last executing test programs: 1.479208626s ago: executing program 2 (id=15246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.450519498s ago: executing program 2 (id=15248): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc0006}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 1.401051942s ago: executing program 2 (id=15256): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 914.083029ms ago: executing program 3 (id=15275): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) umount2(&(0x7f00000006c0)='./file0\x00', 0x3) 823.542396ms ago: executing program 0 (id=15279): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 805.682978ms ago: executing program 3 (id=15280): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) 729.008043ms ago: executing program 0 (id=15282): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xfff, 0xa4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8d2, 0x2, @perf_config_ext={0x6, 0x2}, 0x80, 0x0, 0x0, 0x7, 0x5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) 670.961128ms ago: executing program 3 (id=15285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = getpid() syz_pidfd_open(r1, 0x0) 646.96957ms ago: executing program 3 (id=15286): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x95, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 548.921548ms ago: executing program 0 (id=15289): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_getres(0x7, 0x0) 525.518349ms ago: executing program 3 (id=15290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0xfffffff7) 499.419851ms ago: executing program 4 (id=15292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00') 422.230257ms ago: executing program 2 (id=15294): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 418.083908ms ago: executing program 0 (id=15295): r0 = memfd_create(&(0x7f0000000580)='\x80\x105\xfb\xf7u\x83%:r\xc2\xb9\xce\x1d\xe1B>.\xff\x7f\x00\x00\x00\x00\x00\x00,\xc7\x96\x1f\xcda\x9b\x11X\x0e\xa1\xcf\x1a?\x00\x95y\x1d\x80\x17\x8f\xbbluw\xa7(\x9e\xa0\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xb7\x8d\x8b\xf5\x18\xac\x8e^\xd7J\xdd#{\x00\xae\x84\x18>\xebJ\xe3y\xd0\xd7\xc97\x873}\xf6\xa05\xa8s\t\x84\x00\xfe&\xedR\xdak\xc3\xec\xaa\r\xc7\xa0\xdaA\xf8G\xa4\xba\xa3\xcbh\x05\x0f\x1e\xa1*/I2N\xee+<`\xa5=\xe2\xe7\xdf\xd5\x9c\x13\xd6\xb0Z\x10\xa0\x93\xdd\xcd]\x01\xfe\xce\xa3\xb2\xc3\x10\xa4x@|\\@\x1c7\xcf{\xcc\xdf\xa1\xb4\xfb%\x19\xe2\xc1\xcd\xbf{3\x82\xde\xe9\x8f8\xb3\x88j\x9c\xee\x88A\x182@P\xe63\xc2s\xd0\xc8\xe2\\\xa3\xd4Q\xc4{\x00\x00\x00\x00\x00\"G\xee\x10\x14pp+S\x00\xac\xea|\x17\xe5\xf0\x03\xcdt\xee\xed\x1a&F\xb2.bWM9\x11\\3\x8b2OM\xd5\x05II\x9d\xad=Nh\xb3\x84t\xc7Qh\xcfU\a\x12\xa8\x1e7\xc1)\"%\xf9\xad\xfd\xd5\xd4\x1b\xc5\xb7\xd5?\xb5?\xa8\xc4\x9d\xc5\xb7=f\xf2', 0x0) ftruncate(r0, 0xffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) lseek(r0, 0x0, 0x3) 370.107071ms ago: executing program 2 (id=15296): socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e21, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xf}, 0x0) 334.162934ms ago: executing program 0 (id=15297): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0xa00, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1, &(0x7f0000000540)=""/27, 0x1b}}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[], 0x20000127) 312.051876ms ago: executing program 3 (id=15298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="88", 0x1c}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 298.120787ms ago: executing program 1 (id=15299): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000080), 0x18) 257.2227ms ago: executing program 1 (id=15300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) 256.87694ms ago: executing program 4 (id=15301): r0 = syz_io_uring_setup(0x46bb, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@sco={0x1f, @none}, 0x80, 0x0}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 218.810413ms ago: executing program 2 (id=15302): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 206.151864ms ago: executing program 1 (id=15303): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) close(0x3) 174.219036ms ago: executing program 1 (id=15304): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1b97a3c4bee1d41f9d19c1bead884df1dd48f55ec4fbd64baa8162edd615b8e6c00c007e83d7e32325636e5924025c21ed78cca7cdd7f03a70835b5dfe6c65df90aa3c27132c0c2783930157d28bbb59f3135e2efea35d33564935c925c83fb626db03c08a9e248fd19728949dacfdcd371d7e366450170dfeefa372171b2f02c9e4003d44586466b3bd890b1e9fc9b63478545b056b67ba7e58448525f84cf96817447f9461fddd2bd67285915b288ede158a60c9e119df2d0c57da6f2489161074839e100e105ebaa1bffacbbefe01535301902145cb9fa102a9285affa83fd14a5c0e7a7ee9eb576e88b3f673c315fb62683bd7ab11ac39260a21fa57844e"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x200, 0x2, 0x4, 0x1d, 0xf, 0x5}}]}}]}, 0x148}}, 0x0) 157.950728ms ago: executing program 4 (id=15305): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) 134.755339ms ago: executing program 4 (id=15306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) 125.48034ms ago: executing program 0 (id=15307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 121.81806ms ago: executing program 1 (id=15308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 115.291911ms ago: executing program 4 (id=15309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) 22.984378ms ago: executing program 1 (id=15310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 0s ago: executing program 4 (id=15311): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f249", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): rejected, failed to enable media [ 244.029582][ T781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13257'. [ 244.088983][ T789] Invalid ELF header magic: != ELF [ 244.178184][ T811] loop2: detected capacity change from 0 to 512 [ 244.209890][ T811] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.243458][ T811] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.13269: corrupted inode contents [ 244.260876][ T823] Invalid ELF header magic: != ELF [ 244.266184][ T811] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.13269: mark_inode_dirty error [ 244.278085][ T811] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.13269: corrupted inode contents [ 244.294260][ T811] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.13269: mark_inode_dirty error [ 244.362880][ T833] netlink: 236 bytes leftover after parsing attributes in process `syz.1.13280'. [ 244.443681][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13292'. [ 244.460345][ T857] geneve2: entered promiscuous mode [ 244.488283][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13284'. [ 244.541081][ T872] netlink: 'syz.4.13300': attribute type 13 has an invalid length. [ 244.611791][ T884] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 244.618335][ T884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.626006][ T884] vhci_hcd vhci_hcd.0: Device attached [ 244.641544][ T894] ebt_among: dst integrity fail: 101 [ 244.661851][ T889] vhci_hcd: connection closed [ 244.664774][T24922] vhci_hcd: stop threads [ 244.673829][T24922] vhci_hcd: release socket [ 244.678283][T24922] vhci_hcd: disconnect device [ 244.851800][ T928] tap0: tun_chr_ioctl cmd 1074025677 [ 244.864142][ T928] tap0: linktype set to 774 [ 244.890902][ T930] gre0 speed is unknown, defaulting to 1000 [ 244.951921][ T930] caif0 speed is unknown, defaulting to 1000 [ 245.045829][ T35] IPVS: starting estimator thread 0... [ 245.134631][ T956] IPVS: using max 2784 ests per chain, 139200 per kthread [ 245.152044][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 245.152056][ T29] audit: type=1400 audit(2000000418.561:5286): avc: denied { lock } for pid=968 comm="syz.1.13344" path="socket:[101539]" dev="sockfs" ino=101539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 245.207332][ T29] audit: type=1400 audit(2000000418.621:5287): avc: denied { connect } for pid=971 comm="syz.4.13345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.352148][ T987] netlink: 'syz.0.13350': attribute type 46 has an invalid length. [ 245.474535][ T29] audit: type=1400 audit(2000000418.891:5288): avc: denied { read write } for pid=1006 comm="syz.3.13359" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 245.500313][ T1007] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 245.516415][ T29] audit: type=1400 audit(2000000418.911:5289): avc: denied { open } for pid=1006 comm="syz.3.13359" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 245.981922][ T29] audit: type=1400 audit(2000000419.391:5290): avc: denied { map } for pid=1028 comm="syz.3.13368" path="socket:[102617]" dev="sockfs" ino=102617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.270939][ T1083] geneve2: entered promiscuous mode [ 246.296393][ T1080] loop3: detected capacity change from 0 to 512 [ 246.312188][ T1080] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.322373][ T1090] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 246.344376][ T1080] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.13394: iget: bad i_size value: -6917529027641081756 [ 246.391452][ T1080] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.13394: couldn't read orphan inode 17 (err -117) [ 246.529237][ T29] audit: type=1326 audit(2000000419.941:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.2.13411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b816adef9 code=0x7ffc0000 [ 246.585472][ T29] audit: type=1326 audit(2000000419.961:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.2.13411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f0b816adef9 code=0x7ffc0000 [ 246.609840][ T29] audit: type=1326 audit(2000000419.961:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.2.13411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b816adef9 code=0x7ffc0000 [ 246.633359][ T29] audit: type=1326 audit(2000000419.961:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="syz.2.13411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b816adef9 code=0x7ffc0000 [ 246.661608][ T1128] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 246.841329][ T29] audit: type=1400 audit(2000000420.251:5295): avc: denied { ioctl } for pid=1161 comm="syz.1.13433" path="socket:[102799]" dev="sockfs" ino=102799 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 246.844512][ T1159] Unsupported ieee802154 address type: 0 [ 246.998189][ T1185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 247.004750][ T1185] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.013035][ T1185] vhci_hcd vhci_hcd.0: Device attached [ 247.025574][ T1191] vhci_hcd: connection closed [ 247.032683][T24922] vhci_hcd: stop threads [ 247.041661][T24922] vhci_hcd: release socket [ 247.046169][T24922] vhci_hcd: disconnect device [ 247.373455][ T1253] loop3: detected capacity change from 0 to 2048 [ 247.380364][ T1253] EXT4-fs: Ignoring removed orlov option [ 247.424016][ T1253] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.456412][ T1265] netlink: 'syz.2.13477': attribute type 1 has an invalid length. [ 247.465281][ T1265] netlink: 'syz.2.13477': attribute type 2 has an invalid length. [ 247.505513][ T1253] EXT4-fs (loop3): Remounting filesystem read-only [ 247.545982][ T1275] syz.4.13482[1275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.546080][ T1275] syz.4.13482[1275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.682201][ T1303] __nla_validate_parse: 11 callbacks suppressed [ 247.682215][ T1303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13494'. [ 247.959447][ T1335] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 248.013075][ T1342] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13512'. [ 248.040313][ T1346] dvmrp0: entered allmulticast mode [ 248.052927][ T1345] dvmrp0: left allmulticast mode [ 248.074706][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.086887][ T1344] gre0 speed is unknown, defaulting to 1000 [ 248.092908][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.192984][ T1344] caif0 speed is unknown, defaulting to 1000 [ 248.226303][ T1360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13521'. [ 248.431584][ T1390] netlink: 277 bytes leftover after parsing attributes in process `syz.2.13534'. [ 248.617266][ T1417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13546'. [ 248.661126][ T1417] netlink: 'syz.3.13546': attribute type 1 has an invalid length. [ 248.778696][ T1445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13572'. [ 249.112287][T26359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.217620][T26359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.269182][T26359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.327332][T26359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.401649][T26359] bridge_slave_1: left allmulticast mode [ 249.407363][T26359] bridge_slave_1: left promiscuous mode [ 249.412979][T26359] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.438856][T26359] bridge_slave_0: left allmulticast mode [ 249.444804][T26359] bridge_slave_0: left promiscuous mode [ 249.450460][T26359] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.588668][T26359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.603105][T26359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.613141][T26359] bond0 (unregistering): Released all slaves [ 249.655672][T26359] tipc: Left network mode [ 249.724766][T26359] hsr_slave_0: left promiscuous mode [ 249.730368][T26359] hsr_slave_1: left promiscuous mode [ 249.737042][T26359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.744723][T26359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.757582][T26359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.765000][T26359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.775885][T26359] veth1_macvtap: left promiscuous mode [ 249.781355][T26359] veth0_macvtap: left promiscuous mode [ 249.787020][T26359] veth1_vlan: left promiscuous mode [ 249.792307][T26359] veth0_vlan: left promiscuous mode [ 249.888440][T26359] team0 (unregistering): Port device team_slave_1 removed [ 249.900044][T26359] team0 (unregistering): Port device team_slave_0 removed [ 250.247648][T26359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.317071][T26359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.336167][ T1483] gre0 speed is unknown, defaulting to 1000 [ 250.368899][ T1483] caif0 speed is unknown, defaulting to 1000 [ 250.379071][T26359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.451590][T26359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.482772][ T1483] chnl_net:caif_netlink_parms(): no params data found [ 250.525601][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.532696][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.540489][ T1483] bridge_slave_0: entered allmulticast mode [ 250.547197][ T1483] bridge_slave_0: entered promiscuous mode [ 250.556093][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.563228][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.570990][ T1483] bridge_slave_1: entered allmulticast mode [ 250.577369][ T1483] bridge_slave_1: entered promiscuous mode [ 250.597406][ T1483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.608970][T26359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.621217][ T1483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.640797][ T1483] team0: Port device team_slave_0 added [ 250.647332][ T1483] team0: Port device team_slave_1 added [ 250.664138][ T1483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.671148][ T1483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.697886][ T1483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.711580][T26359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.723149][ T1483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.730710][ T1483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.757277][ T1483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.783142][ T1483] hsr_slave_0: entered promiscuous mode [ 250.790084][ T1483] hsr_slave_1: entered promiscuous mode [ 250.796600][ T1483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.804179][ T1483] Cannot create hsr debugfs directory [ 250.812706][T26359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.876000][T26359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.939321][T26359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.998727][T26359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.097451][T26359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.117390][ T1503] gre0 speed is unknown, defaulting to 1000 [ 251.161311][ T1483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.169955][ T1503] caif0 speed is unknown, defaulting to 1000 [ 251.197955][T26359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.216183][ T1483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.227038][ T1483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.235743][ T1483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.291139][T26359] bridge_slave_0: left allmulticast mode [ 251.297012][T26359] bridge_slave_0: left promiscuous mode [ 251.302670][T26359] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.312506][T26359] bridge_slave_0: left allmulticast mode [ 251.318956][T26359] bridge_slave_0: left promiscuous mode [ 251.324672][T26359] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.334196][T26359] bridge_slave_1: left allmulticast mode [ 251.339850][T26359] bridge_slave_1: left promiscuous mode [ 251.346257][T26359] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.355270][T26359] bridge_slave_0: left allmulticast mode [ 251.360965][T26359] bridge_slave_0: left promiscuous mode [ 251.366868][T26359] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.454063][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13576'. [ 251.598989][T26359] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 251.615129][T26359] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 251.836398][T26359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.846899][T26359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.866650][T26359] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 251.877099][T26359] bond0 (unregistering): Released all slaves [ 251.897314][T26359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.916268][T26359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.935639][T26359] bond0 (unregistering): Released all slaves [ 251.957179][T26359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.967595][T26359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.977780][T26359] bond0 (unregistering): Released all slaves [ 252.037351][T26359] tipc: Left network mode [ 252.057217][ T1503] chnl_net:caif_netlink_parms(): no params data found [ 252.116113][ T1483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.140771][ T1518] gre0 speed is unknown, defaulting to 1000 [ 252.151225][ T1483] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.191418][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.198647][ T1503] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.208139][T26359] IPVS: stopping master sync thread 32308 ... [ 252.222264][ T1503] bridge_slave_0: entered allmulticast mode [ 252.228915][ T1503] bridge_slave_0: entered promiscuous mode [ 252.251637][ T1519] gre0 speed is unknown, defaulting to 1000 [ 252.261683][ T1518] caif0 speed is unknown, defaulting to 1000 [ 252.264081][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.274818][ T1503] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.292110][ T1503] bridge_slave_1: entered allmulticast mode [ 252.316257][ T1503] bridge_slave_1: entered promiscuous mode [ 252.331746][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.338855][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.348446][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.355513][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.367945][ T1519] caif0 speed is unknown, defaulting to 1000 [ 252.434820][ T1503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.452920][ T1483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.463389][ T1483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.497262][ T1503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.637312][ T1503] team0: Port device team_slave_0 added [ 252.645531][ T1503] team0: Port device team_slave_1 added [ 252.676201][ T1483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.690039][ T1518] chnl_net:caif_netlink_parms(): no params data found [ 252.701516][T26359] hsr_slave_0: left promiscuous mode [ 252.708686][T26359] hsr_slave_1: left promiscuous mode [ 252.716348][T26359] hsr_slave_0: left promiscuous mode [ 252.726378][T26359] hsr_slave_1: left promiscuous mode [ 252.734661][T26359] hsr_slave_0: left promiscuous mode [ 252.741226][T26359] hsr_slave_1: left promiscuous mode [ 252.746995][T26359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.754463][T26359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.763001][T26359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.771084][T26359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.787059][T26359] veth1_macvtap: left promiscuous mode [ 252.792536][T26359] veth0_macvtap: left promiscuous mode [ 252.798683][T26359] veth1_vlan: left promiscuous mode [ 252.803911][T26359] veth0_vlan: left promiscuous mode [ 252.809898][T26359] veth1_macvtap: left promiscuous mode [ 252.815493][T26359] veth1_vlan: left promiscuous mode [ 252.820702][T26359] veth0_vlan: left promiscuous mode [ 252.827231][T26359] veth1_macvtap: left promiscuous mode [ 252.832764][T26359] veth0_macvtap: left promiscuous mode [ 252.838718][T26359] veth1_vlan: left promiscuous mode [ 252.844020][T26359] veth0_vlan: left promiscuous mode [ 253.019475][T26359] team0 (unregistering): Port device team_slave_1 removed [ 253.031820][T26359] team0 (unregistering): Port device team_slave_0 removed [ 253.060398][ T3269] smc: removing ib device syz1 [ 253.128362][T26359] team0 (unregistering): Port device team_slave_1 removed [ 253.141624][T26359] team0 (unregistering): Port device team_slave_0 removed [ 253.259161][T26359] team0 (unregistering): Port device team_slave_1 removed [ 253.279279][T26359] team0 (unregistering): Port device team_slave_0 removed [ 253.298801][ T1585] netlink: 'syz.0.13593': attribute type 3 has an invalid length. [ 253.383193][ T1589] block device autoloading is deprecated and will be removed. [ 253.433561][ T1519] chnl_net:caif_netlink_parms(): no params data found [ 253.446664][ T1503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.453638][ T1503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.479664][ T1503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.534904][ T1503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.541861][ T1503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.567884][ T1503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.616811][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.623917][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.638453][ T1518] bridge_slave_0: entered allmulticast mode [ 253.650243][ T1518] bridge_slave_0: entered promiscuous mode [ 253.658435][ T1518] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.665589][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.680396][ T1518] bridge_slave_1: entered allmulticast mode [ 253.692056][ T1518] bridge_slave_1: entered promiscuous mode [ 253.710545][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.717684][ T1519] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.727316][ T1519] bridge_slave_0: entered allmulticast mode [ 253.741284][ T1519] bridge_slave_0: entered promiscuous mode [ 253.767557][ T1519] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.774670][ T1519] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.781963][ T1519] bridge_slave_1: entered allmulticast mode [ 253.798069][ T1519] bridge_slave_1: entered promiscuous mode [ 253.832798][ T1503] hsr_slave_0: entered promiscuous mode [ 253.839427][ T1503] hsr_slave_1: entered promiscuous mode [ 253.861547][ T1616] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 253.887238][ T1616] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.905201][ T1518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.917953][ T1518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.938555][ T1519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.963463][ T1519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.980653][ T1518] team0: Port device team_slave_0 added [ 253.987112][ T1518] team0: Port device team_slave_1 added [ 254.004248][ T1483] veth0_vlan: entered promiscuous mode [ 254.022384][ T1519] team0: Port device team_slave_0 added [ 254.030046][ T1519] team0: Port device team_slave_1 added [ 254.046492][ T1483] veth1_vlan: entered promiscuous mode [ 254.060257][ T1518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.067420][ T1518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.093747][ T1518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.118350][ T1519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.125388][ T1519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.151299][ T1519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.163058][ T1518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.170107][ T1518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.196087][ T1518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.214801][ T1519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.221750][ T1519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.247789][ T1519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.297064][ T1519] hsr_slave_0: entered promiscuous mode [ 254.303223][ T1519] hsr_slave_1: entered promiscuous mode [ 254.309530][ T1519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.318871][ T1519] Cannot create hsr debugfs directory [ 254.326536][ T1518] hsr_slave_0: entered promiscuous mode [ 254.332884][ T1518] hsr_slave_1: entered promiscuous mode [ 254.340419][ T1518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.348080][ T1518] Cannot create hsr debugfs directory [ 254.373536][ T1483] veth0_macvtap: entered promiscuous mode [ 254.402603][ T1483] veth1_macvtap: entered promiscuous mode [ 254.439019][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.449552][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.459400][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.469854][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.479681][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.490235][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.502801][ T1483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.550694][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.561264][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.571141][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.581727][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.591527][ T1483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.602228][ T1483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.614944][ T1483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.676548][ T1483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.685379][ T1483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.694101][ T1483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.702857][ T1483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.749378][ T1503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.765840][ T1503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.776078][ T1503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.795900][ T1503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.863743][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 254.863817][ T29] audit: type=1326 audit(2000000428.271:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.4.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 254.878087][ T1503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.917870][ T1640] loop4: detected capacity change from 0 to 164 [ 254.926289][ T29] audit: type=1326 audit(2000000428.311:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.4.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 254.950147][ T29] audit: type=1326 audit(2000000428.311:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.4.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 254.973924][ T29] audit: type=1326 audit(2000000428.311:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.4.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 255.002229][ T1640] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.017519][ T1503] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.049408][ T1518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.068463][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.075560][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.090032][ T1640] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 255.120578][ T1518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.135909][ T1503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.146296][ T1503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.162436][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.169592][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.195440][ T1652] loop4: detected capacity change from 0 to 1764 [ 255.215717][ T1518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.224788][ T1518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.254657][ T1656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13617'. [ 255.298336][ T1518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.334093][ T1518] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.355192][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.362296][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.387014][ T1519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.407677][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.414902][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.431695][ T1519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.452448][ T1503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.464901][ T1519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.477210][ T1519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.576264][ T1519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.607490][ T1692] loop4: detected capacity change from 0 to 512 [ 255.635524][ T1519] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.656254][T26359] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.663338][T26359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.682884][ T1692] EXT4-fs mount: 38 callbacks suppressed [ 255.682900][ T1692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 255.702133][T26359] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.709240][T26359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.731323][ T1692] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.748813][ T1518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.778044][ T1503] veth0_vlan: entered promiscuous mode [ 255.799227][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 255.839632][ T1503] veth1_vlan: entered promiscuous mode [ 255.859277][ T29] audit: type=1400 audit(2000000429.271:5343): avc: denied { map } for pid=1710 comm="syz.4.13636" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 255.879212][ T1503] veth0_macvtap: entered promiscuous mode [ 255.922909][ T1503] veth1_macvtap: entered promiscuous mode [ 255.948246][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.958774][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.968627][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.979123][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.989083][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.999671][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.009564][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.019990][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.045154][ T1503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.054368][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.064938][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.074890][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.085449][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.095283][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.105768][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.115602][ T1503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.126675][ T1503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.138979][ T1503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.147735][ T1503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.156475][ T1503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.165212][ T1503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.173911][ T1503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.233505][ T1518] veth0_vlan: entered promiscuous mode [ 256.249570][ T1519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.265340][ T1518] veth1_vlan: entered promiscuous mode [ 256.301012][ T1518] veth0_macvtap: entered promiscuous mode [ 256.307841][ T29] audit: type=1326 audit(2000000429.721:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1740 comm="syz.0.13643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 256.313684][ T1518] veth1_macvtap: entered promiscuous mode [ 256.353520][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.364256][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.374186][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.384640][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.394620][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.405144][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.414970][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.425456][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.427375][ T29] audit: type=1326 audit(2000000429.741:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1740 comm="syz.0.13643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 256.435265][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.458738][ T29] audit: type=1326 audit(2000000429.741:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1740 comm="syz.0.13643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 256.469132][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.476454][ T1518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.492644][ T29] audit: type=1326 audit(2000000429.741:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1740 comm="syz.0.13643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 256.562448][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.573127][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.583180][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.593919][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.603976][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.614707][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.624842][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.635460][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.645291][ T1518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.655792][ T1518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.668267][ T1518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.676988][ T1518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.685762][ T1518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.694527][ T1518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.703227][ T1518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.810258][ T1519] veth0_vlan: entered promiscuous mode [ 256.831239][ T1519] veth1_vlan: entered promiscuous mode [ 256.838552][ T29] audit: type=1326 audit(2000000430.251:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1773 comm="syz.1.13656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 256.862112][ T1519] veth0_macvtap: entered promiscuous mode [ 256.863740][ T1519] veth1_macvtap: entered promiscuous mode [ 256.897213][ T1783] pimreg: entered allmulticast mode [ 256.914632][ T1783] dvmrp5: entered allmulticast mode [ 256.928478][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.939102][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.949059][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.959652][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.969483][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.980032][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.989943][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.000465][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.010406][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.020950][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.030965][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.041616][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.054182][ T1519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.062830][ T1783] pimreg: left allmulticast mode [ 257.068071][ T1783] dvmrp5: left allmulticast mode [ 257.106785][ T1796] loop4: detected capacity change from 0 to 1024 [ 257.124823][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.135335][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.145442][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.155963][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.166004][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.176509][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.186347][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.196785][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.206609][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.217034][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.225265][ T1796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.226917][ T1519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.249848][ T1519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.262237][ T1519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.273427][ T1519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.282262][ T1519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.291244][ T1519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.300024][ T1519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.310187][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.407781][ T1816] loop4: detected capacity change from 0 to 128 [ 257.509212][ T1835] loop3: detected capacity change from 0 to 512 [ 257.528662][ T1835] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 458757)! [ 257.539199][ T1835] EXT4-fs (loop3): group descriptors corrupted! [ 257.590608][ T1848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13687'. [ 257.605720][ T1848] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 257.763023][ T1867] loop1: detected capacity change from 0 to 512 [ 257.781316][ T1867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.782396][ T1874] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 257.803293][ T1874] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 257.832812][ T1867] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 257.871550][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.997400][ T1892] loop4: detected capacity change from 0 to 1024 [ 258.004352][ T1892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.016500][T29658] kernel write not supported for file task/44/attr/sockcreate (pid: 29658 comm: kworker/0:5) [ 258.029095][ T1892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.036176][ T1895] loop3: detected capacity change from 0 to 512 [ 258.067106][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.082858][ T1895] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.13709: corrupted xattr block 255: invalid header [ 258.102930][ T1895] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 258.111695][ T1895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.125453][ T1895] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.13709: corrupted xattr block 255: invalid header [ 258.143249][ T1904] loop4: detected capacity change from 0 to 764 [ 258.148013][ T1906] syz.1.13714[1906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.149576][ T1906] syz.1.13714[1906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.173808][ T1895] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 258.180495][ T1904] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 258.194674][ T1895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.227555][ T1906] loop1: detected capacity change from 0 to 1024 [ 258.257428][ T1906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.312492][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.412666][ T1929] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13723'. [ 258.506046][ T1944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.606811][ T1957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13737'. [ 258.683287][ T1971] loop1: detected capacity change from 0 to 2048 [ 258.692974][ T1971] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.13744: casefold flag without casefold feature [ 258.707280][ T1971] EXT4-fs (loop1): get root inode failed [ 258.712966][ T1971] EXT4-fs (loop1): mount failed [ 258.713144][ T1978] /dev/loop0: Can't lookup blockdev [ 258.827531][ T1990] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 258.911266][ T2002] infiniband syz1: set active [ 258.916370][ T2002] infiniband syz1: added team_slave_0 [ 258.933814][ T2002] RDS/IB: syz1: added [ 258.942031][ T2002] smc: adding ib device syz1 with port count 1 [ 258.953975][ T2002] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 259.172337][ T2030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13772'. [ 259.197483][ T2030] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 259.229055][ T2030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13772'. [ 259.407301][ T2051] loop1: detected capacity change from 0 to 1024 [ 259.419984][ T2051] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 259.451787][ T2051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.481407][ T2060] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 259.490826][T24926] bond0: (slave bond_slave_0): interface is now down [ 259.497641][T24926] bond0: (slave bond_slave_1): interface is now down [ 259.513473][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.538753][T24926] bond0: now running without any active interface! [ 259.584519][ T2066] IPv6: Can't replace route, no match found [ 259.657360][ T2084] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13798'. [ 259.715956][ T2088] 9pnet: Could not find request transport: f [ 259.750133][ T2093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13802'. [ 259.792860][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13810'. [ 259.870955][ T2117] loop1: detected capacity change from 0 to 164 [ 259.891453][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 259.891465][ T29] audit: type=1326 audit(2000000433.299:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 259.922514][ T2117] Unable to read rock-ridge attributes [ 259.964395][ T29] audit: type=1326 audit(2000000433.299:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 259.964931][ T2117] Unable to read rock-ridge attributes [ 259.988823][ T29] audit: type=1326 audit(2000000433.339:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.017925][ T29] audit: type=1326 audit(2000000433.339:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.034209][ T2117] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 260.041505][ T29] audit: type=1326 audit(2000000433.339:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.073126][ T29] audit: type=1326 audit(2000000433.339:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.096683][ T29] audit: type=1400 audit(2000000433.349:5431): avc: denied { mount } for pid=2114 comm="syz.1.13813" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 260.119820][ T29] audit: type=1326 audit(2000000433.379:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.143397][ T29] audit: type=1326 audit(2000000433.379:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.195696][ T29] audit: type=1326 audit(2000000433.459:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2118 comm="syz.4.13815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f11c43fdef9 code=0x7ffc0000 [ 260.258742][ T2130] netlink: 'syz.1.13820': attribute type 4 has an invalid length. [ 260.266651][ T2130] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13820'. [ 260.305022][ T2136] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13823'. [ 260.324052][ T2139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13827'. [ 260.379031][ T2139] ipvlan2: entered allmulticast mode [ 260.384504][ T2139] veth0_vlan: entered allmulticast mode [ 260.637610][ T2170] loop1: detected capacity change from 0 to 256 [ 260.736820][ T2174] loop1: detected capacity change from 0 to 512 [ 260.768836][ T2174] EXT4-fs (loop1): orphan cleanup on readonly fs [ 260.775063][ T2180] program syz.2.13844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.794738][ T2174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13842: bg 0: block 248: padding at end of block bitmap is not set [ 260.839702][ T2174] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.13842: Failed to acquire dquot type 1 [ 260.879898][ T2174] EXT4-fs (loop1): 1 truncate cleaned up [ 260.897889][ T2174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.984164][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.256196][ T2211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13860'. [ 261.325085][ T2223] loop1: detected capacity change from 0 to 512 [ 261.339243][ T2223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.359139][ T2223] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.13865: iget: bogus i_mode (0) [ 261.383648][ T2223] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.13865: couldn't read orphan inode 17 (err -117) [ 261.433533][ T2223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.448147][ T2230] loop4: detected capacity change from 0 to 128 [ 261.512239][ T2223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.13865: bg 0: block 7: invalid block bitmap [ 261.574155][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13870'. [ 261.589847][ T2238] loop4: detected capacity change from 0 to 128 [ 261.598977][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.615995][ T2238] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.644511][ T2238] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.797949][ T2248] loop3: detected capacity change from 0 to 164 [ 261.808124][ T1483] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.824803][ T2248] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 261.867129][ T2248] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 261.873765][ T2254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13878'. [ 262.220538][ T2288] syz.1.13893[2288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.220636][ T2288] syz.1.13893[2288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.247730][ T2291] loop4: detected capacity change from 0 to 2048 [ 262.289067][ T2291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 262.352112][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.449917][ T2312] loop1: detected capacity change from 0 to 128 [ 262.478747][ T2312] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.510248][ T2312] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.647951][ T1503] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.960195][ T2341] loop3: detected capacity change from 0 to 512 [ 262.996956][ T2341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.026025][ T2341] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.13916: iget: bogus i_mode (0) [ 263.055402][ T2341] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.13916: couldn't read orphan inode 17 (err -117) [ 263.080792][ T2341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.249583][ T2349] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 263.256137][ T2349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.265526][ T2349] vhci_hcd vhci_hcd.0: Device attached [ 263.302044][ T2350] vhci_hcd: connection closed [ 263.302224][T24922] vhci_hcd: stop threads [ 263.312596][T24922] vhci_hcd: release socket [ 263.318245][T24922] vhci_hcd: disconnect device [ 263.350458][ T2341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.13916: bg 0: block 7: invalid block bitmap [ 263.440086][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.453039][ T2367] block device autoloading is deprecated and will be removed. [ 263.464034][ T2367] syz.4.13927: attempt to access beyond end of device [ 263.464034][ T2367] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 263.537827][ T2372] loop4: detected capacity change from 0 to 512 [ 263.556684][ T2372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 263.565048][ T2372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13930: bg 0: block 248: padding at end of block bitmap is not set [ 263.605353][ T2372] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.13930: Failed to acquire dquot type 1 [ 263.641980][ T2372] EXT4-fs (loop4): 1 truncate cleaned up [ 263.656325][ T2372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.730703][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.788512][ T2383] loop4: detected capacity change from 0 to 512 [ 263.823190][ T2383] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.833180][ T2383] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 263.866311][ T2387] tmpfs: Bad value for 'nr_inodes' [ 263.988647][ T2396] loop3: detected capacity change from 0 to 512 [ 264.064504][ T2396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 264.098105][ T2396] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.202844][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 264.296597][ T2419] loop3: detected capacity change from 0 to 1024 [ 264.316721][ T2419] EXT4-fs: Ignoring removed orlov option [ 264.336823][ T2417] sctp: [Deprecated]: syz.1.13950 (pid 2417) Use of int in max_burst socket option deprecated. [ 264.336823][ T2417] Use struct sctp_assoc_value instead [ 264.352659][ T2419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.377132][ T2419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 264.399270][ T2428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=2428 comm=syz.2.13953 [ 264.413666][ T2419] System zones: 0-1, 3-12 [ 264.419857][ T2419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.438395][ T2430] program syz.1.13954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.471227][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.557208][ T2446] tmpfs: Bad value for 'nr_inodes' [ 264.630342][ T2452] loop1: detected capacity change from 0 to 2048 [ 264.667802][ T2452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.683437][ T2461] program syz.4.13968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.716566][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.796107][ T2472] netlink: 'syz.4.13973': attribute type 10 has an invalid length. [ 264.804127][ T2472] netlink: 'syz.4.13973': attribute type 4 has an invalid length. [ 264.812118][ T2472] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13973'. [ 264.841460][ T2472] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 264.952918][ T2493] program syz.0.13981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.975353][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 264.975369][ T29] audit: type=1400 audit(2000000438.379:5609): avc: denied { read write } for pid=2491 comm="syz.4.13983" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 265.007105][ T29] audit: type=1400 audit(2000000438.379:5610): avc: denied { open } for pid=2491 comm="syz.4.13983" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 265.074269][ T29] audit: type=1326 audit(2000000438.479:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.0.13987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x0 [ 265.261897][ T2525] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 265.268502][ T2525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.279104][ T2525] vhci_hcd vhci_hcd.0: Device attached [ 265.322005][ T29] audit: type=1400 audit(2000000438.729:5612): avc: denied { create } for pid=2530 comm="syz.1.13999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 265.346960][ T2531] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 265.364457][ T2526] vhci_hcd: connection closed [ 265.366194][ T29] audit: type=1400 audit(2000000438.759:5613): avc: denied { write } for pid=2530 comm="syz.1.13999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 265.366755][T24922] vhci_hcd: stop threads [ 265.396124][T24922] vhci_hcd: release socket [ 265.400531][T24922] vhci_hcd: disconnect device [ 265.438229][ T3337] kernel write not supported for file bpf-prog (pid: 3337 comm: kworker/1:4) [ 265.537312][ T29] audit: type=1400 audit(2000000438.949:5614): avc: denied { create } for pid=2546 comm="syz.2.14007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 265.571458][ T29] audit: type=1400 audit(2000000438.969:5615): avc: denied { create } for pid=2546 comm="syz.2.14007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 265.592704][ T29] audit: type=1400 audit(2000000438.969:5616): avc: denied { ioctl } for pid=2546 comm="syz.2.14007" path="socket:[108077]" dev="sockfs" ino=108077 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 265.969468][ T29] audit: type=1400 audit(2000000439.379:5617): avc: denied { setopt } for pid=2559 comm="syz.3.14011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 266.001868][ T3337] kernel write not supported for file /vcs (pid: 3337 comm: kworker/1:4) [ 266.007253][ T2564] loop0: detected capacity change from 0 to 256 [ 266.077142][ T2576] syz.0.14020[2576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.077229][ T2576] syz.0.14020[2576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.090533][ T29] audit: type=1400 audit(2000000439.499:5618): avc: denied { execute_no_trans } for pid=2572 comm="syz.1.14019" path="/118/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.119376][ T2576] loop0: detected capacity change from 0 to 1024 [ 266.154747][ T2578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14030'. [ 266.187357][ T2576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.254674][T31768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.366029][ T2613] loop0: detected capacity change from 0 to 128 [ 266.381082][ T2613] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.397127][ T2615] netlink: 'syz.1.14038': attribute type 10 has an invalid length. [ 266.405410][ T2615] veth0_macvtap: left promiscuous mode [ 266.411081][ T2613] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.455840][ T2615] veth0_macvtap: entered promiscuous mode [ 266.478489][ T2615] team0: Device macvtap0 failed to register rx_handler [ 266.495961][T31768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.507303][ T2615] veth0_macvtap: left promiscuous mode [ 266.596531][ T8] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8 comm=kworker/0:0 [ 266.791651][ T2666] syz.2.14062[2666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.791708][ T2666] syz.2.14062[2666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.821557][ T2672] loop0: detected capacity change from 0 to 128 [ 266.841709][ T2672] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.859002][ T2672] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.976372][ T2682] loop1: detected capacity change from 0 to 164 [ 267.000728][ T2682] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 267.039052][ T2682] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 267.062969][ T2693] netlink: 'syz.0.14075': attribute type 10 has an invalid length. [ 267.168651][ T2705] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 267.219356][ T2713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14086'. [ 267.229581][ T2713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14086'. [ 267.420855][ T2735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14096'. [ 267.423797][ T2737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14097'. [ 267.538669][ T2749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2749 comm=syz.1.14102 [ 267.595941][ T2763] loop3: detected capacity change from 0 to 512 [ 267.641129][ T2763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.665189][ T2763] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.771222][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.788300][ T2789] loop1: detected capacity change from 0 to 512 [ 267.821759][ T2789] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 267.953055][ T2810] syz.1.14130[2810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.953110][ T2810] syz.1.14130[2810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.957688][ T2808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14129'. [ 268.009432][ T2813] ALSA: seq fatal error: cannot create timer (-19) [ 268.132357][ T2839] tun0: tun_chr_ioctl cmd 1074025677 [ 268.140904][ T2839] tun0: linktype set to 512 [ 268.162096][ T2841] program syz.1.14145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.317144][ T2862] loop0: detected capacity change from 0 to 512 [ 268.342887][ T2864] loop1: detected capacity change from 0 to 512 [ 268.353669][ T2864] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.366921][ T2864] EXT4-fs (loop1): 1 truncate cleaned up [ 268.373081][ T2864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.387443][ T2862] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.14155: corrupted in-inode xattr: invalid ea_ino [ 268.402867][ T2862] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14155: couldn't read orphan inode 15 (err -117) [ 268.423170][ T2862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.438336][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.460166][T31768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.489539][ T2872] loop4: detected capacity change from 0 to 2048 [ 268.529487][ T2872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.556018][ T2872] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 268.599153][ T2872] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 268.611591][ T2872] EXT4-fs (loop4): This should not happen!! Data will be lost [ 268.611591][ T2872] [ 268.621565][ T2872] EXT4-fs (loop4): Total free blocks count 0 [ 268.628189][ T2872] EXT4-fs (loop4): Free/Dirty block details [ 268.634208][ T2872] EXT4-fs (loop4): free_blocks=2415919104 [ 268.639991][ T2872] EXT4-fs (loop4): dirty_blocks=32 [ 268.645174][ T2872] EXT4-fs (loop4): Block reservation details [ 268.651195][ T2872] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 268.691663][ T2896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14171'. [ 268.730751][T24922] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 268.772476][ T2909] loop1: detected capacity change from 0 to 512 [ 268.802415][ T2909] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.812112][ T2914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2914 comm=syz.3.14177 [ 268.826373][ T2909] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.14178: corrupted in-inode xattr: invalid ea_ino [ 268.851382][ T2909] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.14178: couldn't read orphan inode 15 (err -117) [ 268.875522][ T2909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.975115][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.050155][ T2940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14188'. [ 269.078765][ T2940] ipvlan2: entered allmulticast mode [ 269.085314][ T2940] veth0_vlan: entered allmulticast mode [ 269.281410][ T2965] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 269.291867][ T2965] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 269.317320][ T2970] loop0: detected capacity change from 0 to 128 [ 269.521504][ T2995] loop0: detected capacity change from 0 to 2048 [ 269.561968][ T2995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.641010][T31768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.759601][ T3035] loop4: detected capacity change from 0 to 2048 [ 269.781171][ T3035] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.822753][ T3035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.883770][ T3054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14236'. [ 269.920607][ T3056] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.934251][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.975935][ T3061] loop4: detected capacity change from 0 to 512 [ 270.000735][ T3061] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.14240: corrupted in-inode xattr: invalid ea_ino [ 270.046350][ T3061] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.14240: couldn't read orphan inode 15 (err -117) [ 270.061069][ T3061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.088393][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 270.088407][ T29] audit: type=1400 audit(2000000443.499:5902): avc: denied { remove_name } for pid=3060 comm="syz.4.14240" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.119918][ T29] audit: type=1400 audit(2000000443.499:5903): avc: denied { rename } for pid=3060 comm="syz.4.14240" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.166517][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.170647][ T29] audit: type=1326 audit(2000000443.569:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.14244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 270.200453][ T29] audit: type=1326 audit(2000000443.569:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.14244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 270.225265][ T29] audit: type=1326 audit(2000000443.569:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.14244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 270.249929][ T29] audit: type=1326 audit(2000000443.569:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.14244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 270.274718][ T29] audit: type=1326 audit(2000000443.569:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.3.14244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 270.323534][ T24] kernel write not supported for file /vcs (pid: 24 comm: kworker/1:0) [ 270.360094][ T29] audit: type=1400 audit(2000000443.769:5909): avc: denied { setcheckreqprot } for pid=3076 comm="syz.2.14248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 270.387664][ T3081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=3081 comm=syz.1.14249 [ 270.424873][ T29] audit: type=1400 audit(2000000443.839:5910): avc: denied { setopt } for pid=3085 comm="syz.3.14252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.465210][ T29] audit: type=1400 audit(2000000443.859:5911): avc: denied { read } for pid=3085 comm="syz.3.14252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.517903][ T3096] loop1: detected capacity change from 0 to 256 [ 270.538786][ T3096] vfat: Unknown parameter '0xffffffffffffffff' [ 270.765807][ T3135] IPv6: Can't replace route, no match found [ 271.299716][ T3208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14306'. [ 271.310078][ T3208] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14306'. [ 271.349347][ T3219] bridge0: port 3(syz_tun) entered blocking state [ 271.357047][ T3219] bridge0: port 3(syz_tun) entered disabled state [ 271.366869][ T3219] syz_tun: entered allmulticast mode [ 271.372905][ T3219] syz_tun: entered promiscuous mode [ 271.381173][ T3219] bridge0: port 3(syz_tun) entered blocking state [ 271.387662][ T3219] bridge0: port 3(syz_tun) entered forwarding state [ 271.409050][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 271.428473][ T3224] loop0: detected capacity change from 0 to 2048 [ 271.449808][ T3232] syz.2.14317[3232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.449933][ T3232] syz.2.14317[3232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.461100][ T3233] netlink: 'syz.3.14318': attribute type 2 has an invalid length. [ 271.480710][ T3233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14318'. [ 271.492999][ T3233] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 271.522376][ T3224] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 271.530071][ T3224] loop0: p3 start 4259840 is beyond EOD, truncated [ 271.746330][ T3254] IPv6: Can't replace route, no match found [ 271.785769][ T3259] SELinux: Context ì is not valid (left unmapped). [ 271.929249][ T3277] syz.2.14337[3277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.929344][ T3277] syz.2.14337[3277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.971387][ T3281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.082907][ T3293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14343'. [ 272.336750][ T3343] loop0: detected capacity change from 0 to 2048 [ 272.366280][ T3343] Alternate GPT is invalid, using primary GPT. [ 272.372710][ T3343] loop0: p1 p2 p3 [ 272.657161][ T3384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14380'. [ 272.748927][ T3399] syz.4.14386[3399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.749090][ T3399] syz.4.14386[3399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.877770][ T3412] netlink: 47 bytes leftover after parsing attributes in process `syz.2.14394'. [ 273.093654][ T3426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=3426 comm=syz.2.14401 [ 273.106938][ T3428] IPv6: Can't replace route, no match found [ 273.167895][ T3439] dummy0: entered promiscuous mode [ 273.175912][ T3439] macsec1: entered allmulticast mode [ 273.181232][ T3439] dummy0: entered allmulticast mode [ 273.287866][ T3457] loop4: detected capacity change from 0 to 2048 [ 273.290845][ T3461] loop0: detected capacity change from 0 to 256 [ 273.296799][ T3457] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.352622][ T3457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.387282][ T3473] loop0: detected capacity change from 0 to 128 [ 273.439491][ T3476] loop1: detected capacity change from 0 to 512 [ 273.448194][ T3457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.14416: bg 0: block 234: padding at end of block bitmap is not set [ 273.477146][ T3476] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 273.494947][ T3457] EXT4-fs (loop4): Remounting filesystem read-only [ 273.519524][ T3488] program syz.2.14429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.565717][ T1483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.635025][ T3502] loop0: detected capacity change from 0 to 2048 [ 273.667739][ T3514] program syz.3.14440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.751759][ T3533] program syz.1.14451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.773092][ T3536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14452'. [ 273.779639][ T3538] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 273.797764][ T3538] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 274.007613][ T3566] Invalid ELF header magic: != ELF [ 274.061552][ T3578] syz.2.14473[3578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.061605][ T3578] syz.2.14473[3578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.086723][ T3581] loop1: detected capacity change from 0 to 256 [ 274.099268][ T24] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 274.110351][ T3581] vfat: Bad value for 'time_offset' [ 274.113859][ T24] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 274.134522][ T3581] 9pnet_fd: p9_fd_create_tcp (3581): problem connecting socket to 127.0.0.1 [ 274.138261][ T3576] loop3: detected capacity change from 0 to 764 [ 274.151428][ T24] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 274.164276][ T24] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 274.233444][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14481'. [ 274.300422][ T3605] program syz.1.14486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.378105][ T3609] loop1: detected capacity change from 0 to 4096 [ 274.392174][ T3609] EXT4-fs: Ignoring removed nobh option [ 274.406497][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.422617][ T3609] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.14488: Failed to acquire dquot type 1 [ 274.447208][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.546607][ T3639] loop1: detected capacity change from 0 to 512 [ 274.566214][ T3639] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 274.592421][ T3646] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14505'. [ 274.640520][ T3656] loop0: detected capacity change from 0 to 512 [ 274.656352][ T3656] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.14511: iget: bad i_size value: -67835469387268086 [ 274.662569][ T3662] loop1: detected capacity change from 0 to 128 [ 274.675546][ T3656] EXT4-fs (loop0): Remounting filesystem read-only [ 274.682678][ T3656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.690526][ T3667] loop3: detected capacity change from 0 to 512 [ 274.705118][ T3656] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 274.712956][ T3656] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.745805][ T3667] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.14514: corrupted in-inode xattr: invalid ea_ino [ 274.796275][ T3667] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.14514: couldn't read orphan inode 15 (err -117) [ 274.822166][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.840651][ T3667] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.14514: invalid indirect mapped block 234881024 (level 0) [ 274.900273][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.936484][ T3692] vhci_hcd: default hub control req: 2017 v0080 i0000 l0 [ 275.081326][ T3711] loop1: detected capacity change from 0 to 2048 [ 275.100018][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 275.100033][ T29] audit: type=1326 audit(2000000448.509:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.133922][ T3711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.169251][ T3711] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 275.213744][ T29] audit: type=1400 audit(2000000448.509:6123): avc: denied { read } for pid=3716 comm="syz.4.14540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.234416][ T29] audit: type=1326 audit(2000000448.539:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.259124][ T29] audit: type=1326 audit(2000000448.539:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.283855][ T29] audit: type=1326 audit(2000000448.549:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.302823][ T3711] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 275.308542][ T29] audit: type=1326 audit(2000000448.549:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.320280][ T3711] EXT4-fs (loop1): This should not happen!! Data will be lost [ 275.320280][ T3711] [ 275.344887][ T29] audit: type=1326 audit(2000000448.559:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.354065][ T3711] EXT4-fs (loop1): Total free blocks count 0 [ 275.354082][ T3711] EXT4-fs (loop1): Free/Dirty block details [ 275.354094][ T3711] EXT4-fs (loop1): free_blocks=2415919104 [ 275.354108][ T3711] EXT4-fs (loop1): dirty_blocks=32 [ 275.354120][ T3711] EXT4-fs (loop1): Block reservation details [ 275.354129][ T3711] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 275.419582][ T29] audit: type=1326 audit(2000000448.559:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.0.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1493dfdef9 code=0x7ffc0000 [ 275.428811][ T3725] program syz.3.14542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.444359][ T29] audit: type=1400 audit(2000000448.569:6130): avc: denied { add_name } for pid=3710 comm="syz.1.14537" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.475275][ T29] audit: type=1400 audit(2000000448.569:6131): avc: denied { create } for pid=3710 comm="syz.1.14537" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.501077][ T498] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 275.677351][ T3748] loop3: detected capacity change from 0 to 512 [ 275.697295][ T3748] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.714114][ T3748] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.14551: corrupted in-inode xattr: invalid ea_ino [ 275.755340][ T3748] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.14551: couldn't read orphan inode 15 (err -117) [ 275.813615][ T24] kernel write not supported for file /vcs (pid: 24 comm: kworker/1:0) [ 276.015617][ T3764] SELinux: policydb version 0 does not match my version range 15-33 [ 276.029857][ T3764] SELinux: failed to load policy [ 276.093693][ T3773] loop0: detected capacity change from 0 to 2048 [ 276.104504][ T3777] loop4: detected capacity change from 0 to 256 [ 276.111015][ T3777] vfat: Unknown parameter '0xffffffffffffffff' [ 276.117482][ T3773] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.149213][ T3773] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14561: bg 0: block 234: padding at end of block bitmap is not set [ 276.200383][ T3773] EXT4-fs (loop0): Remounting filesystem read-only [ 276.238909][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14567'. [ 276.376339][ T3811] Invalid ELF header magic: != ELF [ 276.397563][ T3816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14589'. [ 276.655879][ T3836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14585'. [ 276.698909][ T3840] loop3: detected capacity change from 0 to 164 [ 276.725884][ T3840] rock: directory entry would overflow storage [ 276.732103][ T3840] rock: sig=0x4f50, size=4, remaining=3 [ 276.737762][ T3840] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 276.875032][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14602'. [ 276.935907][ T3872] loop4: detected capacity change from 0 to 128 [ 276.951050][ T3873] loop3: detected capacity change from 0 to 1024 [ 276.966262][ T3872] EXT4-fs: Ignoring removed nobh option [ 276.978049][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14611'. [ 276.996058][ T3872] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.020969][ T3873] EXT4-fs: Ignoring removed bh option [ 277.058311][ T3887] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14613'. [ 277.215290][ T3904] loop3: detected capacity change from 0 to 512 [ 277.228889][ T3908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14622'. [ 277.268069][ T3904] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.472332][ T3935] Cannot find del_set index 0 as target [ 277.590903][ T3949] syz.1.14641[3949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.590960][ T3949] syz.1.14641[3949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.785030][ T3969] loop4: detected capacity change from 0 to 512 [ 277.823522][ T3969] EXT4-fs: Ignoring removed nobh option [ 277.830483][ T3969] EXT4-fs: Ignoring removed nobh option [ 277.854733][ T3969] EXT4-fs (loop4): failed to initialize system zone (-117) [ 277.876498][ T3969] EXT4-fs (loop4): mount failed [ 277.908883][ T3984] loop0: detected capacity change from 0 to 256 [ 277.928594][ T3988] gre0 speed is unknown, defaulting to 1000 [ 278.092860][ T4010] loop4: detected capacity change from 0 to 2048 [ 278.167820][ T4010] Alternate GPT is invalid, using primary GPT. [ 278.175494][ T4010] loop4: p1 p2 p3 [ 278.218156][ T4027] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 278.229874][ T4025] loop3: detected capacity change from 0 to 512 [ 278.241867][ T4031] loop0: detected capacity change from 0 to 512 [ 278.280036][ T4025] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.309192][ T4045] loop4: detected capacity change from 0 to 512 [ 278.318870][ T4031] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.367091][ T4045] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.401321][ T4025] EXT4-fs error (device loop3): ext4_empty_dir:3088: inode #12: comm syz.3.14677: Directory hole found for htree leaf block 0 [ 278.486390][ T4069] loop1: detected capacity change from 0 to 512 [ 278.486770][ T4068] netlink: 277 bytes leftover after parsing attributes in process `syz.2.14694'. [ 278.527750][ T4069] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.606262][ T4080] xt_bpf: check failed: parse error [ 278.755840][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14715'. [ 278.765027][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14715'. [ 278.781462][ T4118] netlink: 'syz.2.14720': attribute type 4 has an invalid length. [ 278.956950][ T4143] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 278.965369][ T4143] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 279.059969][ T4158] 9pnet_fd: Insufficient options for proto=fd [ 279.095581][ T4162] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 279.120803][ T4162] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 279.162740][ T4168] loop4: detected capacity change from 0 to 512 [ 279.189644][ T4168] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.217066][ T4168] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.14743: corrupted in-inode xattr: invalid ea_ino [ 279.250768][ T4168] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.14743: couldn't read orphan inode 15 (err -117) [ 279.301507][ T4185] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 279.394738][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14751'. [ 279.511645][ T4203] IPv6: Can't replace route, no match found [ 279.873380][ T4240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 280.192826][ T4280] serio: Serial port ptm0 [ 280.209271][ T4274] loop0: detected capacity change from 0 to 8192 [ 280.228024][ T4274] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.357267][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 280.357281][ T29] audit: type=1400 audit(2000000453.769:6437): avc: denied { mount } for pid=4290 comm="syz.2.14801" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.418963][ T29] audit: type=1400 audit(2000000453.769:6438): avc: denied { unmount } for pid=1518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.471859][ T29] audit: type=1400 audit(2000000453.849:6439): avc: denied { sys_module } for pid=4296 comm="syz.2.14803" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 280.472502][ T4302] gre0 speed is unknown, defaulting to 1000 [ 280.686314][ T29] audit: type=1326 audit(2000000454.099:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.731058][ T4319] loop0: detected capacity change from 0 to 512 [ 280.744277][ T29] audit: type=1326 audit(2000000454.119:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.768456][ T29] audit: type=1326 audit(2000000454.129:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.780518][ T4319] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.792061][ T29] audit: type=1326 audit(2000000454.129:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.792095][ T29] audit: type=1326 audit(2000000454.129:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.792119][ T29] audit: type=1326 audit(2000000454.129:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.792144][ T29] audit: type=1326 audit(2000000454.129:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.14812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 280.918863][ T4319] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.14811: corrupted in-inode xattr: invalid ea_ino [ 280.965248][ T4319] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14811: couldn't read orphan inode 15 (err -117) [ 280.987589][ T4339] program syz.2.14820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.220349][ T4365] loop3: detected capacity change from 0 to 2048 [ 281.257568][ T4369] TCP: tcp_parse_options: Illegal window scaling value 247 > 14 received [ 281.305009][ T4383] loop0: detected capacity change from 0 to 512 [ 281.331487][ T4383] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 281.354240][ T4365] EXT4-fs error (device loop3): ext4_lookup:1811: inode #16: comm syz.3.14832: unexpected EA_INODE flag [ 281.382185][ T4383] EXT4-fs (loop0): 1 truncate cleaned up [ 281.442891][ T4415] random: crng reseeded on system resumption [ 281.503287][ T4419] loop3: detected capacity change from 0 to 256 [ 281.518449][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14845'. [ 281.550598][ T4422] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.559628][ T4422] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.568397][ T4422] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.577794][ T4422] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.598281][ T4422] vxlan0: entered promiscuous mode [ 281.603428][ T4422] vxlan0: entered allmulticast mode [ 281.629407][ T4419] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.812532][ T4449] 9pnet: Could not find request transport: t [ 281.924995][ T4464] tap0: tun_chr_ioctl cmd 2147767521 [ 281.986787][ T4474] loop1: detected capacity change from 0 to 512 [ 282.031908][ T4474] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.196429][ T4512] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.470090][ T4535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14896'. [ 282.495378][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14897'. [ 282.497500][ T4540] netlink: 165 bytes leftover after parsing attributes in process `syz.4.14898'. [ 282.524020][ T4538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14897'. [ 282.600951][ T4548] loop4: detected capacity change from 0 to 512 [ 282.620066][ T4548] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.633202][ T4548] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.645589][ T4548] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.14902: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 282.666351][ T4548] EXT4-fs error (device loop4): ext4_quota_enable:7025: comm syz.4.14902: Bad quota inode: 3, type: 0 [ 282.679427][ T4548] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 282.695431][ T4548] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 282.936284][ T4592] loop4: detected capacity change from 0 to 512 [ 282.956899][ T4592] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.976485][ T4592] EXT4-fs error (device loop4): ext4_get_first_dir_block:3530: inode #12: comm syz.4.14923: Directory hole found for htree leaf block 0 [ 283.062053][ T4605] loop2: detected capacity change from 0 to 2048 [ 283.095299][ T4605] loop2: p1 < > p4 [ 283.099466][ T4605] loop2: p4 size 8388608 extends beyond EOD, truncated [ 283.340348][ T4645] sit2: entered promiscuous mode [ 283.346002][ T4645] sit2: entered allmulticast mode [ 283.402848][ T4649] loop2: detected capacity change from 0 to 1024 [ 283.415995][ T4649] EXT4-fs: Ignoring removed orlov option [ 283.421750][ T4649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.430365][ T4651] netlink: 'syz.1.14950': attribute type 26 has an invalid length. [ 283.465730][ T4658] syz.1.14952[4658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.465857][ T4658] syz.1.14952[4658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.596006][ T4670] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14958'. [ 283.864047][ T4714] loop3: detected capacity change from 0 to 512 [ 283.876897][ T4713] gre0 speed is unknown, defaulting to 1000 [ 283.881617][ T4714] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 283.904713][ T4714] EXT4-fs (loop3): 1 truncate cleaned up [ 283.922511][ T4714] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.14977: Logical block already allocated [ 283.943020][ T4722] syz.0.14982[4722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.943137][ T4722] syz.0.14982[4722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.948139][ T4714] EXT4-fs (loop3): Remounting filesystem read-only [ 283.980691][ T4714] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 284.149690][ T4740] netlink: 160 bytes leftover after parsing attributes in process `syz.4.14992'. [ 284.167206][ T4744] loop3: detected capacity change from 0 to 512 [ 284.181013][ T4744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.208817][ T4752] netlink: 'syz.2.14996': attribute type 11 has an invalid length. [ 284.212612][ T4744] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.318325][ T4763] loop4: detected capacity change from 0 to 256 [ 284.341858][ T4763] FAT-fs (loop4): Directory bread(block 1285) failed [ 284.353539][ T4768] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.15004'. [ 284.376401][ T4763] FAT-fs (loop4): Directory bread(block 1285) failed [ 284.396494][ T4763] FAT-fs (loop4): Directory bread(block 1285) failed [ 284.403290][ T4763] FAT-fs (loop4): Directory bread(block 1285) failed [ 284.445486][ T4774] gre0 speed is unknown, defaulting to 1000 [ 284.468800][ T4398] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 284.499310][ T4398] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 284.509926][ T4398] bond0: active interface up! [ 284.553704][ T4788] loop2: detected capacity change from 0 to 256 [ 284.561813][ T4791] syz.4.15014[4791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.561940][ T4791] syz.4.15014[4791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.581716][ T4788] FAT-fs (loop2): Directory bread(block 64) failed [ 284.609677][ T4788] FAT-fs (loop2): Directory bread(block 65) failed [ 284.624918][ T4788] FAT-fs (loop2): Directory bread(block 66) failed [ 284.631532][ T4788] FAT-fs (loop2): Directory bread(block 67) failed [ 284.646488][ T4788] FAT-fs (loop2): Directory bread(block 68) failed [ 284.653165][ T4788] FAT-fs (loop2): Directory bread(block 69) failed [ 284.662532][ T4788] FAT-fs (loop2): Directory bread(block 70) failed [ 284.671565][ T4788] FAT-fs (loop2): Directory bread(block 71) failed [ 284.679491][ T4788] FAT-fs (loop2): Directory bread(block 72) failed [ 284.691197][ T4788] FAT-fs (loop2): Directory bread(block 73) failed [ 284.760084][ T4803] loop1: detected capacity change from 0 to 512 [ 284.775446][ T4803] EXT4-fs: Ignoring removed oldalloc option [ 284.799954][ T4803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.15021: Parent and EA inode have the same ino 15 [ 284.852563][ T4803] EXT4-fs (loop1): Remounting filesystem read-only [ 284.860520][ T4803] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 284.938218][ T4803] EXT4-fs (loop1): 1 orphan inode deleted [ 284.972650][ T4803] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 285.026354][ T4840] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 285.130069][ T4852] loop3: detected capacity change from 0 to 1764 [ 285.266977][ T4879] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 285.333829][ T4886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15061'. [ 285.372984][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 285.372999][ T29] audit: type=1400 audit(2000000458.779:6621): avc: denied { mount } for pid=4889 comm="syz.1.15062" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 285.491660][ T29] audit: type=1400 audit(2000000458.899:6622): avc: granted { setsecparam } for pid=4896 comm="syz.1.15065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 285.587414][ T29] audit: type=1400 audit(2000000458.999:6623): avc: denied { unmount } for pid=1503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 285.592176][ T4914] loop0: detected capacity change from 0 to 2048 [ 285.650868][ T4922] loop3: detected capacity change from 0 to 512 [ 285.659198][ T4914] loop0: p1 < > p3 p4 < > [ 285.670053][ T29] audit: type=1400 audit(2000000459.069:6624): avc: denied { create } for pid=4921 comm="syz.1.15078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.690958][ T4914] loop0: p3 start 4284289 is beyond EOD, truncated [ 285.723400][ T4922] EXT4-fs mount: 40 callbacks suppressed [ 285.723415][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.742726][ T29] audit: type=1400 audit(2000000459.109:6625): avc: denied { map } for pid=4921 comm="syz.1.15078" path="socket:[115352]" dev="sockfs" ino=115352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.767273][ T29] audit: type=1400 audit(2000000459.109:6626): avc: denied { read } for pid=4921 comm="syz.1.15078" path="socket:[115352]" dev="sockfs" ino=115352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.791022][ T29] audit: type=1400 audit(2000000459.119:6627): avc: denied { append } for pid=4912 comm="syz.0.15073" name="loop0p4" dev="devtmpfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.824058][ T4922] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.871945][ T1519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.904973][ T4939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15086'. [ 285.924830][ T29] audit: type=1400 audit(2000000459.269:6628): avc: denied { ioctl } for pid=4920 comm="syz.3.15077" path="/187/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 285.972430][ T4949] syz.0.15090[4949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.972501][ T4949] syz.0.15090[4949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.977607][ T29] audit: type=1400 audit(2000000459.359:6629): avc: denied { write } for pid=4941 comm="syz.1.15088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.015943][ T29] audit: type=1400 audit(2000000459.429:6630): avc: denied { ioctl } for pid=4941 comm="syz.1.15088" path="socket:[115376]" dev="sockfs" ino=115376 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.306565][ T4976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 286.622028][ T5007] syz.1.15116[5007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.622191][ T5007] syz.1.15116[5007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.645279][ T5007] loop1: detected capacity change from 0 to 512 [ 286.667739][ T5007] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.677473][ T5007] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 286.687357][ T5007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 286.696268][ T5007] EXT4-fs (loop1): failed to initialize system zone (-117) [ 286.703527][ T5007] EXT4-fs (loop1): mount failed [ 286.725415][ T5011] usb usb8: check_ctrlrecip: process 5011 (syz.1.15117) requesting ep 01 but needs 81 [ 286.736898][ T5011] usb usb8: usbfs: process 5011 (syz.1.15117) did not claim interface 0 before use [ 286.747488][ T5011] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 286.786323][ T5013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.826643][ T5017] loop1: detected capacity change from 0 to 512 [ 286.845931][ T5017] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.15120: Failed to acquire dquot type 0 [ 286.858253][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 286.867499][ T5017] EXT4-fs (loop1): 1 orphan inode deleted [ 286.873806][ T5017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.887020][ T5017] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 286.888550][ T5013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.894079][ T5017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.942702][ T5021] loop1: detected capacity change from 0 to 512 [ 286.953193][ T5021] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 286.988358][ T5013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.023705][ T5025] netlink: 'syz.1.15123': attribute type 4 has an invalid length. [ 287.033411][ T5025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15123'. [ 287.068824][ T5013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.121489][ T5013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.134310][ T5013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.157203][ T5013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.180208][ T5013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.289441][ T5054] netlink: 'syz.2.15138': attribute type 29 has an invalid length. [ 287.312269][ T5054] netlink: 'syz.2.15138': attribute type 29 has an invalid length. [ 287.330442][ T5054] netlink: 'syz.2.15138': attribute type 29 has an invalid length. [ 287.359170][ T5062] loop2: detected capacity change from 0 to 512 [ 287.406793][ T5066] loop1: detected capacity change from 0 to 512 [ 287.417149][ T5062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.435347][ T5066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.442250][ T5062] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.463543][ T5066] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.531296][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.560034][ T1518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.641863][ T5098] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.772378][ T5124] netdevsim netdevsim0 netdevsim0: Caught tx_queue_len zero misconfig [ 287.839725][ T5134] team0: entered promiscuous mode [ 287.846735][ T5134] team_slave_0: entered promiscuous mode [ 287.852446][ T5134] team_slave_1: entered promiscuous mode [ 287.864662][ T5133] team0: left promiscuous mode [ 287.869492][ T5133] team_slave_0: left promiscuous mode [ 287.875662][ T5133] team_slave_1: left promiscuous mode [ 287.937461][ T5145] loop0: detected capacity change from 0 to 1024 [ 287.946866][ T5145] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.966076][ T5145] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 287.979354][ T5145] EXT4-fs (loop0): too many log groups per flexible block group [ 287.988421][ T5145] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 287.996773][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.002811][ T5153] loop1: detected capacity change from 0 to 1024 [ 288.008625][ T5145] EXT4-fs (loop0): mount failed [ 288.031582][ T5153] EXT4-fs: Ignoring removed nobh option [ 288.037319][ T5153] EXT4-fs: Ignoring removed orlov option [ 288.057236][ T5153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.095692][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.200689][ T5171] loop1: detected capacity change from 0 to 1024 [ 288.218959][ T5171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.248178][ T5171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.250249][ T5173] loop3: detected capacity change from 0 to 2048 [ 288.278191][ T5171] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.15190: reserved inode found cleared - inode=18 [ 288.316247][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.339942][ T5173] loop3: p1 p3 < > p4 < p5 > [ 288.342080][ T5181] loop0: detected capacity change from 0 to 1024 [ 288.344748][ T5173] loop3: partition table partially beyond EOD, truncated [ 288.354910][ T5173] loop3: p1 size 33024 extends beyond EOD, truncated [ 288.362492][ T5183] loop1: detected capacity change from 0 to 256 [ 288.372746][ T5181] EXT4-fs: Ignoring removed orlov option [ 288.376557][ T5173] loop3: p3 start 4284289 is beyond EOD, truncated [ 288.387768][ T5173] loop3: p5 size 33024 extends beyond EOD, truncated [ 288.396603][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.450112][ T5187] 9pnet: Could not find request transport: f [ 288.469002][T31768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.736405][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15220'. [ 288.865144][ T4398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.920406][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.929255][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.937926][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.944313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.947225][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.962076][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.970847][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.980255][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.989024][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 288.997386][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.005396][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.012800][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.020226][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.028881][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.038155][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.046850][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.055664][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.063201][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.072507][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.075904][ T5271] loop3: detected capacity change from 0 to 512 [ 289.081158][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.093554][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.102816][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.111452][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.120134][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.129603][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.138313][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.147005][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.156301][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.163702][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.172335][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.181011][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.190258][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.198968][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.207731][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.217004][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.225675][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.233075][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.241925][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.251166][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.259870][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.268355][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.276390][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.283834][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.291232][ T3337] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 289.302515][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.322775][ T3337] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 289.343644][ T5277] vhci_hcd: invalid port number 61 [ 289.527400][ T5308] loop1: detected capacity change from 0 to 2048 [ 289.547583][ T5313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15258'. [ 289.586453][ T5308] loop1: p1 < > p4 [ 289.592713][ T5308] loop1: p4 size 8388608 extends beyond EOD, truncated [ 289.642479][ T5325] bpf_get_probe_write_proto: 2 callbacks suppressed [ 289.642495][ T5325] syz.4.15264[5325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.678083][ T5325] syz.4.15264[5325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.768435][ T5334] loop1: detected capacity change from 0 to 512 [ 289.807048][ T5334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 289.850953][ T5334] EXT4-fs (loop1): orphan cleanup on readonly fs [ 289.904127][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.928766][ T5334] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 289.983503][ T5334] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 289.998787][ T5352] syz.4.15277[5352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.998849][ T5352] syz.4.15277[5352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.011499][ T5334] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.15268: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 290.051074][ T5334] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.15268: couldn't read orphan inode 13 (err -117) [ 290.083128][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.120519][ T5334] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 290.146751][ T5334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 290.187152][ T5334] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 290.258552][ T5373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15286'. [ 290.267863][ T5362] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 290.295374][ T5362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 290.317815][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.345354][ T5362] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 290.397332][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 290.397346][ T29] audit: type=1326 audit(2000000463.809:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.3.15290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 290.429002][ T29] audit: type=1326 audit(2000000463.809:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.3.15290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 290.456480][ T1503] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.472356][ T29] audit: type=1326 audit(2000000463.809:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.3.15290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 290.496610][ T29] audit: type=1326 audit(2000000463.809:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.3.15290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 290.520303][ T29] audit: type=1326 audit(2000000463.809:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5382 comm="syz.3.15290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6128bedef9 code=0x7ffc0000 [ 290.522125][ T5395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.605226][ T29] audit: type=1400 audit(2000000464.019:6749): avc: denied { bind } for pid=5400 comm="syz.1.15299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.663375][ T29] audit: type=1400 audit(2000000464.069:6750): avc: denied { create } for pid=5406 comm="syz.4.15301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.712418][ T29] audit: type=1400 audit(2000000464.099:6751): avc: denied { write } for pid=5406 comm="syz.4.15301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.787329][ T29] audit: type=1326 audit(2000000464.189:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.1.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 290.789382][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15309'. [ 290.811615][ T29] audit: type=1326 audit(2000000464.189:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.1.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3700bdef9 code=0x7ffc0000 [ 290.902326][ C0] ================================================================== [ 290.910420][ C0] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 290.916846][ C0] [ 290.919145][ C0] read to 0xffffc900030e3bd0 of 4 bytes by task 5409 on cpu 1: [ 290.926663][ C0] do_sys_poll+0x9b4/0xc10 [ 290.931064][ C0] __se_sys_ppoll+0x1af/0x1f0 [ 290.935734][ C0] __x64_sys_ppoll+0x67/0x80 [ 290.940301][ C0] x64_sys_call+0xe71/0x2d60 [ 290.944869][ C0] do_syscall_64+0xc9/0x1c0 [ 290.949349][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.955228][ C0] [ 290.957525][ C0] write to 0xffffc900030e3bd0 of 4 bytes by interrupt on cpu 0: [ 290.965130][ C0] pollwake+0xbe/0x110 [ 290.969179][ C0] __wake_up+0x65/0xb0 [ 290.973225][ C0] bpf_ringbuf_notify+0x22/0x30 [ 290.978053][ C0] irq_work_run+0xdf/0x2c0 [ 290.982447][ C0] __sysvec_irq_work+0x23/0x1a0 [ 290.987274][ C0] sysvec_irq_work+0x66/0x80 [ 290.991842][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 290.996760][ C0] default_send_IPI_self+0x38/0x80 [ 291.001851][ C0] arch_irq_work_raise+0x48/0x50 [ 291.006764][ C0] __irq_work_queue_local+0x82/0x1d0 [ 291.012039][ C0] irq_work_queue+0x85/0x120 [ 291.016610][ C0] bpf_ringbuf_discard+0xcd/0xf0 [ 291.021524][ C0] bpf_prog_fe0ed97373b08409+0x46/0x4a [ 291.026966][ C0] bpf_trace_run3+0x10c/0x1d0 [ 291.031621][ C0] kmem_cache_free+0x1fe/0x280 [ 291.036372][ C0] __vm_area_free+0x37/0x60 [ 291.040850][ C0] exit_mmap+0x3d7/0x710 [ 291.045158][ C0] __mmput+0x28/0x1b0 [ 291.049113][ C0] mmput+0x4c/0x60 [ 291.052807][ C0] exit_mm+0xe4/0x190 [ 291.056781][ C0] do_exit+0x55e/0x1720 [ 291.060931][ C0] do_group_exit+0x142/0x150 [ 291.065499][ C0] __x64_sys_exit_group+0x1f/0x20 [ 291.070501][ C0] x64_sys_call+0x2d5d/0x2d60 [ 291.075154][ C0] do_syscall_64+0xc9/0x1c0 [ 291.079632][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.085506][ C0] [ 291.087804][ C0] value changed: 0x00000001 -> 0x00000000 [ 291.093493][ C0] [ 291.095789][ C0] Reported by Kernel Concurrency Sanitizer on: [ 291.101917][ C0] CPU: 0 UID: 0 PID: 5422 Comm: syz.0.15307 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 291.112649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 291.122684][ C0] ================================================================== [ 291.346182][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.387586][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.954900][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.427930][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.066625][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.075515][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.474882][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.517421][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.545284][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.114015][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.586398][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.627423][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.184745][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.665389][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.156500][T29658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.705471][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog