][T14512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.223443][T14512] EXT4-fs (loop3): 1 truncate cleaned up [ 149.442173][T14536] loop0: detected capacity change from 0 to 512 [ 149.449289][T14536] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.456297][T14536] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.468924][T14536] EXT4-fs (loop0): 1 truncate cleaned up [ 149.477712][T14532] loop3: detected capacity change from 0 to 8192 [ 149.628190][T14555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.693111][T14558] loop3: detected capacity change from 0 to 2048 [ 149.808151][T14571] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 149.822773][T14557] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 149.856049][T14557] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2304 with max blocks 32 with error 28 [ 149.857608][T14578] ip6gre1: entered allmulticast mode [ 149.868701][T14557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.868701][T14557] [ 149.883737][T14557] EXT4-fs (loop3): Total free blocks count 0 [ 149.889927][T14557] EXT4-fs (loop3): Free/Dirty block details [ 149.895849][T14557] EXT4-fs (loop3): free_blocks=2415919504 [ 149.901677][T14557] EXT4-fs (loop3): dirty_blocks=32 [ 149.906879][T14557] EXT4-fs (loop3): Block reservation details [ 149.912896][T14557] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 150.112281][T14612] loop2: detected capacity change from 0 to 512 [ 150.130630][T14612] ext4 filesystem being mounted at /870/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.157601][T14621] dvmrp1: entered allmulticast mode [ 150.175650][T14621] dvmrp1: left allmulticast mode [ 150.190044][T14625] loop3: detected capacity change from 0 to 1024 [ 150.198448][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.226879][T14625] EXT4-fs: Ignoring removed nobh option [ 150.235992][T14612] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.4468: mark_inode_dirty error [ 150.251454][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.275928][T14628] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.289500][T14628] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.4468: mark_inode_dirty error [ 150.301756][T14628] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.308395][T14631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.321735][T14628] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4468: mark_inode_dirty error [ 150.323364][T14631] bridge0: port 3(bond1) entered blocking state [ 150.338332][T14628] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.339221][T14631] bridge0: port 3(bond1) entered disabled state [ 150.357835][T14628] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.4468: mark_inode_dirty error [ 150.369762][T14631] bond1: entered allmulticast mode [ 150.370840][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.4468: corrupted inode contents [ 150.376558][T14631] bond1: entered promiscuous mode [ 150.951383][T14643] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 150.988511][T14650] usb usb1: usbfs: process 14650 (syz.2.4482) did not claim interface 63 before use [ 151.005242][T14652] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4479'. [ 151.014371][T14652] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4479'. [ 151.277025][T14674] netlink: 'syz.2.4492': attribute type 10 has an invalid length. [ 151.295047][T14674] team0: Device hsr_slave_0 failed to register rx_handler [ 151.578416][T14703] SELinux: failed to load policy [ 151.645320][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4507'. [ 151.922970][T14730] SELinux: failed to load policy [ 152.066318][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4528'. [ 152.121160][T14766] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 152.121160][T14766] program syz.5.4533 not setting count and/or reply_len properly [ 152.180084][T14771] loop2: detected capacity change from 0 to 512 [ 152.198650][T14771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.237620][T14777] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 152.237620][T14777] C<+ [ 152.257296][T14771] EXT4-fs (loop2): 1 truncate cleaned up [ 152.342317][T14784] loop5: detected capacity change from 0 to 512 [ 152.350092][T14784] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.357885][T14784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.369501][T14784] EXT4-fs (loop5): 1 truncate cleaned up [ 152.943111][T14801] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 153.010306][T14813] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 153.010306][T14813] C<+ [ 153.077665][T14821] netlink: 'syz.0.4556': attribute type 4 has an invalid length. [ 153.141687][T14825] loop2: detected capacity change from 0 to 512 [ 153.149484][T14825] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.156340][T14825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.168607][T14825] EXT4-fs (loop2): 1 truncate cleaned up [ 153.244287][T14840] loop3: detected capacity change from 0 to 512 [ 153.308221][T14840] ext4 filesystem being mounted at /969/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.350869][T14840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.4561: corrupted inode contents [ 153.363150][T14840] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.4561: mark_inode_dirty error [ 153.375630][T14840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.4561: corrupted inode contents [ 153.388741][T14840] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.4561: mark_inode_dirty error [ 153.401214][T14840] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.4561: mark inode dirty (error -117) [ 153.414592][T14840] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 153.454650][T14847] netlink: 'syz.2.4565': attribute type 1 has an invalid length. [ 153.462587][T14847] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4565'. [ 153.486521][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 153.486540][ T29] audit: type=1107 audit(1749264281.264:5103): pid=14848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 153.594261][ T29] audit: type=1400 audit(1749264281.364:5104): avc: denied { create } for pid=14858 comm="syz.3.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.615328][ T29] audit: type=1400 audit(1749264281.364:5105): avc: denied { ioctl } for pid=14858 comm="syz.3.4571" path="socket:[36747]" dev="sockfs" ino=36747 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.635154][T14861] loop3: detected capacity change from 0 to 128 [ 153.649200][T14861] ext4 filesystem being mounted at /974/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.663583][ T29] audit: type=1400 audit(1749264281.434:5106): avc: denied { remove_name } for pid=14860 comm="syz.3.4572" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.708075][ T29] audit: type=1400 audit(1749264281.434:5107): avc: denied { rmdir } for pid=14860 comm="syz.3.4572" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 153.927817][T14869] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4574'. [ 153.938868][T14869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.945211][ T29] audit: type=1326 audit(1749264281.714:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.3.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 153.974244][ T29] audit: type=1326 audit(1749264281.724:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.3.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 153.998016][ T29] audit: type=1326 audit(1749264281.724:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.3.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 154.021588][ T29] audit: type=1326 audit(1749264281.724:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.3.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 154.045335][ T29] audit: type=1326 audit(1749264281.724:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.3.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc949dae929 code=0x7ffc0000 [ 154.071538][T14869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.082161][T14869] bond0 (unregistering): Released all slaves [ 154.093349][T14875] loop3: detected capacity change from 0 to 512 [ 154.114651][T14875] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.131120][T14875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.141127][T14877] loop2: detected capacity change from 0 to 128 [ 154.143944][T14875] EXT4-fs (loop3): 1 truncate cleaned up [ 154.158996][T14880] loop1: detected capacity change from 0 to 512 [ 154.184733][T14877] ext4 filesystem being mounted at /900/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.219925][T14883] netlink: 'syz.0.4579': attribute type 1 has an invalid length. [ 154.227808][T14883] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4579'. [ 154.239368][T14880] ext4 filesystem being mounted at /939/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.266233][T14880] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.4578: corrupted inode contents [ 154.280007][T14880] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.4578: mark_inode_dirty error [ 154.297007][T14880] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.4578: corrupted inode contents [ 154.316535][T14880] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.4578: mark_inode_dirty error [ 154.340136][T14880] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.4578: mark inode dirty (error -117) [ 154.393702][T14897] syz_tun: entered allmulticast mode [ 154.397057][T14880] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 154.404919][T14897] syz_tun: left allmulticast mode [ 154.577546][T14915] bridge0: port 3(macvlan2) entered blocking state [ 154.584416][T14915] bridge0: port 3(macvlan2) entered disabled state [ 154.595924][T14915] macvlan2: entered allmulticast mode [ 154.601717][T14915] bridge0: entered allmulticast mode [ 154.608359][T14915] macvlan2: left allmulticast mode [ 154.613606][T14915] bridge0: left allmulticast mode [ 154.760092][T14934] loop5: detected capacity change from 0 to 512 [ 154.766906][T14934] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.773744][T14934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.786766][T14934] EXT4-fs (loop5): 1 truncate cleaned up [ 155.253166][ T3633] bridge_slave_1: left allmulticast mode [ 155.259091][ T3633] bridge_slave_1: left promiscuous mode [ 155.264950][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.274631][ T3633] bridge_slave_0: left allmulticast mode [ 155.280345][ T3633] bridge_slave_0: left promiscuous mode [ 155.286266][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.320400][ T3633] team0: Port device geneve1 removed [ 155.398458][ T3633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.411598][ T3633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.426423][ T3633] bond0 (unregistering): Released all slaves [ 155.457981][ T3633] tipc: Disabling bearer [ 155.463054][ T3633] tipc: Left network mode [ 155.524616][ T3633] macvlan0: left promiscuous mode [ 155.535106][ T3633] batadv_slave_1: left promiscuous mode [ 155.543601][ T3633] hsr_slave_0: left promiscuous mode [ 155.550038][ T3633] hsr_slave_1: left promiscuous mode [ 155.555652][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.563317][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.596688][ T3633] team0 (unregistering): Port device team_slave_1 removed [ 155.606830][ T3633] team0 (unregistering): Port device team_slave_0 removed [ 155.614385][ T3563] smc: removing ib device syz! [ 155.643341][T15006] bridge0: port 3(macvlan2) entered blocking state [ 155.650178][T15006] bridge0: port 3(macvlan2) entered disabled state [ 155.656969][T15006] macvlan2: entered allmulticast mode [ 155.662431][T15006] bridge0: entered allmulticast mode [ 155.668356][T15006] macvlan2: left allmulticast mode [ 155.673527][T15006] bridge0: left allmulticast mode [ 155.684025][T14953] chnl_net:caif_netlink_parms(): no params data found [ 155.754136][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.761325][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.770483][T14953] bridge_slave_0: entered allmulticast mode [ 155.777719][T14953] bridge_slave_0: entered promiscuous mode [ 155.784570][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.791759][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.799981][T14953] bridge_slave_1: entered allmulticast mode [ 155.809946][T14953] bridge_slave_1: entered promiscuous mode [ 155.851933][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.875276][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.902076][T14953] team0: Port device team_slave_0 added [ 155.909229][T14953] team0: Port device team_slave_1 added [ 155.926360][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.933440][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.959623][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.971128][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.978238][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.004280][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.020614][ T3633] IPVS: stop unused estimator thread 0... [ 156.045116][T14953] hsr_slave_0: entered promiscuous mode [ 156.051285][T14953] hsr_slave_1: entered promiscuous mode [ 156.228208][T15026] loop1: detected capacity change from 0 to 1024 [ 156.235272][T15026] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.246312][T15026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.257467][T15026] JBD2: no valid journal superblock found [ 156.263244][T15026] EXT4-fs (loop1): Could not load journal inode [ 156.274458][T15026] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 156.288365][T14953] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.307901][T14953] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.337870][T14953] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.358723][T14953] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.433399][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.475455][T14953] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.485989][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.493169][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.521078][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.528265][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.599350][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.731052][T14953] veth0_vlan: entered promiscuous mode [ 156.749346][T14953] veth1_vlan: entered promiscuous mode [ 156.772333][T14953] veth0_macvtap: entered promiscuous mode [ 156.780998][T14953] veth1_macvtap: entered promiscuous mode [ 156.792683][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.804531][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.815459][T14953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.824262][T14953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.833105][T14953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.841870][T14953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.924125][T15085] loop6: detected capacity change from 0 to 512 [ 156.932424][T15085] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.939581][T15089] netlink: 'syz.1.4649': attribute type 1 has an invalid length. [ 156.948845][T15085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 156.963413][T15085] EXT4-fs (loop6): 1 truncate cleaned up [ 157.181898][T15113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4654'. [ 157.239687][T15126] loop3: detected capacity change from 0 to 1024 [ 157.246945][T15126] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.257862][T15126] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.268769][T15126] JBD2: no valid journal superblock found [ 157.274567][T15126] EXT4-fs (loop3): Could not load journal inode [ 157.288091][T15126] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 157.321206][T15134] loop3: detected capacity change from 0 to 128 [ 157.328139][T15134] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.367457][ T3563] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.381887][T15141] loop1: detected capacity change from 0 to 512 [ 157.388936][T15141] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.396808][T15141] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.408827][T15141] EXT4-fs (loop1): 1 truncate cleaned up [ 157.569252][T15153] loop5: detected capacity change from 0 to 512 [ 157.597931][T15153] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.634165][T15161] SELinux: policydb version 0 does not match my version range 15-34 [ 157.643768][T15161] SELinux: failed to load policy [ 157.711019][T15170] vhci_hcd: default hub control req: 0208 v0836 i0000 l0 [ 158.135778][T15184] loop6: detected capacity change from 0 to 512 [ 158.146517][T15184] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.146858][T15184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.160826][T15184] EXT4-fs (loop6): 1 truncate cleaned up [ 158.249261][T15199] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 158.313935][T15203] xt_CONNSECMARK: invalid mode: 0 [ 158.335217][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 158.358728][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.366531][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.367229][T15205] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 158.368629][T15205] bond0: (slave vcan1): Error -95 calling set_mac_address [ 158.557675][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 158.557688][ T29] audit: type=1326 audit(1749264286.325:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15223 comm="syz.1.4703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x0 [ 158.974720][ T29] audit: type=1400 audit(1749264286.735:5220): avc: denied { append } for pid=15227 comm="syz.2.4704" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.101293][T15236] openvswitch: netlink: Message has 6 unknown bytes. [ 159.199264][T15242] loop2: detected capacity change from 0 to 512 [ 159.206083][T15242] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.212892][T15242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.224692][T15242] EXT4-fs (loop2): 1 truncate cleaned up [ 159.230852][T15242] EXT4-fs mount: 42 callbacks suppressed [ 159.230864][T15242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.461835][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.501767][ T29] audit: type=1400 audit(1749264287.265:5221): avc: denied { mounton } for pid=15260 comm="syz.1.4720" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 159.534235][ T29] audit: type=1400 audit(1749264287.295:5222): avc: denied { create } for pid=15262 comm="syz.3.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.536694][ T29] audit: type=1400 audit(1749264287.295:5223): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.576557][T15264] wireguard0: entered promiscuous mode [ 159.582083][T15264] wireguard0: entered allmulticast mode [ 159.643795][ T29] audit: type=1400 audit(1749264287.405:5224): avc: denied { mount } for pid=15271 comm="syz.1.4724" name="/" dev="hugetlbfs" ino=39347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 159.688685][ T29] audit: type=1400 audit(1749264287.455:5225): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 159.711890][ T29] audit: type=1326 audit(1749264287.485:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 159.735613][ T29] audit: type=1326 audit(1749264287.485:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 159.735641][ T29] audit: type=1326 audit(1749264287.485:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7ffbe929 code=0x7ffc0000 [ 159.809772][T15280] tipc: Started in network mode [ 159.809802][T15280] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.809991][T15280] tipc: Enabled bearer , priority 10 [ 159.810186][T15280] tipc: Disabling bearer [ 159.828643][T15284] loop3: detected capacity change from 0 to 512 [ 159.829048][T15284] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.832760][T15284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.836700][T15284] EXT4-fs (loop3): 1 truncate cleaned up [ 159.837005][T15284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.858601][T15289] xt_hashlimit: size too large, truncated to 1048576 [ 160.142675][T15301] loop2: detected capacity change from 0 to 164 [ 160.156739][T15301] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.158647][T15301] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.158801][T15301] Symlink component flag not implemented [ 160.158808][T15301] Symlink component flag not implemented [ 160.159093][T15301] Symlink component flag not implemented (7) [ 160.159106][T15301] Symlink component flag not implemented (116) [ 160.289565][T15309] hub 9-0:1.0: USB hub found [ 160.294413][T15309] hub 9-0:1.0: 8 ports detected [ 160.309799][T15313] SELinux: failed to load policy [ 160.337110][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.382428][T15322] loop1: detected capacity change from 0 to 512 [ 160.415195][T15322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.435140][T15322] ext4 filesystem being mounted at /985/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.482014][T15322] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4748: corrupted inode contents [ 160.502997][T15322] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.4748: mark_inode_dirty error [ 160.533873][T15322] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4748: corrupted inode contents [ 160.574776][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.626855][T15354] batadv0: entered allmulticast mode [ 160.651530][T15354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.662466][T15354] bridge0: port 4(batadv0) entered blocking state [ 160.669275][T15354] bridge0: port 4(batadv0) entered disabled state [ 160.684062][T15354] batadv0: entered promiscuous mode [ 160.853860][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4772'. [ 161.105965][T15421] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.125681][ T3633] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 161.134975][ T3633] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 161.215894][T15408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.232371][T15408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.356982][T15458] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4808'. [ 161.508708][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4811'. [ 161.517773][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4811'. [ 161.572332][T15470] Falling back ldisc for ttyS3. [ 161.599313][T15472] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.823211][T15495] 9pnet_fd: Insufficient options for proto=fd [ 161.863669][T15499] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 161.931703][T15509] netlink: 'syz.5.4831': attribute type 1 has an invalid length. [ 161.959876][T15509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.972976][T15509] bond2: (slave bond3): making interface the new active one [ 161.975031][T15517] sd 0:0:1:0: device reset [ 161.980703][T15509] bond2: (slave bond3): Enslaving as an active interface with an up link [ 162.250446][T15548] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 162.468641][T15567] Falling back ldisc for ttyS3. [ 162.708299][T15597] loop6: detected capacity change from 0 to 256 [ 162.788883][T15607] loop2: detected capacity change from 0 to 256 [ 162.851678][T15616] tipc: Disabling bearer [ 163.339667][T15663] SET target dimension over the limit! [ 163.349947][T15655] infiniband syz!: set active [ 163.354827][T15655] infiniband syz!: added team_slave_0 [ 163.386108][T15655] RDS/IB: syz!: added [ 163.394693][T15655] smc: adding ib device syz! with port count 1 [ 163.401295][T15655] smc: ib device syz! port 1 has pnetid [ 163.497174][T15682] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 163.505025][T15682] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4909'. [ 163.513846][T15684] sctp: [Deprecated]: syz.2.4910 (pid 15684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.513846][T15684] Use struct sctp_sack_info instead [ 163.569745][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 163.569764][ T29] audit: type=1400 audit(1749264291.335:5393): avc: denied { read write } for pid=15689 comm="syz.1.4913" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.607087][T11618] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 163.614645][T11618] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 163.636337][T11618] hid-generic 0000:0003:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 163.640271][ T29] audit: type=1400 audit(1749264291.335:5394): avc: denied { open } for pid=15689 comm="syz.1.4913" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.732574][ T29] audit: type=1326 audit(1749264291.495:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 163.756292][ T29] audit: type=1326 audit(1749264291.495:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 163.823597][ T29] audit: type=1326 audit(1749264291.545:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 163.847234][ T29] audit: type=1326 audit(1749264291.545:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 163.870907][ T29] audit: type=1326 audit(1749264291.545:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 163.901469][ T29] audit: type=1400 audit(1749264291.665:5400): avc: denied { read } for pid=15709 comm="syz.5.4922" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.924423][ T29] audit: type=1400 audit(1749264291.665:5401): avc: denied { open } for pid=15709 comm="syz.5.4922" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.947925][ T29] audit: type=1400 audit(1749264291.665:5402): avc: denied { ioctl } for pid=15709 comm="syz.5.4922" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 164.019465][T15718] 9pnet: Could not find request transport: f [ 164.063681][T15727] serio: Serial port ptm1 [ 164.148307][T15738] loop6: detected capacity change from 0 to 128 [ 164.154995][T15729] loop5: detected capacity change from 0 to 8192 [ 164.178495][T15738] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.207088][T15729] loop5: p1 < > p2 < p5 > p3 p4 [ 164.213297][T15729] loop5: p3 start 83890176 is beyond EOD, truncated [ 164.220120][T15729] loop5: p4 size 16776960 extends beyond EOD, truncated [ 164.229773][T15729] loop5: p5 size 16776960 extends beyond EOD, truncated [ 164.255170][T15729] netlink: 'syz.5.4931': attribute type 1 has an invalid length. [ 164.278575][T15749] netlink: 'syz.6.4940': attribute type 4 has an invalid length. [ 164.318254][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4942'. [ 164.330310][T15755] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.338711][T15755] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.347157][T15755] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.355413][T15755] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.369094][T15759] 9pnet: p9_errstr2errno: server reported unknown error L O! [ 164.369092][T15755] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.369130][T15755] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.394323][T15755] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.402816][T15755] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.430841][T15761] syzkaller1: entered promiscuous mode [ 164.436492][T15761] syzkaller1: entered allmulticast mode [ 164.585454][T15779] loop2: detected capacity change from 0 to 512 [ 164.615620][T15779] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.4955: bad orphan inode 11862016 [ 164.631229][T15779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 164.645075][T15779] ext4 filesystem being mounted at /996/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.669231][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.687443][T15791] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4960'. [ 164.718139][T15795] loop3: detected capacity change from 0 to 2048 [ 164.738273][T15795] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.744899][T15799] loop6: detected capacity change from 0 to 512 [ 164.754020][T15801] SELinux: syz.5.4964 (15801) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 164.770749][T15795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.793178][T15799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.816554][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.825707][T15799] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.854069][T15799] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.891211][T15817] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 164.916033][T14953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.177646][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'. [ 165.186669][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'. [ 165.195618][T15864] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4993'. [ 165.322280][T14167] Process accounting resumed [ 165.554407][T15897] Process accounting resumed [ 165.583901][T15906] ip6gre1: entered allmulticast mode [ 165.709037][T15927] loop5: detected capacity change from 0 to 1024 [ 165.720900][T15927] EXT4-fs: Ignoring removed orlov option [ 165.726715][T15927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.748456][T15927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.774548][T15937] ip6gre1: entered allmulticast mode [ 165.789353][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.900835][T15950] __nla_validate_parse: 3 callbacks suppressed [ 165.900849][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'. [ 165.918782][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5032'. [ 165.929372][T15948] vhci_hcd: invalid port number 96 [ 165.934520][T15948] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 166.123864][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5037'. [ 166.157957][T15970] ip6gre2: entered allmulticast mode [ 166.208589][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5044'. [ 166.243438][T15985] loop5: detected capacity change from 0 to 128 [ 166.264771][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5044'. [ 166.282295][T15985] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.319770][T15990] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 166.320113][T15985] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.362702][ T9750] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.467393][T16008] batadv_slave_0: entered promiscuous mode [ 166.478387][T16010] loop5: detected capacity change from 0 to 1024 [ 166.487191][T16010] EXT4-fs: Ignoring removed orlov option [ 166.504975][T16005] batadv_slave_0: left promiscuous mode [ 166.512032][T16010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.576131][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.606730][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5066'. [ 166.636440][T16034] loop2: detected capacity change from 0 to 512 [ 166.648517][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5066'. [ 166.673548][T16034] EXT4-fs (loop2): 1 orphan inode deleted [ 166.685200][T16034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.698587][T16034] ext4 filesystem being mounted at /1029/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.699111][ T3617] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 166.754741][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5075'. [ 166.773596][T16049] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5074'. [ 166.785529][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.796832][T16051] netlink: 'syz.6.5076': attribute type 13 has an invalid length. [ 166.800294][T16053] syz.5.5077: attempt to access beyond end of device [ 166.800294][T16053] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.820252][T16051] gretap0: refused to change device tx_queue_len [ 166.828103][T16051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.854146][T16056] loop9: detected capacity change from 0 to 7 [ 166.860616][T16056] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.869023][T16056] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.877115][T16056] loop9: unable to read partition table [ 166.900675][T16056] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 166.900675][T16056] U) failed (rc=-5) [ 166.966346][T16069] program ex is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.983736][T16069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.010621][T16071] loop2: detected capacity change from 0 to 512 [ 167.047214][T16071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.064045][T16071] ext4 filesystem being mounted at /1032/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.093664][T16071] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 167.107222][T16082] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 167.147867][T16084] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5090'. [ 167.170809][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.206708][T16088] loop1: detected capacity change from 0 to 1024 [ 167.217539][T16088] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.228731][T16088] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.241570][T16088] JBD2: no valid journal superblock found [ 167.247381][T16088] EXT4-fs (loop1): Could not load journal inode [ 167.266650][T16096] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 167.276696][T16088] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 167.347938][T14220] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 167.355532][T16110] program ex is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.364187][T14220] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 167.371728][T16110] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.389171][T14220] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 167.403390][T16117] loop6: detected capacity change from 0 to 512 [ 167.424551][T16118] netem: change failed [ 167.439628][T16117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.454900][T16117] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.491936][T16128] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 167.510728][T16117] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 167.565172][T14953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.591600][T16133] loop5: detected capacity change from 0 to 1024 [ 167.607222][T16133] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.618311][T16133] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.629486][T16133] JBD2: no valid journal superblock found [ 167.635372][T16133] EXT4-fs (loop5): Could not load journal inode [ 167.657775][T16133] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 167.700163][T16141] program ex is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.717227][T16141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.786043][T16150] vhci_hcd: invalid port number 0 [ 167.804384][T14220] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 167.811887][T14220] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 167.845439][T14220] hid-generic 0000:0003:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 167.878685][T16160] loop3: detected capacity change from 0 to 1024 [ 167.901773][T16160] EXT4-fs: Ignoring removed bh option [ 167.904743][T16166] loop2: detected capacity change from 0 to 128 [ 167.907427][T16160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.928938][T16160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.059545][T16166] syz.2.5128: attempt to access beyond end of device [ 168.059545][T16166] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 168.073616][T16166] syz.2.5128: attempt to access beyond end of device [ 168.073616][T16166] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 168.090460][T16166] syz.2.5128: attempt to access beyond end of device [ 168.090460][T16166] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 168.114313][T16166] syz.2.5128: attempt to access beyond end of device [ 168.114313][T16166] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 168.115383][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.128061][T16166] syz.2.5128: attempt to access beyond end of device [ 168.128061][T16166] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 168.153557][T16166] syz.2.5128: attempt to access beyond end of device [ 168.153557][T16166] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 168.168521][T16166] syz.2.5128: attempt to access beyond end of device [ 168.168521][T16166] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 168.182162][T16166] syz.2.5128: attempt to access beyond end of device [ 168.182162][T16166] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 168.197762][T16166] syz.2.5128: attempt to access beyond end of device [ 168.197762][T16166] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 168.279851][T16183] loop2: detected capacity change from 0 to 1024 [ 168.293533][T16183] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.304558][T16183] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.326439][T16183] JBD2: no valid journal superblock found [ 168.332226][T16183] EXT4-fs (loop2): Could not load journal inode [ 168.346318][T16183] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 168.361874][T16187] loop5: detected capacity change from 0 to 512 [ 168.384197][T16187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.396968][T16187] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.415218][T16187] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.434819][ T9750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.460560][T16193] loop1: detected capacity change from 0 to 512 [ 168.482324][T16193] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.493232][T16201] loop2: detected capacity change from 0 to 512 [ 168.499828][T16193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.510342][T16201] EXT4-fs: Ignoring removed orlov option [ 168.520061][T16193] EXT4-fs (loop1): 1 truncate cleaned up [ 168.530425][T16193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.546893][T16201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.550950][T14167] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 168.566916][T14167] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 168.577894][T16201] ext4 filesystem being mounted at /1045/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.588867][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 168.588912][ T29] audit: type=1400 audit(1749264296.366:5518): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.590217][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.625298][T14167] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 168.637015][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.664435][T16212] loop1: detected capacity change from 0 to 1024 [ 168.671327][T16212] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.696313][T16212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.708728][T16212] ext4 filesystem being mounted at /1047/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.723036][T16212] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.5154: lblock 8 mapped to illegal pblock 8 (length 1) [ 168.738325][T16212] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 168.750841][T16212] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.750841][T16212] [ 168.772434][T16220] loop6: detected capacity change from 0 to 1024 [ 168.779223][T16220] EXT4-fs: Ignoring removed bh option [ 168.784762][T16220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.795853][T16212] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.5154: lblock 8 mapped to illegal pblock 8 (length 1) [ 168.811065][T16212] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 168.823496][T16212] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.823496][T16212] [ 168.834287][T16220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.876224][T16223] loop5: detected capacity change from 0 to 1024 [ 168.885850][T16223] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.896944][T16223] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.920973][ T3563] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 7) [ 168.994674][T16223] JBD2: no valid journal superblock found [ 169.000491][T16223] EXT4-fs (loop5): Could not load journal inode [ 169.017110][T16223] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 169.035079][ T3563] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 169.047448][ T3563] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.047448][ T3563] [ 169.059428][ T3614] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 169.084608][ T3614] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 169.097227][ T3614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.097227][ T3614] [ 169.106927][ T3614] EXT4-fs (loop1): Total free blocks count 0 [ 169.139810][T16229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.220281][T16239] loop1: detected capacity change from 0 to 512 [ 169.246016][T16239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.260350][ T29] audit: type=1400 audit(1749264297.016:5519): avc: denied { associate } for pid=16236 comm="syz.5.5157" name="time_for_children" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.294624][T16239] ext4 filesystem being mounted at /1049/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.389493][T16239] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 169.411399][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.427266][ T29] audit: type=1400 audit(1749264297.196:5520): avc: denied { firmware_load } for pid=16247 comm="syz.2.5160" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 169.682032][T14953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.724088][ T29] audit: type=1326 audit(1749264297.486:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.1.5164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf7ffbe929 code=0x0 [ 169.754168][T16263] loop6: detected capacity change from 0 to 1024 [ 169.764034][T16263] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.775123][T16263] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.788474][T16263] JBD2: no valid journal superblock found [ 169.794323][T16263] EXT4-fs (loop6): Could not load journal inode [ 169.805433][T16263] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 169.839103][ T29] audit: type=1326 audit(1749264297.606:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16281 comm="syz.5.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 169.883359][ T29] audit: type=1326 audit(1749264297.636:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16281 comm="syz.5.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 169.906928][ T29] audit: type=1326 audit(1749264297.636:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16281 comm="syz.5.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f169e929 code=0x7ffc0000 [ 169.935200][T16290] loop6: detected capacity change from 0 to 128 [ 169.942511][T16290] FAT-fs (loop6): Directory bread(block 162) failed [ 169.950215][T16290] FAT-fs (loop6): Directory bread(block 163) failed [ 169.965249][T16290] FAT-fs (loop6): Directory bread(block 164) failed [ 169.972072][T16290] FAT-fs (loop6): Directory bread(block 165) failed [ 169.979064][T16290] FAT-fs (loop6): Directory bread(block 166) failed [ 169.987204][T16290] FAT-fs (loop6): Directory bread(block 167) failed [ 169.993965][T16290] FAT-fs (loop6): Directory bread(block 168) failed [ 170.001036][T16290] FAT-fs (loop6): Directory bread(block 169) failed [ 170.010212][T16290] FAT-fs (loop6): Directory bread(block 162) failed [ 170.019193][T16290] FAT-fs (loop6): Directory bread(block 163) failed [ 170.555698][T16301] loop1: detected capacity change from 0 to 1024 [ 170.562494][T16301] EXT4-fs: Ignoring removed bh option [ 170.568026][T16301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.577130][T16301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.685894][T16313] loop2: detected capacity change from 0 to 2048 [ 170.705570][ T29] audit: type=1400 audit(1749264298.476:5525): avc: denied { relabelto } for pid=16314 comm="syz.6.5185" name="" dev="pipefs" ino=37593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 170.706102][T16313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.809569][T16313] EXT4-fs (loop2): shut down requested (0) [ 170.843483][ T29] audit: type=1400 audit(1749264298.606:5526): avc: denied { create } for pid=16311 comm="syz.2.5184" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 170.911609][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.928204][ T29] audit: type=1400 audit(1749264298.696:5527): avc: denied { read } for pid=16334 comm="syz.6.5194" path="socket:[42403]" dev="sockfs" ino=42403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.002494][T16343] netlink: 'syz.3.5199': attribute type 1 has an invalid length. [ 171.010466][T16343] netlink: 'syz.3.5199': attribute type 4 has an invalid length. [ 171.018272][T16343] __nla_validate_parse: 4 callbacks suppressed [ 171.018362][T16343] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5199'. [ 171.034341][T16346] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5194'. [ 171.194806][T16363] loop3: detected capacity change from 0 to 2048 [ 171.228145][T16363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.244482][T16363] EXT4-fs (loop3): shut down requested (0) [ 171.278360][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.372452][T16382] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5211'. [ 171.450373][T16390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16390 comm=syz.3.5218 [ 171.450406][T16390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16390 comm=syz.3.5218 [ 171.541721][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.754853][T16423] loop1: detected capacity change from 0 to 1024 [ 171.761728][T16423] EXT4-fs: Ignoring removed bh option [ 171.767196][T16423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.777547][T16423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.191507][T16448] loop5: detected capacity change from 0 to 128 [ 172.201139][T16448] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.217946][T16448] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.255528][ T9750] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.333969][T16461] netlink: 128 bytes leftover after parsing attributes in process `wޣ'. [ 172.343200][T16461] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 172.608027][T16487] loop3: detected capacity change from 0 to 128 [ 172.620659][T16487] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.633299][T16487] ext4 filesystem being mounted at /1084/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.670603][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.715202][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.736809][T16494] netlink: 128 bytes leftover after parsing attributes in process `wޣ'. [ 172.751222][T16494] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 172.765996][T16500] netlink: 'syz.5.5268': attribute type 13 has an invalid length. [ 172.937436][T16517] loop1: detected capacity change from 0 to 128 [ 172.942915][T16520] loop3: detected capacity change from 0 to 1024 [ 172.968188][T16520] EXT4-fs: Ignoring removed bh option [ 172.970190][T16517] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.973712][T16520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.993334][T16517] ext4 filesystem being mounted at /1061/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.016285][T16520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.043212][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.290294][T16559] loop6: detected capacity change from 0 to 128 [ 173.336516][T16559] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.350098][T16559] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.379596][T14953] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.388976][T16561] loop2: detected capacity change from 0 to 8192 [ 173.460284][T16567] loop6: detected capacity change from 0 to 2048 [ 173.514803][T16567] loop6: p1 < > p4 [ 173.519352][T16567] loop6: p4 size 8388608 extends beyond EOD, truncated [ 173.624022][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 173.624041][ T29] audit: type=1326 audit(1749264307.390:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.658259][ T29] audit: type=1326 audit(1749264307.400:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.682017][ T29] audit: type=1326 audit(1749264307.400:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.705767][ T29] audit: type=1326 audit(1749264307.400:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.729293][ T29] audit: type=1326 audit(1749264307.400:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.753014][ T29] audit: type=1326 audit(1749264307.400:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.776724][ T29] audit: type=1326 audit(1749264307.400:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.800352][ T29] audit: type=1326 audit(1749264307.400:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.823962][ T29] audit: type=1326 audit(1749264307.400:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.847611][ T29] audit: type=1326 audit(1749264307.400:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16584 comm="syz.6.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7013b1e929 code=0x7ffc0000 [ 173.952604][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.000677][T16599] loop2: detected capacity change from 0 to 128 [ 174.009669][T16599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.028468][T16599] ext4 filesystem being mounted at /1072/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.065747][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.089796][T16602] loop6: detected capacity change from 0 to 8192 [ 174.186447][T16618] ip6gre2: entered allmulticast mode [ 174.294907][T16637] dvmrp1: entered allmulticast mode [ 174.307863][T16637] dvmrp1: left allmulticast mode [ 174.322441][T16639] loop2: detected capacity change from 0 to 1024 [ 174.341636][T16639] EXT4-fs: Ignoring removed nobh option [ 174.356044][T16639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.374610][T16648] loop5: detected capacity change from 0 to 2048 [ 174.389677][T16648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.424299][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.433582][T16656] loop6: detected capacity change from 0 to 1024 [ 174.440402][T16656] EXT4-fs: Ignoring removed bh option [ 174.445966][T16656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.461518][T16656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.475468][T16659] loop2: detected capacity change from 0 to 128 [ 174.494280][T16659] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.508421][T16659] ext4 filesystem being mounted at /1077/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.550294][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.569225][T16665] loop3: detected capacity change from 0 to 128 [ 174.586471][T16665] ext4 filesystem being mounted at /1096/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.666249][T16671] loop5: detected capacity change from 0 to 8192 [ 174.849593][T16692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.936534][T16704] ip6gre1: entered allmulticast mode [ 175.081577][T16714] loop1: detected capacity change from 0 to 2048 [ 175.128982][T16724] loop5: detected capacity change from 0 to 512 [ 175.158799][T16724] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.220487][T16724] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.244298][T16724] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5352: mark_inode_dirty error [ 175.259007][T16724] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.273540][T16735] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.294351][T16735] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5352: mark_inode_dirty error [ 175.307345][T16735] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.320670][T16735] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5352: mark_inode_dirty error [ 175.332348][T16735] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.346191][T16735] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5352: mark_inode_dirty error [ 175.394835][T16739] ip6gre2: entered allmulticast mode [ 175.399822][T16724] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5352: corrupted inode contents [ 175.451154][T16745] loop1: detected capacity change from 0 to 1024 [ 175.459517][T16745] EXT4-fs: Ignoring removed bh option [ 175.465218][T16745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.476396][T16748] loop3: detected capacity change from 0 to 512 [ 175.510697][T16748] ext4 filesystem being mounted at /1105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.527084][T16754] dvmrp1: entered allmulticast mode [ 175.533038][T16748] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.546535][T16748] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.5371: mark_inode_dirty error [ 175.559276][T16748] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.582583][T16754] dvmrp1: left allmulticast mode [ 175.594335][T16758] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.615306][T16758] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.5371: mark_inode_dirty error [ 175.628257][T16760] loop5: detected capacity change from 0 to 1024 [ 175.634907][T16758] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.647882][T16758] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.5371: mark_inode_dirty error [ 175.660013][T16760] EXT4-fs: Ignoring removed nobh option [ 175.666959][T16758] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.709802][T16758] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.5371: mark_inode_dirty error [ 175.727375][T16766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.736139][T16766] bridge0: port 3(bond1) entered blocking state [ 175.742609][T16766] bridge0: port 3(bond1) entered disabled state [ 175.749976][T16766] bond1: entered allmulticast mode [ 175.757717][T16766] bond1: entered promiscuous mode [ 175.761215][T16748] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.5371: corrupted inode contents [ 175.767455][T16766] bridge0: port 3(bond1) entered blocking state [ 175.782019][T16766] bridge0: port 3(bond1) entered forwarding state [ 175.811531][T16775] usb usb1: usbfs: process 16775 (syz.5.5380) did not claim interface 63 before use [ 175.838552][T16777] loop2: detected capacity change from 0 to 2048 [ 175.980097][T16794] loop3: detected capacity change from 0 to 512 [ 175.993396][T16794] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 176.012500][T16794] EXT4-fs (loop3): invalid journal inode [ 176.018561][T16794] EXT4-fs (loop3): can't get journal size [ 176.035490][T16794] EXT4-fs (loop3): 1 truncate cleaned up [ 176.100900][T16803] netdevsim netdevsim6 netdevsim0: Unsupported IPsec algorithm [ 176.153345][T16805] dvmrp1: entered allmulticast mode [ 176.162318][T16805] dvmrp1: left allmulticast mode [ 176.175222][T16807] SELinux: failed to load policy [ 176.247349][T16818] loop6: detected capacity change from 0 to 512 [ 176.280300][T16818] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.302651][T16818] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.331720][T16824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.368259][T16824] bridge0: port 3(bond2) entered blocking state [ 176.374691][T16824] bridge0: port 3(bond2) entered disabled state [ 176.381230][T16818] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.5386: mark_inode_dirty error [ 176.392886][T16824] bond2: entered allmulticast mode [ 176.395278][T16818] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.399868][T16824] bond2: entered promiscuous mode [ 176.419154][T16826] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.441570][T16826] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.5386: mark_inode_dirty error [ 176.453448][T16826] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.465657][T16826] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.5386: mark_inode_dirty error [ 176.477361][T16826] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.489332][T16826] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.5386: mark_inode_dirty error [ 176.501555][T16828] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.5386: corrupted inode contents [ 176.515019][ T3614] bridge0: port 3(bond1) entered disabled state [ 176.541387][T16833] usb usb1: usbfs: process 16833 (syz.1.5393) did not claim interface 63 before use [ 176.601250][T16842] loop6: detected capacity change from 0 to 2048 [ 176.692449][T16860] dvmrp1: entered allmulticast mode [ 176.700374][T16856] SELinux: failed to load policy [ 176.706200][T16860] dvmrp1: left allmulticast mode [ 176.770578][T16841] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 176.785421][T16841] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2976 with max blocks 32 with error 28 [ 176.798118][T16841] EXT4-fs (loop6): This should not happen!! Data will be lost [ 176.798118][T16841] [ 176.807821][T16841] EXT4-fs (loop6): Total free blocks count 0 [ 176.813862][T16841] EXT4-fs (loop6): Free/Dirty block details [ 176.819853][T16841] EXT4-fs (loop6): free_blocks=2415919504 [ 176.825825][T16841] EXT4-fs (loop6): dirty_blocks=32 [ 176.831054][T16841] EXT4-fs (loop6): Block reservation details [ 176.837134][T16841] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 176.857658][T16864] loop2: detected capacity change from 0 to 1024 [ 176.884434][T16864] EXT4-fs: Ignoring removed bh option [ 176.889938][T16864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.924221][T16872] SELinux: failed to load policy [ 176.943231][T16877] loop3: detected capacity change from 0 to 2048 [ 177.227060][T16893] loop1: detected capacity change from 0 to 512 [ 177.258391][T16889] loop6: detected capacity change from 0 to 2048 [ 177.276543][T16893] ext4 filesystem being mounted at /1088/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.336059][T16893] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.362523][T16893] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.5409: mark_inode_dirty error [ 177.402178][T16893] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.440327][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.466014][T16900] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.5409: mark_inode_dirty error [ 177.483837][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.497805][T16900] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.5409: mark_inode_dirty error [ 177.510607][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.548755][T16886] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 177.553862][T16900] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.5409: mark_inode_dirty error [ 177.575842][T16886] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2784 with max blocks 32 with error 28 [ 177.586177][T16893] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.5409: corrupted inode contents [ 177.588631][T16886] EXT4-fs (loop6): This should not happen!! Data will be lost [ 177.588631][T16886] [ 177.610142][T16886] EXT4-fs (loop6): Total free blocks count 0 [ 177.616223][T16886] EXT4-fs (loop6): Free/Dirty block details [ 177.622206][T16886] EXT4-fs (loop6): free_blocks=2415919504 [ 177.627974][T16886] EXT4-fs (loop6): dirty_blocks=32 [ 177.633150][T16886] EXT4-fs (loop6): Block reservation details [ 177.639274][T16886] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 177.678679][T16908] netlink: 'syz.3.5418': attribute type 10 has an invalid length. [ 177.694477][T16908] team0: Device hsr_slave_0 failed to register rx_handler [ 177.753420][T16910] SELinux: failed to load policy [ 177.759279][T16914] loop1: detected capacity change from 0 to 2048 [ 177.834562][ T3617] ================================================================== [ 177.842712][ T3617] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 177.852227][ T3617] [ 177.854578][ T3617] write to 0xffff88810ad55a7c of 2 bytes by task 16864 on cpu 1: [ 177.862327][ T3617] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 177.868252][ T3617] generic_perform_write+0x2c2/0x490 [ 177.873570][ T3617] ext4_buffered_write_iter+0x1ee/0x3c0 [ 177.879247][ T3617] ext4_file_write_iter+0x383/0xf00 [ 177.884470][ T3617] iter_file_splice_write+0x5f2/0x970 [ 177.889879][ T3617] direct_splice_actor+0x156/0x2a0 [ 177.895051][ T3617] splice_direct_to_actor+0x312/0x680 [ 177.900476][ T3617] do_splice_direct+0xda/0x150 [ 177.905291][ T3617] do_sendfile+0x380/0x650 [ 177.909763][ T3617] __x64_sys_sendfile64+0x105/0x150 [ 177.915071][ T3617] x64_sys_call+0xb39/0x2fb0 [ 177.919694][ T3617] do_syscall_64+0xd2/0x200 [ 177.924307][ T3617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.930216][ T3617] [ 177.932602][ T3617] read to 0xffff88810ad55800 of 1024 bytes by task 3617 on cpu 0: [ 177.940422][ T3617] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 177.946358][ T3617] generic_perform_write+0x2c2/0x490 [ 177.951657][ T3617] shmem_file_write_iter+0xc5/0xf0 [ 177.956904][ T3617] lo_rw_aio+0x5fa/0x7c0 [ 177.961160][ T3617] loop_process_work+0x52d/0xa60 [ 177.966111][ T3617] loop_workfn+0x31/0x40 [ 177.970364][ T3617] process_scheduled_works+0x4cb/0x9d0 [ 177.975856][ T3617] worker_thread+0x582/0x770 [ 177.980470][ T3617] kthread+0x486/0x510 [ 177.984549][ T3617] ret_from_fork+0xda/0x150 [ 177.989089][ T3617] ret_from_fork_asm+0x1a/0x30 [ 177.993868][ T3617] [ 177.996199][ T3617] Reported by Kernel Concurrency Sanitizer on: [ 178.002482][ T3617] CPU: 0 UID: 0 PID: 3617 Comm: kworker/u8:50 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 178.014827][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.024897][ T3617] Workqueue: loop2 loop_workfn [ 178.029713][ T3617] ================================================================== [ 178.048514][T16928] loop3: detected capacity change from 0 to 128