last executing test programs: 4m56.812663245s ago: executing program 0 (id=618): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4m56.718242866s ago: executing program 0 (id=619): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x6) 4m56.716149497s ago: executing program 0 (id=620): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4m56.303450224s ago: executing program 2 (id=636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 4m56.251482875s ago: executing program 2 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 4m56.172043747s ago: executing program 2 (id=641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m56.020489929s ago: executing program 2 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000480)) 4m56.01159438s ago: executing program 0 (id=655): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x4000880) 4m55.9638246s ago: executing program 2 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000001000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) 4m55.935930491s ago: executing program 0 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}}}}}}}, 0x0) 4m55.642273387s ago: executing program 0 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000002d80)={0x20080522}, 0x0) 4m55.642166447s ago: executing program 32 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000002d80)={0x20080522}, 0x0) 4m55.548337539s ago: executing program 2 (id=653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m55.547208948s ago: executing program 33 (id=653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26.54011106s ago: executing program 5 (id=11398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000b80)={0x1d, r2, 0x2, {0x1, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x2, 0xff, 0x2}, 0x2}, 0x18) 26.475904101s ago: executing program 5 (id=11402): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 26.307878714s ago: executing program 5 (id=11404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r2) 26.273961095s ago: executing program 5 (id=11405): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 26.069183448s ago: executing program 5 (id=11406): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) 25.940344671s ago: executing program 5 (id=11407): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) 25.940147701s ago: executing program 34 (id=11407): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) 17.797318844s ago: executing program 6 (id=11662): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 17.779285685s ago: executing program 6 (id=11664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 17.750658635s ago: executing program 6 (id=11666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 17.722531016s ago: executing program 6 (id=11667): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 17.703970516s ago: executing program 6 (id=11670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 17.601518488s ago: executing program 6 (id=11675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 17.593878638s ago: executing program 35 (id=11675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 2.879796915s ago: executing program 7 (id=12207): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x7, 0xc1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1, 0x600}, 0x29) 2.775090877s ago: executing program 7 (id=12201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) fstatfs(0xffffffffffffffff, 0x0) 2.736867128s ago: executing program 7 (id=12202): unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x4) 2.699288969s ago: executing program 7 (id=12216): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 2.569197481s ago: executing program 7 (id=12212): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000006140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) 2.504110403s ago: executing program 7 (id=12214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 520.04173ms ago: executing program 1 (id=12273): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 469.717341ms ago: executing program 1 (id=12274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000066c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1ff}]}}]}, 0x38}}, 0x20040054) 429.955502ms ago: executing program 3 (id=12275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 411.351002ms ago: executing program 1 (id=12277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 392.175352ms ago: executing program 3 (id=12278): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 333.596634ms ago: executing program 1 (id=12282): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$snapshot(r0, &(0x7f0000001600)="9d", 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) 260.799075ms ago: executing program 3 (id=12285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 259.255965ms ago: executing program 8 (id=12286): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 211.178946ms ago: executing program 8 (id=12287): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 211.050286ms ago: executing program 4 (id=12289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001b00)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b5181e6a485d9", 0x28}], 0x1}, 0x0) 210.630156ms ago: executing program 1 (id=12298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 174.519877ms ago: executing program 3 (id=12290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 170.015417ms ago: executing program 1 (id=12291): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x3000010, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 164.879126ms ago: executing program 4 (id=12292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x7, 0x0, &(0x7f0000000300)=0x0) timer_gettime(r2, &(0x7f0000000340)) 141.758337ms ago: executing program 8 (id=12293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) 128.333568ms ago: executing program 4 (id=12294): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 105.259198ms ago: executing program 8 (id=12295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x9, 0x24, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @loopback}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "e3322c", 0x12, "f0431e"}}}}}}, 0x0) 90.863918ms ago: executing program 3 (id=12296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x20, r1, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 88.402328ms ago: executing program 4 (id=12297): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setresgid(0xee00, 0xee01, 0x0) 77.591439ms ago: executing program 8 (id=12299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) 52.785539ms ago: executing program 8 (id=12300): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 41.054929ms ago: executing program 3 (id=12301): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 38.407239ms ago: executing program 4 (id=12302): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 0s ago: executing program 4 (id=12303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) kernel console output (not intermixed with test programs): de deleted [ 279.614935][ T9273] __quota_error: 337 callbacks suppressed [ 279.614952][ T9273] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 279.629254][ T9273] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:33: Failed to release dquot type 0 [ 279.645077][T29525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.674795][T29525] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (18333!=0) [ 279.705389][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.736928][T29536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9690'. [ 279.746115][T29536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9690'. [ 279.782516][ T29] audit: type=1400 audit(279.831:15577): avc: denied { name_bind } for pid=29543 comm="syz.6.9689" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 279.818496][T29545] bond7: entered promiscuous mode [ 279.823552][T29545] bond7: entered allmulticast mode [ 279.828969][T29545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.841488][T29545] bond7 (unregistering): Released all slaves [ 280.011886][T29623] netlink: 'syz.5.9699': attribute type 1 has an invalid length. [ 280.031321][T29623] bond7: entered promiscuous mode [ 280.036706][T29623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.054759][T29623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.064388][T29623] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 280.074628][T29623] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 280.086943][T29623] bond7: (slave vxcan3): making interface the new active one [ 280.094533][T29623] vxcan3: entered promiscuous mode [ 280.100899][T29623] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 280.155044][ T29] audit: type=1400 audit(280.212:15578): avc: denied { read } for pid=29667 comm="syz.4.9702" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 280.178016][ T29] audit: type=1400 audit(280.212:15579): avc: denied { open } for pid=29667 comm="syz.4.9702" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 280.203569][ T29] audit: type=1400 audit(280.252:15580): avc: denied { ioctl } for pid=29667 comm="syz.4.9702" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 280.252254][ T29] audit: type=1326 audit(280.292:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29670 comm="syz.1.9703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe23b9aeba9 code=0x0 [ 280.317915][T29687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9708'. [ 280.359690][ T29] audit: type=1400 audit(280.412:15582): avc: denied { setopt } for pid=29692 comm="syz.3.9711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.447474][T29705] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 280.552713][ T29] audit: type=1400 audit(280.602:15583): avc: denied { create } for pid=29722 comm="syz.3.9724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.563571][T29725] loop5: detected capacity change from 0 to 1024 [ 280.583447][T29725] EXT4-fs: Ignoring removed bh option [ 280.590016][T29725] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 280.593528][ T29] audit: type=1400 audit(280.632:15584): avc: denied { setopt } for pid=29722 comm="syz.3.9724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.642051][T29731] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9727'. [ 280.652631][T29725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.691445][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.715981][T29746] program syz.4.9730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.725776][ T29] audit: type=1400 audit(280.772:15585): avc: denied { read } for pid=29742 comm="syz.4.9730" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.772487][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9735'. [ 280.782326][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9735'. [ 280.817102][T29769] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 280.855980][T29772] ALSA: seq fatal error: cannot create timer (-19) [ 280.968866][T29790] loop5: detected capacity change from 0 to 1024 [ 280.986300][T29790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.005715][T29790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.049850][ T3366] hid_parser_main: 18 callbacks suppressed [ 281.049982][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.063350][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.070770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75a600: rx timeout, send abort [ 281.079062][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.088756][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.096308][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.103867][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.111328][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.119027][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.126523][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.134180][ T3366] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 281.143206][ T3366] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz1 [ 281.143482][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.320650][T29837] netlink: 'syz.6.9767': attribute type 3 has an invalid length. [ 281.337342][T29839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9768'. [ 281.385265][T29851] loop6: detected capacity change from 0 to 512 [ 281.413005][T29851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.501543][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.545660][T29876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29876 comm=+}[@ [ 281.559349][T29876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29876 comm=+}[@ [ 281.571499][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75bc00: rx timeout, send abort [ 281.571538][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75a600: abort rx timeout. Force session deactivation [ 281.631414][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9784'. [ 281.707495][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9784'. [ 281.736766][T29895] bond4: entered promiscuous mode [ 281.741988][T29895] bond4: entered allmulticast mode [ 281.779384][T29895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.792209][T29895] bond4 (unregistering): Released all slaves [ 281.813445][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9795'. [ 281.845880][T29979] IPVS: Error connecting to the multicast addr [ 281.955758][T29998] ref_ctr_offset mismatch. inode: 0x2708 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 282.071298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a75bc00: abort rx timeout. Force session deactivation [ 282.163619][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9819'. [ 282.188856][T30047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9816'. [ 282.210230][T30051] netlink: 'syz.1.9820': attribute type 21 has an invalid length. [ 282.241550][T30051] netlink: 'syz.1.9820': attribute type 1 has an invalid length. [ 282.324619][T30064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30064 comm=syz.6.9827 [ 282.382456][T30071] raw_sendmsg: syz.4.9830 forgot to set AF_INET. Fix it! [ 282.391959][T30075] netlink: 'syz.3.9832': attribute type 1 has an invalid length. [ 282.428041][T30077] netlink: 'syz.6.9835': attribute type 1 has an invalid length. [ 282.508302][T30091] netlink: 'syz.6.9840': attribute type 6 has an invalid length. [ 282.567776][T30100] loop6: detected capacity change from 0 to 256 [ 282.590063][T30100] Invalid ELF header magic: != ELF [ 282.778868][T30184] loop6: detected capacity change from 0 to 1024 [ 282.838205][T30184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.877154][T30184] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 282.893765][T30184] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 282.906269][T30184] EXT4-fs (loop6): This should not happen!! Data will be lost [ 282.906269][T30184] [ 282.916016][T30184] EXT4-fs (loop6): Total free blocks count 0 [ 282.922018][T30184] EXT4-fs (loop6): Free/Dirty block details [ 282.927986][T30184] EXT4-fs (loop6): free_blocks=20480 [ 282.933332][T30184] EXT4-fs (loop6): dirty_blocks=96 [ 282.938501][T30184] EXT4-fs (loop6): Block reservation details [ 282.944609][T30184] EXT4-fs (loop6): i_reserved_data_blocks=6 [ 282.969464][ T9273] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 284.086952][T30332] loop5: detected capacity change from 0 to 512 [ 284.179001][T30349] loop5: detected capacity change from 0 to 2048 [ 284.220692][T30349] loop5: p2 p3 p7 [ 284.665796][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 284.665809][ T29] audit: type=1326 audit(284.724:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.729518][ T29] audit: type=1326 audit(284.754:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.753089][ T29] audit: type=1326 audit(284.754:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.776207][ T29] audit: type=1326 audit(284.764:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.799334][ T29] audit: type=1326 audit(284.764:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.822370][ T29] audit: type=1326 audit(284.784:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.845365][ T29] audit: type=1326 audit(284.784:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.868429][ T29] audit: type=1326 audit(284.784:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.891597][ T29] audit: type=1326 audit(284.784:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 284.915181][ T29] audit: type=1326 audit(284.974:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30405 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 285.070158][T30425] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 285.079536][T30425] FAT-fs (loop11): unable to read boot sector [ 285.146319][T30436] netlink: 'syz.3.9936': attribute type 1 has an invalid length. [ 285.470894][T30486] __nla_validate_parse: 18 callbacks suppressed [ 285.470916][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9956'. [ 285.544768][T30501] netlink: 'syz.1.9960': attribute type 27 has an invalid length. [ 285.604322][T30501] ip6gre1: left allmulticast mode [ 285.609773][T30501] vxlan1: left promiscuous mode [ 285.645721][T30504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.654047][T30504] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.666954][T30504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.005858][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9985'. [ 286.014964][T30561] netlink: 'syz.3.9985': attribute type 1 has an invalid length. [ 286.023237][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9985'. [ 286.036750][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9985'. [ 286.045712][T30561] netlink: 'syz.3.9985': attribute type 1 has an invalid length. [ 286.053590][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9985'. [ 286.107002][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9990'. [ 286.121110][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9990'. [ 286.165710][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9993'. [ 286.184980][T30576] IPVS: Error joining to the multicast group [ 286.437702][T30596] netlink: 750 bytes leftover after parsing attributes in process `syz.6.10003'. [ 286.463765][T30600] SELinux: failed to load policy [ 286.558109][T30613] loop6: detected capacity change from 0 to 1764 [ 286.749616][T30638] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10015'. [ 286.898758][ T3393] kernel write not supported for file bpf-prog (pid: 3393 comm: kworker/1:4) [ 286.959298][T30682] loop6: detected capacity change from 0 to 1024 [ 286.970283][T30682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.985057][T30688] netlink: 'syz.4.10039': attribute type 1 has an invalid length. [ 286.985797][T30682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 287.010124][T30688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.015001][T30682] System zones: 0-1, 3-12 [ 287.026593][T30682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.039880][T30688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.047811][T30688] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.048490][T30682] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10037: bg 0: block 88: padding at end of block bitmap is not set [ 287.059781][T30688] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 287.094840][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.148703][T30742] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 287.165291][T30744] dummy0: left allmulticast mode [ 287.170322][T30744] dummy0: left promiscuous mode [ 287.175441][T30744] bridge0: port 3(dummy0) entered disabled state [ 287.185563][T30744] bridge_slave_0: left promiscuous mode [ 287.191303][T30744] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.199229][T30744] bridge_slave_1: left allmulticast mode [ 287.205067][T30744] bridge_slave_1: left promiscuous mode [ 287.210830][T30744] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.219302][T30744] bond0: (slave bond_slave_0): Releasing backup interface [ 287.227620][T30744] bond0: (slave bond_slave_1): Releasing backup interface [ 287.237315][T30744] team0: Port device team_slave_0 removed [ 287.245027][T30744] team0: Port device team_slave_1 removed [ 287.252308][T30744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.259906][T30744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.268301][T30744] bond1: (slave bridge1): Releasing backup interface [ 287.275916][T30744] batadv1: left allmulticast mode [ 287.281011][T30744] batadv1: left promiscuous mode [ 287.286065][T30744] bridge0: port 4(batadv1) entered disabled state [ 287.296627][T30744] bond3: (slave geneve2): Releasing active interface [ 287.306624][T30744] bond4: (slave geneve3): Releasing active interface [ 287.318416][T30744] bond5: left allmulticast mode [ 287.323343][T30744] bond5: left promiscuous mode [ 287.328323][T30744] bridge0: port 5(bond5) entered disabled state [ 287.336062][T30744] batadv2: left allmulticast mode [ 287.341150][T30744] batadv2: left promiscuous mode [ 287.346340][T30744] bridge0: port 6(batadv2) entered disabled state [ 287.353609][T30744] bond6: left allmulticast mode [ 287.358515][T30744] bond6: left promiscuous mode [ 287.363494][T30744] bridge0: port 7(bond6) entered disabled state [ 287.382063][ T9303] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.391358][ T9303] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.399848][ T9303] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.408920][ T9303] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.438098][T30753] bridge0: entered promiscuous mode [ 287.443500][T30753] macvtap0: entered allmulticast mode [ 287.448872][T30753] bridge0: entered allmulticast mode [ 287.454744][T30753] bridge0: port 1(macvtap0) entered blocking state [ 287.461587][T30753] bridge0: port 1(macvtap0) entered disabled state [ 287.469121][T30753] bridge0: left allmulticast mode [ 287.474195][T30753] bridge0: left promiscuous mode [ 287.869044][T30779] loop5: detected capacity change from 0 to 1024 [ 287.877108][T30779] EXT4-fs: Ignoring removed bh option [ 287.889416][T30779] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.909337][T30779] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.10056: inode #2304: comm syz.5.10056: iget: illegal inode # [ 287.922994][T30779] EXT4-fs (loop5): Remounting filesystem read-only [ 287.929547][T30779] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 287.944753][T30779] EXT4-fs (loop5): mount failed [ 288.304486][T30850] wg2: entered promiscuous mode [ 288.309427][T30850] wg2: entered allmulticast mode [ 288.310623][T30852] loop5: detected capacity change from 0 to 256 [ 288.910442][T30905] netlink: 'syz.4.10104': attribute type 1 has an invalid length. [ 289.033548][T30913] loop6: detected capacity change from 0 to 512 [ 289.071361][T30913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.153914][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.204229][T30923] netlink: 'syz.3.10112': attribute type 1 has an invalid length. [ 289.234360][T30923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.253613][T30923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.270409][T30923] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.297996][T30923] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 289.594674][T31007] gre1: left allmulticast mode [ 289.600314][T31007] team0: Port device gre1 removed [ 289.607912][T31007] bond0: (slave geneve0): Releasing active interface [ 289.630442][T31007] batadv1: left allmulticast mode [ 289.635554][T31007] batadv1: left promiscuous mode [ 289.640757][T31007] bridge0: port 1(batadv1) entered disabled state [ 289.672087][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 289.672104][ T29] audit: type=1400 audit(289.736:15973): avc: denied { watch watch_reads } for pid=31010 comm="syz.6.10129" path="/1922/file1" dev="tmpfs" ino=9916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 289.723264][ T29] audit: type=1400 audit(289.766:15974): avc: denied { watch } for pid=31010 comm="syz.6.10129" path="/1922" dev="tmpfs" ino=9911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.765447][T31007] bond1: left allmulticast mode [ 289.770394][T31007] bond1: left promiscuous mode [ 289.775309][T31007] bridge0: port 2(bond1) entered disabled state [ 289.785080][T31007] bond2: left allmulticast mode [ 289.790041][T31007] bond2: left promiscuous mode [ 289.795012][T31007] bridge0: port 3(bond2) entered disabled state [ 289.804947][ T29] audit: type=1400 audit(289.866:15975): avc: denied { create } for pid=31012 comm="syz.6.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.838843][ T29] audit: type=1400 audit(289.866:15976): avc: denied { write } for pid=31012 comm="syz.6.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.840076][T31007] bond3: left allmulticast mode [ 289.858788][ T29] audit: type=1400 audit(289.866:15977): avc: denied { nlmsg_write } for pid=31012 comm="syz.6.10130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.863202][ T29] audit: type=1326 audit(289.926:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.6.10131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 289.863814][T31007] bond3: left promiscuous mode [ 289.884033][ T29] audit: type=1326 audit(289.926:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.6.10131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 289.907878][T31007] bridge0: port 4(bond3) entered disabled state [ 289.912403][ T29] audit: type=1326 audit(289.926:15980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.6.10131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 289.967403][ T29] audit: type=1326 audit(289.996:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.6.10131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 289.990588][ T29] audit: type=1326 audit(289.996:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.6.10131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 290.016503][T31007] batadv2: left allmulticast mode [ 290.021618][T31007] batadv2: left promiscuous mode [ 290.026856][T31007] bridge0: port 5(batadv2) entered disabled state [ 290.056622][T31021] netlink: 'syz.6.10133': attribute type 1 has an invalid length. [ 290.068057][T31007] batadv3: left allmulticast mode [ 290.073222][T31007] batadv3: left promiscuous mode [ 290.078447][T31007] bridge0: port 6(batadv3) entered disabled state [ 290.090333][ T9273] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.105301][T31021] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.124429][T31055] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.135256][T31055] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.147788][T31055] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 290.166884][ T9273] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.186320][ T9273] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.194858][ T9273] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.475520][T31104] loop6: detected capacity change from 0 to 2048 [ 290.489469][T31104] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.510323][T31104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.529755][T31104] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10151: bg 0: block 234: padding at end of block bitmap is not set [ 290.548219][T31104] EXT4-fs (loop6): Remounting filesystem read-only [ 290.575803][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.647977][T31126] ref_ctr_offset mismatch. inode: 0x26aa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 291.552395][T31183] __nla_validate_parse: 8 callbacks suppressed [ 291.552449][T31183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10182'. [ 291.799886][T31207] bond0: (slave dummy0): Releasing backup interface [ 291.806540][T31207] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 291.826038][T31207] dummy0: left promiscuous mode [ 291.840681][T31207] bond0: (slave bridge_slave_1): Releasing backup interface [ 291.849915][T31207] bridge_slave_1: left promiscuous mode [ 291.856415][T31207] bond1: (slave bridge1): Releasing backup interface [ 291.863444][T31207] bridge1: left promiscuous mode [ 291.869376][T31207] bond2: (slave geneve2): Releasing active interface [ 291.876960][T31207] batadv1: left allmulticast mode [ 291.882048][T31207] batadv1: left promiscuous mode [ 291.887128][T31207] bridge0: port 1(batadv1) entered disabled state [ 291.895069][T31207] batadv2: left allmulticast mode [ 291.900184][T31207] batadv2: left promiscuous mode [ 291.905340][T31207] bridge0: port 2(batadv2) entered disabled state [ 291.912940][T31207] bond3: left allmulticast mode [ 291.918186][T31207] bond3: left promiscuous mode [ 291.923293][T31207] bridge0: port 3(bond3) entered disabled state [ 291.934908][T31207] bond4: left allmulticast mode [ 291.939954][T31207] bond4: left promiscuous mode [ 291.944938][T31207] bridge0: port 4(bond4) entered disabled state [ 291.956048][T31207] bond5: left allmulticast mode [ 291.960987][T31207] bond5: left promiscuous mode [ 291.965928][T31207] bridge0: port 5(bond5) entered disabled state [ 291.979346][T31207] bond6: (slave geneve0): Releasing active interface [ 292.006414][T31207] bond7: (slave vxcan3): Releasing backup interface [ 292.013274][T31207] vxcan3: left promiscuous mode [ 292.030164][ T9273] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.039702][ T109] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.058386][ T109] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.067019][ T109] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.124128][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.140907][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.159201][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.169618][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.179663][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.189588][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10196'. [ 292.237435][T31229] loop6: detected capacity change from 0 to 128 [ 292.269985][T31229] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 292.278199][T31229] FAT-fs (loop6): Filesystem has been set read-only [ 292.318982][T31237] loop6: detected capacity change from 0 to 164 [ 292.328277][T31237] syz.6.10203: attempt to access beyond end of device [ 292.328277][T31237] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 292.354765][T31237] syz.6.10203: attempt to access beyond end of device [ 292.354765][T31237] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 292.403476][T31247] bond7: entered promiscuous mode [ 292.408688][T31247] bond7: entered allmulticast mode [ 292.414109][T31247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.424241][T31247] bond7 (unregistering): Released all slaves [ 292.562398][T31325] serio: Serial port ptm0 [ 292.566888][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10211'. [ 292.581449][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10211'. [ 292.592803][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10211'. [ 292.639520][T31337] loop5: detected capacity change from 0 to 128 [ 292.653966][T31337] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 292.662189][T31337] FAT-fs (loop5): Filesystem has been set read-only [ 292.917310][T31372] bridge_slave_0: left promiscuous mode [ 292.923367][T31372] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.934635][T31372] bridge_slave_1: left allmulticast mode [ 292.940351][T31372] bridge_slave_1: left promiscuous mode [ 292.946428][T31372] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.959103][T31372] bond0: (slave bond_slave_0): Releasing backup interface [ 292.983262][T31372] bond0: (slave bond_slave_1): Releasing backup interface [ 293.000160][T31372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.016968][T31372] bond2: (slave bridge1): Releasing backup interface [ 293.025004][T31372] bond3: (slave geneve2): Releasing active interface [ 293.061937][T31372] bond4: (slave geneve3): Releasing active interface [ 293.099561][T31372] batadv1: left allmulticast mode [ 293.104706][T31372] batadv1: left promiscuous mode [ 293.109948][T31372] bridge0: port 3(batadv1) entered disabled state [ 293.122837][T31372] batadv2: left allmulticast mode [ 293.127985][T31372] batadv2: left promiscuous mode [ 293.133202][T31372] bridge0: port 4(batadv2) entered disabled state [ 293.153045][T31372] bond5: left allmulticast mode [ 293.158034][T31372] bond5: left promiscuous mode [ 293.162925][T31372] bridge0: port 5(bond5) entered disabled state [ 293.213527][ T9275] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.234827][ T9275] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.251302][ T9275] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.264367][ T9275] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.428523][T31413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31413 comm=syz.6.10246 [ 293.441314][T31413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31413 comm=syz.6.10246 [ 293.463209][T31415] loop5: detected capacity change from 0 to 1024 [ 293.490075][T31415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.537360][T31415] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10247: Allocating blocks 449-513 which overlap fs metadata [ 293.579407][T31414] EXT4-fs (loop5): pa ffff888105796ee0: logic 48, phys. 177, len 21 [ 293.587502][T31414] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 293.609802][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.889430][T31433] netlink: 'syz.6.10254': attribute type 5 has an invalid length. [ 293.909843][T31437] bridge_slave_0: left allmulticast mode [ 293.915563][T31437] bridge_slave_0: left promiscuous mode [ 293.921324][T31437] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.966786][T31437] bond0: (slave bridge_slave_1): Releasing backup interface [ 293.981587][T31437] bond0: (slave bond_slave_0): Releasing backup interface [ 294.002969][T31437] bond0: (slave bond_slave_1): Releasing backup interface [ 294.013343][T31437] team0: Port device team_slave_0 removed [ 294.023983][T31437] team0: Port device team_slave_1 removed [ 294.030921][T31437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.043052][T31437] bond1: (slave geneve2): Releasing active interface [ 294.050951][T31437] batadv1: left allmulticast mode [ 294.056033][T31437] batadv1: left promiscuous mode [ 294.061192][T31437] bridge0: port 2(batadv1) entered disabled state [ 294.072523][T31437] bond2: left allmulticast mode [ 294.077494][T31437] bond2: left promiscuous mode [ 294.082420][T31437] bridge0: port 3(bond2) entered disabled state [ 294.089703][T31437] bond3: left allmulticast mode [ 294.095135][T31437] bond3: left promiscuous mode [ 294.100139][T31437] bridge0: port 4(bond3) entered disabled state [ 294.762699][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 294.762794][ T29] audit: type=1400 audit(294.819:16077): avc: denied { name_connect } for pid=31535 comm="syz.4.10283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 294.835951][ T29] audit: type=1400 audit(294.889:16078): avc: denied { mount } for pid=31562 comm="syz.4.10285" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 294.888856][ T29] audit: type=1326 audit(294.949:16079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31566 comm="syz.1.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 294.923769][ T29] audit: type=1326 audit(294.949:16080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31566 comm="syz.1.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 294.947017][ T29] audit: type=1400 audit(294.949:16081): avc: denied { sys_nice } for pid=31566 comm="syz.1.10287" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 294.967695][ T29] audit: type=1326 audit(294.949:16082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31566 comm="syz.1.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 294.991222][ T29] audit: type=1326 audit(294.949:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31566 comm="syz.1.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 295.051005][ T29] audit: type=1400 audit(295.109:16084): avc: denied { kexec_image_load } for pid=31572 comm="syz.6.10289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 295.151030][ T29] audit: type=1326 audit(295.209:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31580 comm="syz.5.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cb2feba9 code=0x7ffc0000 [ 295.205372][ T29] audit: type=1326 audit(295.209:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31580 comm="syz.5.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cb2feba9 code=0x7ffc0000 [ 295.238838][T31579] loop6: detected capacity change from 0 to 8192 [ 295.540870][T31609] sctp: [Deprecated]: syz.4.10299 (pid 31609) Use of int in max_burst socket option deprecated. [ 295.540870][T31609] Use struct sctp_assoc_value instead [ 295.709339][T31633] wireguard0: entered promiscuous mode [ 295.714848][T31633] wireguard0: entered allmulticast mode [ 297.332626][T31766] loop5: detected capacity change from 0 to 8192 [ 297.462353][T31776] SELinux: failed to load policy [ 297.468850][T31777] loop5: detected capacity change from 0 to 512 [ 297.490404][T31777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.560303][T31787] __nla_validate_parse: 15 callbacks suppressed [ 297.560322][T31787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10368'. [ 297.684355][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.253874][T31848] loop6: detected capacity change from 0 to 1024 [ 298.277752][T31848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.294969][T31851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10395'. [ 298.328771][T31848] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.10394: Allocating blocks 385-513 which overlap fs metadata [ 298.355674][T31848] EXT4-fs (loop6): pa ffff888105796e00: logic 16, phys. 129, len 24 [ 298.363732][T31848] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 298.532488][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.697724][T31890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10411'. [ 298.772724][T31890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10411'. [ 299.158906][T31865] Set syz1 is full, maxelem 65536 reached [ 299.423264][T31921] atomic_op ffff88814d633528 conn xmit_atomic 0000000000000000 [ 299.543746][T31931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10430'. [ 299.708646][T31944] netlink: 'syz.4.10434': attribute type 10 has an invalid length. [ 299.716669][T31944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10434'. [ 299.744583][T31944] dummy0: entered promiscuous mode [ 299.865891][T31948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10436'. [ 299.952122][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 299.952148][ T29] audit: type=1400 audit(300.011:16268): avc: denied { relabelfrom } for pid=31953 comm="syz.4.10439" name="" dev="pipefs" ino=83904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 300.020462][ T29] audit: type=1400 audit(300.081:16269): avc: denied { lock } for pid=31958 comm="syz.4.10441" path="socket:[84073]" dev="sockfs" ino=84073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 300.075962][T31964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10443'. [ 300.111290][ T29] audit: type=1400 audit(300.172:16270): avc: denied { write } for pid=31965 comm="syz.4.10444" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 300.167839][ T29] audit: type=1326 audit(300.232:16271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.192215][ T29] audit: type=1326 audit(300.262:16272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.216620][ T29] audit: type=1326 audit(300.262:16273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.239974][ T29] audit: type=1326 audit(300.262:16274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.263138][ T29] audit: type=1326 audit(300.262:16275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.286253][ T29] audit: type=1326 audit(300.262:16276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.309319][ T29] audit: type=1326 audit(300.262:16277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31969 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 300.483393][T31990] pim6reg: entered allmulticast mode [ 300.489773][T31990] pim6reg: left allmulticast mode [ 300.671891][T32020] program syz.5.10466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.802375][T32032] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10475'. [ 300.841146][T32032] batadv3: entered promiscuous mode [ 300.846555][T32032] batadv3: entered allmulticast mode [ 300.889580][T32046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32046 comm=syz.1.10479 [ 300.902801][T32046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10479'. [ 301.095425][T32077] 9pnet_fd: Insufficient options for proto=fd [ 301.136633][T32081] loop5: detected capacity change from 0 to 512 [ 301.146516][T32081] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 301.146679][T32083] wireguard0: entered promiscuous mode [ 301.161929][T32083] wireguard0: entered allmulticast mode [ 301.174100][T32081] EXT4-fs (loop5): 1 truncate cleaned up [ 301.180307][T32081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.211524][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.555486][T32158] wireguard0: entered promiscuous mode [ 301.561009][T32158] wireguard0: entered allmulticast mode [ 301.839179][T32187] ALSA: seq fatal error: cannot create timer (-19) [ 302.143564][T32226] netlink: 'syz.6.10547': attribute type 9 has an invalid length. [ 302.156651][T32226] netlink: 'syz.6.10547': attribute type 9 has an invalid length. [ 302.216569][T32234] program syz.6.10551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.238866][T32234] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.258863][T32236] netlink: 'syz.3.10552': attribute type 3 has an invalid length. [ 302.377890][T32244] wireguard0: entered promiscuous mode [ 302.383668][T32244] wireguard0: entered allmulticast mode [ 302.428605][T32256] lo speed is unknown, defaulting to 1000 [ 302.435901][T32256] lo speed is unknown, defaulting to 1000 [ 302.442005][T32256] lo speed is unknown, defaulting to 1000 [ 302.519511][T32256] infiniband sz1: set active [ 302.524288][T32256] infiniband sz1: added lo [ 302.528865][ T36] lo speed is unknown, defaulting to 1000 [ 302.565986][T32256] RDS/IB: sz1: added [ 302.596053][T32256] smc: adding ib device sz1 with port count 1 [ 302.627494][T32256] smc: ib device sz1 port 1 has pnetid [ 302.633765][ T36] lo speed is unknown, defaulting to 1000 [ 302.640031][T32256] lo speed is unknown, defaulting to 1000 [ 302.677160][T32256] lo speed is unknown, defaulting to 1000 [ 302.720118][T32256] lo speed is unknown, defaulting to 1000 [ 302.757976][T32256] lo speed is unknown, defaulting to 1000 [ 302.839551][T32256] lo speed is unknown, defaulting to 1000 [ 302.964816][T32307] loop5: detected capacity change from 0 to 256 [ 303.050541][T32326] __nla_validate_parse: 2 callbacks suppressed [ 303.050556][T32326] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10584'. [ 303.156490][T32345] tipc: Enabled bearer , priority 0 [ 303.177456][T32345] tipc: Disabling bearer [ 303.499604][T32399] loop5: detected capacity change from 0 to 512 [ 303.509295][T32399] EXT4-fs: Ignoring removed nobh option [ 303.516786][T32399] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 303.532980][T32399] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10615: invalid indirect mapped block 256 (level 1) [ 303.549211][T32399] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.10615: invalid indirect mapped block 2683928664 (level 1) [ 303.566764][T32399] EXT4-fs (loop5): 1 truncate cleaned up [ 303.572913][T32399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.589915][T32399] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10615: Invalid block bitmap block 3 in block_group 0 [ 303.607007][T32399] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10615: Invalid block bitmap block 3 in block_group 0 [ 303.620719][T32399] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.10615: Invalid block bitmap block 3 in block_group 0 [ 303.665217][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.690148][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.699278][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.708592][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.728947][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.738106][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.747531][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.795544][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.805126][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.816512][T32408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10616'. [ 303.833885][T32419] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.997622][T32448] wireguard0: entered promiscuous mode [ 304.003189][T32448] wireguard0: entered allmulticast mode [ 304.036116][T32461] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 304.212389][ T3412] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 304.352506][ T3412] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 304.384310][T32511] wireguard0: entered promiscuous mode [ 304.389838][T32511] wireguard0: entered allmulticast mode [ 304.650313][T32554] loop5: detected capacity change from 0 to 1024 [ 304.665306][T32554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.681821][T32557] wireguard0: entered promiscuous mode [ 304.687743][T32557] wireguard0: entered allmulticast mode [ 304.690250][T32554] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.10672: Allocating blocks 385-513 which overlap fs metadata [ 304.711321][T32554] EXT4-fs (loop5): pa ffff88810069a8c0: logic 16, phys. 129, len 24 [ 304.719506][T32554] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 304.762072][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.783004][T32572] loop5: detected capacity change from 0 to 1024 [ 304.790391][T32572] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 304.808714][T32572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.865396][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.972355][T32599] loop6: detected capacity change from 0 to 2048 [ 304.983617][T32599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.020198][ T9273] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 305.036110][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.080705][T32618] rdma_op ffff888133384180 conn xmit_rdma 0000000000000000 [ 305.285962][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 305.285980][ T29] audit: type=1400 audit(305.354:16437): avc: denied { mounton } for pid=32624 comm="syz.6.10690" path="/proc/4370/cgroup" dev="proc" ino=86052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 305.362879][T32629] loop6: detected capacity change from 0 to 2048 [ 305.371015][T32629] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 305.371015][T32629] [ 305.668962][ T29] audit: type=1400 audit(305.734:16438): avc: denied { create } for pid=32642 comm="syz.4.10698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 305.703466][ T29] audit: type=1400 audit(305.764:16439): avc: denied { setopt } for pid=32642 comm="syz.4.10698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 305.797477][T32651] SELinux: security_context_str_to_sid (ÿÿ) failed with errno=-22 [ 305.798252][ T29] audit: type=1400 audit(305.864:16440): avc: denied { mounton } for pid=32650 comm="+}[@" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 305.876213][ T29] audit: type=1326 audit(305.904:16441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.4.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 305.899343][ T29] audit: type=1326 audit(305.904:16442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.4.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 305.923310][ T29] audit: type=1326 audit(305.904:16443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.4.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 305.946486][ T29] audit: type=1326 audit(305.904:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32652 comm="syz.4.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 305.952746][T32656] loop5: detected capacity change from 0 to 128 [ 306.036874][T32656] syz.5.10703: attempt to access beyond end of device [ 306.036874][T32656] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 306.401317][T32709] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.410723][ T29] audit: type=1400 audit(306.475:16445): avc: denied { mounton } for pid=32708 comm="syz.6.10723" path="/2054/file0" dev="tmpfs" ino=10594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 306.437434][T32709] FAT-fs (loop13): unable to read boot sector [ 306.492255][ T29] audit: type=1400 audit(306.565:16446): avc: denied { bind } for pid=32715 comm="syz.6.10726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.761534][T32750] Falling back ldisc for ttyS3. [ 306.852658][T32765] loop6: detected capacity change from 0 to 8192 [ 306.905006][ T325] loop5: detected capacity change from 0 to 1024 [ 306.947763][ T9273] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 306.962238][ T325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 306.990705][ T325] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 4: comm syz.5.10753: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.009410][ T325] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 307.022051][ T325] EXT4-fs (loop5): This should not happen!! Data will be lost [ 307.022051][ T325] [ 307.052031][ T325] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.10753: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.071243][ T325] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.10753: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.097059][ T325] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.10753: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.115329][ T325] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 4: comm syz.5.10753: lblock 4 mapped to illegal pblock 4 (length 1) [ 307.129883][ T352] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.10753: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 307.160839][ T352] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 307.194090][ T9303] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm kworker/u8:63: lblock 0 mapped to illegal pblock 0 (length 1) [ 307.214874][ T9303] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 307.227260][ T9303] EXT4-fs (loop5): This should not happen!! Data will be lost [ 307.227260][ T9303] [ 307.240846][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 307.495289][ T391] program syz.5.10780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.505144][ T391] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.578759][ T393] lo speed is unknown, defaulting to 1000 [ 307.633650][ T397] loop5: detected capacity change from 0 to 8192 [ 307.647666][ T397] msdos: Unknown parameter 'A' [ 307.766467][ T428] SELinux: truncated policydb string identifier [ 307.800756][ T428] SELinux: failed to load policy [ 308.279682][ T517] SELinux: truncated policydb string identifier [ 308.297886][ T517] SELinux: failed to load policy [ 308.352762][ T533] netlink: 'syz.4.10823': attribute type 1 has an invalid length. [ 308.360741][ T533] netlink: 'syz.4.10823': attribute type 6 has an invalid length. [ 308.368655][ T533] netlink: 'syz.4.10823': attribute type 3 has an invalid length. [ 308.376564][ T533] __nla_validate_parse: 13 callbacks suppressed [ 308.376678][ T533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10823'. [ 308.648321][ T553] program syz.5.10830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.309580][ T575] lo speed is unknown, defaulting to 1000 [ 309.355692][ T582] loop6: detected capacity change from 0 to 8192 [ 309.365877][ T582] msdos: Unknown parameter 'A' [ 309.678339][ T648] loop6: detected capacity change from 0 to 128 [ 309.712010][ T648] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 309.719951][ T648] FAT-fs (loop6): Filesystem has been set read-only [ 309.730151][ T648] syz.6.10857: attempt to access beyond end of device [ 309.730151][ T648] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 309.754991][ T648] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 309.763017][ T648] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 309.786061][ T659] syz.6.10857: attempt to access beyond end of device [ 309.786061][ T659] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 309.799452][ T659] Buffer I/O error on dev loop6, logical block 2065, async page read [ 309.823053][ T659] syz.6.10857: attempt to access beyond end of device [ 309.823053][ T659] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 309.836667][ T659] Buffer I/O error on dev loop6, logical block 2066, async page read [ 309.851471][ T659] syz.6.10857: attempt to access beyond end of device [ 309.851471][ T659] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 309.864999][ T659] Buffer I/O error on dev loop6, logical block 2067, async page read [ 309.873341][ T659] syz.6.10857: attempt to access beyond end of device [ 309.873341][ T659] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 309.886715][ T659] Buffer I/O error on dev loop6, logical block 2068, async page read [ 309.895122][ T659] syz.6.10857: attempt to access beyond end of device [ 309.895122][ T659] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 309.908570][ T659] Buffer I/O error on dev loop6, logical block 2069, async page read [ 309.917026][ T659] syz.6.10857: attempt to access beyond end of device [ 309.917026][ T659] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 309.930460][ T659] Buffer I/O error on dev loop6, logical block 2070, async page read [ 309.938830][ T659] syz.6.10857: attempt to access beyond end of device [ 309.938830][ T659] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 309.952228][ T659] Buffer I/O error on dev loop6, logical block 2071, async page read [ 309.960608][ T659] syz.6.10857: attempt to access beyond end of device [ 309.960608][ T659] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 309.973981][ T659] Buffer I/O error on dev loop6, logical block 2072, async page read [ 309.989401][ T648] Buffer I/O error on dev loop6, logical block 2065, async page read [ 309.999610][ T648] Buffer I/O error on dev loop6, logical block 2066, async page read [ 310.205876][ T690] lo speed is unknown, defaulting to 1000 [ 310.559307][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 310.559391][ T29] audit: type=1400 audit(310.637:16633): avc: denied { write } for pid=718 comm="syz.4.10876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 310.633236][ T29] audit: type=1400 audit(310.707:16634): avc: denied { listen } for pid=724 comm="syz.6.10878" path=2F323038312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 310.686660][ T733] sg_write: data in/out 127/8 bytes for SCSI command 0x7f-- guessing data in; [ 310.686660][ T733] program syz.6.10880 not setting count and/or reply_len properly [ 310.865908][ T742] lo speed is unknown, defaulting to 1000 [ 311.254357][ T29] audit: type=1326 audit(311.327:16635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.277393][ T29] audit: type=1326 audit(311.327:16636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.300557][ T29] audit: type=1326 audit(311.327:16637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.323554][ T29] audit: type=1326 audit(311.327:16638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.365505][ T29] audit: type=1326 audit(311.437:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.388574][ T29] audit: type=1326 audit(311.437:16640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=785 comm="syz.3.10890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.445444][ T791] lo speed is unknown, defaulting to 1000 [ 311.453777][ T802] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10895'. [ 311.504109][ T29] audit: type=1326 audit(311.527:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=803 comm="syz.3.10894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.527222][ T29] audit: type=1326 audit(311.527:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=803 comm="syz.3.10894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f762eba9 code=0x7ffc0000 [ 311.558862][ T807] netlink: 'syz.6.10896': attribute type 13 has an invalid length. [ 311.685007][ T9265] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.743486][ T9265] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.756184][ T9265] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.834419][ T9265] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.974583][ T855] 9pnet_fd: Insufficient options for proto=fd [ 312.041182][ T867] loop5: detected capacity change from 0 to 512 [ 312.089050][ T867] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.125650][ T867] EXT4-fs (loop5): mount failed [ 312.242573][ T891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10916'. [ 312.251823][ T891] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10916'. [ 312.279089][ T888] netlink: 'syz.5.10915': attribute type 13 has an invalid length. [ 312.619868][ T881] lo speed is unknown, defaulting to 1000 [ 312.669247][ T9273] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.704986][ T9273] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.737387][ T9273] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.793981][ T9273] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.817673][ T947] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10924'. [ 312.992738][ T969] netlink: 'syz.3.10935': attribute type 13 has an invalid length. [ 313.164376][ T905] lo speed is unknown, defaulting to 1000 [ 313.170218][ T905] sz1: Port: 1 Link DOWN [ 313.174760][ T9265] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.184878][ T905] lo speed is unknown, defaulting to 1000 [ 313.204920][ T9265] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.215123][ T986] loop6: detected capacity change from 0 to 256 [ 313.227440][ T9265] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.231827][ T986] msdos: Bad value for 'fmask' [ 313.254766][ T9265] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.562966][ T1027] tipc: Enabling of bearer rejected, failed to enable media [ 313.568897][ T1028] loop5: detected capacity change from 0 to 256 [ 313.584807][ T1028] msdos: Bad value for 'fmask' [ 314.547691][ T1106] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10987'. [ 314.556770][ T1106] netem: unknown loss type 0 [ 314.561452][ T1106] netem: change failed [ 314.596190][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10989'. [ 314.621330][ T1112] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10989'. [ 314.798375][ T1136] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11001'. [ 315.489027][ T1164] macvlan1: entered promiscuous mode [ 315.495202][ T1164] ipvlan0: entered promiscuous mode [ 315.523654][ T1164] ipvlan0: left promiscuous mode [ 315.539087][ T1164] macvlan1: left promiscuous mode [ 315.570235][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 315.570253][ T29] audit: type=1400 audit(315.639:16919): avc: denied { create } for pid=1172 comm="syz.6.11014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.600364][ T29] audit: type=1400 audit(315.639:16920): avc: denied { setopt } for pid=1172 comm="syz.6.11014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.673226][ T1177] tipc: Enabled bearer , priority 0 [ 315.681638][ T1177] tipc: Disabling bearer [ 315.817707][ T29] audit: type=1400 audit(315.889:16921): avc: denied { write } for pid=1186 comm="syz.6.11029" path="socket:[87992]" dev="sockfs" ino=87992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.869938][ T29] audit: type=1400 audit(315.889:16922): avc: denied { read } for pid=1186 comm="syz.6.11029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.948132][ T1195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11021'. [ 315.967421][ T1195] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11021'. [ 316.003825][ T1202] loop6: detected capacity change from 0 to 128 [ 316.017507][ T1202] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.041350][ T1202] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.063047][ T29] audit: type=1400 audit(316.130:16923): avc: denied { mount } for pid=1201 comm="syz.6.11024" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 316.120431][ T29] audit: type=1400 audit(316.190:16924): avc: denied { watch } for pid=1210 comm="syz.5.11030" path="/2132/file0" dev="tmpfs" ino=10979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.146578][ T29] audit: type=1400 audit(316.190:16925): avc: denied { unmount } for pid=5138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 316.197608][ T1218] netlink: 92 bytes leftover after parsing attributes in process `syz.6.11031'. [ 316.206863][ T1218] netem: unknown loss type 0 [ 316.211653][ T29] audit: type=1400 audit(316.260:16926): avc: denied { create } for pid=1216 comm="syz.5.11034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 316.230803][ T29] audit: type=1400 audit(316.260:16927): avc: denied { setopt } for pid=1216 comm="syz.5.11034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 316.252265][ T29] audit: type=1326 audit(316.330:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1220 comm="syz.4.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 316.365881][ T1232] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11049'. [ 316.587789][ T1261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11053'. [ 316.742713][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11051'. [ 317.693188][ T1403] loop6: detected capacity change from 0 to 512 [ 317.700342][ T1403] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.873824][ T1435] netlink: 'syz.6.11123': attribute type 83 has an invalid length. [ 318.104613][ T3419] hid_parser_main: 18 callbacks suppressed [ 318.104631][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.118086][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.125611][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.133154][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.140691][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.148466][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.155983][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.163462][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.170951][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.178400][ T3419] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 318.191944][ T3419] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.380023][ T1514] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.397505][ T1512] loop5: detected capacity change from 0 to 2048 [ 318.443719][ T1512] loop5: p2 p3 p7 [ 318.538622][ T1521] lo speed is unknown, defaulting to 1000 [ 318.596417][ T1569] netlink: 'syz.5.11166': attribute type 21 has an invalid length. [ 318.748469][ T1609] openvswitch: netlink: Message has 6 unknown bytes. [ 318.970174][ T1634] program syz.3.11188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.040918][ T1649] loop6: detected capacity change from 0 to 512 [ 319.077318][ T1649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.145026][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.315150][ T1683] openvswitch: netlink: Message has 6 unknown bytes. [ 319.623817][ T1715] __nla_validate_parse: 10 callbacks suppressed [ 319.623836][ T1715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11215'. [ 319.658050][ T1715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.675118][ T1715] bond5: (slave batadv4): Opening slave failed [ 319.735586][ T1769] netlink: 'syz.4.11225': attribute type 21 has an invalid length. [ 319.743718][ T1769] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11225'. [ 319.826999][ T1785] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11230'. [ 319.841016][ T1785] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11230'. [ 320.565725][ T1798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11237'. [ 320.568964][ T1792] loop5: detected capacity change from 0 to 512 [ 320.581773][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 320.581791][ T29] audit: type=1400 audit(320.652:17141): avc: denied { mounton } for pid=1790 comm="syz.5.11233" path="/2152/file1" dev="tmpfs" ino=11085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 320.592691][ T1794] pim6reg: entered allmulticast mode [ 320.628762][ T29] audit: type=1326 audit(320.692:17142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.651888][ T29] audit: type=1326 audit(320.692:17143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.663571][ T1794] pim6reg: left allmulticast mode [ 320.675019][ T29] audit: type=1326 audit(320.692:17144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.702967][ T29] audit: type=1326 audit(320.692:17145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.726013][ T29] audit: type=1326 audit(320.692:17146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.749034][ T29] audit: type=1326 audit(320.692:17147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.755572][ T1792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.772042][ T29] audit: type=1326 audit(320.692:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.772143][ T29] audit: type=1326 audit(320.692:17149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.830730][ T29] audit: type=1326 audit(320.692:17150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1803 comm="syz.6.11238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe142c3eba9 code=0x7ffc0000 [ 320.866480][ T1798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.893382][ T1806] bond7: (slave batadv0): Opening slave failed [ 320.934243][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.990236][ T1856] SELinux: failed to load policy [ 321.140026][ T1879] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11250'. [ 321.252417][ T1896] SELinux: failed to load policy [ 321.311086][ T1913] netlink: 'syz.5.11265': attribute type 3 has an invalid length. [ 321.458262][ T1935] netlink: 'syz.1.11276': attribute type 21 has an invalid length. [ 321.482478][ T1935] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11276'. [ 321.710989][ T1969] block device autoloading is deprecated and will be removed. [ 321.862620][ T1981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11295'. [ 321.987177][ T1992] loop5: detected capacity change from 0 to 512 [ 322.027484][ T1992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.070720][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.100533][ T2009] pim6reg: entered allmulticast mode [ 322.132402][ T2009] pim6reg: left allmulticast mode [ 322.350551][ T2031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2031 comm=syz.1.11310 [ 323.045090][ T2089] netlink: 'syz.6.11335': attribute type 1 has an invalid length. [ 323.053063][ T2089] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.11335'. [ 323.115784][ T2095] atomic_op ffff88812bf62128 conn xmit_atomic 0000000000000000 [ 323.192174][ T2097] SELinux: failed to load policy [ 323.199792][ T2101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2101 comm=syz.6.11340 [ 323.288716][ T2112] loop6: detected capacity change from 0 to 512 [ 323.303413][ T2112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.333567][ T2112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.621353][ T2136] loop5: detected capacity change from 0 to 128 [ 323.665468][ T2136] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.705401][ T5114] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.724804][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.794733][ T2145] loop5: detected capacity change from 0 to 2048 [ 323.827147][ T2145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.873110][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11353'. [ 324.004438][ T2159] netem: change failed [ 324.339830][ T2196] loop7: detected capacity change from 0 to 16384 [ 324.527160][ T2218] netlink: 'syz.1.11380': attribute type 3 has an invalid length. [ 324.535129][ T2208] loop7: detected capacity change from 16384 to 0 [ 324.554598][ C0] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 2 [ 324.625280][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.631264][ T2229] netlink: 'syz.6.11385': attribute type 153 has an invalid length. [ 324.810866][ T2257] __nla_validate_parse: 17 callbacks suppressed [ 324.810885][ T2257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11395'. [ 324.826360][ T2257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11395'. [ 324.868758][ T2260] loop6: detected capacity change from 0 to 2048 [ 324.898640][ T2260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.961290][ T2278] loop5: detected capacity change from 0 to 512 [ 324.968305][ T2278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.984313][ T2278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.123967][ T5114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.217013][ T2292] loop5: detected capacity change from 0 to 1024 [ 325.233463][ T2292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.263631][ T2292] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.11405: Allocating blocks 497-513 which overlap fs metadata [ 325.278572][ T2292] EXT4-fs (loop5): pa ffff88810069a9a0: logic 256, phys. 369, len 9 [ 325.286635][ T2292] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 325.415692][ T2296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.461158][ T2300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11408'. [ 325.470422][ T2300] netem: change failed [ 325.585816][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 325.585834][ T29] audit: type=1400 audit(325.669:17303): avc: denied { write } for pid=2329 comm="syz.3.11414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.668982][ T2316] lo speed is unknown, defaulting to 1000 [ 325.720062][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.777370][ T2369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11419'. [ 325.834700][ T2369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11419'. [ 325.900433][ T2316] chnl_net:caif_netlink_parms(): no params data found [ 325.934741][ T29] audit: type=1326 audit(326.009:17304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.11422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 325.957977][ T29] audit: type=1326 audit(326.009:17305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.11422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 325.981076][ T29] audit: type=1400 audit(326.009:17306): avc: denied { wake_alarm } for pid=2450 comm="syz.1.11422" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.001867][ T29] audit: type=1326 audit(326.009:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.11422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 326.025029][ T29] audit: type=1326 audit(326.009:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.11422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 326.048093][ T29] audit: type=1326 audit(326.009:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2450 comm="syz.1.11422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b9aeba9 code=0x7ffc0000 [ 326.122175][ T2475] program syz.6.11424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.124975][ T29] audit: type=1400 audit(326.199:17310): avc: denied { write } for pid=2472 comm="syz.6.11424" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.195183][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.202416][ T2316] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.231542][ T2316] bridge_slave_0: entered allmulticast mode [ 326.248276][ T2316] bridge_slave_0: entered promiscuous mode [ 326.258868][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.265992][ T2316] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.281296][ T2316] bridge_slave_1: entered allmulticast mode [ 326.288003][ T2316] bridge_slave_1: entered promiscuous mode [ 326.316937][ T29] audit: type=1400 audit(326.390:17311): avc: denied { create } for pid=2524 comm="syz.3.11432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 326.356905][ T2316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.368453][ T2316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.380801][ T29] audit: type=1326 audit(326.450:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.4.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 326.430568][ T2316] team0: Port device team_slave_0 added [ 326.437863][ T2316] team0: Port device team_slave_1 added [ 326.471800][ T2316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.478772][ T2316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.504771][ T2316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.526577][ T2316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.533767][ T2316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.559779][ T2316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.659031][ T2316] hsr_slave_0: entered promiscuous mode [ 326.673720][ T2316] hsr_slave_1: entered promiscuous mode [ 326.685155][ T2662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11445'. [ 326.809343][ T2316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 326.833534][ T2316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.842990][ T2316] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 326.889265][ T2316] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.937373][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11449'. [ 326.946474][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11449'. [ 326.955577][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11449'. [ 326.964634][ T2744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11449'. [ 327.032772][ T2316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.069204][ T2316] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.106955][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.114065][ T9265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.139358][ T2316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.149890][ T2316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.172711][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.179813][ T9265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.318122][ T2316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.426737][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.460068][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.593851][ T2316] veth0_vlan: entered promiscuous mode [ 327.614036][ T2316] veth1_vlan: entered promiscuous mode [ 327.655605][ T2316] veth0_macvtap: entered promiscuous mode [ 327.672562][ T2316] veth1_macvtap: entered promiscuous mode [ 327.696190][ T2316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.716575][ T2316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.740328][ T9303] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.776335][ T9303] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.799925][ T9303] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.814959][ T2815] IPVS: Unknown mcast interface: vcan0 [ 327.823104][ T9303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.856023][ T2819] netlink: 'syz.7.11409': attribute type 2 has an invalid length. [ 328.073481][ T2836] netlink: 'syz.3.11480': attribute type 21 has an invalid length. [ 328.123100][ T2836] netlink: 'syz.3.11480': attribute type 21 has an invalid length. [ 328.297174][ T2862] loop7: detected capacity change from 0 to 512 [ 328.316137][ T2845] lo speed is unknown, defaulting to 1000 [ 328.334163][ T2862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.374752][ T2316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.456068][ T2884] loop7: detected capacity change from 0 to 512 [ 328.655792][ T2914] lo speed is unknown, defaulting to 1000 [ 329.354890][ T2971] lo speed is unknown, defaulting to 1000 [ 329.481850][ T3003] rdma_op ffff88811096e980 conn xmit_rdma 0000000000000000 [ 329.892136][ T3037] SELinux: policydb version 7959657 does not match my version range 15-35 [ 329.921140][ T3037] SELinux: failed to load policy [ 329.999993][ T3043] netlink: 'syz.1.11534': attribute type 21 has an invalid length. [ 330.008122][ T3043] __nla_validate_parse: 11 callbacks suppressed [ 330.008143][ T3043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11534'. [ 330.023724][ T3043] netlink: 'syz.1.11534': attribute type 1 has an invalid length. [ 330.082118][ T3050] loop7: detected capacity change from 0 to 512 [ 330.099251][ T3050] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 330.136668][ T3050] EXT4-fs (loop7): 1 truncate cleaned up [ 330.149769][ T3050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.183785][ T3050] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #15: comm syz.7.11538: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 330.272274][ T2316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.492812][ T3087] hub 2-0:1.0: USB hub found [ 330.539368][ T3087] hub 2-0:1.0: 8 ports detected [ 330.613993][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 330.614029][ T29] audit: type=1400 audit(330.692:17473): avc: denied { mounton } for pid=3103 comm="syz.7.11556" path="/34/bus" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 330.708880][ T29] audit: type=1400 audit(330.782:17474): avc: denied { ioctl } for pid=3110 comm="syz.7.11559" path="socket:[91896]" dev="sockfs" ino=91896 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.767486][ T29] audit: type=1400 audit(330.782:17475): avc: denied { write } for pid=3110 comm="syz.7.11559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.786774][ T29] audit: type=1326 audit(330.792:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.810437][ T29] audit: type=1326 audit(330.792:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.833492][ T29] audit: type=1326 audit(330.792:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.856606][ T29] audit: type=1326 audit(330.792:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.879704][ T29] audit: type=1326 audit(330.792:17480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.902736][ T29] audit: type=1326 audit(330.792:17481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 330.925860][ T29] audit: type=1326 audit(330.792:17482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.4.11560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 331.180396][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11569'. [ 331.189669][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11569'. [ 331.245748][ T3128] lo speed is unknown, defaulting to 1000 [ 331.303810][ T3154] loop7: detected capacity change from 0 to 128 [ 331.341570][ T3154] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.398680][ T3154] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.449304][ T9303] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.691412][ T3227] hub 2-0:1.0: USB hub found [ 331.696313][ T3227] hub 2-0:1.0: 8 ports detected [ 331.822751][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11604'. [ 331.857706][ T3251] bond8: entered promiscuous mode [ 331.862913][ T3251] bond8: entered allmulticast mode [ 331.872716][ T3251] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.894667][ T3251] bond8 (unregistering): Released all slaves [ 331.957530][ T3333] random: crng reseeded on system resumption [ 331.971918][ T3333] Restarting kernel threads ... [ 331.977142][ T3333] Done restarting kernel threads. [ 332.184487][ T3395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11624'. [ 332.382182][ T3418] loop6: detected capacity change from 0 to 2048 [ 332.439945][ T3418] loop6: p1 < > p4 [ 332.445371][ T3418] loop6: p4 size 8388608 extends beyond EOD, truncated [ 332.534688][ T3433] loop6: detected capacity change from 0 to 1024 [ 332.542035][ T3433] EXT4-fs: Ignoring removed oldalloc option [ 332.548040][ T3433] EXT4-fs: Ignoring removed bh option [ 332.572575][ T3433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.590967][ T3433] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.11633: Allocating blocks 497-513 which overlap fs metadata [ 332.609668][ T3433] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 257:freeing already freed block (bit 16); block bitmap corrupt. [ 332.720090][ T5138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.552869][ T3492] netlink: 'syz.6.11656': attribute type 3 has an invalid length. [ 333.608450][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11660'. [ 334.034995][ T3573] netlink: 'syz.1.11685': attribute type 1 has an invalid length. [ 334.118992][ T9254] bond0 (unregistering): Released all slaves [ 334.128282][ T9254] bond1 (unregistering): Released all slaves [ 334.136838][ T9254] bond2 (unregistering): Released all slaves [ 334.145197][ T9254] bond3 (unregistering): Released all slaves [ 334.154749][ T9254] bond4 (unregistering): Released all slaves [ 334.163844][ T9254] bond5 (unregistering): Released all slaves [ 334.172470][ T9254] bond6 (unregistering): Released all slaves [ 334.181091][ T9254] bond7 (unregistering): Released all slaves [ 334.189786][ T9254] bond8 (unregistering): Released all slaves [ 334.200986][ T3577] bridge0: entered promiscuous mode [ 334.206308][ T3577] macsec1: entered promiscuous mode [ 334.212678][ T3577] bridge0: port 3(macsec1) entered blocking state [ 334.219273][ T3577] bridge0: port 3(macsec1) entered disabled state [ 334.226087][ T3577] macsec1: entered allmulticast mode [ 334.231418][ T3577] bridge0: entered allmulticast mode [ 334.237378][ T3577] macsec1: left allmulticast mode [ 334.242453][ T3577] bridge0: left allmulticast mode [ 334.248201][ T3577] bridge0: left promiscuous mode [ 334.258670][ T9254] tipc: Disabling bearer [ 334.264029][ T9254] tipc: Left network mode [ 334.291653][ T3537] lo speed is unknown, defaulting to 1000 [ 334.417182][ T9265] smc: removing ib device syz! [ 334.514214][ T3537] chnl_net:caif_netlink_parms(): no params data found [ 334.530499][ T3692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.541163][ T3692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.633399][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.640645][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.670396][ T3537] bridge_slave_0: entered allmulticast mode [ 334.680246][ T3760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3760 comm=syz.1.11698 [ 334.692935][ T3537] bridge_slave_0: entered promiscuous mode [ 334.692952][ T3760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3760 comm=syz.1.11698 [ 334.705857][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.718516][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.734921][ T3537] bridge_slave_1: entered allmulticast mode [ 334.741453][ T3537] bridge_slave_1: entered promiscuous mode [ 334.753343][ T3762] netlink: 'syz.1.11699': attribute type 19 has an invalid length. [ 334.761467][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11699'. [ 334.772947][ T3537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.782741][ T3762] netlink: 'syz.1.11699': attribute type 19 has an invalid length. [ 334.784209][ T3537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.790870][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11699'. [ 334.838519][ T3537] team0: Port device team_slave_0 added [ 334.845365][ T3537] team0: Port device team_slave_1 added [ 334.869237][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.876216][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.902426][ T3537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.913833][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.920854][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.947348][ T3537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.976011][ T3537] hsr_slave_0: entered promiscuous mode [ 334.982176][ T3537] hsr_slave_1: entered promiscuous mode [ 334.988072][ T3537] debugfs: 'hsr0' already exists in 'hsr' [ 334.993816][ T3537] Cannot create hsr debugfs directory [ 335.078785][ T3537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 335.087805][ T3537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 335.096812][ T3537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 335.108310][ T3537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 335.155393][ T3537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.172771][ T3537] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.186923][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.194065][ T9265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.209903][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.217042][ T9265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.304675][ T3537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.477969][ T3537] veth0_vlan: entered promiscuous mode [ 335.497593][ T3537] veth1_vlan: entered promiscuous mode [ 335.518015][ T3537] veth0_macvtap: entered promiscuous mode [ 335.538991][ T3537] veth1_macvtap: entered promiscuous mode [ 335.562140][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.578514][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.598597][ T9315] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.611209][ T9315] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.679997][ T9315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.696914][ T9315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.107270][ T3997] loop7: detected capacity change from 0 to 164 [ 336.141437][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 336.141455][ T29] audit: type=1326 audit(336.224:17583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.8.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 336.142144][ T3997] Unable to read rock-ridge attributes [ 336.147931][ T29] audit: type=1326 audit(336.224:17584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.8.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 336.189882][ T3997] Unable to read rock-ridge attributes [ 336.200640][ T29] audit: type=1400 audit(336.264:17585): avc: denied { mount } for pid=3996 comm="syz.7.11715" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 336.232007][ T3997] bio_check_eod: 49512 callbacks suppressed [ 336.232024][ T3997] syz.7.11715: attempt to access beyond end of device [ 336.232024][ T3997] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 336.249934][ T29] audit: type=1400 audit(336.315:17586): avc: denied { read } for pid=3995 comm="syz.1.11714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.271210][ T29] audit: type=1326 audit(336.315:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.8.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 336.271541][ T3997] syz.7.11715: attempt to access beyond end of device [ 336.271541][ T3997] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 336.294241][ T29] audit: type=1326 audit(336.315:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.8.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 336.294277][ T29] audit: type=1326 audit(336.315:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.8.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 336.371890][ T3997] syz.7.11715: attempt to access beyond end of device [ 336.371890][ T3997] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 336.505560][ T29] audit: type=1400 audit(336.585:17590): avc: denied { unmount } for pid=2316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 336.541539][ T29] audit: type=1326 audit(336.615:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.4.11727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 336.564755][ T29] audit: type=1326 audit(336.615:17592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.4.11727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a470eba9 code=0x7ffc0000 [ 336.813361][ T4045] loop7: detected capacity change from 0 to 8192 [ 336.871864][ T4051] loop8: detected capacity change from 0 to 8192 [ 337.065603][ T4073] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 337.381850][ T4099] loop7: detected capacity change from 0 to 164 [ 337.419494][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11760'. [ 337.649252][ T905] IPVS: starting estimator thread 0... [ 337.755473][ T4141] IPVS: using max 1920 ests per chain, 96000 per kthread [ 337.799347][ T4159] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 337.807712][ T4159] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 337.896187][ T4170] dummy0: entered allmulticast mode [ 337.924570][ T4170] dummy0: left allmulticast mode [ 337.943923][ T4176] loop7: detected capacity change from 0 to 2048 [ 337.971898][ T4180] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 338.004345][ T4176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.494779][ T4201] loop8: detected capacity change from 0 to 164 [ 338.520953][ T4201] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 338.602298][ T4211] netlink: 'syz.3.11805': attribute type 3 has an invalid length. [ 338.787989][ T9254] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 234: padding at end of block bitmap is not set [ 338.806321][ T9254] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 338.818994][ T9254] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.818994][ T9254] [ 338.866724][ T9265] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 338.879487][ T9265] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.879487][ T9265] [ 338.889226][ T9265] EXT4-fs (loop7): Total free blocks count 0 [ 338.895294][ T9265] EXT4-fs (loop7): Free/Dirty block details [ 338.901227][ T9265] EXT4-fs (loop7): free_blocks=0 [ 338.906213][ T9265] EXT4-fs (loop7): dirty_blocks=6160 [ 338.911503][ T9265] EXT4-fs (loop7): Block reservation details [ 339.016269][ T4250] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11824'. [ 339.025837][ T4250] netlink: 'syz.8.11824': attribute type 7 has an invalid length. [ 339.033766][ T4250] netlink: 'syz.8.11824': attribute type 8 has an invalid length. [ 339.041718][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11824'. [ 339.179682][ T4264] rdma_op ffff888102397d80 conn xmit_rdma 0000000000000000 [ 339.285668][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11834'. [ 339.294844][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11834'. [ 339.303964][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11834'. [ 339.319024][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11834'. [ 339.328530][ T4273] netlink: 'syz.3.11834': attribute type 6 has an invalid length. [ 339.415551][ T4295] netlink: 332 bytes leftover after parsing attributes in process `syz.8.11843'. [ 339.421695][ T4296] binfmt_misc: register: failed to install interpreter file ./file2 [ 339.469833][ T903] IPVS: starting estimator thread 0... [ 339.565533][ T4306] IPVS: using max 1872 ests per chain, 93600 per kthread [ 339.848489][ T4361] program syz.4.11873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.860167][ T4363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11874'. [ 339.881911][ T4361] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 339.915856][ T4369] loop8: detected capacity change from 0 to 1024 [ 339.930565][ T4369] EXT4-fs: Ignoring removed orlov option [ 339.936447][ T4369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.957844][ T4369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.031220][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.209209][ T4409] netlink: 332 bytes leftover after parsing attributes in process `syz.4.11890'. [ 340.249280][ T4411] binfmt_misc: register: failed to install interpreter file ./file2 [ 340.344520][ T911] IPVS: starting estimator thread 0... [ 340.434108][ T4425] IPVS: using max 2016 ests per chain, 100800 per kthread [ 340.452737][ T4434] netlink: 'syz.7.11905': attribute type 3 has an invalid length. [ 340.527439][ T4444] binfmt_misc: register: failed to install interpreter file ./file2 [ 340.669939][ T4459] netlink: 'syz.7.11917': attribute type 153 has an invalid length. [ 340.690411][ T911] IPVS: starting estimator thread 0... [ 340.807606][ T4463] IPVS: using max 1872 ests per chain, 93600 per kthread [ 341.057342][ T4495] loop7: detected capacity change from 0 to 16384 [ 341.198621][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 341.198638][ T29] audit: type=1400 audit(341.287:17895): avc: denied { name_bind } for pid=4498 comm="syz.8.11932" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.291594][ T29] audit: type=1400 audit(341.287:17896): avc: denied { node_bind } for pid=4498 comm="syz.8.11932" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.313361][ T29] audit: type=1400 audit(341.377:17897): avc: denied { create } for pid=4502 comm="syz.4.11933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.341793][ T4497] loop7: detected capacity change from 16384 to 0 [ 341.354189][ C0] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 341.355692][ T4509] IPv4: Oversized IP packet from 127.202.26.0 [ 341.423598][ T29] audit: type=1400 audit(341.407:17898): avc: denied { read } for pid=4506 comm="syz.8.11935" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 341.444549][ T29] audit: type=1400 audit(341.407:17899): avc: denied { open } for pid=4506 comm="syz.8.11935" path="pid:[4026532623]" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 341.467487][ T29] audit: type=1400 audit(341.407:17900): avc: denied { mounton } for pid=4506 comm="syz.8.11935" path="/proc/109/cgroup" dev="proc" ino=96417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 341.490002][ T29] audit: type=1400 audit(341.407:17901): avc: denied { mounton } for pid=4506 comm="syz.8.11935" path="/proc/109/cgroup" dev="nsfs" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 341.513073][ T29] audit: type=1400 audit(341.427:17902): avc: denied { setopt } for pid=4502 comm="syz.4.11933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.532612][ T29] audit: type=1400 audit(341.427:17903): avc: denied { write } for pid=4502 comm="syz.4.11933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.551621][ T29] audit: type=1400 audit(341.427:17904): avc: denied { connect } for pid=4502 comm="syz.4.11933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.232796][ T4551] loop7: detected capacity change from 0 to 8192 [ 342.591031][ T4607] program syz.4.11968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.770619][ T4620] IPv4: Oversized IP packet from 127.202.26.0 [ 342.914043][ T4638] loop8: detected capacity change from 0 to 512 [ 342.944160][ T4638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.995153][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.218846][ T4667] program syz.3.11994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.404384][ T4692] netlink: 'syz.8.12006': attribute type 21 has an invalid length. [ 343.412371][ T4692] __nla_validate_parse: 17 callbacks suppressed [ 343.412389][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12006'. [ 343.517065][ T4692] netlink: 'syz.8.12006': attribute type 21 has an invalid length. [ 343.525166][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12006'. [ 343.530220][ T9265] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.579730][ T9265] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.594840][ T9265] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.613023][ T9265] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.624465][ T4707] netlink: 'syz.3.12014': attribute type 2 has an invalid length. [ 343.629233][ T4708] loop7: detected capacity change from 0 to 128 [ 343.729461][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12021'. [ 343.740562][ T4724] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 343.748597][ T4724] FAT-fs (loop7): Filesystem has been set read-only [ 343.771768][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.771768][ T4724] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 343.812830][ T4724] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 343.820768][ T4724] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 343.831912][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.831912][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.852603][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.852603][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.869374][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.869374][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.885629][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.885629][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.899486][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.899486][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.916618][ T4722] IPVS: Error joining to the multicast group [ 343.922994][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.922994][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 343.960437][ T4724] syz.7.12024: attempt to access beyond end of device [ 343.960437][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 344.004960][ T4724] syz.7.12024: attempt to access beyond end of device [ 344.004960][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 344.058112][ T4724] syz.7.12024: attempt to access beyond end of device [ 344.058112][ T4724] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 344.238471][ T4742] loop8: detected capacity change from 0 to 512 [ 344.276408][ T4742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.405923][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.416050][ T4753] lo speed is unknown, defaulting to 1000 [ 344.510003][ T4762] loop8: detected capacity change from 0 to 8192 [ 344.651808][ T4802] netlink: 'syz.1.12043': attribute type 1 has an invalid length. [ 344.731792][ T4812] netlink: 'syz.1.12049': attribute type 21 has an invalid length. [ 344.739867][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12049'. [ 344.769871][ T4812] netlink: 'syz.1.12049': attribute type 21 has an invalid length. [ 344.777863][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12049'. [ 344.875349][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12055'. [ 344.884419][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12055'. [ 344.959308][ T4846] netlink: 'syz.3.12061': attribute type 1 has an invalid length. [ 344.998681][ T4849] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 345.012798][ T4849] SELinux: failed to load policy [ 345.164128][ T4864] lo speed is unknown, defaulting to 1000 [ 345.266923][ T4881] netlink: 'syz.7.12083': attribute type 1 has an invalid length. [ 345.352752][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.361310][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.581768][ T4931] netlink: 'syz.4.12082': attribute type 21 has an invalid length. [ 345.610093][ T4931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12082'. [ 345.619305][ T4931] netlink: 'syz.4.12082': attribute type 1 has an invalid length. [ 346.219631][ T4984] loop8: detected capacity change from 0 to 512 [ 346.306181][ T4984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.366170][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.432359][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 346.432376][ T29] audit: type=1400 audit(346.520:18152): avc: denied { mounton } for pid=4994 comm="syz.8.12114" path="/97/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 346.493635][ T29] audit: type=1326 audit(346.570:18153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.516844][ T29] audit: type=1326 audit(346.570:18154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.540079][ T29] audit: type=1326 audit(346.580:18155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.563171][ T29] audit: type=1326 audit(346.580:18156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.586368][ T29] audit: type=1326 audit(346.580:18157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.678089][ T29] audit: type=1326 audit(346.580:18158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.701210][ T29] audit: type=1326 audit(346.580:18159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.724239][ T29] audit: type=1326 audit(346.580:18160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 346.747344][ T29] audit: type=1326 audit(346.710:18161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.8.12116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960fadeba9 code=0x7ffc0000 [ 347.401906][ T5077] netlink: 'syz.8.12145': attribute type 21 has an invalid length. [ 347.419579][ T5077] netlink: 132 bytes leftover after parsing attributes in process `syz.8.12145'. [ 347.428845][ T5077] netlink: 'syz.8.12145': attribute type 1 has an invalid length. [ 347.513705][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12153'. [ 347.706729][ T5111] hub 2-0:1.0: USB hub found [ 347.712746][ T5111] hub 2-0:1.0: 8 ports detected [ 348.433044][ T5201] lo speed is unknown, defaulting to 1000 [ 348.446543][ T5209] __nla_validate_parse: 1 callbacks suppressed [ 348.446636][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12195'. [ 348.462052][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12195'. [ 348.561584][ T5236] loop8: detected capacity change from 0 to 512 [ 348.571607][ T5236] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 348.586872][ T5236] EXT4-fs (loop8): 1 truncate cleaned up [ 348.593901][ T5236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.615755][ T5236] EXT4-fs error (device loop8): ext4_ext_precache:632: inode #15: comm syz.8.12196: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 348.653767][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.736062][ T5261] loop7: detected capacity change from 0 to 512 [ 348.755217][ T5261] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 348.769148][ T5261] EXT4-fs (loop7): 1 truncate cleaned up [ 348.778580][ T5267] netlink: 'syz.4.12208': attribute type 1 has an invalid length. [ 348.779503][ T5261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.824513][ T5261] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #15: comm syz.7.12216: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 348.858204][ T2316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.887292][ T5279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5279 comm=syz.7.12212 [ 348.900002][ T5279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5279 comm=syz.7.12212 [ 349.213486][ T5289] loop8: detected capacity change from 0 to 128 [ 349.221482][ T5289] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.235880][ T5289] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.269018][ T5298] bridge0: entered promiscuous mode [ 349.279233][ T5298] macsec0: entered promiscuous mode [ 349.284785][ T9265] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.286797][ T5298] bridge0: port 1(macsec0) entered blocking state [ 349.300774][ T5298] bridge0: port 1(macsec0) entered disabled state [ 349.309346][ T5298] macsec0: entered allmulticast mode [ 349.314794][ T5298] bridge0: entered allmulticast mode [ 349.320919][ T5298] macsec0: left allmulticast mode [ 349.325994][ T5298] bridge0: left allmulticast mode [ 349.339219][ T5298] bridge0: left promiscuous mode [ 349.362284][ T5310] netlink: 'syz.3.12225': attribute type 19 has an invalid length. [ 349.370312][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12225'. [ 349.387122][ T5310] netlink: 'syz.3.12225': attribute type 19 has an invalid length. [ 349.395118][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12225'. [ 349.486916][ T5326] loop8: detected capacity change from 0 to 128 [ 349.501673][ T5326] FAT-fs (loop8): Directory bread(block 32) failed [ 349.512849][ T5326] FAT-fs (loop8): Directory bread(block 33) failed [ 349.520182][ T5326] FAT-fs (loop8): Directory bread(block 34) failed [ 349.526880][ T5326] FAT-fs (loop8): Directory bread(block 35) failed [ 349.537821][ T5326] FAT-fs (loop8): Directory bread(block 36) failed [ 349.544530][ T5326] FAT-fs (loop8): Directory bread(block 37) failed [ 349.551313][ T5326] FAT-fs (loop8): Directory bread(block 38) failed [ 349.557909][ T5326] FAT-fs (loop8): Directory bread(block 39) failed [ 349.564976][ T5326] FAT-fs (loop8): Directory bread(block 40) failed [ 349.571914][ T5326] FAT-fs (loop8): Directory bread(block 41) failed [ 349.649473][ T5326] bio_check_eod: 9213 callbacks suppressed [ 349.649504][ T5326] syz.8.12231: attempt to access beyond end of device [ 349.649504][ T5326] loop8: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 349.669203][ T5326] buffer_io_error: 49510 callbacks suppressed [ 349.669234][ T5326] Buffer I/O error on dev loop8, logical block 1028, async page read [ 349.687122][ T5326] syz.8.12231: attempt to access beyond end of device [ 349.687122][ T5326] loop8: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 349.700740][ T5326] Buffer I/O error on dev loop8, logical block 41991, async page read [ 349.709029][ T5326] FAT-fs (loop8): Filesystem has been set read-only [ 349.718703][ T5326] syz.8.12231: attempt to access beyond end of device [ 349.718703][ T5326] loop8: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 349.732238][ T5326] Buffer I/O error on dev loop8, logical block 1028, async page read [ 349.744448][ T5326] syz.8.12231: attempt to access beyond end of device [ 349.744448][ T5326] loop8: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 349.758043][ T5326] Buffer I/O error on dev loop8, logical block 41991, async page read [ 349.855373][ T5358] hub 2-0:1.0: USB hub found [ 349.862472][ T5358] hub 2-0:1.0: 8 ports detected [ 349.920293][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12262'. [ 350.823278][ T5415] bond6: entered promiscuous mode [ 350.828364][ T5415] bond6: entered allmulticast mode [ 350.850308][ T5415] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.879281][ T5415] bond6 (unregistering): Released all slaves [ 350.907219][ T5452] loop8: detected capacity change from 0 to 1024 [ 350.918456][ T5452] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 350.929549][ T5452] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 350.944770][ T5452] JBD2: no valid journal superblock found [ 350.950813][ T5452] EXT4-fs (loop8): Could not load journal inode [ 350.962985][ T5452] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 351.027409][ T5504] loop8: detected capacity change from 0 to 512 [ 351.055216][ T5504] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 351.066868][ T5504] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.12276: invalid indirect mapped block 4294967295 (level 0) [ 351.084291][ T5504] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.12276: invalid indirect mapped block 4294967295 (level 1) [ 351.102994][ T5504] EXT4-fs (loop8): 1 orphan inode deleted [ 351.108915][ T5504] EXT4-fs (loop8): 1 truncate cleaned up [ 351.116550][ T5504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.167322][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.413493][ T5556] loop8: detected capacity change from 0 to 1024 [ 351.420333][ T5556] EXT4-fs: Ignoring removed orlov option [ 351.442014][ T5556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.456237][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 351.456251][ T29] audit: type=1400 audit(351.552:18351): avc: denied { create } for pid=5551 comm="syz.3.12301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.482498][ T29] audit: type=1400 audit(351.572:18352): avc: denied { bind } for pid=5551 comm="syz.3.12301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.502382][ T29] audit: type=1400 audit(351.572:18353): avc: denied { write } for pid=5553 comm="syz.8.12300" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 351.591771][ T5556] ================================================================== [ 351.599898][ T5556] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 351.607914][ T5556] [ 351.610333][ T5556] write to 0xffff88811a1b3a18 of 4 bytes by task 5563 on cpu 1: [ 351.618069][ T5556] writeback_single_inode+0x14a/0x3e0 [ 351.623476][ T5556] sync_inode_metadata+0x5b/0x90 [ 351.628453][ T5556] generic_buffers_fsync_noflush+0xd9/0x120 [ 351.634380][ T5556] ext4_sync_file+0x1ab/0x690 [ 351.639079][ T5556] vfs_fsync_range+0x10a/0x130 [ 351.643888][ T5556] ext4_buffered_write_iter+0x34f/0x3c0 [ 351.649475][ T5556] ext4_file_write_iter+0x383/0xf00 [ 351.654708][ T5556] iter_file_splice_write+0x666/0xa60 [ 351.660093][ T5556] direct_splice_actor+0x156/0x2a0 [ 351.665234][ T5556] splice_direct_to_actor+0x312/0x680 [ 351.670639][ T5556] do_splice_direct+0xda/0x150 [ 351.675431][ T5556] do_sendfile+0x380/0x650 [ 351.679884][ T5556] __x64_sys_sendfile64+0x105/0x150 [ 351.685116][ T5556] x64_sys_call+0x2bb0/0x2ff0 [ 351.689821][ T5556] do_syscall_64+0xd2/0x200 [ 351.694369][ T5556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.700267][ T5556] [ 351.702591][ T5556] read to 0xffff88811a1b3a18 of 4 bytes by task 5556 on cpu 0: [ 351.710135][ T5556] vfs_fsync_range+0x9b/0x130 [ 351.714816][ T5556] ext4_buffered_write_iter+0x34f/0x3c0 [ 351.720379][ T5556] ext4_file_write_iter+0x383/0xf00 [ 351.725596][ T5556] iter_file_splice_write+0x666/0xa60 [ 351.730975][ T5556] direct_splice_actor+0x156/0x2a0 [ 351.736094][ T5556] splice_direct_to_actor+0x312/0x680 [ 351.741482][ T5556] do_splice_direct+0xda/0x150 [ 351.746254][ T5556] do_sendfile+0x380/0x650 [ 351.750685][ T5556] __x64_sys_sendfile64+0x105/0x150 [ 351.755896][ T5556] x64_sys_call+0x2bb0/0x2ff0 [ 351.760579][ T5556] do_syscall_64+0xd2/0x200 [ 351.765111][ T5556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.771031][ T5556] [ 351.773352][ T5556] value changed: 0x00000038 -> 0x00000002 [ 351.779074][ T5556] [ 351.781398][ T5556] Reported by Kernel Concurrency Sanitizer on: [ 351.787563][ T5556] CPU: 0 UID: 0 PID: 5556 Comm: syz.8.12300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 351.797379][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.807458][ T5556] ================================================================== [ 351.854185][ T3537] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.