last executing test programs: 1m19.645025593s ago: executing program 32 (id=353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x3, 0xfffffffe, @loopback, 0x3}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 1m15.640268778s ago: executing program 0 (id=485): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) fallocate(r0, 0x1, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) 1m15.480358481s ago: executing program 0 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) 1m15.413077607s ago: executing program 5 (id=500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 1m15.369766611s ago: executing program 3 (id=501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f0000000580)={0xe080480, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 1m15.36957052s ago: executing program 5 (id=502): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) 1m15.362918781s ago: executing program 0 (id=504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m15.346935512s ago: executing program 3 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 1m15.341871082s ago: executing program 5 (id=506): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0xfc01, 0x9}, 0x8) 1m14.862308422s ago: executing program 3 (id=508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 1m14.519172689s ago: executing program 3 (id=517): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) 1m14.484953682s ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) 1m14.446196655s ago: executing program 5 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1m13.593641744s ago: executing program 5 (id=523): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) fallocate(r0, 0x1, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) 1m13.593133325s ago: executing program 0 (id=534): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}]}, 0x11, 0x24b, &(0x7f0000000500)="$eJzs2s9rHGUYB/BnYktiSroRf9GC+KIH9TI0OXtoDi2IOYg2QhWkUzPRJeNu2FkCK2Jz0qt/gmfx6E2QHr3k4l/gwZO55NiDOLLZTZvIitjW7KKfz2Uf9t3v8Ly8y8tzmIPXv/pke6vOt4p+zGVZzF2NvbiXxXLMxbG9eO2Vmz++8M7N995cW1+/9nZK19durKymlC6++MP7n3370t3+hXe/u/j9fOwvf3BwuPrL/nP7lw5+v/Fxu07tOnW6/VSk291uv7hdlWmzXW/nKb1VlUVdpnanLnun1req7s7OIBWdzaXFnV5Z16noDNJ2OUj9bur3Bqn4qGh3Up7naWkxeBQb39xrmjhszt+Kpmme/Dou3I2ln6MV2VMpe/pq9uyt7Pm97NJh07Sm3Sr/Cuf//3biUl+IqL7c3djdGH2O1tfaTdNUUcaVaMVvMfybjI3q62+sX7uSjizHF9Wdcf7O7sYTo/xWtGOYX4lWLE/Or4zy6XR+PhZP5lejFc9Mzq9OzC/Eqy+fyOfRip8+jG5UsRnD7IP85yspnR82eyp/+eh3AAD/NXm6b+L8lud/tT7K35+v/n4+/NN8di4un5vu3omoB59uF1VV9h6+OH7U0TfZcfEID3yMxUJEPFR8cwaan2YxPz7UWenn8Ra/jnc3K/3MYjGd+4iz9eDQp90JAAAAAAAAAAAA/8RZvE447T0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz7Y8AAAD//720ykw=") syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x7) 1m13.592705055s ago: executing program 3 (id=525): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1m13.179205568s ago: executing program 33 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) pivot_root(&(0x7f0000000240)='./control\x00', &(0x7f00000004c0)='./file0\x00') 1m13.179123548s ago: executing program 0 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) 1m13.178999518s ago: executing program 5 (id=533): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r1, 0x0, 0x6) 1m13.140202721s ago: executing program 34 (id=533): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r1, 0x0, 0x6) 1m13.137407342s ago: executing program 35 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) 1m13.128441473s ago: executing program 3 (id=536): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m13.122593662s ago: executing program 36 (id=536): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 28.312332281s ago: executing program 8 (id=2121): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) 28.254502756s ago: executing program 8 (id=2123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x22, 0x0) 28.195480271s ago: executing program 8 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00"], 0x88}, 0x1, 0x7}, 0x0) 28.044021923s ago: executing program 8 (id=2129): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@errors_remount}, {@nolazytime}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x4f57]}) 27.616939918s ago: executing program 8 (id=2140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) alarm(0x7) 26.937768863s ago: executing program 8 (id=2158): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x54}}, 0x20008040) 26.900769336s ago: executing program 37 (id=2158): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x54}}, 0x20008040) 26.415621205s ago: executing program 6 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 26.122385089s ago: executing program 6 (id=2176): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x9}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}}, 0x24}}, 0x0) 26.122070309s ago: executing program 6 (id=2177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) close(r0) 26.085218042s ago: executing program 6 (id=2179): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@errors_remount}, {@nolazytime}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x4f57]}) 25.802983915s ago: executing program 6 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200001a, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 25.397727167s ago: executing program 6 (id=2199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 25.391109778s ago: executing program 38 (id=2199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.141289927s ago: executing program 9 (id=3073): socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x248}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.094686981s ago: executing program 9 (id=3074): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 868.798739ms ago: executing program 2 (id=3089): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 801.038185ms ago: executing program 2 (id=3091): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 719.338972ms ago: executing program 2 (id=3094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getrusage(0xffffffffffffffff, &(0x7f0000000280)) 687.106474ms ago: executing program 7 (id=3096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 681.642825ms ago: executing program 2 (id=3097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 633.600479ms ago: executing program 7 (id=3100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) shutdown(r0, 0x1) 632.994629ms ago: executing program 2 (id=3112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 610.74237ms ago: executing program 2 (id=3101): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) 610.39668ms ago: executing program 7 (id=3103): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000034780)=""/102391, &(0x7f00000001c0)=0x18ff7) 246.58504ms ago: executing program 9 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) clock_settime(0x1ed5d7403, 0x0) 246.40836ms ago: executing program 7 (id=3114): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x2000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 245.95293ms ago: executing program 4 (id=3123): syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='cpuset\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x400}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 211.166913ms ago: executing program 7 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getrusage(0xffffffffffffffff, &(0x7f0000000280)) 210.619893ms ago: executing program 1 (id=3127): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x80, 0x2000001, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 200.163873ms ago: executing program 9 (id=3117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x8, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x94, 0x9}}}}}}, 0x0) 199.448584ms ago: executing program 4 (id=3118): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r1, 0x200000000000000) fallocate(r1, 0x3, 0x1, 0xfffffffb) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) 170.866867ms ago: executing program 7 (id=3119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1fc}], 0x1, 0x40000040, 0x0) 150.052358ms ago: executing program 9 (id=3120): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x10000000bb3, 0x5}, &(0x7f0000000240)=0x18) 149.525898ms ago: executing program 4 (id=3132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0xa000200) 144.245428ms ago: executing program 1 (id=3121): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 112.197761ms ago: executing program 1 (id=3122): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000000)=0x84) 111.693891ms ago: executing program 4 (id=3135): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000280)) 91.741393ms ago: executing program 4 (id=3124): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) setgroups(0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) 91.094802ms ago: executing program 9 (id=3137): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff, &(0x7f0000001a80)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@nodelalloc}, {@norecovery}, {@delalloc}, {@nojournal_checksum}, {@grpquota}, {@nodelalloc}, {@errors_remount}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x59a, &(0x7f0000001ac0)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 87.655743ms ago: executing program 1 (id=3125): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 68.781514ms ago: executing program 4 (id=3126): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 55.727925ms ago: executing program 1 (id=3128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 0s ago: executing program 1 (id=3129): syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='cpuset\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0x400}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) kernel console output (not intermixed with test programs): egistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.539409][ T3438] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551038][ T3438] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.575495][ T3438] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.594166][ T3438] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.643110][ T5726] sctp: [Deprecated]: syz.7.894 (pid 5726) Use of int in max_burst socket option deprecated. [ 72.643110][ T5726] Use struct sctp_assoc_value instead [ 73.450573][ T5755] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.504088][ T5755] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.554095][ T5755] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.594033][ T5755] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.658743][ T3438] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.670364][ T3438] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.682397][ T4880] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.694515][ T4880] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.746608][ T5762] binfmt_misc: register: failed to install interpreter file ./bus [ 73.902974][ T5786] loop8: detected capacity change from 0 to 1024 [ 73.911256][ T5787] loop6: detected capacity change from 0 to 1024 [ 73.926314][ T5787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.942488][ T5786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.982327][ T5786] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.985755][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.003313][ T5801] loop9: detected capacity change from 0 to 1024 [ 74.011271][ T5801] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.015829][ T5786] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.924: bg 0: block 393: padding at end of block bitmap is not set [ 74.023121][ T5801] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.039886][ T5801] JBD2: no valid journal superblock found [ 74.050050][ T5786] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 117 [ 74.054304][ T5801] EXT4-fs (loop9): Could not load journal inode [ 74.074733][ T5786] EXT4-fs (loop8): This should not happen!! Data will be lost [ 74.074733][ T5786] [ 74.094034][ T5801] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 74.123492][ T5805] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.933'. [ 74.141490][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.301282][ T5829] loop8: detected capacity change from 0 to 512 [ 74.308729][ T5829] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.329113][ T5829] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 74.353052][ T5829] EXT4-fs (loop8): 1 truncate cleaned up [ 74.359336][ T5829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.379669][ T5838] bond1: entered promiscuous mode [ 74.385152][ T5838] bond1: entered allmulticast mode [ 74.390884][ T5838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.402952][ T5838] bond1 (unregistering): Released all slaves [ 74.471799][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.494422][ T5852] syz.8.954 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.528178][ T5856] loop9: detected capacity change from 0 to 1024 [ 74.547143][ T5856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.609611][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.722361][ T5875] bond1: entered promiscuous mode [ 74.727640][ T5875] bond1: entered allmulticast mode [ 74.734439][ T5875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.762775][ T5875] bond1 (unregistering): Released all slaves [ 74.932034][ T5900] infiniband syz!: set active [ 74.937179][ T5900] infiniband syz!: added team_slave_0 [ 74.961514][ T5900] RDS/IB: syz!: added [ 74.965962][ T5900] smc: adding ib device syz! with port count 1 [ 74.972509][ T5900] smc: ib device syz! port 1 has pnetid [ 75.086338][ T5914] loop1: detected capacity change from 0 to 512 [ 75.113122][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.140883][ T5914] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.162666][ T5914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.981: corrupted inode contents [ 75.184428][ T5914] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.981: mark_inode_dirty error [ 75.197951][ T5914] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.981: corrupted inode contents [ 75.213097][ T5914] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.981: mark_inode_dirty error [ 75.253573][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.290766][ T5934] netlink: 'syz.6.991': attribute type 6 has an invalid length. [ 75.304441][ T5935] loop1: detected capacity change from 0 to 1024 [ 75.329145][ T5935] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.340560][ T5935] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.353829][ T5935] JBD2: no valid journal superblock found [ 75.355609][ T5941] SELinux: policydb version -957581230 does not match my version range 15-35 [ 75.360360][ T5935] EXT4-fs (loop1): Could not load journal inode [ 75.377039][ T5941] SELinux: failed to load policy [ 75.401233][ T5935] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 75.462846][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.998'. [ 75.479975][ T5952] netlink: 'syz.6.999': attribute type 13 has an invalid length. [ 75.514487][ T5952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.662392][ T5967] loop8: detected capacity change from 0 to 1024 [ 75.686640][ T5971] loop6: detected capacity change from 0 to 1024 [ 75.697333][ T5971] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.702427][ T5967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.708526][ T5971] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.734628][ T5967] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.747918][ T5971] JBD2: no valid journal superblock found [ 75.753836][ T5971] EXT4-fs (loop6): Could not load journal inode [ 75.793163][ T5971] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 75.846070][ T5967] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.1006: Freeing blocks not in datazone - block = 0, count = 16 [ 75.902771][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.909923][ T5995] netlink: 'syz.9.1016': attribute type 13 has an invalid length. [ 76.099226][ T5995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.168612][ T6023] loop7: detected capacity change from 0 to 1024 [ 76.197073][ T6023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.233612][ T6023] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.259313][ T6023] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1029: bg 0: block 393: padding at end of block bitmap is not set [ 76.303801][ T6023] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 117 [ 76.317225][ T6023] EXT4-fs (loop7): This should not happen!! Data will be lost [ 76.317225][ T6023] [ 76.347954][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 76.347974][ T29] audit: type=1400 audit(1754567046.801:1154): avc: denied { module_request } for pid=6041 comm="syz.1.1037" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.385326][ T6043] loop8: detected capacity change from 0 to 512 [ 76.396697][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.423948][ T6043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.441154][ T6055] netlink: 'syz.9.1041': attribute type 13 has an invalid length. [ 76.449220][ T6043] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.461868][ T6043] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.1036: corrupted inode contents [ 76.474509][ T6055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.499706][ T6043] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.1036: mark_inode_dirty error [ 76.528147][ T6043] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.1036: corrupted inode contents [ 76.549717][ T6043] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1036: mark_inode_dirty error [ 76.612553][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.632512][ T29] audit: type=1400 audit(1754567047.061:1155): avc: denied { ioctl } for pid=6068 comm="syz.9.1045" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.678535][ T29] audit: type=1326 audit(1754567047.121:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 76.704507][ T29] audit: type=1326 audit(1754567047.121:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 76.729708][ T29] audit: type=1326 audit(1754567047.121:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 76.753882][ T29] audit: type=1326 audit(1754567047.121:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 76.811589][ T29] audit: type=1400 audit(1754567047.271:1160): avc: denied { read } for pid=6095 comm="syz.7.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.851845][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1052'. [ 76.895055][ T29] audit: type=1400 audit(1754567047.351:1161): avc: denied { prog_load } for pid=6098 comm="syz.8.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.914645][ T29] audit: type=1400 audit(1754567047.351:1162): avc: denied { bpf } for pid=6098 comm="syz.8.1048" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.935578][ T29] audit: type=1400 audit(1754567047.351:1163): avc: denied { perfmon } for pid=6098 comm="syz.8.1048" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.073529][ T6127] loop9: detected capacity change from 0 to 1024 [ 77.084878][ T6127] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 77.104456][ T6127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.165415][ T6127] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1054: bg 0: block 88: padding at end of block bitmap is not set [ 77.303525][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.340345][ T6181] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 77.484105][ T6206] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 77.500350][ T6208] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 77.600091][ T6225] macvtap0: refused to change device tx_queue_len [ 77.699695][ T6238] 9pnet_fd: Insufficient options for proto=fd [ 77.700422][ T6240] batadv_slave_1: entered promiscuous mode [ 77.730142][ T6239] batadv_slave_1: left promiscuous mode [ 78.017693][ T6289] loop7: detected capacity change from 0 to 512 [ 78.073031][ T6289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.087727][ T6289] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.110362][ T6289] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1114: corrupted inode contents [ 78.129536][ T6289] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1114: mark_inode_dirty error [ 78.141678][ T6289] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1114: corrupted inode contents [ 78.154231][ T6289] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1114: mark_inode_dirty error [ 78.199759][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.690755][ T6343] loop6: detected capacity change from 0 to 512 [ 78.702497][ T6348] loop7: detected capacity change from 0 to 128 [ 78.721361][ T6343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.763275][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 78.773682][ T6343] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.785521][ T6348] bio_check_eod: 1 callbacks suppressed [ 78.785536][ T6348] syz.7.1141: attempt to access beyond end of device [ 78.785536][ T6348] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 78.859439][ T6343] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1139: corrupted inode contents [ 78.860229][ T35] kworker/u8:2: attempt to access beyond end of device [ 78.860229][ T35] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 78.881949][ T6343] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1139: mark_inode_dirty error [ 78.915734][ T6343] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1139: corrupted inode contents [ 78.948042][ T6343] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1139: mark_inode_dirty error [ 79.009292][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.128662][ T6386] geneve2: entered promiscuous mode [ 79.134263][ T6386] geneve2: entered allmulticast mode [ 79.334480][ T6413] loop1: detected capacity change from 0 to 512 [ 79.359850][ T6413] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 79.391133][ T6413] loop1: detected capacity change from 0 to 128 [ 79.401278][ T6424] loop9: detected capacity change from 0 to 256 [ 79.410275][ T6424] FAT-fs (loop9): Directory bread(block 1285) failed [ 79.413607][ T6413] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.422436][ T6424] FAT-fs (loop9): Directory bread(block 1285) failed [ 79.508265][ T6413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.533030][ T6431] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 79.542180][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.691250][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.732783][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.752434][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.796335][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.807518][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.823831][ T6461] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.832903][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1186'. [ 79.845502][ T6457] geneve2: entered promiscuous mode [ 79.851121][ T6457] geneve2: entered allmulticast mode [ 80.011894][ T6483] loop8: detected capacity change from 0 to 512 [ 80.019165][ T6483] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.049007][ T6483] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 80.122621][ T6483] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.1202: attempt to clear invalid blocks 2 len 1 [ 80.148443][ T6483] EXT4-fs (loop8): Remounting filesystem read-only [ 80.155543][ T6483] EXT4-fs (loop8): 1 truncate cleaned up [ 80.161987][ T6483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.189518][ T6502] loop7: detected capacity change from 0 to 256 [ 80.222876][ T6502] FAT-fs (loop7): Directory bread(block 1285) failed [ 80.238113][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.258132][ T6502] FAT-fs (loop7): Directory bread(block 1285) failed [ 80.276924][ T6504] loop9: detected capacity change from 0 to 1024 [ 80.392023][ T6518] team0: Device ipip0 is of different type [ 80.478021][ T6532] loop8: detected capacity change from 0 to 512 [ 80.520026][ T6532] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 80.529283][ T6540] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 80.551320][ T6532] loop8: detected capacity change from 0 to 128 [ 80.567612][ T6532] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.590187][ T6532] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.640556][ T35] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.707001][ T6559] loop1: detected capacity change from 0 to 1024 [ 80.719131][ T6559] EXT4-fs: Ignoring removed orlov option [ 80.726547][ T6559] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.769584][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.831766][ T6573] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.844713][ T6576] loop8: detected capacity change from 0 to 1024 [ 80.907956][ T6582] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1245'. [ 80.935398][ T6565] loop7: detected capacity change from 0 to 32768 [ 80.974479][ T6589] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1247'. [ 81.079471][ T6604] loop6: detected capacity change from 0 to 512 [ 81.090299][ T6604] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.100544][ T6608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.107415][ T6604] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 81.118912][ T6604] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1257: attempt to clear invalid blocks 2 len 1 [ 81.142674][ T6604] EXT4-fs (loop6): Remounting filesystem read-only [ 81.159695][ T6604] EXT4-fs (loop6): 1 truncate cleaned up [ 81.169020][ T6604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.205142][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.354541][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 81.354560][ T29] audit: type=1400 audit(1754567307.816:1437): avc: denied { connect } for pid=6637 comm="syz.7.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.485746][ T6624] loop6: detected capacity change from 0 to 32768 [ 81.517249][ T6650] netlink: 'syz.7.1272': attribute type 6 has an invalid length. [ 81.537699][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.654408][ T29] audit: type=1400 audit(1754567308.116:1438): avc: denied { ioctl } for pid=6657 comm="syz.7.1277" path="socket:[17870]" dev="sockfs" ino=17870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.685385][ T6662] tipc: Started in network mode [ 81.691543][ T6662] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 81.709357][ T6662] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 81.717967][ T6662] tipc: Enabled bearer , priority 10 [ 81.762251][ T6667] loop1: detected capacity change from 0 to 1024 [ 81.806781][ T29] audit: type=1326 audit(1754567308.256:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.7.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba49ebe9 code=0x7ffc0000 [ 81.831292][ T29] audit: type=1326 audit(1754567308.256:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.7.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ffaba49ebe9 code=0x7ffc0000 [ 81.855292][ T29] audit: type=1326 audit(1754567308.256:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.7.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba49ebe9 code=0x7ffc0000 [ 81.904001][ T29] audit: type=1400 audit(1754567308.356:1442): avc: denied { write } for pid=6676 comm="syz.6.1287" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.925572][ T29] audit: type=1400 audit(1754567308.366:1443): avc: denied { create } for pid=6675 comm="syz.7.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.946354][ T29] audit: type=1400 audit(1754567308.366:1444): avc: denied { connect } for pid=6675 comm="syz.7.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.966891][ T29] audit: type=1400 audit(1754567308.366:1445): avc: denied { write } for pid=6675 comm="syz.7.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.026854][ T29] audit: type=1326 audit(1754567308.486:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4c48ebe9 code=0x7ffc0000 [ 82.052466][ T6693] veth0: entered promiscuous mode [ 82.067032][ T6692] veth0: left promiscuous mode [ 82.092924][ T6697] netlink: 'syz.1.1297': attribute type 6 has an invalid length. [ 82.200423][ T6718] veth0: entered promiscuous mode [ 82.206925][ T6717] veth0: left promiscuous mode [ 82.266030][ T6724] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 82.365331][ T6744] veth3: entered promiscuous mode [ 82.712033][ T6783] loop9: detected capacity change from 0 to 1024 [ 82.726923][ T6783] EXT4-fs: Ignoring removed orlov option [ 82.737275][ T3390] tipc: Node number set to 1 [ 82.754577][ T6783] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 82.781876][ T6783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.048587][ T6813] vhci_hcd: invalid port number 96 [ 83.054962][ T6813] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 83.116992][ T6825] loop1: detected capacity change from 0 to 512 [ 83.138189][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.158251][ T6825] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.243651][ T6839] veth3: entered promiscuous mode [ 83.358504][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.538729][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.771338][ T6902] netlink: 'syz.9.1391': attribute type 21 has an invalid length. [ 83.858235][ T6918] loop6: detected capacity change from 0 to 1024 [ 83.884180][ T6918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.919720][ T6918] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1397: Allocating blocks 497-513 which overlap fs metadata [ 83.943396][ T6918] EXT4-fs (loop6): pa ffff88810661a700: logic 256, phys. 369, len 9 [ 83.952063][ T6918] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 83.995634][ T6939] openvswitch: netlink: Message has 6 unknown bytes. [ 83.998794][ T6918] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 84.005092][ T6933] loop8: detected capacity change from 0 to 512 [ 84.025405][ T6935] veth3: entered promiscuous mode [ 84.093928][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.111570][ T6933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.125921][ T6933] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.242770][ T6968] veth3: entered promiscuous mode [ 84.366168][ T4762] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.508262][ T7011] syzkaller1: entered promiscuous mode [ 84.514015][ T7011] syzkaller1: entered allmulticast mode [ 84.552617][ T7017] loop1: detected capacity change from 0 to 512 [ 84.560723][ T7017] EXT4-fs: Ignoring removed oldalloc option [ 84.566939][ T7017] EXT4-fs: Ignoring removed orlov option [ 84.591744][ T7017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.605666][ T7017] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.652738][ T7017] capability: warning: `syz.1.1444' uses deprecated v2 capabilities in a way that may be insecure [ 84.698616][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.714642][ T7035] tmpfs: Bad value for 'mpol' [ 84.839089][ T7063] __nla_validate_parse: 16 callbacks suppressed [ 84.839105][ T7063] netlink: 4 bytes leftover after parsing attributes in process `_@'. [ 84.862903][ T7063] veth3: entered promiscuous mode [ 84.995777][ T7086] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1477'. [ 85.037363][ T7094] netlink: 4 bytes leftover after parsing attributes in process `_@'. [ 85.052971][ T7094] veth5: entered promiscuous mode [ 85.103527][ T7100] loop7: detected capacity change from 0 to 512 [ 85.118439][ T7100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.131860][ T7100] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.192371][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.200579][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.209164][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.217525][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.225143][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.233197][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.240982][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.248637][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.256392][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.264029][ T4747] hid-generic 09E2:0099:0005.0003: unknown main item tag 0x0 [ 85.272689][ T4747] hid-generic 09E2:0099:0005.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 85.323638][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.678365][ T7134] veth0: entered promiscuous mode [ 85.679351][ T7134] veth0: left promiscuous mode [ 85.775468][ T3390] hid-generic 09E2:0099:0005.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 85.868109][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1504'. [ 85.868158][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1504'. [ 86.118867][ T7183] loop8: detected capacity change from 0 to 128 [ 86.119155][ T7183] EXT4-fs: Ignoring removed nobh option [ 86.128402][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1518'. [ 86.168284][ T7183] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.168552][ T7183] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.326502][ T4762] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.379336][ T7212] loop6: detected capacity change from 0 to 512 [ 86.394318][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 86.394338][ T29] audit: type=1400 audit(1754567312.848:1621): avc: denied { write } for pid=7213 comm="syz.1.1531" path="socket:[18863]" dev="sockfs" ino=18863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.433096][ T7212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.468943][ T29] audit: type=1400 audit(1754567312.938:1622): avc: denied { map_create } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.478117][ T7212] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.488848][ T29] audit: type=1400 audit(1754567312.938:1623): avc: denied { map_read map_write } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.525435][ T7219] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1533'. [ 86.539402][ T29] audit: type=1400 audit(1754567312.948:1624): avc: denied { mount } for pid=7211 comm="syz.6.1530" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.561781][ T29] audit: type=1400 audit(1754567312.988:1625): avc: denied { prog_load } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.582264][ T29] audit: type=1400 audit(1754567312.988:1626): avc: denied { bpf } for pid=7218 comm="syz.8.1533" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.604120][ T29] audit: type=1400 audit(1754567312.988:1627): avc: denied { perfmon } for pid=7218 comm="syz.8.1533" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.627196][ T29] audit: type=1400 audit(1754567312.988:1628): avc: denied { prog_run } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.647660][ T29] audit: type=1400 audit(1754567312.988:1629): avc: denied { create } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.670018][ T29] audit: type=1400 audit(1754567312.998:1630): avc: denied { write } for pid=7218 comm="syz.8.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.789389][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 86.798665][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 86.854869][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.193299][ T7266] batadv_slave_0: entered promiscuous mode [ 87.200721][ T7265] batadv_slave_0: left promiscuous mode [ 87.748084][ T7275] netlink: 'syz.6.1558': attribute type 1 has an invalid length. [ 87.852329][ T7285] veth5: entered allmulticast mode [ 88.338384][ T7323] loop7: detected capacity change from 0 to 512 [ 88.349127][ T7323] EXT4-fs: Ignoring removed oldalloc option [ 88.355224][ T7323] EXT4-fs: Ignoring removed orlov option [ 88.382157][ T7323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.395570][ T7323] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.401650][ T7331] batadv_slave_0: entered promiscuous mode [ 88.427616][ T7329] batadv_slave_0: left promiscuous mode [ 88.436698][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.467149][ T7335] loop9: detected capacity change from 0 to 512 [ 88.485457][ T7335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.499888][ T7335] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.618633][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.646968][ T7348] netlink: '': attribute type 1 has an invalid length. [ 88.714992][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1593'. [ 88.855151][ T7378] loop1: detected capacity change from 0 to 128 [ 88.862411][ T7378] EXT4-fs: Ignoring removed nobh option [ 88.878476][ T7378] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.936898][ T7378] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.045147][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.097082][ T7384] loop9: detected capacity change from 0 to 512 [ 89.133353][ T7388] loop8: detected capacity change from 0 to 512 [ 89.166333][ T7384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.191570][ T7384] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.301744][ T7412] netlink: 'syz.8.1610': attribute type 3 has an invalid length. [ 89.397365][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.479667][ T7436] loop9: detected capacity change from 0 to 128 [ 89.487448][ T7436] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.503349][ T7436] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.600202][ T7446] netlink: 'syz.7.1625': attribute type 3 has an invalid length. [ 89.785818][ T7466] loop9: detected capacity change from 0 to 1024 [ 89.786962][ T7466] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.820480][ T7466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.903837][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.942676][ T7474] loop6: detected capacity change from 0 to 2048 [ 89.960364][ T7474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.996359][ T7474] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.020465][ T7474] EXT4-fs error (device loop6): ext4_ext_precache:649: inode #2: comm syz.6.1638: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.134769][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.138142][ T7487] loop7: detected capacity change from 0 to 512 [ 90.234143][ T7501] loop8: detected capacity change from 0 to 128 [ 90.234538][ T7501] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.256205][ T7501] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.589346][ T7534] loop9: detected capacity change from 0 to 256 [ 91.025855][ T7577] loop6: detected capacity change from 0 to 1024 [ 91.027226][ T7577] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 91.047697][ T7579] random: crng reseeded on system resumption [ 91.058527][ T7579] Restarting kernel threads ... [ 91.058714][ T7579] Done restarting kernel threads. [ 91.064724][ T7577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.112749][ T7588] __nla_validate_parse: 3 callbacks suppressed [ 91.112765][ T7588] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1692'. [ 91.140391][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.236998][ T7602] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 91.245860][ T7604] loop9: detected capacity change from 0 to 512 [ 91.257995][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.284294][ T7602] bridge_slave_1: left allmulticast mode [ 91.284373][ T7602] bridge_slave_1: left promiscuous mode [ 91.284494][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.294630][ T7602] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 91.419656][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 91.419671][ T29] audit: type=1400 audit(1754567317.881:1860): avc: denied { read } for pid=7617 comm="syz.6.1705" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.419702][ T29] audit: type=1400 audit(1754567317.881:1861): avc: denied { open } for pid=7617 comm="syz.6.1705" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.433437][ T29] audit: type=1400 audit(1754567317.901:1862): avc: denied { ioctl } for pid=7617 comm="syz.6.1705" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.472729][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1707'. [ 91.472756][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1707'. [ 91.577445][ T29] audit: type=1400 audit(1754567318.041:1863): avc: denied { setopt } for pid=7626 comm="syz.8.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.582234][ T29] audit: type=1400 audit(1754567318.051:1864): avc: denied { bind } for pid=7626 comm="syz.8.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.650815][ T7631] loop1: detected capacity change from 0 to 8192 [ 91.662034][ T7631] FAT-fs (loop1): bogus sectors per cluster 0 [ 91.668374][ T7631] FAT-fs (loop1): Can't find a valid FAT filesystem [ 91.699332][ T29] audit: type=1400 audit(1754567318.151:1865): avc: denied { mount } for pid=7636 comm="syz.9.1723" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.735728][ T7640] loop8: detected capacity change from 0 to 256 [ 91.812321][ T29] audit: type=1400 audit(1754567318.271:1866): avc: denied { write } for pid=7650 comm="syz.8.1720" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.826057][ T7657] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1722'. [ 91.890068][ T29] audit: type=1400 audit(1754567318.351:1867): avc: denied { search } for pid=7659 comm="syz.8.1725" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.913330][ T29] audit: type=1400 audit(1754567318.351:1868): avc: denied { search } for pid=7659 comm="syz.8.1725" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.027519][ T29] audit: type=1400 audit(1754567318.491:1869): avc: denied { create } for pid=7671 comm="syz.8.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.113039][ T7678] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 92.119812][ T7678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.128085][ T7678] vhci_hcd vhci_hcd.0: Device attached [ 92.177514][ T7679] vhci_hcd: connection closed [ 92.177861][ T35] vhci_hcd: stop threads [ 92.187884][ T35] vhci_hcd: release socket [ 92.193853][ T35] vhci_hcd: disconnect device [ 92.505142][ T7708] netlink: 'syz.9.1746': attribute type 10 has an invalid length. [ 92.515692][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.525283][ T7708] bridge_slave_1: left allmulticast mode [ 92.531352][ T7708] bridge_slave_1: left promiscuous mode [ 92.537459][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.549135][ T7708] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.622859][ T7718] netlink: 'syz.8.1761': attribute type 10 has an invalid length. [ 92.639737][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.650163][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1752'. [ 92.650573][ T7718] bridge_slave_1: left allmulticast mode [ 92.660749][ T7724] netlink: 312 bytes leftover after parsing attributes in process `syz.9.1752'. [ 92.675489][ T7718] bridge_slave_1: left promiscuous mode [ 92.685266][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1752'. [ 92.702474][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.724710][ T7728] openvswitch: netlink: Message has 6 unknown bytes. [ 92.743312][ T7730] loop9: detected capacity change from 0 to 512 [ 92.752579][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 92.752981][ T7718] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.762096][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 92.783146][ T7730] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.812239][ T7730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 92.820480][ T7730] System zones: 0-2, 18-18, 34-34 [ 92.823355][ T7738] loop1: detected capacity change from 0 to 256 [ 92.827601][ T7730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.849378][ T7730] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.927492][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.992300][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1768'. [ 93.050335][ T7768] netlink: 'syz.7.1770': attribute type 10 has an invalid length. [ 93.061856][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.077108][ T7768] bridge_slave_1: left allmulticast mode [ 93.083134][ T7768] bridge_slave_1: left promiscuous mode [ 93.089042][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.104095][ T7762] loop6: detected capacity change from 0 to 8192 [ 93.113810][ T7768] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.125165][ T7762] FAT-fs (loop6): bogus sectors per cluster 0 [ 93.132261][ T7762] FAT-fs (loop6): Can't find a valid FAT filesystem [ 93.314843][ T7803] netlink: 'syz.6.1789': attribute type 1 has an invalid length. [ 93.369109][ T7805] netlink: 'syz.6.1790': attribute type 10 has an invalid length. [ 93.381084][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.389003][ T7805] bridge_slave_1: left allmulticast mode [ 93.394947][ T7805] bridge_slave_1: left promiscuous mode [ 93.401128][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.443804][ T7805] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.509390][ T7807] loop8: detected capacity change from 0 to 8192 [ 93.530885][ T7807] FAT-fs (loop8): bogus sectors per cluster 0 [ 93.539652][ T7807] FAT-fs (loop8): Can't find a valid FAT filesystem [ 93.582248][ T7824] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 93.596718][ T7824] ipvlan0: entered allmulticast mode [ 93.602398][ T7824] veth0_vlan: entered allmulticast mode [ 93.712102][ T7843] netlink: 'syz.9.1809': attribute type 1 has an invalid length. [ 93.877205][ T7870] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 93.883976][ T7870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.891957][ T7870] vhci_hcd vhci_hcd.0: Device attached [ 93.921677][ T7871] vhci_hcd: connection closed [ 93.929870][ T12] vhci_hcd: stop threads [ 93.939482][ T12] vhci_hcd: release socket [ 93.940368][ T7880] netlink: 'syz.8.1824': attribute type 1 has an invalid length. [ 93.944136][ T12] vhci_hcd: disconnect device [ 94.128078][ T7904] netlink: 'syz.8.1836': attribute type 21 has an invalid length. [ 94.136966][ T7904] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.199531][ T7914] loop8: detected capacity change from 0 to 256 [ 94.229666][ T7914] FAT-fs (loop8): codepage cp869 not found [ 94.272044][ T7925] loop1: detected capacity change from 0 to 512 [ 94.282943][ T7925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.311604][ T7925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 94.325087][ T7925] System zones: 0-2, 18-18, 34-34 [ 94.331382][ T7925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.346380][ T7925] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.393477][ T7943] loop7: detected capacity change from 0 to 512 [ 94.406601][ T7943] EXT4-fs: Ignoring removed bh option [ 94.417512][ T7943] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.427280][ T7943] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 94.439053][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.448808][ T7943] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 94.478019][ T7950] loop9: detected capacity change from 0 to 512 [ 94.482010][ T7943] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 94.510607][ T7950] EXT4-fs (loop9): orphan cleanup on readonly fs [ 94.517389][ T7943] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.523160][ T7950] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.1858: Failed to acquire dquot type 1 [ 94.580119][ T7943] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.1854: path /238/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 94.637745][ T7950] EXT4-fs (loop9): 1 truncate cleaned up [ 94.927811][ T7999] loop8: detected capacity change from 0 to 512 [ 94.946083][ T8000] loop1: detected capacity change from 0 to 512 [ 95.014683][ T8000] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.026944][ T7999] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1878: corrupted inode contents [ 95.039847][ T7999] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.1878: mark_inode_dirty error [ 95.057905][ T8000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 95.085268][ T8000] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.091999][ T8000] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1879: bad orphan inode 267 [ 95.140014][ T7999] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1878: corrupted inode contents [ 95.162263][ T8015] IPv6: Can't replace route, no match found [ 95.168448][ T7999] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.1878: mark_inode_dirty error [ 95.190028][ T8000] EXT4-fs (loop1): Remounting filesystem read-only [ 95.251298][ T8000] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1879: dx entry: limit 0 != root limit 125 [ 95.263445][ T8000] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1879: Corrupt directory, running e2fsck is recommended [ 95.263572][ T7999] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1878: corrupted inode contents [ 95.310879][ T7999] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 95.322891][ T7999] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1878: corrupted inode contents [ 95.343401][ T7999] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.1878: mark_inode_dirty error [ 95.366224][ T7999] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 95.383201][ T7999] EXT4-fs (loop8): 1 truncate cleaned up [ 95.391446][ T7999] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.402698][ T4880] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 95.477211][ T3383] kernel write not supported for file /612/attr/exec (pid: 3383 comm: kworker/0:3) [ 95.533241][ T8038] loop9: detected capacity change from 0 to 1024 [ 95.562333][ T8037] EXT4-fs error (device loop9): ext4_free_inode:354: comm syz.9.1897: bit already cleared for inode 15 [ 95.637993][ T8053] loop7: detected capacity change from 0 to 1024 [ 95.666366][ T8052] EXT4-fs error (device loop7): ext4_free_inode:354: comm syz.7.1911: bit already cleared for inode 15 [ 95.747080][ T8065] loop1: detected capacity change from 0 to 512 [ 95.770062][ T8065] EXT4-fs: Ignoring removed bh option [ 95.777868][ T8065] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.787259][ T8065] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 95.800000][ T8065] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 95.819787][ T8065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 95.861845][ T8065] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.864047][ T8072] syzkaller0: entered promiscuous mode [ 95.876352][ T8072] syzkaller0: entered allmulticast mode [ 95.900996][ T8065] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1902: path /419/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 96.244520][ T8094] IPv6: Can't replace route, no match found [ 96.269272][ T8093] syzkaller1: entered promiscuous mode [ 96.275571][ T8093] syzkaller1: entered allmulticast mode [ 96.397584][ T8107] syzkaller0: entered promiscuous mode [ 96.403248][ T8107] syzkaller0: entered allmulticast mode [ 96.445682][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 96.445701][ T29] audit: type=1400 audit(1754567322.913:2092): avc: denied { write } for pid=8110 comm="syz.7.1936" name="tcp6" dev="proc" ino=4026533479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 96.481189][ T29] audit: type=1400 audit(1754567322.953:2093): avc: denied { name_bind } for pid=8112 comm="syz.8.1937" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.516644][ T29] audit: type=1400 audit(1754567322.963:2094): avc: denied { write } for pid=8112 comm="syz.8.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.544146][ T29] audit: type=1400 audit(1754567323.013:2095): avc: denied { create } for pid=8114 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.629816][ T29] audit: type=1400 audit(1754567323.074:2096): avc: denied { connect } for pid=8114 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.650757][ T29] audit: type=1400 audit(1754567323.074:2097): avc: denied { write } for pid=8114 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.671464][ T29] audit: type=1400 audit(1754567323.094:2098): avc: denied { name_connect } for pid=8118 comm="syz.1.1929" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.703431][ T8121] loop8: detected capacity change from 0 to 512 [ 96.724577][ T29] audit: type=1400 audit(1754567323.184:2099): avc: denied { mounton } for pid=8120 comm="syz.8.1930" path="/248/file2" dev="tmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.780910][ T8121] EXT4-fs (loop8): orphan cleanup on readonly fs [ 96.787698][ T8121] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 96.799160][ T8121] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 96.809427][ T8121] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1930: Failed to acquire dquot type 1 [ 96.862222][ T8129] IPv6: Can't replace route, no match found [ 96.946626][ T8121] EXT4-fs (loop8): 1 truncate cleaned up [ 96.983977][ T8137] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 97.046798][ T8145] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 97.055368][ T8145] SELinux: failed to load policy [ 97.088703][ T8147] syzkaller0: entered promiscuous mode [ 97.094518][ T8147] syzkaller0: entered allmulticast mode [ 97.470082][ T8188] syzkaller1: entered promiscuous mode [ 97.475723][ T8188] syzkaller1: entered allmulticast mode [ 97.534688][ T8193] syzkaller0: entered promiscuous mode [ 97.540451][ T8193] syzkaller0: entered allmulticast mode [ 97.782587][ T8209] loop8: detected capacity change from 0 to 8192 [ 97.800036][ T8209] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.817915][ T8209] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 1046) [ 97.826732][ T8209] FAT-fs (loop8): Filesystem has been set read-only [ 97.858666][ T4762] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 1046) [ 98.075131][ T8240] capability: warning: `syz.8.1996' uses 32-bit capabilities (legacy support in use) [ 98.085837][ T8237] syzkaller0: entered promiscuous mode [ 98.091778][ T8237] syzkaller0: entered allmulticast mode [ 98.150900][ T8247] netlink: 'syz.1.1991': attribute type 10 has an invalid length. [ 98.171039][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.201065][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.208659][ T8247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.229073][ T8247] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.291071][ T8261] loop9: detected capacity change from 0 to 128 [ 98.364118][ T8275] loop8: detected capacity change from 0 to 128 [ 98.371625][ T8275] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.389913][ T8275] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.422925][ T35] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.475659][ T8290] loop1: detected capacity change from 0 to 128 [ 98.856799][ T8313] __nla_validate_parse: 22 callbacks suppressed [ 98.856846][ T8313] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2022'. [ 99.059621][ T8345] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2035'. [ 99.317115][ T8390] loop9: detected capacity change from 0 to 512 [ 99.324979][ T8390] EXT4-fs: Ignoring removed oldalloc option [ 99.332178][ T8390] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 99.361509][ T8390] EXT4-fs (loop9): 1 truncate cleaned up [ 99.722671][ T8442] loop9: detected capacity change from 0 to 512 [ 99.731623][ T8442] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 99.763079][ T31] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.009911][ T8453] loop6: detected capacity change from 0 to 1024 [ 100.030770][ T8453] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.130468][ T8463] loop6: detected capacity change from 0 to 128 [ 100.139661][ T8463] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.893046][ T8507] loop8: detected capacity change from 0 to 512 [ 100.900439][ T8507] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.947468][ T31] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.481583][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 101.481600][ T29] audit: type=1400 audit(1754567327.946:2269): avc: denied { read } for pid=8548 comm="syz.1.2128" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.511877][ T29] audit: type=1400 audit(1754567327.946:2270): avc: denied { open } for pid=8548 comm="syz.1.2128" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.534105][ T8551] loop8: detected capacity change from 0 to 4096 [ 101.536192][ T29] audit: type=1400 audit(1754567327.946:2271): avc: denied { ioctl } for pid=8548 comm="syz.1.2128" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.588347][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 101.629354][ T8551] EXT4-fs mount: 22 callbacks suppressed [ 101.629371][ T8551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.737958][ T29] audit: type=1400 audit(1754567328.216:2272): avc: denied { read write open } for pid=8550 comm="syz.8.2129" path=2F3239392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.775751][ T29] audit: type=1400 audit(1754567328.216:2273): avc: denied { mounton } for pid=8550 comm="syz.8.2129" path=2F3239392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.815894][ T29] audit: type=1400 audit(1754567328.256:2274): avc: denied { execmem } for pid=8566 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.866465][ T8551] loop8: detected capacity change from 4096 to 0 [ 101.891759][ T4762] syz-executor: attempt to access beyond end of device [ 101.891759][ T4762] loop8: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 101.923604][ T4762] syz-executor: attempt to access beyond end of device [ 101.923604][ T4762] loop8: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 101.955561][ T4762] syz-executor: attempt to access beyond end of device [ 101.955561][ T4762] loop8: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 101.970049][ T4762] EXT4-fs error (device loop8): ext4_get_inode_loc:4999: inode #2: block 4: comm syz-executor: unable to read itable block [ 101.987871][ T4762] syz-executor: attempt to access beyond end of device [ 101.987871][ T4762] loop8: rw=133121, sector=0, nr_sectors = 8 limit=0 [ 102.002524][ T4762] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 102.012886][ T4762] EXT4-fs (loop8): I/O error while writing superblock [ 102.019992][ T8579] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 102.021209][ T4762] EXT4-fs (loop8): Remounting filesystem read-only [ 102.048002][ T29] audit: type=1326 audit(1754567328.526:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.6.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 102.126529][ T29] audit: type=1326 audit(1754567328.546:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.6.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 102.151883][ T29] audit: type=1326 audit(1754567328.546:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.6.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 102.168367][ T8587] loop6: detected capacity change from 0 to 512 [ 102.176884][ T29] audit: type=1326 audit(1754567328.546:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.6.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32340ebe9 code=0x7ffc0000 [ 102.212573][ T8589] sd 0:0:1:0: device reset [ 102.219581][ T8333] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.241874][ T8587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.272451][ T8587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 102.277920][ T8597] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 102.291958][ T8587] System zones: 0-2, 18-18, 34-34 [ 102.302542][ T8587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.321385][ T8587] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.434593][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.614089][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2154'. [ 102.943919][ T8626] loop7: detected capacity change from 0 to 1024 [ 103.012947][ T8626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.042680][ T8636] loop1: detected capacity change from 0 to 1024 [ 103.050988][ T8626] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.077544][ T8636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.135183][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.147697][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 103.165469][ T8646] ref_ctr_offset mismatch. inode: 0x6c5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 103.165670][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2170'. [ 103.180177][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.228780][ T8655] loop1: detected capacity change from 0 to 512 [ 103.249007][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.256193][ T8655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.256556][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.274402][ T8612] bridge_slave_0: entered allmulticast mode [ 103.283075][ T8612] bridge_slave_0: entered promiscuous mode [ 103.292255][ T8655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 103.300918][ T8655] System zones: 0-2, 18-18, 34-34 [ 103.303899][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.309511][ T8655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.313869][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.317134][ T8612] bridge_slave_1: entered allmulticast mode [ 103.335384][ T8655] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.342117][ T8612] bridge_slave_1: entered promiscuous mode [ 103.380702][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.392568][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.422681][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.433350][ T8612] team0: Port device team_slave_0 added [ 103.443468][ T8612] team0: Port device team_slave_1 added [ 103.468913][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.476685][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.505613][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.513896][ T8674] loop6: detected capacity change from 0 to 4096 [ 103.526933][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.534707][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.562752][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.573137][ T8674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.601977][ T8612] hsr_slave_0: entered promiscuous mode [ 103.609126][ T8612] hsr_slave_1: entered promiscuous mode [ 103.695681][ T8674] loop6: detected capacity change from 4096 to 0 [ 103.735554][ T4760] syz-executor: attempt to access beyond end of device [ 103.735554][ T4760] loop6: rw=12288, sector=128, nr_sectors = 8 limit=0 [ 103.752442][ T4760] syz-executor: attempt to access beyond end of device [ 103.752442][ T4760] loop6: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 103.768744][ T4760] syz-executor: attempt to access beyond end of device [ 103.768744][ T4760] loop6: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 103.782911][ T4760] EXT4-fs error (device loop6): ext4_get_inode_loc:4999: inode #2: block 4: comm syz-executor: unable to read itable block [ 103.800042][ T4760] syz-executor: attempt to access beyond end of device [ 103.800042][ T4760] loop6: rw=133121, sector=0, nr_sectors = 8 limit=0 [ 103.814230][ T4760] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 103.823349][ T4760] EXT4-fs (loop6): I/O error while writing superblock [ 103.830835][ T4760] EXT4-fs (loop6): Remounting filesystem read-only [ 103.878865][ T7174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.920683][ T8702] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 103.958134][ T8612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.969176][ T8612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.979129][ T8612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.989348][ T8612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.012556][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.020121][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.027791][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.035067][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.086822][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.101624][ T1394] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.137377][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.146875][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.194755][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.226935][ T1394] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.257555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.264715][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.283794][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.291280][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.326166][ T1394] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.332723][ T8744] loop9: detected capacity change from 0 to 1024 [ 104.345642][ T8744] EXT4-fs: Ignoring removed bh option [ 104.351505][ T8744] EXT4-fs: inline encryption not supported [ 104.385456][ T8744] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.386876][ T8612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.416872][ T1394] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.427801][ T8744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 104.456249][ T8744] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.2208: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.481096][ T8744] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.2208: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.537861][ T8744] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2208: Failed to acquire dquot type 0 [ 104.554976][ T1394] bridge_slave_0: left allmulticast mode [ 104.561105][ T1394] bridge_slave_0: left promiscuous mode [ 104.567156][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.576036][ T8744] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 104.595717][ T8744] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.2208: mark_inode_dirty error [ 104.615092][ T8744] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.628477][ T8744] EXT4-fs (loop9): 1 orphan inode deleted [ 104.635101][ T8744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.656146][ T31] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.672978][ T31] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 104.685790][ T8744] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 104.722569][ T8769] loop1: detected capacity change from 0 to 256 [ 104.731975][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.738776][ T8769] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 104.749283][ T8769] FAT-fs (loop1): Filesystem has been set read-only [ 104.793953][ T1394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.806904][ T1394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.820572][ T1394] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 104.838996][ T1394] bond0 (unregistering): Released all slaves [ 104.879276][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.892364][ T1394] tipc: Disabling bearer [ 104.897682][ T1394] tipc: Left network mode [ 105.003991][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.015123][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.055841][ T1394] hsr_slave_0: left promiscuous mode [ 105.062723][ T1394] hsr_slave_1: left promiscuous mode [ 105.069409][ T1394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.077957][ T1394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.095245][ T1394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.103448][ T1394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.119652][ T1394] veth1_macvtap: left promiscuous mode [ 105.127690][ T1394] veth0_macvtap: left promiscuous mode [ 105.138334][ T1394] veth1_vlan: left promiscuous mode [ 105.150468][ T1394] veth0_vlan: left promiscuous mode [ 105.399938][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 105.482561][ T8612] veth0_vlan: entered promiscuous mode [ 105.493525][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.500968][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.508581][ T8732] bridge_slave_0: entered allmulticast mode [ 105.515462][ T8732] bridge_slave_0: entered promiscuous mode [ 105.522620][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.529916][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.537875][ T8732] bridge_slave_1: entered allmulticast mode [ 105.544972][ T8732] bridge_slave_1: entered promiscuous mode [ 105.573821][ T8612] veth1_vlan: entered promiscuous mode [ 105.600799][ T8830] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 105.617891][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.635871][ T8612] veth0_macvtap: entered promiscuous mode [ 105.652282][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.663196][ T8612] veth1_macvtap: entered promiscuous mode [ 105.693936][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.705822][ T8732] team0: Port device team_slave_0 added [ 105.713545][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.729412][ T8732] team0: Port device team_slave_1 added [ 105.740543][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764190][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.787169][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.794812][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.821933][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.837747][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.847038][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.860325][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.867616][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.894450][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.924033][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'. [ 105.965841][ T8732] hsr_slave_0: entered promiscuous mode [ 105.972285][ T8732] hsr_slave_1: entered promiscuous mode [ 105.984778][ T8732] debugfs: 'hsr0' already exists in 'hsr' [ 105.991369][ T8732] Cannot create hsr debugfs directory [ 106.160093][ T8875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.220967][ T8883] loop7: detected capacity change from 0 to 1024 [ 106.228733][ T8883] EXT4-fs: inline encryption not supported [ 106.235316][ T8883] EXT4-fs: Ignoring removed i_version option [ 106.268311][ T8883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.285709][ T8892] loop1: detected capacity change from 0 to 512 [ 106.296422][ T8892] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2259: bg 0: block 248: padding at end of block bitmap is not set [ 106.312402][ T8892] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2259: Failed to acquire dquot type 1 [ 106.312854][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.328049][ T8892] EXT4-fs (loop1): 1 truncate cleaned up [ 106.341759][ T8892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.355003][ T8892] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.376898][ T8892] EXT4-fs (loop1): shut down requested (1) [ 106.383818][ T8892] syz.1.2259 (8892) used greatest stack depth: 9200 bytes left [ 106.402704][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.425433][ T8898] loop7: detected capacity change from 0 to 256 [ 106.433702][ T8732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.435022][ T8898] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 106.449092][ T8898] FAT-fs (loop7): Filesystem has been set read-only [ 106.459273][ T8732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.469497][ T8732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.480773][ T8732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.507266][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 106.507283][ T29] audit: type=1326 audit(1754567332.988:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.533118][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.551687][ T29] audit: type=1326 audit(1754567333.018:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.576715][ T29] audit: type=1326 audit(1754567333.018:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.583584][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.603138][ T29] audit: type=1326 audit(1754567333.018:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.603179][ T29] audit: type=1326 audit(1754567333.018:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.660332][ T8732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.660361][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.682130][ T29] audit: type=1326 audit(1754567333.018:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.706735][ T29] audit: type=1326 audit(1754567333.018:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.726924][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.732131][ T29] audit: type=1326 audit(1754567333.018:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.746305][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.762854][ T29] audit: type=1326 audit(1754567333.018:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.9.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 106.770471][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.804083][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.811767][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.899641][ T8732] veth0_vlan: entered promiscuous mode [ 106.907819][ T8732] veth1_vlan: entered promiscuous mode [ 106.924191][ T8732] veth0_macvtap: entered promiscuous mode [ 106.931962][ T8732] veth1_macvtap: entered promiscuous mode [ 106.942787][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.954592][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.966502][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.975943][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.992240][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.001626][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.105719][ T29] audit: type=1107 audit(1754567333.579:2395): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 107.149829][ T8942] rdma_op ffff888122af1580 conn xmit_rdma 0000000000000000 [ 107.191991][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2269'. [ 107.291187][ T8960] 9pnet: p9_errstr2errno: server reported unknown error @ [ 107.308311][ T8964] loop2: detected capacity change from 0 to 256 [ 107.330693][ T8964] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 107.338959][ T8964] FAT-fs (loop2): Filesystem has been set read-only [ 107.388667][ T8977] loop2: detected capacity change from 0 to 512 [ 107.411465][ T8977] EXT4-fs: Ignoring removed orlov option [ 107.428573][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.441538][ T8977] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.468574][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.528882][ T8875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.486605][ T8875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.537249][ T8875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.600922][ T4888] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.613327][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.626024][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.639223][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.701279][ T8996] netlink: 'syz.9.2296': attribute type 13 has an invalid length. [ 108.725187][ T8996] gretap0: refused to change device tx_queue_len [ 108.731795][ T8996] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.971873][ T9020] loop1: detected capacity change from 0 to 1024 [ 108.980353][ T9020] EXT4-fs: Ignoring removed bh option [ 108.986873][ T9020] EXT4-fs: inline encryption not supported [ 108.994378][ T9020] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.008343][ T9020] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2307: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.023736][ T9020] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2307: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.039205][ T9020] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2307: Failed to acquire dquot type 0 [ 109.051447][ T9020] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.053989][ T9026] 9pnet_fd: Insufficient options for proto=fd [ 109.064340][ T9020] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2307: mark_inode_dirty error [ 109.081704][ T9020] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.093853][ T9020] EXT4-fs (loop1): 1 orphan inode deleted [ 109.100352][ T9020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.113641][ T35] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.129351][ T35] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 109.167093][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.188071][ T3309] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 109.202202][ T3309] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 109.215026][ T3309] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 109.279603][ T9040] loop4: detected capacity change from 0 to 128 [ 109.287137][ T9040] EXT4-fs: Ignoring removed nobh option [ 109.297524][ T9040] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.310928][ T9040] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.357971][ T9047] openvswitch: netlink: Message has 6 unknown bytes. [ 109.408825][ T9053] unsupported nla_type 52263 [ 109.440301][ T8612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.486514][ T9066] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 109.496387][ T9066] SELinux: failed to load policy [ 109.757114][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 109.833157][ T9115] netlink: 'syz.7.2353': attribute type 1 has an invalid length. [ 109.841362][ T9115] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.2353'. [ 110.052533][ C1] hrtimer: interrupt took 15441 ns [ 110.318912][ T9167] netlink: 'syz.9.2372': attribute type 1 has an invalid length. [ 110.327607][ T9167] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.2372'. [ 110.778231][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 110.835673][ T9211] loop4: detected capacity change from 0 to 1024 [ 110.842900][ T9211] journal_path: Non-blockdev passed as './file0' [ 110.849967][ T9211] EXT4-fs: error: could not find journal device path [ 111.318265][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2404'. [ 111.428496][ T9256] netlink: 'syz.1.2409': attribute type 21 has an invalid length. [ 111.436928][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2409'. [ 111.446836][ T9256] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 111.518967][ T9265] loop9: detected capacity change from 0 to 1024 [ 111.526785][ T9265] EXT4-fs: Ignoring removed nobh option [ 111.532846][ T9265] EXT4-fs: Ignoring removed bh option [ 111.556006][ T9265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.569030][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 111.569045][ T29] audit: type=1400 audit(1754567338.041:2546): avc: denied { mount } for pid=9263 comm="syz.9.2413" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.603732][ T9273] loop1: detected capacity change from 0 to 2048 [ 111.617864][ T9273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.632661][ T29] audit: type=1400 audit(1754567338.111:2547): avc: denied { unmount } for pid=4769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.635562][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.676951][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.722518][ T9285] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 111.731497][ T9285] veth1_vlan: entered allmulticast mode [ 111.780093][ T29] audit: type=1400 audit(1754567338.251:2548): avc: denied { create } for pid=9288 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.805699][ T29] audit: type=1400 audit(1754567338.251:2549): avc: denied { shutdown } for pid=9288 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.826258][ T29] audit: type=1400 audit(1754567338.251:2550): avc: denied { getopt } for pid=9288 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.846504][ T29] audit: type=1400 audit(1754567338.251:2551): avc: denied { connect } for pid=9288 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.867579][ T29] audit: type=1400 audit(1754567338.251:2552): avc: denied { name_connect } for pid=9288 comm="syz.1.2424" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.924320][ T29] audit: type=1400 audit(1754567338.371:2553): avc: denied { setopt } for pid=9292 comm="syz.7.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.945861][ T29] audit: type=1400 audit(1754567338.371:2554): avc: denied { write } for pid=9292 comm="syz.7.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.985494][ T29] audit: type=1326 audit(1754567338.451:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4c48ebe9 code=0x7ffc0000 [ 112.227217][ T9336] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2446'. [ 112.479819][ T9368] loop7: detected capacity change from 0 to 2048 [ 112.497749][ T9368] EXT4-fs (loop7): failed to initialize system zone (-117) [ 112.519639][ T9368] EXT4-fs (loop7): mount failed [ 112.532986][ T9378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2466'. [ 112.782213][ T9412] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 113.005739][ T9442] loop9: detected capacity change from 0 to 1024 [ 113.013705][ T9444] loop1: detected capacity change from 0 to 1764 [ 113.017541][ T9442] ext4: Unknown parameter 'func' [ 113.058219][ T9442] loop9: detected capacity change from 0 to 512 [ 113.069651][ T9442] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.2497: bad orphan inode 15 [ 113.080844][ T9442] ext4_test_bit(bit=14, block=5) = 0 [ 113.088327][ T9442] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.139334][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.861748][ T9473] loop4: detected capacity change from 0 to 2048 [ 113.903714][ T9473] EXT4-fs (loop4): failed to initialize system zone (-117) [ 113.940406][ T9473] EXT4-fs (loop4): mount failed [ 113.984987][ T9490] netlink: 'syz.9.2516': attribute type 3 has an invalid length. [ 113.993389][ T9490] netlink: 'syz.9.2516': attribute type 4 has an invalid length. [ 114.002313][ T9490] netlink: 9067 bytes leftover after parsing attributes in process `syz.9.2516'. [ 114.173787][ T9509] random: crng reseeded on system resumption [ 114.204530][ T9509] Restarting kernel threads ... [ 114.211870][ T9509] Done restarting kernel threads. [ 114.365133][ T9521] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2531'. [ 114.499971][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2541'. [ 114.514840][ T9541] IPVS: Error connecting to the multicast addr [ 114.746843][ T9577] loop2: detected capacity change from 0 to 256 [ 114.768106][ T9577] FAT-fs (loop2): codepage cp869 not found [ 115.165358][ T9659] SELinux: Context system_u:object_r:setrans_initrc_exec_t:s0 is not valid (left unmapped). [ 115.313220][ T9679] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 115.321487][ T9679] netlink: 'syz.1.2579': attribute type 19 has an invalid length. [ 115.329575][ T9679] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.2579'. [ 115.367355][ T9682] syz!: rxe_newlink: already configured on team_slave_0 [ 115.506032][ T37] IPVS: starting estimator thread 0... [ 115.635868][ T9701] IPVS: using max 2304 ests per chain, 115200 per kthread [ 115.905163][ T9735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9735 comm=syz.7.2605 [ 115.969995][ T9745] loop4: detected capacity change from 0 to 1024 [ 116.000960][ T9754] loop1: detected capacity change from 0 to 128 [ 116.019815][ T9745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.051702][ T9758] loop2: detected capacity change from 0 to 2048 [ 116.094591][ T9763] loop1: detected capacity change from 0 to 128 [ 116.105615][ T9763] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.127276][ T9763] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.139768][ T9758] loop2: p1 p3 p4 [ 116.159558][ T9758] loop2: p4 size 589824 extends beyond EOD, truncated [ 116.307355][ T9776] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2622'. [ 116.316030][ T9773] ALSA: seq fatal error: cannot create timer (-19) [ 116.406442][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.543886][ T9805] program syz.2.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.642796][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2640'. [ 116.762629][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 116.762658][ T29] audit: type=1326 audit(1754567343.244:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.798826][ T29] audit: type=1326 audit(1754567343.274:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.824946][ T29] audit: type=1326 audit(1754567343.274:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.849451][ T29] audit: type=1326 audit(1754567343.274:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.883915][ T29] audit: type=1326 audit(1754567343.284:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.909414][ T29] audit: type=1326 audit(1754567343.284:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.935859][ T29] audit: type=1326 audit(1754567343.284:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.961093][ T29] audit: type=1326 audit(1754567343.294:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 116.991528][ T29] audit: type=1326 audit(1754567343.414:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 117.016671][ T29] audit: type=1326 audit(1754567343.424:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.9.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f4b236bebe9 code=0x7ffc0000 [ 117.077213][ T9841] SELinux: failed to load policy [ 117.086187][ T9843] loop7: detected capacity change from 0 to 1024 [ 117.096137][ T9843] EXT4-fs: Ignoring removed bh option [ 117.140998][ T9843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.169216][ T9853] IPv6: Can't replace route, no match found [ 117.176497][ T9851] loop9: detected capacity change from 0 to 1764 [ 117.213382][ T9843] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 117.247965][ T9843] EXT4-fs (loop7): Remounting filesystem read-only [ 117.278422][ T9857] SELinux: failed to load policy [ 117.291619][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.621518][ T9902] SELinux: failed to load policy [ 117.816240][ T9916] syzkaller1: entered promiscuous mode [ 117.822379][ T9916] syzkaller1: entered allmulticast mode [ 117.854343][ T9919] loop7: detected capacity change from 0 to 128 [ 117.862651][ T9919] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.875918][ T9919] ext4 filesystem being mounted at /384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.954178][ T4763] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.991895][ T9930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.088353][ T9949] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2698'. [ 118.103682][ T9947] loop4: detected capacity change from 0 to 1024 [ 118.114751][ T9947] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2697: Failed to acquire dquot type 0 [ 118.127256][ T9947] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 118.144888][ T9947] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2697: corrupted inode contents [ 118.150270][ T9954] loop9: detected capacity change from 0 to 512 [ 118.158260][ T9947] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.2697: mark_inode_dirty error [ 118.178027][ T9954] EXT4-fs (loop9): bad geometry: first data block 0 is beyond end of filesystem (0) [ 118.188500][ T9947] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2697: corrupted inode contents [ 118.201771][ T9947] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2697: mark_inode_dirty error [ 118.215767][ T9947] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2697: corrupted inode contents [ 118.233557][ T9947] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 118.243207][ T9947] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.2697: corrupted inode contents [ 118.257068][ T9947] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.2697: mark_inode_dirty error [ 118.270806][ T9947] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 118.281384][ T9947] EXT4-fs (loop4): 1 truncate cleaned up [ 118.287525][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.304634][ T9958] loop7: detected capacity change from 0 to 1024 [ 118.323256][ T9958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.353849][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.369776][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.397671][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2705'. [ 118.407139][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2705'. [ 118.441942][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2710'. [ 118.457447][ T9980] loop9: detected capacity change from 0 to 256 [ 118.472054][ T9980] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 118.481891][ T9980] FAT-fs (loop9): Filesystem has been set read-only [ 118.534061][ T9984] loop9: detected capacity change from 0 to 8192 [ 118.545429][ T9984] syz.9.2712: attempt to access beyond end of device [ 118.545429][ T9984] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 118.560608][ T9984] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 118.569036][ T9984] FAT-fs (loop9): Filesystem has been set read-only [ 118.586898][ T9984] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 118.597083][ T9984] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 118.663245][ T9992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9992 comm=syz.7.2716 [ 118.676492][ T9992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9992 comm=syz.7.2716 [ 118.966808][T10045] loop7: detected capacity change from 0 to 512 [ 118.980862][T10045] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 118.998972][T10045] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.2740: corrupted xattr entries [ 119.022957][T10045] EXT4-fs (loop7): Remounting filesystem read-only [ 119.036133][T10045] EXT4-fs (loop7): 1 truncate cleaned up [ 119.057813][T10045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.102508][ T4763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.236375][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2754'. [ 119.382276][T10084] loop2: detected capacity change from 0 to 764 [ 119.400344][T10084] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 119.422666][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2758'. [ 119.432792][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2758'. [ 119.500131][T10088] usb usb8: usbfs: process 10088 (syz.1.2759) did not claim interface 0 before use [ 119.570945][T10102] loop2: detected capacity change from 0 to 512 [ 119.574386][T10099] pim6reg: entered allmulticast mode [ 119.586799][T10102] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 119.597455][T10099] pim6reg: left allmulticast mode [ 119.618899][T10102] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2766: bg 0: block 104: invalid block bitmap [ 119.634435][T10102] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 119.650456][T10102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2766: invalid indirect mapped block 1 (level 1) [ 119.714707][T10102] EXT4-fs (loop2): 1 truncate cleaned up [ 119.720957][T10102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.765828][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.794654][T10120] loop9: detected capacity change from 0 to 128 [ 119.839018][T10120] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.855261][T10131] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2778'. [ 119.867908][T10130] pim6reg: entered allmulticast mode [ 119.882942][T10120] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.910354][T10130] pim6reg: left allmulticast mode [ 119.979809][ T4769] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.078703][T10164] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.129510][T10165] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 120.137464][T10165] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 120.162878][T10164] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.199966][T10164] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.263651][T10164] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.304058][T10173] macvtap0: refused to change device tx_queue_len [ 120.323847][ T9612] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.341629][ T9612] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.359922][ T9612] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.390256][ T9612] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.401572][T10177] loop7: detected capacity change from 0 to 128 [ 120.437692][T10177] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.461355][T10177] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.520754][ T4763] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.574049][T10193] pim6reg: entered allmulticast mode [ 120.605083][T10193] pim6reg: left allmulticast mode [ 120.640857][T10203] loop9: detected capacity change from 0 to 512 [ 120.648128][T10203] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 120.659836][T10203] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2812: bg 0: block 104: invalid block bitmap [ 120.676221][T10203] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 120.718588][T10203] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2812: invalid indirect mapped block 1 (level 1) [ 120.775615][T10212] loop4: detected capacity change from 0 to 128 [ 120.802717][T10203] EXT4-fs (loop9): 1 truncate cleaned up [ 120.815986][T10203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.852852][T10212] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.877014][T10212] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.919782][ T8612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.931789][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.003450][T10230] loop9: detected capacity change from 0 to 512 [ 121.051234][T10230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.066499][T10230] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.085038][T10230] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 121.101161][T10230] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 121.114832][T10230] EXT4-fs (loop9): This should not happen!! Data will be lost [ 121.114832][T10230] [ 121.124857][T10230] EXT4-fs (loop9): Total free blocks count 0 [ 121.131806][T10230] EXT4-fs (loop9): Free/Dirty block details [ 121.139087][T10230] EXT4-fs (loop9): free_blocks=65280 [ 121.145104][T10230] EXT4-fs (loop9): dirty_blocks=33 [ 121.151101][T10230] EXT4-fs (loop9): Block reservation details [ 121.158151][T10230] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 121.182708][T10248] netlink: 'syz.4.2843': attribute type 178 has an invalid length. [ 121.198973][ T4769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.211535][T10252] loop1: detected capacity change from 0 to 128 [ 121.222059][T10252] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.235869][T10252] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.273702][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.537054][T10278] pim6reg: entered allmulticast mode [ 121.545840][T10278] pim6reg: left allmulticast mode [ 121.887011][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 121.887030][ T29] audit: type=1400 audit(1754567348.360:2846): avc: denied { create } for pid=10302 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.920291][ T29] audit: type=1400 audit(1754567348.400:2847): avc: denied { create } for pid=10302 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.940899][ T29] audit: type=1400 audit(1754567348.400:2848): avc: denied { connect } for pid=10302 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.961466][ T29] audit: type=1400 audit(1754567348.400:2849): avc: denied { ioctl } for pid=10302 comm="syz.4.2868" path="socket:[30430]" dev="sockfs" ino=30430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.987478][ T29] audit: type=1400 audit(1754567348.400:2850): avc: denied { write } for pid=10302 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.996226][T10310] loop4: detected capacity change from 0 to 512 [ 122.008059][ T29] audit: type=1400 audit(1754567348.400:2851): avc: denied { create } for pid=10304 comm="syz.9.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.036346][ T29] audit: type=1400 audit(1754567348.400:2852): avc: denied { write } for pid=10304 comm="syz.9.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.041309][T10310] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 122.058830][ T29] audit: type=1400 audit(1754567348.430:2853): avc: denied { create } for pid=10301 comm="syz.7.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.087261][ T29] audit: type=1400 audit(1754567348.430:2854): avc: denied { write } for pid=10301 comm="syz.7.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.109589][ T29] audit: type=1400 audit(1754567348.430:2855): avc: denied { read } for pid=10301 comm="syz.7.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.133653][T10306] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.166530][T10310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2860: bg 0: block 104: invalid block bitmap [ 122.206389][T10310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 122.225347][T10310] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2860: invalid indirect mapped block 1 (level 1) [ 122.244824][T10316] pim6reg: entered allmulticast mode [ 122.252791][T10316] pim6reg: left allmulticast mode [ 122.263351][T10310] EXT4-fs (loop4): 1 truncate cleaned up [ 122.269719][T10310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.305878][T10306] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.397923][T10306] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.442779][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.455194][T10327] netlink: 'syz.9.2865': attribute type 178 has an invalid length. [ 122.477343][T10306] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.567903][ T9636] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.599132][ T9636] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.607931][ T9636] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.632502][ T9636] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.661950][T10352] 9pnet_fd: Insufficient options for proto=fd [ 122.832250][T10379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.879486][T10379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.949471][T10379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.042798][T10379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.063865][T10394] loop4: detected capacity change from 0 to 512 [ 123.084922][T10394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.087716][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.100347][T10394] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.120394][ T4887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.141430][ T4887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.152140][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.180069][T10394] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 123.221203][T10394] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 123.234761][T10394] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.234761][T10394] [ 123.244546][T10394] EXT4-fs (loop4): Total free blocks count 0 [ 123.251094][T10394] EXT4-fs (loop4): Free/Dirty block details [ 123.257220][T10394] EXT4-fs (loop4): free_blocks=65280 [ 123.262867][T10394] EXT4-fs (loop4): dirty_blocks=33 [ 123.268162][T10394] EXT4-fs (loop4): Block reservation details [ 123.274462][T10394] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 123.316140][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.386193][T10417] netlink: 'syz.7.2909': attribute type 178 has an invalid length. [ 123.420675][T10421] netlink: 'syz.9.2911': attribute type 21 has an invalid length. [ 123.452090][T10421] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2911'. [ 123.461740][T10421] netlink: 'syz.9.2911': attribute type 1 has an invalid length. [ 123.477766][T10426] loop4: detected capacity change from 0 to 2048 [ 123.492552][T10426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.537158][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.483063][T10458] loop1: detected capacity change from 0 to 512 [ 124.498225][T10458] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 124.509924][T10458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2927: bg 0: block 104: invalid block bitmap [ 124.522796][T10458] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.533608][T10458] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2927: invalid indirect mapped block 1 (level 1) [ 124.547931][T10458] EXT4-fs (loop1): 1 truncate cleaned up [ 124.556946][T10458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.607389][T10467] netlink: 'syz.2.2931': attribute type 21 has an invalid length. [ 124.608145][T10465] loop9: detected capacity change from 0 to 2048 [ 124.616579][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.634349][T10467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2931'. [ 124.643912][T10467] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 125.586991][T10515] loop9: detected capacity change from 0 to 2048 [ 125.603713][T10515] EXT4-fs (loop9): failed to initialize system zone (-117) [ 125.611633][T10515] EXT4-fs (loop9): mount failed [ 125.764999][T10546] loop2: detected capacity change from 0 to 1764 [ 125.778050][T10548] loop4: detected capacity change from 0 to 2048 [ 125.803109][T10551] loop1: detected capacity change from 0 to 1024 [ 125.811987][T10548] EXT4-fs (loop4): failed to initialize system zone (-117) [ 125.819178][T10551] ext4: Unknown parameter 'func' [ 125.824872][T10548] EXT4-fs (loop4): mount failed [ 125.839515][T10551] loop1: detected capacity change from 0 to 512 [ 125.867497][T10551] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2972: bad orphan inode 15 [ 125.880945][T10551] ext4_test_bit(bit=14, block=5) = 0 [ 126.041273][T10581] netlink: 'syz.1.2994': attribute type 3 has an invalid length. [ 126.049310][T10581] netlink: 'syz.1.2994': attribute type 4 has an invalid length. [ 126.057452][T10581] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.2994'. [ 126.574795][T10635] loop7: detected capacity change from 0 to 2048 [ 126.604796][T10635] EXT4-fs (loop7): failed to initialize system zone (-117) [ 126.612635][T10635] EXT4-fs (loop7): mount failed [ 127.194550][T10659] loop9: detected capacity change from 0 to 1764 [ 127.205412][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 127.205486][ T29] audit: type=1400 audit(1754567353.690:3006): avc: denied { read write } for pid=10660 comm="syz.4.3021" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.236221][ T29] audit: type=1400 audit(1754567353.690:3007): avc: denied { open } for pid=10660 comm="syz.4.3021" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.296116][ T29] audit: type=1326 audit(1754567353.770:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ccd0ebe9 code=0x7ffc0000 [ 127.320798][ T29] audit: type=1326 audit(1754567353.770:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ccd0ebe9 code=0x7ffc0000 [ 127.345972][ T29] audit: type=1326 audit(1754567353.770:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f18ccd0ebe9 code=0x7ffc0000 [ 127.370488][ T29] audit: type=1326 audit(1754567353.770:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ccd0ebe9 code=0x7ffc0000 [ 127.395084][ T29] audit: type=1326 audit(1754567353.770:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ccd0ebe9 code=0x7ffc0000 [ 127.467811][T10673] loop2: detected capacity change from 0 to 1024 [ 127.475278][T10673] ext4: Unknown parameter 'func' [ 127.489078][T10673] loop2: detected capacity change from 0 to 512 [ 127.497217][ T29] audit: type=1400 audit(1754567353.970:3013): avc: denied { write } for pid=10674 comm="syz.9.3027" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.521350][ T29] audit: type=1400 audit(1754567353.970:3014): avc: denied { open } for pid=10674 comm="syz.9.3027" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.547460][ T29] audit: type=1400 audit(1754567354.000:3015): avc: denied { bind } for pid=10676 comm="syz.1.3036" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.569165][T10673] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3026: bad orphan inode 15 [ 127.589638][T10673] ext4_test_bit(bit=14, block=5) = 0 [ 127.609048][T10684] random: crng reseeded on system resumption [ 127.622993][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3030'. [ 127.623078][T10689] IPVS: Error connecting to the multicast addr [ 127.631745][T10684] Restarting kernel threads ... [ 127.655548][T10684] Done restarting kernel threads. [ 128.065597][ T10] IPVS: starting estimator thread 0... [ 128.148059][T10745] loop4: detected capacity change from 0 to 1024 [ 128.158808][T10728] IPVS: using max 2304 ests per chain, 115200 per kthread [ 128.177590][T10745] ext4: Unknown parameter 'func' [ 128.195169][T10745] loop4: detected capacity change from 0 to 512 [ 128.203458][T10745] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3060: bad orphan inode 15 [ 128.216060][T10745] ext4_test_bit(bit=14, block=5) = 0 [ 128.319788][T10762] loop4: detected capacity change from 0 to 128 [ 128.342260][T10762] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.368367][T10762] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.411839][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3081'. [ 128.432335][T10770] IPVS: Error connecting to the multicast addr [ 128.495928][T10786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10786 comm=syz.4.3078 [ 128.595665][T10799] loop7: detected capacity change from 0 to 128 [ 128.605719][T10800] loop1: detected capacity change from 0 to 1024 [ 128.684731][T10812] loop7: detected capacity change from 0 to 256 [ 128.695301][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'. [ 128.707007][T10813] IPVS: Error connecting to the multicast addr [ 128.737794][T10812] FAT-fs (loop7): codepage cp869 not found [ 128.881728][T10831] ALSA: seq fatal error: cannot create timer (-19) [ 129.349189][T10875] program syz.4.3118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.460715][T10895] loop9: detected capacity change from 0 to 1024 [ 129.570382][T10895] ================================================================== [ 129.579049][T10895] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 129.586731][T10895] [ 129.589088][T10895] read-write to 0xffff888119e27470 of 8 bytes by interrupt on cpu 1: [ 129.597590][T10895] __xa_clear_mark+0xf5/0x1e0 [ 129.602620][T10895] __folio_end_writeback+0x177/0x470 [ 129.608771][T10895] folio_end_writeback+0x71/0x3d0 [ 129.614441][T10895] ext4_finish_bio+0x459/0x8c0 [ 129.619550][T10895] ext4_end_bio+0x298/0x3b0 [ 129.624161][T10895] bio_endio+0x377/0x410 [ 129.628436][T10895] blk_update_request+0x336/0x730 [ 129.633669][T10895] blk_mq_end_request+0x26/0x50 [ 129.638602][T10895] lo_complete_rq+0x98/0x140 [ 129.643330][T10895] blk_done_softirq+0x77/0xb0 [ 129.648119][T10895] handle_softirqs+0xb7/0x290 [ 129.653143][T10895] run_ksoftirqd+0x1c/0x30 [ 129.657888][T10895] smpboot_thread_fn+0x328/0x530 [ 129.662882][T10895] kthread+0x486/0x510 [ 129.667055][T10895] ret_from_fork+0xda/0x150 [ 129.671925][T10895] ret_from_fork_asm+0x1a/0x30 [ 129.676917][T10895] [ 129.679489][T10895] read to 0xffff888119e27470 of 8 bytes by task 10895 on cpu 0: [ 129.687928][T10895] xas_find_marked+0x218/0x620 [ 129.692809][T10895] find_get_entry+0x5d/0x380 [ 129.697656][T10895] filemap_get_folios_tag+0x13b/0x210 [ 129.703044][T10895] file_write_and_wait_range+0x1ea/0x2c0 [ 129.708720][T10895] generic_buffers_fsync_noflush+0x45/0x120 [ 129.715244][T10895] ext4_sync_file+0x1ab/0x690 [ 129.719953][T10895] vfs_fsync_range+0x10d/0x130 [ 129.724911][T10895] ext4_buffered_write_iter+0x34f/0x3c0 [ 129.730489][T10895] ext4_file_write_iter+0xdbf/0xf00 [ 129.735906][T10895] do_iter_readv_writev+0x421/0x4c0 [ 129.741209][T10895] vfs_writev+0x2df/0x8b0 [ 129.745705][T10895] __se_sys_pwritev2+0xfc/0x1c0 [ 129.750679][T10895] __x64_sys_pwritev2+0x67/0x80 [ 129.755755][T10895] x64_sys_call+0x2c55/0x2ff0 [ 129.760798][T10895] do_syscall_64+0xd2/0x200 [ 129.765778][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.772193][T10895] [ 129.774528][T10895] value changed: 0x000000ffffff0000 -> 0x000000ffc0000000 [ 129.781825][T10895] [ 129.784262][T10895] Reported by Kernel Concurrency Sanitizer on: [ 129.790551][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.9.3137 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 129.803943][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.814805][T10895] ==================================================================