last executing test programs: 1.24755978s ago: executing program 4 (id=11542): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.165960356s ago: executing program 0 (id=11543): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 952.985573ms ago: executing program 0 (id=11547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) move_mount(r1, 0x0, r2, 0x0, 0x46) close_range(r0, 0xffffffffffffffff, 0x0) 936.460585ms ago: executing program 4 (id=11548): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 904.299177ms ago: executing program 1 (id=11550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 875.269309ms ago: executing program 0 (id=11552): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu==0||!') 780.206057ms ago: executing program 0 (id=11556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) 744.9428ms ago: executing program 1 (id=11558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x24040000) unshare(0x2c020400) 738.005421ms ago: executing program 0 (id=11559): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 722.504081ms ago: executing program 1 (id=11561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e04}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 691.373144ms ago: executing program 1 (id=11562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3M9rHGUfAPDvTJO2b5v33bzgQTwJFSvUTtJU7UmIeC4U+gfUsJmEkEk2ZDe1iQFbDx4EQUXwRy/6H3hRBC+l/4MieFPwIGhN40HwsLKT3a1ud9PYJl2onw/Mzvd5Zme+zzc7PGRgnw3gX+vJ1ksSMRYRFyKi0u5PI+JwGR2NuLrzvttbm9Xtrc1qEs3mxVtJ67Syr3OtpL0/HuUp8XhE3ByNOPXG3Xnr6xuLM0WRr7bbE42llYn6+sbphaWZ+Xw+X56anDx79oWp55+b3Lda337ts1/e+vLlrz8+t/THi7eenU1iuqw7eurYTzt/k9GY7ulfPohkQ9RsNpvDHgMAAPeWlv+dRoyU+0ocKiMAAADgUdI80gQAAAAeeUkMewQAAADAwep8D+D21ma1sz3M7x/8/FJEjN9ZW7zdzT9SriGOOFquTzi2nfxtZUKycxo8kKvXIuLGdJ/7P2nff/evd+V68oDXY//daM0/0/3mv7Q7/0Sf+Wek89sJD6gz/23fNf/dyX9owPx3YY85jqye/GZg/msRT4z0y5908ycD8r+yx/yfj333/aBjzU8jTkb//H/NtcvvQ0zMLRR5+7VvjhNfvH5qt/qPDcqf7F7/yh7r/+H61PyguaSV/5kTu3/+/fK37ol32uNII+Ld9r7Vfq8nx9M3Jz/arf7ZAfXf6/P/ZI/1f/Xmxo97fCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU0ogYiyTNunGaZlnE8Yh4LI6lRa3eODVXW1uebR2LGI/RdG6hyCcjorLTTlrtM2V8pz3V0z4bEf+PiPcr/ynbWbVWzA67eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqOR8RYJGkWEWlE/FZJ0ywb9qgAAACAfTc+7AEAAAAAB87zPwAAADz6PP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8GF8+dbW3N7a7Paas9eXl9brF0+PZvXF7OltWpWra2uZPO12nyRZ9Xa0r2uV9RqK+diee3KRCOvNybq6xuXlmpry41LC0sz8/mlfPShVAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/NVZuSZpFRFrGaZplEf+NiPEYTeYWinwyIv4XEd9WRo+02meGPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2XX19Y3GmKPJVgUAg6AbDnpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiG+vrG4kxR5Kv1YY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4Up/SiKitZ2sPDXWe/Rw8nul3EfEq9cvfnBlptFYPdPq/7Xb3/iw3T81jPEDAAAAvTrP6Z3neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL2qr28szhRFvnqAwbBrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7s+fAQAA//8gLc9Y") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f00000001c0)={0x202, 0x7f, 0x0, 0x7}) 602.396182ms ago: executing program 1 (id=11566): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) 564.748585ms ago: executing program 1 (id=11568): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x7, 0x80000}) 532.510657ms ago: executing program 4 (id=11569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r0, &(0x7f0000000ec0)="0a9f94ddc6925b4c685e7e34631198d6aead70e91007a5e2cbf2fd54ef2d5815e1edae4b4a7344e3bb863c4f50c58c43849073b0875bbddd5276ae6282f89dcc13f2af6f1b38e5100466c1de97fec0d46960678259bc5634", 0x58, 0x204c850, &(0x7f0000000300)={0xa, 0x100, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 354.488731ms ago: executing program 4 (id=11573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 312.833745ms ago: executing program 3 (id=11575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getrlimit(0xa, &(0x7f0000000840)) 290.695546ms ago: executing program 2 (id=11576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 197.043564ms ago: executing program 2 (id=11578): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x8b}, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 183.471255ms ago: executing program 3 (id=11579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xfffffffffffffffd}) 169.184736ms ago: executing program 4 (id=11580): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@nodelalloc}, {@norecovery}, {@delalloc}, {@nojournal_checksum}, {@grpquota}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@discard}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x59f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0xa}}, 0x20) 161.441656ms ago: executing program 3 (id=11581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 160.046337ms ago: executing program 0 (id=11582): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 159.504147ms ago: executing program 2 (id=11583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 121.03134ms ago: executing program 3 (id=11584): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000040)) 98.194901ms ago: executing program 2 (id=11585): creat(&(0x7f00000006c0)='./file0\x00', 0x50) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x88) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 63.558545ms ago: executing program 3 (id=11586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 49.591666ms ago: executing program 2 (id=11587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 23.464468ms ago: executing program 4 (id=11588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x100000800000009) 0s ago: executing program 2 (id=11589): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r0) kernel console output (not intermixed with test programs): cklog [ 213.310863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.319054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.553891][T21511] netlink: 'syz.2.8196': attribute type 1 has an invalid length. [ 213.590643][T21515] loop2: detected capacity change from 0 to 128 [ 213.599766][T21515] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.625425][T21057] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.746499][T21528] loop9: detected capacity change from 0 to 7 [ 213.754264][T21528] buffer_io_error: 38374 callbacks suppressed [ 213.754279][T21528] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.768827][T21528] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.777439][T21528] loop9: unable to read partition table [ 213.785848][T21528] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 213.785848][T21528] ) failed (rc=-5) [ 214.003498][T21560] vhci_hcd: invalid port number 224 [ 214.260730][T21598] usb usb8: usbfs: process 21598 (syz.3.8235) did not claim interface 0 before use [ 214.564070][T21642] usb usb8: usbfs: process 21642 (syz.2.8253) did not claim interface 0 before use [ 214.689500][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8263'. [ 214.739547][T21664] vhci_hcd: invalid port number 96 [ 214.744921][T21664] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 214.785730][ T3394] kernel write not supported for file /122/sched (pid: 3394 comm: kworker/1:4) [ 214.813364][T21680] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 214.813364][T21680] program syz.3.8272 not setting count and/or reply_len properly [ 214.946842][T21695] loop9: detected capacity change from 0 to 7 [ 214.954210][T21695] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.966190][T21695] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.974102][T21695] loop9: unable to read partition table [ 214.980100][T21695] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 214.980100][T21695] ) failed (rc=-5) [ 215.197763][T21703] vhci_hcd: invalid port number 224 [ 215.444830][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8287'. [ 215.904636][T21779] loop4: detected capacity change from 0 to 512 [ 215.911641][T21779] EXT4-fs: Ignoring removed i_version option [ 215.925029][T21779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.954239][T21779] EXT4-fs (loop4): 1 truncate cleaned up [ 215.967861][T21779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.014441][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.199546][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8333'. [ 216.213601][T21810] gtp0: entered promiscuous mode [ 216.218589][T21810] gtp0: entered allmulticast mode [ 216.234964][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8334'. [ 216.380154][T21829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=21829 comm=syz.4.8341 [ 216.409413][T21829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8341'. [ 216.431121][T21835] usb usb1: check_ctrlrecip: process 21835 (+}[@) requesting ep 01 but needs 81 [ 216.440263][T21835] usb usb1: usbfs: process 21835 (+}[@) did not claim interface 0 before use [ 216.742527][ C1] net_ratelimit: 7 callbacks suppressed [ 216.742527][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 216.742545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.781385][T21881] loop4: detected capacity change from 0 to 128 [ 216.795040][T21881] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 216.802969][T21881] FAT-fs (loop4): Filesystem has been set read-only [ 216.809849][T21881] bio_check_eod: 38376 callbacks suppressed [ 216.809868][T21881] syz.4.8365: attempt to access beyond end of device [ 216.809868][T21881] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 216.829716][T21881] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 216.837763][T21881] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 216.856224][T21881] syz.4.8365: attempt to access beyond end of device [ 216.856224][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.872094][T21881] syz.4.8365: attempt to access beyond end of device [ 216.872094][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.886430][T21881] syz.4.8365: attempt to access beyond end of device [ 216.886430][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.900633][T21889] netlink: 400 bytes leftover after parsing attributes in process `syz.2.8368'. [ 216.900862][T21881] syz.4.8365: attempt to access beyond end of device [ 216.900862][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.924853][T21881] syz.4.8365: attempt to access beyond end of device [ 216.924853][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.938274][T21881] syz.4.8365: attempt to access beyond end of device [ 216.938274][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.953221][T21881] syz.4.8365: attempt to access beyond end of device [ 216.953221][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.967466][T21881] syz.4.8365: attempt to access beyond end of device [ 216.967466][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 216.986221][T21891] openvswitch: netlink: Message has 6 unknown bytes. [ 216.997485][T21881] syz.4.8365: attempt to access beyond end of device [ 216.997485][T21881] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 217.028056][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 217.028071][ T29] audit: type=1326 audit(217.005:79081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21896 comm="syz.0.8373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 217.080759][ T29] audit: type=1326 audit(217.035:79082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.103877][ T29] audit: type=1326 audit(217.035:79083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.126942][ T29] audit: type=1326 audit(217.035:79084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.150168][ T29] audit: type=1326 audit(217.035:79085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.173791][ T29] audit: type=1326 audit(217.035:79086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.197028][ T29] audit: type=1326 audit(217.035:79087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.220085][ T29] audit: type=1326 audit(217.035:79088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.243682][ T29] audit: type=1326 audit(217.035:79089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.266769][ T29] audit: type=1326 audit(217.035:79090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21898 comm="syz.2.8374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 217.393856][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.458970][T21936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.491445][T21936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.507477][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8388'. [ 217.543638][T21942] macvlan5: entered promiscuous mode [ 217.549052][T21942] bond0: entered promiscuous mode [ 217.575499][T21942] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 217.782551][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.808868][T21976] veth0: entered promiscuous mode [ 217.822223][T21975] veth0: left promiscuous mode [ 217.868750][T21982] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 217.898864][T21990] netlink: 'syz.0.8411': attribute type 1 has an invalid length. [ 218.188525][T22013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22013 comm=syz.0.8422 [ 218.201193][T22013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22013 comm=syz.0.8422 [ 218.371918][T22030] netlink: 703 bytes leftover after parsing attributes in process `syz.2.8430'. [ 218.490645][T22046] loop2: detected capacity change from 0 to 512 [ 218.522270][T22046] EXT4-fs (loop2): 1 orphan inode deleted [ 218.529790][T22046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.560689][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 218.643707][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 218.664588][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.665956][T21057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.822544][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.875611][T22091] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8457'. [ 218.886565][T22091] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8457'. [ 218.895945][T22091] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8457'. [ 219.169728][T22131] openvswitch: netlink: Message has 6 unknown bytes. [ 219.268952][T22142] bond2: entered promiscuous mode [ 219.274164][T22142] bond2: entered allmulticast mode [ 219.289837][T22142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.341708][T22142] bond2 (unregistering): Released all slaves [ 219.595929][ T3408] kernel read not supported for file /input/event1 (pid: 3408 comm: kworker/0:4) [ 219.986240][T22194] loop2: detected capacity change from 0 to 2048 [ 220.004829][T22194] EXT4-fs (loop2): failed to initialize system zone (-117) [ 220.012357][T22194] EXT4-fs (loop2): mount failed [ 220.063353][T22202] loop2: detected capacity change from 0 to 512 [ 220.070683][T22202] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 220.346399][T22222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.355482][T22222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.586650][T22233] netlink: 'syz.4.8515': attribute type 2 has an invalid length. [ 220.856469][T22261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8527'. [ 220.865776][T22261] IPVS: Error connecting to the multicast addr [ 221.011556][T22280] hub 6-0:1.0: USB hub found [ 221.025406][T22280] hub 6-0:1.0: 8 ports detected [ 221.211206][T22312] binfmt_misc: register: failed to install interpreter file ./file2 [ 221.259197][T22320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.318585][T22330] netlink: 'syz.1.8559': attribute type 3 has an invalid length. [ 221.378971][T22341] batadv_slave_1: entered promiscuous mode [ 221.386753][T22340] batadv_slave_1: left promiscuous mode [ 221.500348][T22359] netlink: 'syz.2.8574': attribute type 12 has an invalid length. [ 221.508405][T22359] netlink: 'syz.2.8574': attribute type 29 has an invalid length. [ 221.517145][T22359] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8574'. [ 221.569921][T22368] netlink: 'syz.3.8578': attribute type 3 has an invalid length. [ 221.604624][T22377] netlink: 'syz.1.8582': attribute type 22 has an invalid length. [ 221.612546][T22377] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8582'. [ 221.747255][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8595'. [ 221.826482][T22411] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 221.896901][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.905482][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.942529][ C0] net_ratelimit: 5 callbacks suppressed [ 221.942547][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.059513][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 222.059530][ T29] audit: type=1400 audit(222.035:79214): avc: denied { create } for pid=22421 comm="syz.4.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.085760][ T29] audit: type=1400 audit(222.035:79215): avc: denied { connect } for pid=22421 comm="syz.4.8604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.471703][T22436] netlink: 'syz.2.8609': attribute type 3 has an invalid length. [ 222.491842][T22438] netlink: 'syz.4.8610': attribute type 1 has an invalid length. [ 222.504256][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.518620][T22443] sd 0:0:1:0: device reset [ 222.518727][ T29] audit: type=1326 audit(222.495:79216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.546178][ T29] audit: type=1326 audit(222.495:79217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.569807][ T29] audit: type=1326 audit(222.495:79218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb34fcd4d0 code=0x7ffc0000 [ 222.593668][ T29] audit: type=1326 audit(222.495:79219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.616757][ T29] audit: type=1326 audit(222.495:79220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.640436][ T29] audit: type=1326 audit(222.495:79221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.686585][ T29] audit: type=1326 audit(222.525:79222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.710362][ T29] audit: type=1326 audit(222.525:79223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22441 comm="syz.2.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 222.744900][T22449] loop4: detected capacity change from 0 to 1024 [ 222.834135][T22449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.879214][T22449] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.8615: lblock 1 mapped to illegal pblock 1 (length 15) [ 222.928079][T22449] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.8615: lblock 3 mapped to illegal pblock 3 (length 13) [ 222.943686][T22449] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 222.956421][T22449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.956421][T22449] [ 222.980933][ T51] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 222.996894][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 223.002525][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.009316][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 223.009316][ T51] [ 223.026123][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 223.032302][ T51] EXT4-fs (loop4): Free/Dirty block details [ 223.038275][ T51] EXT4-fs (loop4): free_blocks=4293918720 [ 223.044178][ T51] EXT4-fs (loop4): dirty_blocks=64 [ 223.049331][ T51] EXT4-fs (loop4): Block reservation details [ 223.140169][T22499] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 223.148875][T22499] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 223.188165][T22503] lo speed is unknown, defaulting to 1000 [ 223.199650][T22507] loop2: detected capacity change from 0 to 512 [ 223.230735][T22501] lo speed is unknown, defaulting to 1000 [ 223.246475][T22507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.296006][T21057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.315474][T22522] SELinux: Context @ is not valid (left unmapped). [ 223.327628][T22524] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8650'. [ 223.345911][T22528] openvswitch: netlink: Message has 6 unknown bytes. [ 223.402798][T22536] lo speed is unknown, defaulting to 1000 [ 223.515699][T22545] lo speed is unknown, defaulting to 1000 [ 223.560234][ T3408] hid_parser_main: 32 callbacks suppressed [ 223.560298][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.574483][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.581936][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589413][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589442][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589463][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589485][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589512][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589548][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.589575][ T3408] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 223.592181][ T3408] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 223.726349][T22572] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8670'. [ 223.819594][T22584] lo speed is unknown, defaulting to 1000 [ 223.914258][T22602] SELinux: policydb version 0 does not match my version range 15-35 [ 223.930155][T22602] SELinux: failed to load policy [ 224.022544][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.191831][T22620] loop2: detected capacity change from 0 to 512 [ 224.195456][T22622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8691'. [ 224.289918][T22633] hub 9-0:1.0: USB hub found [ 224.295644][T22633] hub 9-0:1.0: 8 ports detected [ 224.323741][T22620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.350208][T22620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8692: bg 0: block 321: padding at end of block bitmap is not set [ 224.467415][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.476639][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.588460][T21057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.634108][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8700'. [ 224.643135][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8700'. [ 224.723843][T22645] vhci_hcd: invalid port number 224 [ 225.062810][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.083306][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8720'. [ 225.190178][T22705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.264484][T22703] loop2: detected capacity change from 0 to 8192 [ 225.277830][T22716] netlink: 'syz.1.8737': attribute type 1 has an invalid length. [ 225.285703][T22716] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8737'. [ 225.304657][T22703] bio_check_eod: 9700 callbacks suppressed [ 225.304695][T22703] syz.2.8731: attempt to access beyond end of device [ 225.304695][T22703] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 225.338760][T22722] loop4: detected capacity change from 0 to 512 [ 225.347853][T22722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.355972][T22703] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 225.363869][T22703] FAT-fs (loop2): Filesystem has been set read-only [ 225.376008][T22722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 225.389387][T22703] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 225.403206][T22703] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 225.430903][T22722] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 225.459830][T22722] EXT4-fs (loop4): 1 truncate cleaned up [ 225.469737][T22722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.515069][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.796418][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8757'. [ 225.884292][T22784] loop2: detected capacity change from 0 to 128 [ 225.986524][T22799] netlink: 'syz.2.8775': attribute type 178 has an invalid length. [ 226.033404][T22806] lo speed is unknown, defaulting to 1000 [ 226.112518][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.496057][T22847] loop4: detected capacity change from 0 to 128 [ 226.577040][T22855] loop4: detected capacity change from 0 to 128 [ 226.629890][T22855] syz.4.8799: attempt to access beyond end of device [ 226.629890][T22855] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 226.643576][T22855] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 226.654539][T22855] syz.4.8799: attempt to access beyond end of device [ 226.654539][T22855] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 226.668083][T22855] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 226.677903][T22855] syz.4.8799: attempt to access beyond end of device [ 226.677903][T22855] loop4: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 226.692208][T22855] Buffer I/O error on dev loop4, logical block 139, lost async page write [ 226.702542][T22855] syz.4.8799: attempt to access beyond end of device [ 226.702542][T22855] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 226.716038][T22855] Buffer I/O error on dev loop4, logical block 140, lost async page write [ 226.742544][T22855] syz.4.8799: attempt to access beyond end of device [ 226.742544][T22855] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 226.756774][T22855] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 226.780317][T22855] syz.4.8799: attempt to access beyond end of device [ 226.780317][T22855] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 226.794598][T22855] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 226.819176][T22855] syz.4.8799: attempt to access beyond end of device [ 226.819176][T22855] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 226.833441][T22855] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 226.845718][T22855] syz.4.8799: attempt to access beyond end of device [ 226.845718][T22855] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 226.859196][T22855] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 226.873479][T22855] syz.4.8799: attempt to access beyond end of device [ 226.873479][T22855] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 226.886965][T22855] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 226.897320][T22855] Buffer I/O error on dev loop4, logical block 148, lost async page write [ 227.097627][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 227.097644][ T29] audit: type=1400 audit(227.075:79398): avc: denied { create } for pid=22869 comm="syz.3.8806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.140275][ T29] audit: type=1400 audit(227.075:79399): avc: denied { write } for pid=22869 comm="syz.3.8806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.160521][ C0] net_ratelimit: 2 callbacks suppressed [ 227.160541][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.179255][ T29] audit: type=1400 audit(227.135:79400): avc: denied { map_read map_write } for pid=22876 comm="syz.3.8809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.241595][ T29] audit: type=1400 audit(227.215:79401): avc: denied { execute } for pid=22885 comm="syz.3.8813" path="/1754/cpu.stat" dev="tmpfs" ino=8985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.266614][T22887] 9pnet_fd: Insufficient options for proto=fd [ 227.273023][ T29] audit: type=1400 audit(227.245:79402): avc: denied { mounton } for pid=22886 comm="syz.2.8814" path="/152" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 227.429812][ T29] audit: type=1400 audit(227.405:79403): avc: denied { open } for pid=22900 comm="syz.0.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 227.449384][ T29] audit: type=1400 audit(227.405:79404): avc: denied { kernel } for pid=22900 comm="syz.0.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 227.536304][ T29] audit: type=1400 audit(227.405:79405): avc: denied { tracepoint } for pid=22900 comm="syz.0.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 227.556756][ T29] audit: type=1400 audit(227.455:79406): avc: denied { create } for pid=22900 comm="syz.0.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.603195][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.672331][ T29] audit: type=1400 audit(227.555:79407): avc: denied { setopt } for pid=22900 comm="syz.0.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.765447][T22907] syzkaller1: entered promiscuous mode [ 227.770977][T22907] syzkaller1: entered allmulticast mode [ 227.900105][T22919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22919 comm=syz.0.8826 [ 227.913986][T22919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22919 comm=syz.0.8826 [ 227.943930][ T3362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3362 comm=kworker/1:2 [ 227.971292][T22927] lo speed is unknown, defaulting to 1000 [ 228.024855][T22934] loop4: detected capacity change from 0 to 128 [ 228.081406][T22934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.139376][T20534] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.182515][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.257322][T22957] loop4: detected capacity change from 0 to 128 [ 228.274095][T22957] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.356136][T20534] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.411727][T22966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.759661][T22990] 9p: Unknown uid 00000000004294967295 [ 228.902686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.222548][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.400136][T23009] pim6reg1: entered promiscuous mode [ 229.405613][T23009] pim6reg1: entered allmulticast mode [ 229.456821][T23015] lo speed is unknown, defaulting to 1000 [ 229.543057][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.591451][T23036] 9p: Unknown uid 00000000004294967295 [ 229.822527][T23070] __nla_validate_parse: 8 callbacks suppressed [ 229.822548][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8896'. [ 229.848421][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8896'. [ 229.906809][T23081] bond_slave_1: entered promiscuous mode [ 229.923549][T23081] bond_slave_1: left promiscuous mode [ 230.150777][T23110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8916'. [ 230.184266][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.213276][T23118] bond_slave_1: entered promiscuous mode [ 230.221131][T23118] bond_slave_1: left promiscuous mode [ 230.246888][T23124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8923'. [ 230.255966][T23124] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8923'. [ 230.265660][T23124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8923'. [ 230.272562][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.274779][T23124] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8923'. [ 230.290664][T23124] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8923'. [ 230.433813][T23150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8936'. [ 230.651800][T23180] ALSA: seq fatal error: cannot create timer (-19) [ 230.914526][T23221] netlink: 'syz.4.8970': attribute type 6 has an invalid length. [ 231.080169][T23243] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 231.118155][T23247] usb usb1: usbfs: process 23247 (syz.3.8981) did not claim interface 0 before use [ 231.302517][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.551619][T23281] dvmrp1: entered allmulticast mode [ 231.561129][T23281] dvmrp1: left allmulticast mode [ 231.916377][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9019'. [ 232.098592][T23354] loop4: detected capacity change from 0 to 128 [ 232.108149][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 232.108166][ T29] audit: type=1400 audit(232.085:79683): avc: denied { mounton } for pid=23353 comm="syz.4.9029" path="/232/file1" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 232.140859][ T29] audit: type=1400 audit(232.115:79684): avc: denied { mount } for pid=23353 comm="syz.4.9029" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 232.172103][ T29] audit: type=1400 audit(232.145:79685): avc: denied { unmount } for pid=20534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 232.214596][T23360] loop4: detected capacity change from 0 to 512 [ 232.224908][T23360] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 232.233950][T23360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.240598][T23360] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 232.258647][T23360] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 232.267205][T23360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9040: bg 0: block 40: padding at end of block bitmap is not set [ 232.282809][T23360] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 232.285964][ T29] audit: type=1400 audit(232.245:79686): avc: denied { create } for pid=23366 comm="syz.2.9033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.291965][T23360] EXT4-fs (loop4): 1 truncate cleaned up [ 232.311151][ T29] audit: type=1400 audit(232.245:79687): avc: denied { shutdown } for pid=23366 comm="syz.2.9033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.319101][T23360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.337354][ T29] audit: type=1400 audit(232.245:79688): avc: denied { read } for pid=23366 comm="syz.2.9033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.348953][ C0] net_ratelimit: 1 callbacks suppressed [ 232.348970][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 232.381606][ T29] audit: type=1400 audit(232.245:79689): avc: denied { write } for pid=23366 comm="syz.2.9033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.403799][ T29] audit: type=1400 audit(232.325:79690): avc: denied { mount } for pid=23358 comm="syz.4.9040" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.435326][T23360] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.9040: corrupted xattr block 31: invalid header [ 232.453859][T23360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 232.462960][T23360] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.9040: corrupted xattr block 31: invalid header [ 232.464115][ T29] audit: type=1400 audit(232.435:79691): avc: denied { connect } for pid=23370 comm="syz.2.9035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.495239][ T29] audit: type=1400 audit(232.435:79692): avc: denied { read } for pid=23370 comm="syz.2.9035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.515759][T23360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 232.527333][T23360] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #16: comm syz.4.9040: corrupted xattr block 31: invalid header [ 232.568754][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.743488][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.777953][T23420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.949675][T23437] dvmrp1: entered allmulticast mode [ 232.988213][T23437] dvmrp1: left allmulticast mode [ 233.230375][T23471] Invalid ELF header magic: != ELF [ 233.257116][T23478] tmpfs: Bad value for 'mpol' [ 233.338808][T23491] sctp: [Deprecated]: syz.1.9089 (pid 23491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.338808][T23491] Use struct sctp_sack_info instead [ 233.382529][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.412873][T23498] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 234.390555][T23585] sd 0:0:1:0: device reset [ 234.422535][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.582807][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.659679][T23622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.682189][T23622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.787461][T23638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.799388][T23638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.884760][T23649] loop4: detected capacity change from 0 to 512 [ 234.897148][T23649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.928685][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.950190][T23654] vlan2: entered allmulticast mode [ 234.955958][T23654] bond0: entered allmulticast mode [ 234.961145][T23654] bond_slave_0: entered allmulticast mode [ 234.966940][T23654] bond_slave_1: entered allmulticast mode [ 235.215517][T23682] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 235.311282][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.391379][T23708] vlan2: entered allmulticast mode [ 235.397326][T23708] bond0: entered allmulticast mode [ 235.402601][T23708] bond_slave_0: entered allmulticast mode [ 235.408383][T23708] bond_slave_1: entered allmulticast mode [ 235.462187][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.515078][T23722] sd 0:0:1:0: device reset [ 235.574164][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.603093][T23734] __nla_validate_parse: 10 callbacks suppressed [ 235.603151][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9190'. [ 235.732845][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9198'. [ 235.905376][T23779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9208'. [ 236.150971][T23811] netem: incorrect gi model size [ 236.298023][ T3408] hid_parser_main: 22 callbacks suppressed [ 236.298046][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.312861][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.320308][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.327775][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.336089][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.343564][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.351780][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.359648][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.368248][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.375761][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 236.397572][ T3408] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 236.446601][T23844] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 236.501680][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.628651][T23854] netlink: 'syz.1.9246': attribute type 1 has an invalid length. [ 236.699257][T23859] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 236.739709][T23862] loop4: detected capacity change from 0 to 512 [ 236.784106][T23862] EXT4-fs (loop4): 1 orphan inode deleted [ 236.790887][T23862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.803817][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 236.833993][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.113346][T23899] IPv6: Can't replace route, no match found [ 237.121955][T23901] netlink: 'syz.1.9267': attribute type 3 has an invalid length. [ 237.147270][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.156916][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.181924][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.206700][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.215752][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.225359][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.248351][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 237.248369][ T29] audit: type=1326 audit(493.227:79943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23909 comm="syz.1.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.264874][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9268'. [ 237.279377][ T29] audit: type=1326 audit(493.227:79944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23909 comm="syz.1.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.345504][ T29] audit: type=1326 audit(493.268:79945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23909 comm="syz.1.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.368479][ T29] audit: type=1326 audit(493.268:79946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23909 comm="syz.1.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.392806][ T29] audit: type=1326 audit(493.268:79947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23909 comm="syz.1.9270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.418651][ T29] audit: type=1326 audit(493.398:79948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.442953][ T29] audit: type=1326 audit(493.398:79949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.490630][ T29] audit: type=1326 audit(493.398:79950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.514459][ T29] audit: type=1326 audit(493.398:79951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.538587][ T29] audit: type=1326 audit(493.438:79952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 237.561662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.642514][T23933] loop4: detected capacity change from 0 to 512 [ 237.649219][T23933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.660257][T23939] loop2: detected capacity change from 0 to 512 [ 237.671731][T23933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.680221][T23933] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.723161][T23933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c018, mo2=0102] [ 237.733810][T23939] EXT4-fs (loop2): 1 orphan inode deleted [ 237.740008][T23939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.752632][ T3318] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 237.773495][T23933] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.9281: Allocating blocks 41-42 which overlap fs metadata [ 237.799989][T23961] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 237.814480][T23933] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.9281: Allocating blocks 41-42 which overlap fs metadata [ 237.861277][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.869904][T23933] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9281: Failed to acquire dquot type 1 [ 237.908515][T23933] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 237.931377][T21057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.947068][T23933] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.9281: corrupted inode contents [ 237.971183][T23933] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.9281: mark_inode_dirty error [ 237.994189][T23933] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.9281: corrupted inode contents [ 238.007799][T23933] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.9281: mark_inode_dirty error [ 238.045250][T23933] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.9281: corrupted inode contents [ 238.072617][T23933] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 238.091915][T23933] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.9281: corrupted inode contents [ 238.119226][T23933] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.9281: mark_inode_dirty error [ 238.142242][T23933] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 238.155421][T23933] EXT4-fs (loop4): 1 truncate cleaned up [ 238.161527][T23933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.218895][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.313464][T23997] loop4: detected capacity change from 0 to 1024 [ 238.333164][T23997] EXT4-fs: Ignoring removed orlov option [ 238.370579][T23997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.485189][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.501380][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.581307][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.774985][T24058] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 238.774985][T24058] The task syz.2.9330 (24058) triggered the difference, watch for misbehavior. [ 238.842806][T24051] infiniband syz!: set active [ 238.847558][T24051] infiniband syz!: added team_slave_0 [ 238.865108][T24051] RDS/IB: syz!: added [ 238.869232][T24051] smc: adding ib device syz! with port count 1 [ 238.875551][T24051] smc: ib device syz! port 1 has pnetid [ 239.223552][T24087] vhci_hcd: invalid port number 96 [ 239.228719][T24087] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 239.249084][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.267454][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.277459][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.289736][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.368189][T24112] netlink: 'syz.1.9361': attribute type 1 has an invalid length. [ 239.621275][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.627768][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.921531][T24168] loop2: detected capacity change from 0 to 128 [ 240.086518][T24190] geneve2: entered promiscuous mode [ 240.091806][T24190] geneve2: entered allmulticast mode [ 240.341260][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.357327][T24226] loop4: detected capacity change from 0 to 512 [ 240.412126][T24226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 240.424398][T24226] System zones: 1-12 [ 240.502407][T24226] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.9410: corrupted in-inode xattr: e_value size too large [ 240.517934][T24226] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.9410: couldn't read orphan inode 15 (err -117) [ 240.601578][T24226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.670469][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.707991][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.866821][T24282] __nla_validate_parse: 17 callbacks suppressed [ 240.866841][T24282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9439'. [ 240.941739][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9443'. [ 240.951622][T24294] unsupported nlmsg_type 40 [ 241.004297][T24302] SELinux: Context system_u:object_r:devicekit_var_run_t:s0 is not valid (left unmapped). [ 241.064087][T24316] netlink: 'syz.2.9455': attribute type 10 has an invalid length. [ 241.074838][T24316] syz_tun: entered promiscuous mode [ 241.085048][T24316] syz_tun: entered allmulticast mode [ 241.091250][T24316] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 241.102890][T24316] netlink: 'syz.2.9455': attribute type 10 has an invalid length. [ 241.114524][T24316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.123208][T24316] team0: Port device bond0 added [ 241.137132][T24314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24314 comm=+}[@ [ 241.163898][T24324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.199671][T24324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.410643][T24352] netlink: 'syz.1.9470': attribute type 13 has an invalid length. [ 241.515023][T24352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.618560][T24374] netlink: 'syz.1.9480': attribute type 3 has an invalid length. [ 241.700374][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.758435][T24381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.767431][T24381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.216769][T24433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 242.223314][T24433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.231551][T24433] vhci_hcd vhci_hcd.0: Device attached [ 242.238865][T24434] vhci_hcd: connection closed [ 242.239036][ T12] vhci_hcd: stop threads [ 242.248157][ T12] vhci_hcd: release socket [ 242.252703][ T12] vhci_hcd: disconnect device [ 242.263710][T24437] syzkaller1: entered promiscuous mode [ 242.269214][T24437] syzkaller1: entered allmulticast mode [ 242.316114][T24441] pim6reg1: entered promiscuous mode [ 242.321675][T24441] pim6reg1: entered allmulticast mode [ 242.374681][T24449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9515'. [ 242.387802][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 242.387820][ T29] audit: type=1326 audit(242.361:80140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.4.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.417950][ T29] audit: type=1326 audit(242.381:80141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.4.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.422577][T24453] tap0: tun_chr_ioctl cmd 1074025675 [ 242.441090][ T29] audit: type=1326 audit(242.381:80142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.4.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.441184][ T29] audit: type=1326 audit(242.381:80143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.4.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.498395][T24453] tap0: persist enabled [ 242.503537][T24456] tap0: tun_chr_ioctl cmd 1074025675 [ 242.508890][T24456] tap0: persist disabled [ 242.528135][ T29] audit: type=1326 audit(242.501:80144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.4.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.551252][ T29] audit: type=1326 audit(242.501:80145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.4.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.577484][ T29] audit: type=1326 audit(242.561:80146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.4.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.600581][ T29] audit: type=1326 audit(242.561:80147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.4.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.623615][ T29] audit: type=1326 audit(242.561:80148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24457 comm="syz.4.9519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 242.657796][ T29] audit: type=1400 audit(242.611:80149): avc: denied { append } for pid=24463 comm="syz.1.9522" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 242.750266][ C0] net_ratelimit: 81 callbacks suppressed [ 242.750298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.803418][T24488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9534'. [ 242.933217][T24513] Q6\bY4: renamed from lo (while UP) [ 242.945195][T24515] 9pnet_fd: Insufficient options for proto=fd [ 243.012392][T24528] loop2: detected capacity change from 0 to 512 [ 243.022864][T24528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.042393][T24528] veth2: entered allmulticast mode [ 243.078337][T21057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.186993][T24548] netlink: 328 bytes leftover after parsing attributes in process `syz.1.9560'. [ 243.266086][T24555] IPv6: Can't replace route, no match found [ 243.620960][T24600] geneve2: entered promiscuous mode [ 243.626283][T24600] geneve2: entered allmulticast mode [ 243.633217][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.646186][T24597] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.9583'. [ 243.656397][T24597] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 243.761110][T24614] netlink: 'syz.1.9590': attribute type 1 has an invalid length. [ 243.768936][T24614] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.9590'. [ 243.790287][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.086398][T24654] netlink: 'syz.1.9608': attribute type 1 has an invalid length. [ 244.215797][T24670] IPVS: stopping master sync thread 24671 ... [ 244.216473][T24671] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 244.260870][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.288743][T24682] bond1: entered promiscuous mode [ 244.293873][T24682] bond1: entered allmulticast mode [ 244.301812][T24682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.317428][T24676] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.9616'. [ 244.333195][T24682] bond1 (unregistering): Released all slaves [ 244.354847][T24676] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.438184][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9624'. [ 244.742189][T24719] netlink: 'syz.3.9636': attribute type 10 has an invalid length. [ 244.820282][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.901376][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.942186][T24749] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9647'. [ 245.005578][T24755] loop4: detected capacity change from 0 to 512 [ 245.035634][T24755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.063378][T24755] veth2: entered allmulticast mode [ 245.154940][T24769] program syz.1.9657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.168979][T24771] geneve2: entered promiscuous mode [ 245.174426][T24771] geneve2: entered allmulticast mode [ 245.212580][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.259700][T24779] syzkaller1: entered promiscuous mode [ 245.265448][T24779] syzkaller1: entered allmulticast mode [ 245.411542][T24806] loop9: detected capacity change from 0 to 7 [ 245.422965][T24806] buffer_io_error: 21 callbacks suppressed [ 245.422979][T24806] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.450539][T24806] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.458401][T24806] loop9: unable to read partition table [ 245.479239][T24806] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 245.479239][T24806] ) failed (rc=-5) [ 245.608180][T24839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.636991][T24837] vhci_hcd: invalid port number 96 [ 245.642223][T24837] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 245.660021][T24839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.708425][T24839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.829116][T24839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.842346][T24869] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 245.860300][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.922488][ T3318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.944044][ T3318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.954029][ T3318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.964352][ T3318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.985784][T24894] __nla_validate_parse: 2 callbacks suppressed [ 245.985843][T24894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9712'. [ 246.001143][T24894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9712'. [ 246.054099][T24906] loop4: detected capacity change from 0 to 1024 [ 246.062494][T24906] EXT4-fs: Ignoring removed oldalloc option [ 246.068441][T24906] EXT4-fs: Ignoring removed bh option [ 246.083115][T24906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.102669][T24906] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 246.155140][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.181502][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.213089][T24929] loop4: detected capacity change from 0 to 512 [ 246.220175][T24929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.231380][T24929] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.9726: casefold flag without casefold feature [ 246.247109][T24929] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.9726: couldn't read orphan inode 15 (err -117) [ 246.271578][T24929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.334781][T24947] netlink: 'syz.1.9735': attribute type 10 has an invalid length. [ 246.551922][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.791105][T25003] loop4: detected capacity change from 0 to 256 [ 246.805155][T25003] FAT-fs (loop4): Directory bread(block 1285) failed [ 246.831232][T25003] FAT-fs (loop4): Directory bread(block 1285) failed [ 246.841767][T25003] FAT-fs (loop4): Directory bread(block 1285) failed [ 246.848479][T25003] FAT-fs (loop4): Directory bread(block 1285) failed [ 246.900256][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.944983][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9776'. [ 247.027382][T25050] loop4: detected capacity change from 0 to 1024 [ 247.031331][T25047] Q6\bY4 speed is unknown, defaulting to 1000 [ 247.060749][T25050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.094007][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.126580][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9788'. [ 247.221330][T25081] Q6\bY4 speed is unknown, defaulting to 1000 [ 247.241101][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9797'. [ 247.251922][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9798'. [ 247.366564][T25101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9804'. [ 247.392635][T25100] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.401028][T25100] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 247.427644][T25106] 9pnet_fd: Insufficient options for proto=fd [ 247.445532][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 247.445545][ T29] audit: type=1326 audit(247.426:80320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.482681][ T29] audit: type=1326 audit(247.426:80321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.506616][ T29] audit: type=1326 audit(247.446:80322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.529589][ T29] audit: type=1326 audit(247.446:80323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.553324][ T29] audit: type=1326 audit(247.446:80324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.576326][ T29] audit: type=1326 audit(247.446:80325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.600040][ T29] audit: type=1326 audit(247.456:80326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25109 comm="syz.4.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 247.632348][ T29] audit: type=1400 audit(247.616:80327): avc: denied { ioctl } for pid=25114 comm="syz.4.9810" path="socket:[77724]" dev="sockfs" ino=77724 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.679966][T25120] netlink: 'syz.4.9814': attribute type 1 has an invalid length. [ 247.711946][T25124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25124 comm=syz.4.9816 [ 247.724635][T25124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25124 comm=syz.4.9816 [ 247.773794][ T29] audit: type=1326 audit(247.756:80328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 247.798902][ T29] audit: type=1326 audit(247.756:80329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.2.9819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 247.894989][T25140] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 247.940271][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.004437][T25150] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 248.048700][T25165] loop4: detected capacity change from 0 to 128 [ 248.057746][T25165] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.115719][T20534] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.167743][T25177] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9839'. [ 248.216040][T25184] atomic_op ffff88811356c528 conn xmit_atomic 0000000000000000 [ 248.287671][T25191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.299631][T25193] sctp: [Deprecated]: syz.2.9848 (pid 25193) Use of int in maxseg socket option. [ 248.299631][T25193] Use struct sctp_assoc_value instead [ 248.308645][T25191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.563396][T25214] dvmrp1: entered allmulticast mode [ 248.571606][T25214] dvmrp1: left allmulticast mode [ 248.889051][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9876'. [ 248.898008][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9876'. [ 248.980318][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.256496][T25300] loop4: detected capacity change from 0 to 164 [ 249.264372][T25300] Unable to read rock-ridge attributes [ 249.342793][T25315] loop4: detected capacity change from 0 to 1024 [ 249.369004][T25315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.382033][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.410893][T25315] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 249.481182][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.574153][T25346] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25346 comm=syz.1.9917 [ 250.020673][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.029122][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.037392][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.153143][T25397] Q6\bY4 speed is unknown, defaulting to 1000 [ 250.510391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.518623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.526905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.553939][T25446] all (unregistering): Released all slaves [ 250.711220][T25473] sd 0:0:1:0: device reset [ 250.785501][T25483] 9pnet: p9_errstr2errno: server reported unknown error @ [ 250.816007][T25488] sd 0:0:1:0: device reset [ 250.866854][T25493] netlink: 'syz.0.9981': attribute type 1 has an invalid length. [ 250.878001][T25495] Q6\bY4 speed is unknown, defaulting to 1000 [ 250.926264][T25499] SELinux: policydb version 0 does not match my version range 15-35 [ 250.934586][T25499] SELinux: failed to load policy [ 251.060272][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 251.256215][T25536] netlink: 'syz.1.10000': attribute type 3 has an invalid length. [ 251.332014][T25549] Q6\bY4 speed is unknown, defaulting to 1000 [ 251.697818][T25600] Q6\bY4 speed is unknown, defaulting to 1000 [ 251.728139][T25602] sd 0:0:1:0: device reset [ 252.252999][T25637] __nla_validate_parse: 4 callbacks suppressed [ 252.253020][T25637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10046'. [ 252.487184][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 252.487209][ T29] audit: type=1326 audit(252.466:80519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.2.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 252.548014][ T29] audit: type=1326 audit(252.476:80520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25599 comm="syz.2.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 252.766980][T25648] netlink: 468 bytes leftover after parsing attributes in process `syz.3.10050'. [ 252.844343][T25652] vhci_hcd: invalid port number 96 [ 252.849485][T25652] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 252.907417][ T29] audit: type=1326 audit(252.886:80521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 252.947418][ T29] audit: type=1326 audit(252.916:80522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 252.971247][ T29] audit: type=1326 audit(252.916:80523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 252.994314][ T29] audit: type=1326 audit(252.916:80524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 253.018175][ T29] audit: type=1326 audit(252.916:80525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 253.042065][ T29] audit: type=1326 audit(252.916:80526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 253.065229][ T29] audit: type=1326 audit(252.916:80527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 253.089054][ T29] audit: type=1326 audit(252.916:80528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="syz.0.10055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 253.140262][ C0] net_ratelimit: 2 callbacks suppressed [ 253.140291][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.159560][T25673] syzkaller1: entered promiscuous mode [ 253.165151][T25673] syzkaller1: entered allmulticast mode [ 253.220272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.400123][T25709] ip6tnl2: entered promiscuous mode [ 253.405452][T25709] ip6tnl2: entered allmulticast mode [ 253.416529][T25711] bond0: entered promiscuous mode [ 253.423470][T25711] batadv0: entered promiscuous mode [ 253.429173][T25711] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 253.439469][T25711] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 253.449051][T25711] bond0: left promiscuous mode [ 253.455539][T25711] batadv0: left promiscuous mode [ 253.772319][T25759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.180255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 254.295514][T25835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10138'. [ 254.308429][T25841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10141'. [ 254.393914][T25852] loop4: detected capacity change from 0 to 1024 [ 254.418176][T25852] EXT4-fs: inline encryption not supported [ 254.424179][T25852] EXT4-fs: Ignoring removed i_version option [ 254.462708][T25852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.544339][T25852] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 254.598852][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.705364][T25908] atomic_op ffff88810b337128 conn xmit_atomic 0000000000000000 [ 254.787641][T25926] IPv6: Can't replace route, no match found [ 255.140589][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.157134][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.167753][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 255.196503][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.217043][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 255.230277][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.258215][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 255.285151][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 255.321469][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 255.377242][T25976] netlink: 'syz.4.10204': attribute type 1 has an invalid length. [ 255.454341][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10206'. [ 256.260228][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.476044][T26121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 256.482603][T26121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.490810][T26121] vhci_hcd vhci_hcd.0: Device attached [ 256.498046][T26121] vhci_hcd vhci_hcd.0: port 0 already used [ 256.505118][T26122] vhci_hcd: connection closed [ 256.505257][ T51] vhci_hcd: stop threads [ 256.514359][ T51] vhci_hcd: release socket [ 256.518940][ T51] vhci_hcd: disconnect device [ 256.797931][T26173] vhci_hcd: invalid port number 96 [ 256.803229][T26173] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 257.090717][T26220] 9pnet: Could not find request transport: 0xffffffffffffffff [ 257.197596][T26246] netlink: 'syz.2.10328': attribute type 1 has an invalid length. [ 257.217608][T26246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.300254][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.323118][T26261] block device autoloading is deprecated and will be removed. [ 257.353534][T26270] __nla_validate_parse: 7 callbacks suppressed [ 257.353554][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10339'. [ 257.371244][T26270] chnl_net:caif_netlink_parms(): no params data found [ 257.509160][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10346'. [ 257.526149][T26286] bond2: entered promiscuous mode [ 257.531354][T26286] bond2: entered allmulticast mode [ 257.536824][T26286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.589325][T26297] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 257.672991][T26312] netlink: 'syz.2.10358': attribute type 4 has an invalid length. [ 257.739588][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 257.739606][ T29] audit: type=1326 audit(257.716:80705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.769230][ T29] audit: type=1326 audit(257.716:80706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.792571][ T29] audit: type=1326 audit(257.716:80707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.815762][ T29] audit: type=1326 audit(257.716:80708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.839251][ T29] audit: type=1326 audit(257.716:80709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.862586][ T29] audit: type=1326 audit(257.716:80710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.885835][ T29] audit: type=1326 audit(257.716:80711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.909005][ T29] audit: type=1326 audit(257.716:80712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.946592][ T29] audit: type=1326 audit(257.796:80713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.969887][ T29] audit: type=1326 audit(257.796:80714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26319 comm="syz.2.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb34fceb69 code=0x7ffc0000 [ 257.972606][T26324] netlink: 'syz.3.10364': attribute type 21 has an invalid length. [ 258.023056][T26324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10364'. [ 258.123948][T26348] netlink: 'syz.4.10375': attribute type 1 has an invalid length. [ 258.243304][T26365] usb usb8: usbfs: process 26365 (syz.4.10382) did not claim interface 0 before use [ 258.307050][T26376] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 258.340276][ C0] net_ratelimit: 1 callbacks suppressed [ 258.340301][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.403902][ T3362] kernel write not supported for file bpf-prog (pid: 3362 comm: kworker/1:2) [ 258.446782][T26395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.526214][T26409] loop4: detected capacity change from 0 to 512 [ 258.553804][T26409] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 258.568946][T26409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 258.579017][T26409] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.10402: corrupted inode contents [ 258.591661][T26419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10406'. [ 258.592821][T26409] EXT4-fs (loop4): Remounting filesystem read-only [ 258.601772][T26419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10406'. [ 258.618544][T26409] EXT4-fs (loop4): 1 truncate cleaned up [ 258.624849][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 258.636282][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 258.647135][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 258.657893][T26409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.671750][T26409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.005716][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10423'. [ 259.014977][T26457] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10423'. [ 259.024292][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10423'. [ 259.034462][T26457] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10423'. [ 259.043700][T26457] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10423'. [ 259.380261][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.926515][T26498] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 260.025317][T26514] loop4: detected capacity change from 0 to 512 [ 260.036538][T26514] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 260.048114][T26514] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 260.059024][T26514] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.10450: Corrupt directory, running e2fsck is recommended [ 260.072756][T26514] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 260.081646][T26514] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.10450: corrupted in-inode xattr: invalid ea_ino [ 260.095671][T26514] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.10450: couldn't read orphan inode 15 (err -117) [ 260.108729][T26514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.125449][T26514] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 260.137139][T26514] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 260.147280][T26514] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.10450: Corrupt directory, running e2fsck is recommended [ 260.161556][T26514] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.10450: path /538/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 260.192292][T26514] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.10450: path /538/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 260.272396][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.283440][T26526] io-wq is not configured for unbound workers [ 260.420248][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.901456][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.910053][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.918268][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.162939][T26655] 9pnet_fd: Insufficient options for proto=fd [ 261.460505][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.527694][T26707] netlink: 'syz.4.10542': attribute type 1 has an invalid length. [ 261.601112][T26711] Q6\bY4 speed is unknown, defaulting to 1000 [ 262.020706][ C1] Adjusting tsc more than 11% (6668950 vs 8464875) [ 262.277844][T26790] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 262.335444][T26801] loop0: detected capacity change from 0 to 1024 [ 262.355562][T26801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.379187][T26810] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 262.398481][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.485239][T26827] openvswitch: netlink: Message has 6 unknown bytes. [ 262.570333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.800783][T26867] loop0: detected capacity change from 0 to 512 [ 262.907396][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 262.907413][ T29] audit: type=1400 audit(524550.778:81148): avc: denied { unmount } for pid=7835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 262.980489][ T29] audit: type=1326 audit(524550.831:81149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26872 comm="syz.4.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 263.011479][ T29] audit: type=1326 audit(524550.866:81150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26872 comm="syz.4.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 263.034955][ T29] audit: type=1326 audit(524550.866:81151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26872 comm="syz.4.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 263.058435][ T29] audit: type=1326 audit(524550.866:81152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26872 comm="syz.4.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 263.122100][ T29] audit: type=1400 audit(524550.945:81153): avc: denied { relabelfrom } for pid=26880 comm="syz.3.10618" name="NETLINK" dev="sockfs" ino=82620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 263.146123][ T29] audit: type=1400 audit(524550.945:81154): avc: denied { relabelto } for pid=26880 comm="syz.3.10618" name="NETLINK" dev="sockfs" ino=82620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:syslogd_var_run_t:s0" [ 263.220391][ T29] audit: type=1400 audit(524551.014:81155): avc: denied { ioctl } for pid=26884 comm="syz.3.10620" path="socket:[82625]" dev="sockfs" ino=82625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.245371][ T29] audit: type=1400 audit(524551.033:81156): avc: denied { create } for pid=26886 comm="syz.3.10621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.265104][ T29] audit: type=1400 audit(524551.033:81157): avc: denied { setopt } for pid=26886 comm="syz.3.10621" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.313069][T26895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.587198][T26935] bond1 (unregistering): Released all slaves [ 263.692101][T26948] sctp: [Deprecated]: syz.2.10651 (pid 26948) Use of int in max_burst socket option deprecated. [ 263.692101][T26948] Use struct sctp_assoc_value instead [ 263.749757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.906616][T26968] geneve2: entered promiscuous mode [ 263.912045][T26968] geneve2: entered allmulticast mode [ 264.021137][T26982] loop4: detected capacity change from 0 to 512 [ 264.040522][T26982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 264.066842][T26982] EXT4-fs (loop4): orphan cleanup on readonly fs [ 264.082635][T26982] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.10668: iget: bad i_size value: 360287970189639690 [ 264.116388][T26982] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.10668: Bad quota inode: 15, type: 2 [ 264.131621][T26982] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 264.149830][T26982] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 264.157154][T26982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.194256][T26982] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 264.207402][T26982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 264.239783][T26982] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.10668: iget: bad i_size value: 360287970189639690 [ 264.266765][T26982] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.10668: Bad quota inode: 15, type: 2 [ 264.291275][T26982] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 264.312448][T27010] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 264.321905][T27010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 264.345101][T27010] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.10668: iget: bad i_size value: 360287970189639690 [ 264.361831][T27010] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.10668: Bad quota inode: 15, type: 2 [ 264.373790][T27010] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 264.407367][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.628132][T27046] geneve2: entered promiscuous mode [ 264.633373][T27046] geneve2: entered allmulticast mode [ 264.790012][T27061] IPv6: Can't replace route, no match found [ 264.831647][T27063] Q6\bY4 speed is unknown, defaulting to 1000 [ 264.871616][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.022697][T27076] syz_tun: left promiscuous mode [ 265.037228][T27076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.096918][T27083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.110104][T27085] __nla_validate_parse: 6 callbacks suppressed [ 265.110125][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10714'. [ 265.441177][T27114] 9pnet_fd: Insufficient options for proto=fd [ 265.676921][T27150] netlink: 'syz.0.10744': attribute type 3 has an invalid length. [ 265.696701][T27144] SELinux: failed to load policy [ 265.834542][T27167] loop0: detected capacity change from 0 to 1024 [ 265.853944][T27167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.879667][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.978838][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.065408][T27183] IPv6: Can't replace route, no match found [ 266.087346][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10759'. [ 266.163159][T27191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10762'. [ 266.192152][T27193] netlink: 'syz.2.10763': attribute type 4 has an invalid length. [ 266.490831][T27222] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10777'. [ 267.068147][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.085356][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.094554][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.146774][ T3408] hid_parser_main: 22 callbacks suppressed [ 267.146797][ T3408] hid-generic 0000:0D17:0000.000A: unknown main item tag 0x0 [ 267.160097][ T3408] hid-generic 0000:0D17:0000.000A: unknown main item tag 0x0 [ 267.172579][ T3408] hid-generic 0000:0D17:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 267.222161][T27294] loop9: detected capacity change from 0 to 7 [ 267.244248][T27294] Buffer I/O error on dev loop9, logical block 0, async page read [ 267.254773][T27294] Buffer I/O error on dev loop9, logical block 0, async page read [ 267.262656][T27294] loop9: unable to read partition table [ 267.269977][T27294] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 267.269977][T27294] ) failed (rc=-5) [ 267.333083][T27308] loop4: detected capacity change from 0 to 128 [ 267.693682][T27346] loop0: detected capacity change from 0 to 1024 [ 267.706383][T27346] EXT4-fs: Ignoring removed bh option [ 267.734651][T27346] EXT4-fs: inline encryption not supported [ 267.750560][T27346] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.770071][T27346] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.10834: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.785020][T27346] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.10834: lblock 0 mapped to illegal pblock 48 (length 1) [ 267.799707][T27346] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10834: Failed to acquire dquot type 0 [ 267.811270][T27346] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 267.837228][T27346] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.10834: mark_inode_dirty error [ 267.851751][T27346] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 267.862185][T27346] EXT4-fs (loop0): 1 orphan inode deleted [ 267.868447][T27346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.881128][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.922933][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 267.941239][T27361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27361 comm=syz.4.10839 [ 267.956444][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.967650][ T7835] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 268.010796][ T7835] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 268.020723][ T7835] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 268.144195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.247579][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 268.247649][ T29] audit: type=1326 audit(524555.782:81486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc51f8a5b27 code=0x7ffc0000 [ 268.283080][ T29] audit: type=1326 audit(524555.812:81487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc51f84ad69 code=0x7ffc0000 [ 268.306419][ T29] audit: type=1326 audit(524555.812:81488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc51f8a5b27 code=0x7ffc0000 [ 268.329865][ T29] audit: type=1326 audit(524555.812:81489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc51f84ad69 code=0x7ffc0000 [ 268.329900][ T29] audit: type=1326 audit(524555.812:81490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc51f8aeb69 code=0x7ffc0000 [ 268.329975][ T29] audit: type=1326 audit(524555.812:81491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc51f8a5b27 code=0x7ffc0000 [ 268.330008][ T29] audit: type=1326 audit(524555.812:81492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc51f84ad69 code=0x7ffc0000 [ 268.330039][ T29] audit: type=1326 audit(524555.812:81493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc51f8aeb69 code=0x7ffc0000 [ 268.338394][ T29] audit: type=1326 audit(524555.860:81494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc51f8a5b27 code=0x7ffc0000 [ 268.338442][ T29] audit: type=1326 audit(524555.860:81495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27362 comm="syz.3.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc51f84ad69 code=0x7ffc0000 [ 268.371893][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10849'. [ 268.395558][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.711558][T27428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10870'. [ 268.928440][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10883'. [ 268.954397][T27456] macsec1: entered promiscuous mode [ 268.959724][T27456] team0: entered promiscuous mode [ 268.965489][T27456] macsec1: entered allmulticast mode [ 268.970884][T27456] team0: entered allmulticast mode [ 268.989777][T27456] team0: Device macsec1 is already an upper device of the team interface [ 268.999857][T27456] team0: left allmulticast mode [ 269.004762][T27456] team0: left promiscuous mode [ 269.073909][T27464] netlink: 4 bytes leftover after parsing attributes in process `_@'. [ 269.113574][T27470] loop0: detected capacity change from 0 to 764 [ 269.129999][T27470] Symlink component flag not implemented [ 269.135697][T27470] Symlink component flag not implemented [ 269.141854][T27470] Symlink component flag not implemented (129) [ 269.148035][T27470] Symlink component flag not implemented (6) [ 269.155692][T27464] veth5: entered promiscuous mode [ 269.168693][T27470] rock: directory entry would overflow storage [ 269.174944][T27470] rock: sig=0x4f50, size=4, remaining=3 [ 269.180703][T27470] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 269.211040][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.014048][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10937'. [ 270.134249][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10943'. [ 270.135158][T27589] netlink: 'syz.4.10944': attribute type 1 has an invalid length. [ 270.172339][T27593] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 270.270802][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.465759][T27645] __nla_validate_parse: 1 callbacks suppressed [ 270.465778][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10972'. [ 270.606868][T27657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 270.705996][T27667] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.10982'. [ 270.793896][T27677] loop4: detected capacity change from 0 to 1024 [ 270.811900][T27677] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.823050][T27677] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.833750][T27677] JBD2: no valid journal superblock found [ 270.839559][T27677] EXT4-fs (loop4): Could not load journal inode [ 271.021033][T27703] netlink: 'syz.4.11000': attribute type 1 has an invalid length. [ 271.029046][T27703] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.11000'. [ 271.187555][T27715] SELinux: failed to load policy [ 271.335656][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.532421][T27773] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 271.562600][T27775] loop0: detected capacity change from 0 to 1024 [ 271.591496][T27777] 9pnet_fd: Insufficient options for proto=fd [ 271.593521][T27775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.615343][T27775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 271.642165][T27775] System zones: 0-1, 3-36 [ 271.647749][T27775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.702376][T27784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11037'. [ 271.752171][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.755679][T27795] netlink: 388 bytes leftover after parsing attributes in process `syz.1.11044'. [ 271.972722][T27830] pimreg: entered allmulticast mode [ 272.031616][T27838] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 272.108934][T27853] loop4: detected capacity change from 0 to 1024 [ 272.127044][T27853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.172158][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.194608][T27870] netlink: '': attribute type 1 has an invalid length. [ 272.301081][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.377255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.540671][T27924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 272.562901][T27924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11105'. [ 272.604159][T27932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11109'. [ 272.614363][T27932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11109'. [ 272.624753][T27932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11109'. [ 272.941724][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.949910][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.028757][T27995] wireguard0: entered promiscuous mode [ 273.034435][T27995] wireguard0: entered allmulticast mode [ 273.188766][T28023] program syz.4.11152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.325845][T28044] loop0: detected capacity change from 0 to 1024 [ 273.333049][T28044] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 273.342945][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 273.342962][ T29] audit: type=1326 audit(524560.785:81792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd8875b27 code=0x7ffc0000 [ 273.372636][ T29] audit: type=1326 audit(524560.785:81793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbd881ad69 code=0x7ffc0000 [ 273.387799][T28050] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 273.396293][ T29] audit: type=1326 audit(524560.785:81794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 273.399270][ T29] audit: type=1326 audit(524560.805:81795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd8875b27 code=0x7ffc0000 [ 273.434953][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.452830][ T29] audit: type=1326 audit(524560.805:81796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbd881ad69 code=0x7ffc0000 [ 273.483014][ T29] audit: type=1326 audit(524560.805:81797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 273.506575][ T29] audit: type=1326 audit(524560.805:81798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd8875b27 code=0x7ffc0000 [ 273.529952][ T29] audit: type=1326 audit(524560.805:81799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbd881ad69 code=0x7ffc0000 [ 273.553267][ T29] audit: type=1326 audit(524560.805:81800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcbd887eb69 code=0x7ffc0000 [ 273.576721][ T29] audit: type=1326 audit(524560.805:81801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.4.11156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd8875b27 code=0x7ffc0000 [ 273.607835][T28044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.641787][T28044] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.11162: missing EA_INODE flag [ 273.655059][T28044] EXT4-fs (loop0): Remounting filesystem read-only [ 273.689750][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.017624][T28103] SELinux: policydb version 0 does not match my version range 15-35 [ 274.026693][T28103] SELinux: failed to load policy [ 274.064133][T28108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.073720][T28108] bond2: entered allmulticast mode [ 274.083068][T28108] bond0: (slave bond2): Enslaving as an active interface with an up link [ 274.179943][T28128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.219231][T28124] Q6\bY4 speed is unknown, defaulting to 1000 [ 274.230578][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.245237][T28128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.309345][T28128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.374357][T28128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.391600][T28151] macvtap0: refused to change device tx_queue_len [ 274.416879][T28155] loop0: detected capacity change from 0 to 512 [ 274.425448][T28155] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.445304][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.471106][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.514190][T28163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.544803][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.570527][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.604983][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.772445][T28187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.827899][T28195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.869264][T28200] loop0: detected capacity change from 0 to 128 [ 275.262567][T28246] netlink: 'syz.0.11256': attribute type 1 has an invalid length. [ 275.391753][T28269] loop0: detected capacity change from 0 to 1024 [ 275.400708][T28269] EXT4-fs: inline encryption not supported [ 275.406712][T28269] EXT4-fs: Ignoring removed i_version option [ 275.436054][T28269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.462116][T28269] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 275.496802][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.516311][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.658871][T28302] __nla_validate_parse: 17 callbacks suppressed [ 275.658887][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11281'. [ 275.722469][T28305] Q6\bY4 speed is unknown, defaulting to 1000 [ 276.528556][T28367] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 276.559331][T28371] loop4: detected capacity change from 0 to 512 [ 276.565696][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.575140][T28371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.587441][T28371] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.11311: corrupted xattr entries [ 276.599968][T28371] EXT4-fs (loop4): Remounting filesystem read-only [ 276.606563][T28371] EXT4-fs (loop4): 1 truncate cleaned up [ 276.613495][T28371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.640262][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.723853][T28394] loop4: detected capacity change from 0 to 128 [ 276.908477][T28424] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 276.944564][T28431] netlink: 'syz.4.11339': attribute type 142 has an invalid length. [ 277.069871][T28453] netlink: 'syz.0.11351': attribute type 6 has an invalid length. [ 277.084327][T28455] netlink: 'syz.4.11352': attribute type 21 has an invalid length. [ 277.093362][T28455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11352'. [ 277.102606][T28455] netlink: 'syz.4.11352': attribute type 1 has an invalid length. [ 277.156210][T28465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11355'. [ 277.165598][T28465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11355'. [ 277.174829][T28465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11355'. [ 277.212355][T28467] loop4: detected capacity change from 0 to 128 [ 277.231812][T28467] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 277.240303][T28467] FAT-fs (loop4): Filesystem has been set read-only [ 277.416192][T28501] netlink: 'syz.1.11375': attribute type 1 has an invalid length. [ 277.602380][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.691639][T28553] 9pnet: p9_errstr2errno: server reported unknown error [ 277.716318][T28558] loop4: detected capacity change from 0 to 1024 [ 277.733070][T28560] batadv_slave_1: entered promiscuous mode [ 277.743049][T28559] batadv_slave_1: left promiscuous mode [ 277.744277][T28558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.828464][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.923303][T28585] Falling back ldisc for ttyS3. [ 277.970263][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11418'. [ 277.996742][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11418'. [ 278.009309][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11418'. [ 278.019075][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11418'. [ 278.031445][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11418'. [ 278.083888][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.092038][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.386584][T28640] program syz.0.11439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.396852][T28640] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.514034][T28661] loop4: detected capacity change from 0 to 512 [ 278.520995][T28661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.532296][T28661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2000c098, mo2=0002] [ 278.540436][T28661] System zones: 1-12 [ 278.545208][T28661] EXT4-fs (loop4): 1 truncate cleaned up [ 278.551318][T28661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.579555][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.590961][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 278.590975][ T29] audit: type=1326 audit(524566.025:82118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.11450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 278.621163][ T29] audit: type=1326 audit(524566.025:82119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.11450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 278.644614][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 278.651739][ T29] audit: type=1326 audit(524566.025:82120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.11450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 278.675095][ T29] audit: type=1326 audit(524566.035:82121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28663 comm="syz.0.11450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015d86eb69 code=0x7ffc0000 [ 278.733670][T28670] program syz.4.11453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.746381][T28670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.806360][T28684] netlink: 'syz.2.11460': attribute type 1 has an invalid length. [ 278.822715][ T29] audit: type=1326 audit(524566.255:82122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28685 comm="syz.1.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 278.847655][ T29] audit: type=1326 audit(524566.255:82123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28685 comm="syz.1.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 278.871114][ T29] audit: type=1326 audit(524566.285:82124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28685 comm="syz.1.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 278.894396][ T29] audit: type=1326 audit(524566.285:82125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28685 comm="syz.1.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 278.900684][T28688] dummy0: entered promiscuous mode [ 278.917777][ T29] audit: type=1326 audit(524566.285:82126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28685 comm="syz.1.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b9aeeb69 code=0x7ffc0000 [ 278.924899][T28688] dummy0: left promiscuous mode [ 278.988190][ T29] audit: type=1400 audit(524566.424:82127): avc: denied { create } for pid=28693 comm="syz.2.11465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 279.149107][T28705] netlink: 'syz.4.11469': attribute type 3 has an invalid length. [ 279.241172][T28712] loop4: detected capacity change from 0 to 512 [ 279.258871][T28712] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 279.283927][T28712] System zones: 0-2, 18-18, 34-35 [ 279.299264][T28712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.382000][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.415195][T28733] loop4: detected capacity change from 0 to 512 [ 279.416965][T28731] sctp: [Deprecated]: syz.1.11490 (pid 28731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.416965][T28731] Use struct sctp_sack_info instead [ 279.423857][T28729] dummy0: entered promiscuous mode [ 279.446730][T28733] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.465194][T28735] netlink: 'syz.3.11482': attribute type 1 has an invalid length. [ 279.480298][T28729] dummy0: left promiscuous mode [ 279.686430][ C0] net_ratelimit: 1 callbacks suppressed [ 279.686449][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 279.887559][T28776] dummy0: entered promiscuous mode [ 279.894670][T28776] dummy0: left promiscuous mode [ 279.973559][T28783] Q6\bY4 speed is unknown, defaulting to 1000 [ 280.019869][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.093928][T28802] sctp: [Deprecated]: syz.4.11512 (pid 28802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.093928][T28802] Use struct sctp_sack_info instead [ 280.148272][T28806] bond2 (unregistering): Released all slaves [ 280.313467][T28838] loop4: detected capacity change from 0 to 1024 [ 280.329569][T28841] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 280.337897][T28841] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 280.341101][T28838] EXT4-fs: Ignoring removed orlov option [ 280.359704][T28838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.613078][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.672447][T28850] Q6\bY4 speed is unknown, defaulting to 1000 [ 280.727866][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.774187][T28856] __nla_validate_parse: 12 callbacks suppressed [ 280.774203][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11534'. [ 280.789575][T28856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11534'. [ 280.798693][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11534'. [ 280.808177][T28856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11534'. [ 280.817405][T28856] netlink: 'syz.1.11534': attribute type 6 has an invalid length. [ 280.901076][T28863] geneve2: entered promiscuous mode [ 280.906351][T28863] geneve2: entered allmulticast mode [ 280.952380][T28869] loop4: detected capacity change from 0 to 1024 [ 280.971098][T28869] EXT4-fs: Ignoring removed bh option [ 280.978919][T28871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11543'. [ 280.984637][T28869] EXT4-fs: inline encryption not supported [ 280.988035][T28871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11543'. [ 281.003191][T28871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11543'. [ 281.007244][T28869] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.013174][T28871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11543'. [ 281.041902][T28869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 281.055164][T28869] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.11542: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.070469][T28869] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.11542: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.084981][T28869] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11542: Failed to acquire dquot type 0 [ 281.096895][T28869] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 281.107504][T28869] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.11542: mark_inode_dirty error [ 281.121335][T28869] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 281.133048][T28869] EXT4-fs (loop4): 1 orphan inode deleted [ 281.139374][T28869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.152069][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.173227][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 281.206548][T28869] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.11542: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.258731][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.379615][T28892] Q6\bY4 speed is unknown, defaulting to 1000 [ 281.455022][T28907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11560'. [ 281.479350][T28911] loop0: detected capacity change from 0 to 1024 [ 281.496246][T28911] EXT4-fs: Ignoring removed bh option [ 281.507445][T28911] EXT4-fs: inline encryption not supported [ 281.523935][T28911] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.595073][T28911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 281.639100][T28926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11567'. [ 281.650439][T28911] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.11559: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.686176][T28926] netlink: 'syz.2.11567': attribute type 6 has an invalid length. [ 281.704360][T28911] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.11559: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.755707][T28911] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.11559: Failed to acquire dquot type 0 [ 281.779080][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.801438][T28911] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 281.815590][T28911] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.11559: mark_inode_dirty error [ 281.837437][T28911] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 281.857920][T28911] EXT4-fs (loop0): 1 orphan inode deleted [ 281.876601][ T3318] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.894399][T28911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.910436][ T3318] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 281.942970][T28911] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.11559: lblock 0 mapped to illegal pblock 48 (length 1) [ 282.022904][ T7835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.041333][T28952] loop4: detected capacity change from 0 to 1024 [ 282.086910][T28952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.114056][T28963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.133587][T28966] netlink: 'syz.3.11586': attribute type 21 has an invalid length. [ 282.155151][T20534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.195910][T20534] ================================================================== [ 282.204060][T20534] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 282.211638][T20534] [ 282.213963][T20534] read-write to 0xffff888237d25ea8 of 1 bytes by task 28916 on cpu 1: [ 282.222118][T20534] folio_add_lru+0xa5/0x1f0 [ 282.226642][T20534] shmem_get_folio_gfp+0x7ab/0xd60 [ 282.231770][T20534] shmem_write_begin+0xa8/0x190 [ 282.236632][T20534] generic_perform_write+0x184/0x490 [ 282.241927][T20534] shmem_file_write_iter+0xc5/0xf0 [ 282.247135][T20534] __kernel_write_iter+0x256/0x4c0 [ 282.252255][T20534] dump_user_range+0x61e/0x8f0 [ 282.257027][T20534] elf_core_dump+0x1e00/0x1f90 [ 282.261816][T20534] coredump_write+0xb0a/0xe30 [ 282.266502][T20534] vfs_coredump+0x142f/0x20c0 [ 282.271189][T20534] get_signal+0xd85/0xf70 [ 282.275536][T20534] arch_do_signal_or_restart+0x96/0x480 [ 282.281088][T20534] irqentry_exit_to_user_mode+0x5e/0xa0 [ 282.286639][T20534] irqentry_exit+0x12/0x50 [ 282.291058][T20534] asm_exc_page_fault+0x26/0x30 [ 282.295917][T20534] [ 282.298241][T20534] read to 0xffff888237d25ea8 of 1 bytes by task 20534 on cpu 0: [ 282.305958][T20534] __lru_add_drain_all+0x12b/0x3f0 [ 282.311076][T20534] lru_add_drain_all+0x10/0x20 [ 282.315846][T20534] invalidate_bdev+0x47/0x70 [ 282.320445][T20534] ext4_put_super+0x624/0x7d0 [ 282.325151][T20534] generic_shutdown_super+0xe3/0x210 [ 282.330455][T20534] kill_block_super+0x2a/0x70 [ 282.335142][T20534] ext4_kill_sb+0x42/0x80 [ 282.339486][T20534] deactivate_locked_super+0x75/0x1c0 [ 282.344879][T20534] deactivate_super+0x97/0xa0 [ 282.349574][T20534] cleanup_mnt+0x269/0x2e0 [ 282.354009][T20534] __cleanup_mnt+0x19/0x20 [ 282.358442][T20534] task_work_run+0x131/0x1a0 [ 282.363049][T20534] exit_to_user_mode_loop+0xe4/0x100 [ 282.368350][T20534] do_syscall_64+0x1d6/0x200 [ 282.372963][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.378874][T20534] [ 282.381200][T20534] value changed: 0x0f -> 0x10 [ 282.385879][T20534] [ 282.388202][T20534] Reported by Kernel Concurrency Sanitizer on: [ 282.394365][T20534] CPU: 0 UID: 0 PID: 20534 Comm: syz-executor Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 282.406696][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.416755][T20534] ================================================================== [ 282.481833][T28963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.531350][T28963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.593409][T28963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.670494][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.682411][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.693650][ T54] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.705176][ T54] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.810104][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 283.130783][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.851048][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 283.851460][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.501874][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.891847][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 285.773209][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.932585][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available crond[3091]: time disparity of 8691 minutes detected [ 286.973265][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.013879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.974810][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.064515][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.095096][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.255436][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.145654][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 291.536313][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.176232][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available