last executing test programs: 1m28.164250588s ago: executing program 3 (id=64): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 1m28.134633248s ago: executing program 3 (id=66): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1m28.095322509s ago: executing program 3 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0xffa6, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 1m27.994742571s ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) 1m27.930172432s ago: executing program 3 (id=77): unshare(0x26020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) 1m27.03334553s ago: executing program 3 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) close(r1) 1m27.03201634s ago: executing program 32 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) close(r1) 27.025646188s ago: executing program 4 (id=2605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x39}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 27.025115308s ago: executing program 4 (id=2608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 27.001193838s ago: executing program 4 (id=2610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x9, 0x4) 26.446854099s ago: executing program 4 (id=2621): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 26.428082919s ago: executing program 4 (id=2623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4d}]}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfe, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 26.291016072s ago: executing program 4 (id=2628): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x21a4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 26.290918042s ago: executing program 33 (id=2628): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x21a4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.101299859s ago: executing program 2 (id=3523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) 1.020677081s ago: executing program 2 (id=3525): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.0201128s ago: executing program 2 (id=3529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.01986573s ago: executing program 5 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 972.267432ms ago: executing program 2 (id=3532): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1b8d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 971.729251ms ago: executing program 6 (id=3534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) 951.339642ms ago: executing program 5 (id=3535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000340)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 950.956032ms ago: executing program 6 (id=3536): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = gettid() r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 923.315493ms ago: executing program 5 (id=3537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x58}}, 0x0) 921.043022ms ago: executing program 6 (id=3539): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x60, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x10}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffc00000}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 884.918373ms ago: executing program 6 (id=3541): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 848.257994ms ago: executing program 6 (id=3543): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700), 0x3, 0x4e2, &(0x7f0000001c80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") syz_usb_disconnect(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 789.716385ms ago: executing program 5 (id=3546): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 766.319336ms ago: executing program 5 (id=3548): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 696.003597ms ago: executing program 5 (id=3549): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 410.495082ms ago: executing program 1 (id=3558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 392.610223ms ago: executing program 1 (id=3560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) close(r1) 341.776093ms ago: executing program 1 (id=3561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) 341.505844ms ago: executing program 1 (id=3562): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f00000001c0)='./file0\x00', 0x208ca44, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYBLOB="530e626de964bec5e67ac8497f92b73c12787409859b40c2ffebbe1df70121ef86ee65ac2b88431bc8bad3a9a2400a9df942b96fa08f36ebe1787ac75aef8bd64694c22148aa935209c386ff7d2a8768f1a34b0735bc8be51505ab8ff7a316bb3e0d2abd80a0dd17073b9d65ae82b9cc11e48b3e708e42d4a76dfe38e3fe6cfdcc9fc1a38538d5242004e1ace0db55375a7e9b70886e223e653c449003a1a44ed360ec410a4e135fcc2294c37195872763bf4dca735d3d842e74d71421bc3d200142ec07686a2a360070331ab469ca70efa8535d54bfd20702b4828cad31ad9a6308bfe030d36b8294583c212898b7b9e292b03b253439790eabbdb718b2f634c80534e0535ed0918251de10f638e9ee0bab56f7a162e0ad8dfab51e4a8d14c88bd98dcaa15e6d", @ANYRESHEX, @ANYRES32], 0x6, 0x365, &(0x7f00000013c0)="$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") mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 312.732544ms ago: executing program 0 (id=3564): ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0xb3) sendfile(r2, r2, 0x0, 0x1000000201005) 298.194064ms ago: executing program 0 (id=3565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) 252.820396ms ago: executing program 0 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 228.890416ms ago: executing program 0 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) 211.343286ms ago: executing program 0 (id=3568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 153.554847ms ago: executing program 0 (id=3569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 153.001827ms ago: executing program 2 (id=3570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002640)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 146.566368ms ago: executing program 1 (id=3571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 105.317678ms ago: executing program 6 (id=3572): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) lsetxattr$security_capability(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7fffeffd) 104.945708ms ago: executing program 1 (id=3573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 0s ago: executing program 2 (id=3574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): nge from 0 to 128 [ 48.884178][ T29] audit: type=1400 audit(1756930730.892:776): avc: denied { read } for pid=4872 comm="syz.0.550" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.907266][ T29] audit: type=1400 audit(1756930730.892:777): avc: denied { open } for pid=4872 comm="syz.0.550" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.930717][ T29] audit: type=1400 audit(1756930730.892:778): avc: denied { ioctl } for pid=4872 comm="syz.0.550" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 49.002987][ T29] audit: type=1400 audit(1756930731.012:779): avc: denied { mount } for pid=4868 comm="syz.4.547" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.053549][ T29] audit: type=1400 audit(1756930731.062:780): avc: denied { create } for pid=4880 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.072124][ T29] audit: type=1400 audit(1756930731.072:781): avc: denied { bind } for pid=4880 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.074180][ T4885] loop2: detected capacity change from 0 to 512 [ 49.090521][ T29] audit: type=1400 audit(1756930731.072:782): avc: denied { write } for pid=4880 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.186851][ T29] audit: type=1400 audit(1756930731.142:783): avc: denied { name_bind } for pid=4886 comm="syz.1.556" src=24098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.262902][ T4885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.335801][ T4905] random: crng reseeded on system resumption [ 49.360303][ T4885] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.386284][ T4905] vhci_hcd: invalid port number 23 [ 49.483273][ T4910] pim6reg: entered allmulticast mode [ 49.485577][ T4885] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.554: corrupted inode contents [ 49.501659][ T4885] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.554: mark_inode_dirty error [ 49.525974][ T4885] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.554: corrupted inode contents [ 49.530921][ T4910] pim6reg: left allmulticast mode [ 49.546334][ T4885] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.554: mark_inode_dirty error [ 49.589634][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.725210][ T4926] loop2: detected capacity change from 0 to 1024 [ 49.805727][ T4945] sd 0:0:1:0: device reset [ 49.810382][ T4943] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 49.811522][ T4926] EXT4-fs: Ignoring removed orlov option [ 49.824949][ T4926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.938647][ T4926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.976290][ T4959] random: crng reseeded on system resumption [ 50.006698][ T4959] Restarting kernel threads ... [ 50.044899][ T4959] Done restarting kernel threads. [ 50.116599][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.219304][ T4978] __nla_validate_parse: 10 callbacks suppressed [ 50.219322][ T4978] netlink: 32 bytes leftover after parsing attributes in process `syz.5.591'. [ 50.234590][ T4978] netem: unknown loss type 13 [ 50.239301][ T4978] netem: change failed [ 50.602406][ T5032] loop2: detected capacity change from 0 to 4096 [ 50.622663][ T5032] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.662020][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.732269][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.776768][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 50.853039][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'. [ 50.870362][ T5065] loop5: detected capacity change from 0 to 512 [ 50.894202][ T5065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.910731][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 50.919731][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 50.930974][ T5065] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.624: bad orphan inode 11 [ 50.955182][ T5065] ext4_test_bit(bit=10, block=4) = 1 [ 50.960570][ T5065] is_bad_inode(inode)=0 [ 50.964820][ T5065] NEXT_ORPHAN(inode)=2080374784 [ 50.969703][ T5065] max_ino=32 [ 50.972994][ T5065] i_nlink=0 [ 50.976498][ T5077] ipvlan2: entered promiscuous mode [ 50.982242][ T5077] bridge0: port 3(ipvlan2) entered blocking state [ 50.988822][ T5077] bridge0: port 3(ipvlan2) entered disabled state [ 50.995568][ T5077] ipvlan2: entered allmulticast mode [ 51.000913][ T5077] bridge0: entered allmulticast mode [ 51.008173][ T5065] EXT4-fs (loop5): 1 truncate cleaned up [ 51.014531][ T5077] ipvlan2: left allmulticast mode [ 51.019640][ T5077] bridge0: left allmulticast mode [ 51.026441][ T5065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.057282][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 51.072455][ T5083] team0 (unregistering): Port device team_slave_0 removed [ 51.081628][ T5083] team0 (unregistering): Port device team_slave_1 removed [ 51.125749][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.249518][ T5104] rdma_op ffff888104051180 conn xmit_rdma 0000000000000000 [ 51.379454][ T3377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3377 comm=kworker/0:3 [ 51.398048][ T5124] loop4: detected capacity change from 0 to 128 [ 51.431880][ T5124] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.476870][ T5124] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.532196][ T5133] netlink: 'syz.5.653': attribute type 3 has an invalid length. [ 51.571778][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.619625][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 51.638329][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 51.648250][ T5147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 51.701779][ T5153] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 51.736985][ T5159] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.813372][ T5167] loop2: detected capacity change from 0 to 512 [ 51.821947][ T5167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.844507][ T5167] EXT4-fs (loop2): 1 truncate cleaned up [ 51.853044][ T5167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.880006][ T5167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.986093][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 52.023481][ T2957] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.040926][ T2957] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.969118][ T5298] 9pnet_fd: Insufficient options for proto=fd [ 53.106304][ T5314] loop5: detected capacity change from 0 to 8192 [ 53.452699][ T5367] pimreg: entered allmulticast mode [ 53.469673][ T5367] pimreg: left allmulticast mode [ 53.536356][ T5377] random: crng reseeded on system resumption [ 53.798269][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 53.798284][ T29] audit: type=1326 audit(1756930735.812:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.828691][ T29] audit: type=1326 audit(1756930735.822:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.852095][ T29] audit: type=1326 audit(1756930735.822:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.875538][ T29] audit: type=1326 audit(1756930735.822:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.899047][ T29] audit: type=1326 audit(1756930735.822:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.922444][ T29] audit: type=1326 audit(1756930735.822:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.945809][ T29] audit: type=1326 audit(1756930735.822:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.969159][ T29] audit: type=1326 audit(1756930735.822:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 53.992574][ T29] audit: type=1326 audit(1756930735.822:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 54.015907][ T29] audit: type=1326 audit(1756930735.822:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 54.106866][ T3377] IPVS: starting estimator thread 0... [ 54.202583][ T5424] IPVS: using max 2448 ests per chain, 122400 per kthread [ 54.245144][ T5447] macvtap0: refused to change device tx_queue_len [ 54.402525][ T5455] netlink: 'syz.4.804': attribute type 83 has an invalid length. [ 54.515879][ T5462] loop4: detected capacity change from 0 to 2048 [ 54.533972][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.550154][ T5462] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.565408][ T5462] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.577743][ T5462] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.577743][ T5462] [ 54.587442][ T5462] EXT4-fs (loop4): Total free blocks count 0 [ 54.593479][ T5462] EXT4-fs (loop4): Free/Dirty block details [ 54.599388][ T5462] EXT4-fs (loop4): free_blocks=2415919104 [ 54.605244][ T5462] EXT4-fs (loop4): dirty_blocks=16 [ 54.610454][ T5462] EXT4-fs (loop4): Block reservation details [ 54.616462][ T5462] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 54.622970][ T5465] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 54.638688][ T5462] syz.4.807 (5462) used greatest stack depth: 9736 bytes left [ 55.110545][ T5518] netlink: 'syz.4.830': attribute type 21 has an invalid length. [ 55.157584][ T5526] loop9: detected capacity change from 0 to 7 [ 55.171024][ T5526] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.174016][ T5529] loop2: detected capacity change from 0 to 764 [ 55.191383][ T5526] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.199259][ T5526] loop9: unable to read partition table [ 55.207412][ T5532] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.229875][ T5526] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 55.229875][ T5526] ) failed (rc=-5) [ 55.334529][ T5550] loop2: detected capacity change from 0 to 512 [ 55.344700][ T5552] loop4: detected capacity change from 0 to 512 [ 55.351923][ T5552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 55.363808][ T5550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.376869][ T5552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.379192][ T5550] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.388721][ T5552] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.847: Block bitmap for bg 0 marked uninitialized [ 55.407675][ T5552] EXT4-fs (loop4): Remounting filesystem read-only [ 55.414394][ T5552] EXT4-fs (loop4): 1 orphan inode deleted [ 55.420670][ T5552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.451116][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.472284][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.624817][ T5588] __nla_validate_parse: 6 callbacks suppressed [ 55.624836][ T5588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.863'. [ 55.641581][ C1] hrtimer: interrupt took 27403 ns [ 55.650698][ T5590] vhci_hcd: invalid port number 236 [ 55.657240][ T5590] vhci_hcd: default hub control req: 2317 v7fff i00ec l0 [ 56.119605][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 56.197942][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 56.262487][ T5658] netlink: 96 bytes leftover after parsing attributes in process `syz.1.894'. [ 56.580121][ T5696] netlink: 'syz.4.912': attribute type 13 has an invalid length. [ 56.660595][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.667878][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.694392][ T5706] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.720561][ T5706] FAT-fs (loop3): unable to read boot sector [ 56.743661][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.765735][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.868662][ T5719] vlan0: entered promiscuous mode [ 56.873772][ T5719] bridge0: entered promiscuous mode [ 56.883222][ T3432] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.893969][ T3432] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.906592][ T5724] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.934'. [ 56.918963][ T3432] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.932167][ T3432] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.012729][ T5737] loop4: detected capacity change from 0 to 128 [ 57.224173][ T5754] serio: Serial port ptm0 [ 57.374099][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 57.384109][ T5769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.944'. [ 57.465246][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 57.732314][ T5810] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.288738][ T5879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.309318][ T5881] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.337739][ T5885] random: crng reseeded on system resumption [ 58.349385][ T5885] vhci_hcd: invalid port number 23 [ 58.572317][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 58.592860][ T5909] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1011'. [ 58.737545][ T5933] IPVS: Error joining to the multicast group [ 58.842102][ T5951] netlink: 'syz.5.1030': attribute type 7 has an invalid length. [ 58.866909][ T5955] serio: Serial port ptm0 [ 58.908937][ T5961] loop5: detected capacity change from 0 to 164 [ 58.943480][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 58.943497][ T29] audit: type=1400 audit(1756930996.960:1398): avc: denied { cpu } for pid=5960 comm="syz.5.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.997690][ T5975] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 59.006106][ T5975] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 59.063284][ T29] audit: type=1400 audit(1756930997.070:1399): avc: denied { setopt } for pid=5981 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.298993][ T29] audit: type=1400 audit(1756930997.310:1400): avc: denied { prog_load } for pid=6024 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.318121][ T29] audit: type=1400 audit(1756930997.310:1401): avc: denied { bpf } for pid=6024 comm="syz.4.1065" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.346961][ T29] audit: type=1400 audit(1756930997.360:1402): avc: denied { create } for pid=6021 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.366420][ T29] audit: type=1400 audit(1756930997.360:1403): avc: denied { map_create } for pid=6023 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.385596][ T29] audit: type=1400 audit(1756930997.360:1404): avc: denied { perfmon } for pid=6023 comm="syz.0.1066" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.406514][ T29] audit: type=1400 audit(1756930997.360:1405): avc: denied { write } for pid=6021 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.410523][ T3377] IPVS: starting estimator thread 0... [ 59.425841][ T29] audit: type=1400 audit(1756930997.360:1406): avc: denied { map_read map_write } for pid=6023 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.451243][ T29] audit: type=1400 audit(1756930997.360:1407): avc: denied { prog_run } for pid=6023 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.506540][ T6029] netlink: 'syz.5.1067': attribute type 21 has an invalid length. [ 59.552089][ T6027] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.668025][ T6062] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 59.676330][ T6062] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 59.706680][ T6068] netem: unknown loss type 13 [ 59.711488][ T6068] netem: change failed [ 59.752231][ T6072] loop4: detected capacity change from 0 to 1024 [ 59.767529][ T6072] EXT4-fs: Ignoring removed orlov option [ 59.773418][ T6072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.828315][ T6072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.899184][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.029490][ T6112] pim6reg1: entered promiscuous mode [ 60.034868][ T6112] pim6reg1: entered allmulticast mode [ 60.163515][ T6117] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 60.668373][ T6163] loop4: detected capacity change from 0 to 164 [ 60.697779][ T6163] syz.4.1123: attempt to access beyond end of device [ 60.697779][ T6163] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 60.730888][ T6163] syz.4.1123: attempt to access beyond end of device [ 60.730888][ T6163] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 60.733329][ T6167] binfmt_misc: register: failed to install interpreter file ./file0 [ 60.794233][ T6169] loop5: detected capacity change from 0 to 512 [ 60.853456][ T6169] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.919081][ T6169] EXT4-fs (loop5): mount failed [ 61.148064][ T6207] 9pnet_fd: Insufficient options for proto=fd [ 61.152102][ T6201] loop4: detected capacity change from 0 to 8192 [ 61.189701][ T6209] pimreg: entered allmulticast mode [ 61.225825][ T6209] pimreg: left allmulticast mode [ 61.276337][ T6217] macvtap0: refused to change device tx_queue_len [ 61.442042][ T6241] loop4: detected capacity change from 0 to 512 [ 61.473247][ T6241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 61.514388][ T6241] System zones: 1-12 [ 61.546120][ T6241] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1160: error while reading EA inode 32 err=-116 [ 61.577374][ T6227] loop5: detected capacity change from 0 to 32768 [ 61.588540][ T6241] EXT4-fs (loop4): Remounting filesystem read-only [ 61.595266][ T6241] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.608255][ T6241] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 61.618382][ T6241] EXT4-fs (loop4): 1 orphan inode deleted [ 61.624859][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.652161][ T6227] loop5: p1 p3 < > [ 61.692975][ T6241] __nla_validate_parse: 9 callbacks suppressed [ 61.692992][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 61.708221][ T6241] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1160'. [ 61.718825][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 61.729508][ T6241] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1160'. [ 61.738593][ T6241] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1160'. [ 61.780250][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.837279][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1172'. [ 62.005260][ T6304] capability: warning: `syz.2.1192' uses deprecated v2 capabilities in a way that may be insecure [ 62.033877][ T6308] random: crng reseeded on system resumption [ 62.056684][ T6310] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 62.178087][ T6319] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1198'. [ 62.201003][ T6317] SELinux: failed to load policy [ 62.212886][ T6321] netlink: 'syz.0.1199': attribute type 13 has an invalid length. [ 62.299257][ T6335] loop5: detected capacity change from 0 to 512 [ 62.307021][ T6335] EXT4-fs: Ignoring removed orlov option [ 62.316930][ T6335] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 62.334179][ T6335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 62.341317][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.349442][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.352740][ T6335] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1206: corrupted in-inode xattr: e_value size too large [ 62.404826][ T6335] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1206: couldn't read orphan inode 15 (err -117) [ 62.444608][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.458349][ T6335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.474970][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.523855][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.597003][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.611606][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.622874][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.632138][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.677325][ T6374] loop9: detected capacity change from 0 to 7 [ 62.691380][ T6374] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.699345][ T6374] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.707315][ T6374] loop9: unable to read partition table [ 62.725556][ T6374] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 62.725556][ T6374] ) failed (rc=-5) [ 62.783893][ T6394] loop4: detected capacity change from 0 to 164 [ 62.814555][ T6397] loop5: detected capacity change from 0 to 1024 [ 62.832743][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.839807][ T6399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6399 comm=syz.1.1233 [ 62.852538][ T6399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6399 comm=syz.1.1233 [ 62.867971][ T6397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 62.877047][ T6397] System zones: 0-1, 3-36 [ 62.883600][ T6397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.916823][ T6407] loop4: detected capacity change from 0 to 128 [ 62.936877][ T6407] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.954258][ T6407] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.967967][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.001090][ T6418] netlink: 'GPL': attribute type 4 has an invalid length. [ 63.020819][ T6422] ALSA: seq fatal error: cannot create timer (-22) [ 63.028367][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.169821][ T6444] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1252'. [ 63.267409][ T6464] netlink: 'syz.2.1262': attribute type 3 has an invalid length. [ 63.325297][ T6479] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 63.328823][ T6477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.331850][ T6479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.331946][ T6479] vhci_hcd vhci_hcd.0: Device attached [ 63.362559][ T6477] team0: Port device bond1 added [ 63.396060][ T6481] vhci_hcd: connection closed [ 63.396207][ T3432] vhci_hcd: stop threads [ 63.405362][ T3432] vhci_hcd: release socket [ 63.409796][ T3432] vhci_hcd: disconnect device [ 63.547098][ T6495] 9p: Unknown Cache mode or invalid value f [ 63.669221][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1285'. [ 63.817110][ T6538] block device autoloading is deprecated and will be removed. [ 63.858099][ T6543] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 63.970104][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 63.970210][ T29] audit: type=1400 audit(1756931001.970:1689): avc: denied { getopt } for pid=6553 comm="syz.5.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.040176][ T29] audit: type=1400 audit(1756931002.050:1690): avc: denied { write } for pid=6570 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.066092][ T29] audit: type=1326 audit(1756931002.080:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 64.090669][ T6577] SELinux: ebitmap: map size 4160 does not match my size 64 (high bit was 0) [ 64.107856][ T29] audit: type=1326 audit(1756931002.100:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 64.112009][ T6577] SELinux: failed to load policy [ 64.131586][ T29] audit: type=1326 audit(1756931002.100:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 64.159891][ T29] audit: type=1326 audit(1756931002.100:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 64.246204][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 64.331865][ T6601] netlink: 'syz.2.1325': attribute type 13 has an invalid length. [ 64.421417][ T29] audit: type=1400 audit(1756931002.440:1695): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.445667][ T29] audit: type=1400 audit(1756931002.440:1696): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.470028][ T29] audit: type=1400 audit(1756931002.440:1697): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.529617][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.536830][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.549988][ T29] audit: type=1400 audit(1756931002.490:1698): avc: denied { create } for pid=6594 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.617325][ T6619] loop5: detected capacity change from 0 to 764 [ 64.636640][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.663114][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.748620][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.774856][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.792717][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.811527][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.649205][ T6663] netlink: 'syz.5.1354': attribute type 13 has an invalid length. [ 65.728562][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.735842][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.897040][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.909242][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.915047][ T6688] loop4: detected capacity change from 0 to 512 [ 65.944906][ T6688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.958101][ T6688] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.983375][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.013563][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.021581][ T6676] team0: Port device bond1 added [ 66.035179][ T6674] IPVS: Error connecting to the multicast addr [ 66.043677][ T51] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.079311][ T51] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.125226][ T51] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.160287][ T51] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.334218][ T6724] batadv1: entered promiscuous mode [ 66.379822][ T6734] loop0: detected capacity change from 0 to 4096 [ 66.388640][ T6734] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.407707][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.495932][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.685868][ T6771] loop4: detected capacity change from 0 to 512 [ 66.706211][ T6771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.747444][ T6771] EXT4-fs (loop4): 1 truncate cleaned up [ 66.768041][ T6771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.919998][ T6779] loop0: detected capacity change from 0 to 32768 [ 67.146667][ T6787] loop0: detected capacity change from 0 to 128 [ 67.248680][ T6801] __nla_validate_parse: 4 callbacks suppressed [ 67.248695][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 67.267859][ T6801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1423'. [ 67.681461][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.709197][ T6821] loop0: detected capacity change from 0 to 512 [ 67.727285][ T6821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.759786][ T6821] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.844059][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.864802][ T6832] loop4: detected capacity change from 0 to 512 [ 67.876949][ T6836] random: crng reseeded on system resumption [ 67.910535][ T6836] vhci_hcd: invalid port number 23 [ 67.933999][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 67.942769][ T6832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 67.971410][ T6832] System zones: 1-12 [ 67.975651][ T6832] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1425: corrupted in-inode xattr: e_value size too large [ 68.026303][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.031151][ T6832] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1425: couldn't read orphan inode 15 (err -117) [ 68.046087][ T6845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.071566][ T6832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.173089][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.254484][ T6863] loop0: detected capacity change from 0 to 2048 [ 68.273578][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 68.291083][ T6863] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.306202][ T6863] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.318487][ T6863] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.318487][ T6863] [ 68.328240][ T6863] EXT4-fs (loop0): Total free blocks count 0 [ 68.334280][ T6863] EXT4-fs (loop0): Free/Dirty block details [ 68.340204][ T6863] EXT4-fs (loop0): free_blocks=2415919104 [ 68.345969][ T6863] EXT4-fs (loop0): dirty_blocks=16 [ 68.351187][ T6863] EXT4-fs (loop0): Block reservation details [ 68.357172][ T6863] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 68.363806][ T6870] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 68.409098][ T2957] IPVS: starting estimator thread 0... [ 68.507493][ T6877] macvtap0: refused to change device tx_queue_len [ 68.520917][ T6875] IPVS: using max 1968 ests per chain, 98400 per kthread [ 68.640022][ T6885] loop4: detected capacity change from 0 to 2048 [ 68.737631][ T6885] loop4: unable to read partition table [ 68.743991][ T6885] loop4: partition table beyond EOD, truncated [ 68.750270][ T6885] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 68.838770][ T6903] netlink: 'syz.2.1458': attribute type 13 has an invalid length. [ 68.933060][ T6918] loop5: detected capacity change from 0 to 512 [ 68.975545][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 68.975562][ T29] audit: type=1400 audit(1756931006.990:1946): avc: denied { create } for pid=6925 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.004125][ T29] audit: type=1400 audit(1756931007.020:1947): avc: denied { write } for pid=6925 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.032879][ T29] audit: type=1400 audit(1756931007.030:1948): avc: denied { create } for pid=6931 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.082049][ T6918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.098064][ T29] audit: type=1400 audit(1756931007.070:1949): avc: denied { shutdown } for pid=6933 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.117943][ T29] audit: type=1400 audit(1756931007.070:1950): avc: denied { accept } for pid=6933 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.121973][ T6918] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.137517][ T29] audit: type=1400 audit(1756931007.090:1951): avc: denied { ioctl } for pid=6931 comm="syz.2.1472" path="socket:[15974]" dev="sockfs" ino=15974 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.172695][ T29] audit: type=1400 audit(1756931007.090:1952): avc: denied { write } for pid=6931 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.210431][ T6943] loop4: detected capacity change from 0 to 164 [ 69.227476][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.237350][ T29] audit: type=1400 audit(1756931007.250:1953): avc: denied { mount } for pid=6942 comm="syz.4.1476" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.261345][ T29] audit: type=1400 audit(1756931007.250:1954): avc: denied { module_request } for pid=6948 comm="syz.1.1479" kmod="crypto-lzs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.312715][ T6955] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1481'. [ 69.322027][ T29] audit: type=1400 audit(1756931007.330:1955): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.377443][ T6963] loop4: detected capacity change from 0 to 164 [ 69.388374][ T6963] syz.4.1485: attempt to access beyond end of device [ 69.388374][ T6963] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.404027][ T6963] syz.4.1485: attempt to access beyond end of device [ 69.404027][ T6963] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.438511][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 69.447632][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 69.612942][ T6973] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1491'. [ 69.622057][ T6973] 0{X: renamed from gretap0 [ 69.628670][ T6973] 0{X: entered allmulticast mode [ 69.634963][ T6973] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 69.818907][ T6986] SELinux: ebitmap: truncated map [ 69.830452][ T6986] SELinux: failed to load policy [ 70.211988][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1510'. [ 70.221097][ T7016] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1510'. [ 70.230525][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1510'. [ 70.402694][ T7039] loop0: detected capacity change from 0 to 512 [ 70.412007][ T7040] SELinux: Context is not valid (left unmapped). [ 70.433770][ T7039] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.462334][ T7039] EXT4-fs (loop0): mount failed [ 70.542992][ T7049] macsec1: entered promiscuous mode [ 70.548250][ T7049] bridge0: entered promiscuous mode [ 70.568485][ T7049] bridge0: port 3(macsec1) entered blocking state [ 70.575265][ T7049] bridge0: port 3(macsec1) entered disabled state [ 70.580704][ T7052] loop0: detected capacity change from 0 to 512 [ 70.584165][ T7049] macsec1: entered allmulticast mode [ 70.593391][ T7049] bridge0: entered allmulticast mode [ 70.602650][ T7049] macsec1: left allmulticast mode [ 70.607720][ T7049] bridge0: left allmulticast mode [ 70.613605][ T7049] bridge0: left promiscuous mode [ 70.619717][ T7052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 70.628024][ T7052] System zones: 1-12 [ 70.634210][ T7052] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1523: error while reading EA inode 32 err=-116 [ 70.646798][ T7052] EXT4-fs (loop0): Remounting filesystem read-only [ 70.653510][ T7052] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.683392][ T7052] EXT4-fs (loop0): 1 orphan inode deleted [ 70.689950][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.726931][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.898286][ T7082] SELinux: failed to load policy [ 71.070364][ T7121] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.070364][ T7121] program syz.2.1557 not setting count and/or reply_len properly [ 71.095594][ T7125] syzkaller1: entered promiscuous mode [ 71.101128][ T7125] syzkaller1: entered allmulticast mode [ 71.356085][ T7161] serio: Serial port ttyS3 [ 71.611024][ T7186] loop0: detected capacity change from 0 to 764 [ 71.866884][ T7206] loop4: detected capacity change from 0 to 512 [ 71.873858][ T7206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.881642][ T7206] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.889692][ T7206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 71.898033][ T7206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.904599][ T7206] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.919280][ T7206] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 71.926513][ T7206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1595: bg 0: block 40: padding at end of block bitmap is not set [ 71.941017][ T7206] EXT4-fs (loop4): Remounting filesystem read-only [ 71.947646][ T7206] EXT4-fs (loop4): 1 truncate cleaned up [ 71.953758][ T7206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.968492][ T7206] EXT4-fs (loop4): shut down requested (2) [ 71.975900][ T7206] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 71.985248][ T7206] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 72.005688][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.161889][ T7220] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 72.168443][ T7220] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.176138][ T7220] vhci_hcd vhci_hcd.0: Device attached [ 72.188329][ T7220] loop5: detected capacity change from 0 to 512 [ 72.203076][ T7220] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.240101][ T7220] EXT4-fs (loop5): mount failed [ 72.260729][ T7221] vhci_hcd: connection closed [ 72.260992][ T37] vhci_hcd: stop threads [ 72.270035][ T37] vhci_hcd: release socket [ 72.274500][ T37] vhci_hcd: disconnect device [ 72.312476][ T7234] netlink: 'syz.1.1604': attribute type 2 has an invalid length. [ 72.565316][ T7272] __nla_validate_parse: 11 callbacks suppressed [ 72.565333][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 72.866846][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 72.883630][ T7317] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 72.985305][ T7339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.264081][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 73.292966][ T7378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1667'. [ 73.467000][ T7400] loop5: detected capacity change from 0 to 2048 [ 73.482258][ T7400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.494433][ T7400] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.516680][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.549443][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1679'. [ 73.558639][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1679'. [ 73.647021][ T7416] netlink: 'gtp': attribute type 1 has an invalid length. [ 73.725497][ T7420] macsec1: entered promiscuous mode [ 73.730750][ T7420] bridge0: entered promiscuous mode [ 73.736413][ T7420] bridge0: port 3(macsec1) entered blocking state [ 73.742971][ T7420] bridge0: port 3(macsec1) entered disabled state [ 73.749488][ T7420] macsec1: entered allmulticast mode [ 73.755030][ T7420] bridge0: entered allmulticast mode [ 73.760863][ T7420] macsec1: left allmulticast mode [ 73.765901][ T7420] bridge0: left allmulticast mode [ 73.771385][ T7420] bridge0: left promiscuous mode [ 73.893949][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1692'. [ 73.943751][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1696'. [ 74.005005][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 74.005023][ T29] audit: type=1400 audit(1756931012.020:2166): avc: denied { read } for pid=7450 comm="syz.2.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.068909][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1704'. [ 74.124262][ T29] audit: type=1326 audit(1756931012.140:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 74.147875][ T29] audit: type=1326 audit(1756931012.140:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 74.176742][ T29] audit: type=1326 audit(1756931012.190:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 74.200452][ T29] audit: type=1326 audit(1756931012.190:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09a759ec23 code=0x7ffc0000 [ 74.251994][ T29] audit: type=1326 audit(1756931012.260:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09a759d69f code=0x7ffc0000 [ 74.312209][ T29] audit: type=1326 audit(1756931012.330:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09a759ec77 code=0x7ffc0000 [ 74.338232][ T7464] loop0: detected capacity change from 0 to 8192 [ 74.339685][ T7472] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 74.363684][ T29] audit: type=1400 audit(1756931012.350:2173): avc: denied { append } for pid=7471 comm="syz.1.1710" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.386671][ T29] audit: type=1326 audit(1756931012.350:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09a759d550 code=0x7ffc0000 [ 74.410340][ T29] audit: type=1326 audit(1756931012.350:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09a759e7eb code=0x7ffc0000 [ 74.491337][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.500275][ T7479] team0: Port device bond1 added [ 74.561573][ T7488] loop0: detected capacity change from 0 to 512 [ 74.571407][ T7488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.585671][ T7488] EXT4-fs (loop0): 1 truncate cleaned up [ 74.591959][ T7488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.661415][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.745134][ T7504] hub 2-0:1.0: USB hub found [ 74.749915][ T7504] hub 2-0:1.0: 8 ports detected [ 74.759122][ T7506] serio: Serial port ttyS3 [ 75.647367][ T7550] loop4: detected capacity change from 0 to 128 [ 75.654778][ T7550] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.667256][ T7550] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.713854][ T7554] SELinux: security policydb version 17 (MLS) not backwards compatible [ 75.722554][ T7554] SELinux: failed to load policy [ 75.770426][ T7558] loop4: detected capacity change from 0 to 512 [ 75.782658][ T7558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.812413][ T7558] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.905625][ T7580] veth0_to_team: entered promiscuous mode [ 75.914118][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.930574][ T7582] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 75.963562][ T7588] sch_fq: defrate 4294967295 ignored. [ 76.049153][ T7596] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 76.106922][ T7603] rdma_op ffff888129c7e580 conn xmit_rdma 0000000000000000 [ 76.210327][ T7620] loop5: detected capacity change from 0 to 512 [ 76.217449][ T7620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.230156][ T7620] EXT4-fs (loop5): 1 truncate cleaned up [ 76.242472][ T7620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.325430][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.441615][ T7644] loop5: detected capacity change from 0 to 164 [ 76.474395][ T7644] syz.5.1785: attempt to access beyond end of device [ 76.474395][ T7644] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 76.488515][ T7644] syz.5.1785: attempt to access beyond end of device [ 76.488515][ T7644] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 76.666726][ T7671] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 77.063578][ T7702] SELinux: failed to load policy [ 77.153569][ T7714] : renamed from veth0_to_bond [ 77.243502][ T7725] loop5: detected capacity change from 0 to 1024 [ 77.278317][ T7725] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.289363][ T7725] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.308243][ T7733] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.322490][ T7725] JBD2: no valid journal superblock found [ 77.328314][ T7725] EXT4-fs (loop5): Could not load journal inode [ 77.353813][ T7737] bridge0: port 3(batadv1) entered blocking state [ 77.359591][ T7725] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 77.360306][ T7737] bridge0: port 3(batadv1) entered disabled state [ 77.384643][ T7737] batadv1: entered allmulticast mode [ 77.390593][ T7737] batadv1: entered promiscuous mode [ 77.531435][ T7767] loop4: detected capacity change from 0 to 1024 [ 77.557222][ T7771] netlink: 'syz.5.1843': attribute type 6 has an invalid length. [ 77.572146][ T7767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.641567][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.839310][ T126] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 77.842204][ T7803] __nla_validate_parse: 6 callbacks suppressed [ 77.842222][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 77.848917][ T126] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 77.875015][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 77.887683][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 77.896746][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 77.908912][ T7805] bridge0: port 3(macsec1) entered blocking state [ 77.915420][ T7805] bridge0: port 3(macsec1) entered disabled state [ 77.922594][ T7805] macsec1: entered allmulticast mode [ 77.928780][ T7805] macsec1: left allmulticast mode [ 78.027804][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1867'. [ 78.056568][ T7827] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1869'. [ 78.066256][ T7827] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1869'. [ 78.076942][ T7829] unsupported nla_type 52263 [ 78.100730][ T7833] IPVS: Error connecting to the multicast addr [ 78.217408][ T7850] loop4: detected capacity change from 0 to 2048 [ 78.269093][ T7850] loop4: p1 < > p4 [ 78.274835][ T7850] loop4: p4 size 8388608 extends beyond EOD, truncated [ 78.342379][ T7856] atomic_op ffff888129c7e928 conn xmit_atomic 0000000000000000 [ 78.401005][ T7864] veth0_vlan: left promiscuous mode [ 78.408573][ T7864] veth0_vlan: entered promiscuous mode [ 78.456476][ T7870] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 78.490074][ T7874] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1887'. [ 78.553418][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1891'. [ 78.600823][ T7889] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1894'. [ 78.610056][ T7889] 1{X: renamed from 30{X (while UP) [ 78.631712][ T7889] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 78.727099][ T7900] loop5: detected capacity change from 0 to 256 [ 79.038846][ T7927] loop5: detected capacity change from 0 to 1024 [ 79.060149][ T7927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.119051][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.139262][ T7938] loop4: detected capacity change from 0 to 1024 [ 79.148772][ T7940] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.148772][ T7940] program syz.5.1916 not setting count and/or reply_len properly [ 79.176303][ T7938] EXT4-fs: Ignoring removed orlov option [ 79.196444][ T7938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.212134][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 79.212151][ T29] audit: type=1400 audit(1756931785.327:2621): avc: denied { unlink } for pid=7937 comm="syz.4.1915" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.243717][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.261031][ T29] audit: type=1326 audit(1756931785.369:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.5.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bd8febe9 code=0x7ffc0000 [ 79.284819][ T29] audit: type=1326 audit(1756931785.369:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.5.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bd8febe9 code=0x7ffc0000 [ 79.308274][ T29] audit: type=1326 audit(1756931785.369:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.5.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f20bd8febe9 code=0x7ffc0000 [ 79.331621][ T29] audit: type=1326 audit(1756931785.369:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.5.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bd8febe9 code=0x7ffc0000 [ 79.355129][ T29] audit: type=1326 audit(1756931785.369:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.5.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f20bd8febe9 code=0x7ffc0000 [ 80.078952][ T7993] 0{X: renamed from gretap0 [ 80.087577][ T7993] 0{X: entered allmulticast mode [ 80.093899][ T7993] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 80.509280][ T29] audit: type=1326 audit(1756931786.692:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 80.536036][ T29] audit: type=1326 audit(1756931786.713:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 80.559559][ T29] audit: type=1326 audit(1756931786.713:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 80.583075][ T29] audit: type=1326 audit(1756931786.713:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.4.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 80.773775][ T8040] IPVS: Error connecting to the multicast addr [ 81.257668][ T8090] SELinux: failed to load policy [ 81.316204][ T8101] bridge0: port 3(macsec1) entered blocking state [ 81.322807][ T8101] bridge0: port 3(macsec1) entered disabled state [ 81.332209][ T8101] macsec1: entered allmulticast mode [ 81.338032][ T8101] macsec1: left allmulticast mode [ 81.423293][ T8111] loop5: detected capacity change from 0 to 512 [ 81.431594][ T8111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.451179][ T8111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c098, mo2=0002] [ 81.468144][ T8111] System zones: 0-2, 18-18, 34-34 [ 81.483787][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.506643][ T8111] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.554436][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.857185][ T8142] bridge0: port 3(macsec1) entered blocking state [ 81.863736][ T8142] bridge0: port 3(macsec1) entered disabled state [ 81.870729][ T8142] macsec1: entered allmulticast mode [ 81.876906][ T8142] macsec1: left allmulticast mode [ 81.910520][ T8149] ipvlan2: entered promiscuous mode [ 81.917705][ T8149] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 81.925784][ T8149] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.967036][ T8154] loop5: detected capacity change from 0 to 128 [ 81.973967][ T8154] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.987574][ T8154] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.034032][ T37] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.801474][ T8266] __nla_validate_parse: 15 callbacks suppressed [ 82.801493][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 82.816833][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'. [ 82.855293][ T8266] bridge0: port 3(macsec1) entered blocking state [ 82.861969][ T8266] bridge0: port 3(macsec1) entered disabled state [ 82.870921][ T8266] macsec1: entered allmulticast mode [ 82.876867][ T8266] macsec1: left allmulticast mode [ 83.186372][ T8297] ipvlan2: entered promiscuous mode [ 83.192904][ T8297] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 83.200677][ T8297] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.311304][ T8319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2091'. [ 83.983901][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 83.983919][ T29] audit: type=1326 audit(1756931790.335:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad6e6e5ba7 code=0x7ffc0000 [ 84.013692][ T29] audit: type=1326 audit(1756931790.335:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad6e68adb9 code=0x7ffc0000 [ 84.037105][ T29] audit: type=1326 audit(1756931790.335:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 84.060651][ T29] audit: type=1326 audit(1756931790.335:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad6e6e5ba7 code=0x7ffc0000 [ 84.084334][ T29] audit: type=1326 audit(1756931790.335:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad6e68adb9 code=0x7ffc0000 [ 84.107663][ T29] audit: type=1326 audit(1756931790.335:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 84.131165][ T29] audit: type=1326 audit(1756931790.335:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad6e6e5ba7 code=0x7ffc0000 [ 84.154468][ T29] audit: type=1326 audit(1756931790.335:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad6e68adb9 code=0x7ffc0000 [ 84.177828][ T29] audit: type=1326 audit(1756931790.335:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 84.201382][ T29] audit: type=1326 audit(1756931790.335:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad6e6e5ba7 code=0x7ffc0000 [ 84.256243][ T8393] block device autoloading is deprecated and will be removed. [ 84.290880][ T8398] program syz.2.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.435754][ T8425] syzkaller0: entered promiscuous mode [ 84.441383][ T8425] syzkaller0: entered allmulticast mode [ 85.377985][ T8485] program syz.1.2166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.501170][ T8491] macvtap0: refused to change device tx_queue_len [ 85.525776][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 85.534873][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 85.554468][ T8499] random: crng reseeded on system resumption [ 85.560844][ T8495] bridge0: port 4(macsec1) entered blocking state [ 85.567367][ T8495] bridge0: port 4(macsec1) entered disabled state [ 85.576007][ T8495] macsec1: entered allmulticast mode [ 85.580163][ T8499] Restarting kernel threads ... [ 85.586609][ T8495] macsec1: left allmulticast mode [ 85.596490][ T8499] Done restarting kernel threads. [ 85.657146][ T8503] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 85.671037][ T8503] SELinux: failed to load policy [ 85.827541][ T8524] loop2: detected capacity change from 0 to 256 [ 85.988178][ T8541] syzkaller1: entered promiscuous mode [ 85.993766][ T8541] syzkaller1: entered allmulticast mode [ 86.027978][ T3305] block device autoloading is deprecated and will be removed. [ 86.036931][ T8551] block device autoloading is deprecated and will be removed. [ 86.053491][ T8551] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.071792][ T8551] FAT-fs (loop1): unable to read boot sector [ 86.161759][ T8573] ipvlan2: entered promiscuous mode [ 86.167550][ T8573] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.176318][ T8573] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.236409][ T8584] block device autoloading is deprecated and will be removed. [ 86.244182][ T8584] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.253881][ T8584] FAT-fs (loop3): unable to read boot sector [ 86.375161][ T8595] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 86.603405][ T8612] loop1: detected capacity change from 0 to 128 [ 86.641147][ T8616] ipvlan2: entered promiscuous mode [ 86.646914][ T8616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.664933][ T8616] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.842701][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2232'. [ 86.945052][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 86.964223][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 87.098629][ T8646] ipvlan2: entered promiscuous mode [ 87.114712][ T8646] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 87.134366][ T8646] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.253296][ T8665] netlink: 'syz.0.2246': attribute type 13 has an invalid length. [ 87.261239][ T8665] netlink: 'syz.0.2246': attribute type 17 has an invalid length. [ 87.331613][ T8665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.856360][ T8701] loop1: detected capacity change from 0 to 128 [ 88.046843][ T8717] syzkaller1: entered promiscuous mode [ 88.052509][ T8717] syzkaller1: entered allmulticast mode [ 88.206406][ T8733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2281'. [ 88.349968][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2290'. [ 88.503400][ T8772] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.539171][ T8772] SELinux: failed to load policy [ 88.654265][ T8787] syzkaller1: entered promiscuous mode [ 88.660022][ T8787] syzkaller1: entered allmulticast mode [ 88.850112][ T8809] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.864624][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 88.869440][ T8809] SELinux: failed to load policy [ 88.888348][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 88.898848][ T8811] macvtap1: entered promiscuous mode [ 88.904181][ T8811] erspan0: entered promiscuous mode [ 88.909598][ T8811] macvtap1: entered allmulticast mode [ 88.914978][ T8811] erspan0: entered allmulticast mode [ 88.940414][ T8817] erspan0: left allmulticast mode [ 88.945554][ T8817] erspan0: left promiscuous mode [ 88.959185][ T8813] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 89.017213][ T8823] syzkaller1: entered promiscuous mode [ 89.022793][ T8823] syzkaller1: entered allmulticast mode [ 89.108250][ T8837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2329'. [ 89.165128][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 89.165145][ T29] audit: type=1400 audit(1756931795.774:3534): avc: denied { ioctl } for pid=8840 comm="syz.1.2331" path="socket:[24628]" dev="sockfs" ino=24628 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.292845][ T29] audit: type=1326 audit(1756931795.858:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.316396][ T29] audit: type=1326 audit(1756931795.858:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.339848][ T29] audit: type=1326 audit(1756931795.858:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.363373][ T29] audit: type=1326 audit(1756931795.858:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.387221][ T29] audit: type=1326 audit(1756931795.858:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.410733][ T29] audit: type=1326 audit(1756931795.858:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.434235][ T29] audit: type=1326 audit(1756931795.858:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.457714][ T29] audit: type=1326 audit(1756931795.858:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.481171][ T29] audit: type=1326 audit(1756931795.858:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 89.508088][ T8866] loop1: detected capacity change from 0 to 512 [ 89.514977][ T8866] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.559771][ T8866] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.2337: iget: bad i_size value: -6917529027641081756 [ 89.574904][ T8866] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2337: couldn't read orphan inode 17 (err -117) [ 89.588024][ T8866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.624842][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.464884][ T8891] ALSA: seq fatal error: cannot create timer (-22) [ 90.517881][ T8905] netlink: 'syz.2.2359': attribute type 30 has an invalid length. [ 90.930158][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 90.975408][ T8935] macvtap1: entered promiscuous mode [ 90.980799][ T8935] erspan0: entered promiscuous mode [ 90.986094][ T8935] macvtap1: entered allmulticast mode [ 90.991480][ T8935] erspan0: entered allmulticast mode [ 91.018321][ T8941] erspan0: left allmulticast mode [ 91.023418][ T8941] erspan0: left promiscuous mode [ 91.158015][ T8949] SELinux: failed to load policy [ 91.339044][ T8964] loop2: detected capacity change from 0 to 1024 [ 91.345952][ T8964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.374907][ T8964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.421469][ T8975] netlink: zone id is out of range [ 91.426677][ T8975] netlink: zone id is out of range [ 91.432491][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.486748][ T8985] loop2: detected capacity change from 0 to 1024 [ 91.511068][ T8985] EXT4-fs: Ignoring removed orlov option [ 91.516950][ T8985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.538897][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2400'. [ 91.549318][ T8985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.563071][ T8992] erspan0: entered promiscuous mode [ 91.585980][ T8992] macvtap1: entered promiscuous mode [ 91.586391][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.591409][ T8992] macvtap1: entered allmulticast mode [ 91.605981][ T8992] erspan0: entered allmulticast mode [ 91.621885][ T9002] erspan0: left allmulticast mode [ 91.627030][ T9002] erspan0: left promiscuous mode [ 91.633088][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2405'. [ 91.672929][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 91.704612][ T9012] bond_slave_1: mtu less than device minimum [ 91.741960][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2413'. [ 91.836640][ T9034] loop1: detected capacity change from 0 to 1024 [ 91.843760][ T9034] EXT4-fs: Ignoring removed bh option [ 91.851199][ T9034] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.867966][ T9027] netlink: 'syz.4.2417': attribute type 13 has an invalid length. [ 91.875879][ T9027] netlink: 'syz.4.2417': attribute type 17 has an invalid length. [ 91.881037][ T9034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.888363][ T9027] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.922087][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.948172][ T9041] loop1: detected capacity change from 0 to 1024 [ 91.955466][ T9041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.966401][ T9041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.003752][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.105992][ T9058] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 92.125996][ T9058] bond2: (slave bridge1): making interface the new active one [ 92.133715][ T9058] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 92.365476][ T9073] netlink: 'syz.2.2434': attribute type 6 has an invalid length. [ 92.510462][ T9093] SELinux: security policydb version 17 (MLS) not backwards compatible [ 92.518982][ T9093] SELinux: failed to load policy [ 92.895603][ T9130] netlink: zone id is out of range [ 92.900983][ T9130] netlink: zone id is out of range [ 93.151756][ T9137] netlink: 'syz.1.2463': attribute type 13 has an invalid length. [ 93.159692][ T9137] netlink: 'syz.1.2463': attribute type 17 has an invalid length. [ 93.176381][ T9137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.282648][ T9152] __nla_validate_parse: 4 callbacks suppressed [ 93.282666][ T9152] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2471'. [ 93.519633][ T9178] netlink: 'syz.5.2482': attribute type 1 has an invalid length. [ 93.542109][ T9178] netlink: 'syz.5.2482': attribute type 1 has an invalid length. [ 93.557901][ T9183] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 93.644248][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2491'. [ 93.644463][ T9183] bond2: (slave bridge1): making interface the new active one [ 93.662741][ T9183] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 93.690725][ T9200] netlink: 'syz.2.2492': attribute type 3 has an invalid length. [ 93.875310][ T9217] loop2: detected capacity change from 0 to 128 [ 93.893717][ T9217] FAT-fs (loop2): bogus number of directory entries (5) [ 93.900813][ T9217] FAT-fs (loop2): Can't find a valid FAT filesystem [ 94.267621][ T9242] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.2512'. [ 94.780424][ T9274] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 95.248670][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 95.248688][ T29] audit: type=1326 audit(1756931802.158:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.282407][ T29] audit: type=1326 audit(1756931802.200:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.306042][ T29] audit: type=1326 audit(1756931802.200:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.329497][ T29] audit: type=1326 audit(1756931802.200:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.352989][ T29] audit: type=1326 audit(1756931802.200:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.376413][ T29] audit: type=1326 audit(1756931802.200:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.399933][ T29] audit: type=1326 audit(1756931802.200:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.423485][ T29] audit: type=1326 audit(1756931802.200:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.446880][ T29] audit: type=1326 audit(1756931802.200:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 95.470343][ T29] audit: type=1326 audit(1756931802.200:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc31fc3ebe9 code=0x7ffc0000 [ 96.327095][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2600'. [ 96.389460][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 97.094971][ T5481] syz_tun (unregistering): left promiscuous mode [ 97.342058][ T51] batadv1: left allmulticast mode [ 97.347744][ T51] batadv1: left promiscuous mode [ 97.352941][ T51] bridge0: port 3(batadv1) entered disabled state [ 97.385594][ T51] bridge_slave_1: left allmulticast mode [ 97.391373][ T51] bridge_slave_1: left promiscuous mode [ 97.397418][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.424349][ T51] bridge_slave_0: left allmulticast mode [ 97.430051][ T51] bridge_slave_0: left promiscuous mode [ 97.436093][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.636545][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.656977][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.677581][ T51] bond0 (unregistering): Released all slaves [ 97.691912][ T51] team0: Port device bond1 removed [ 97.698402][ T51] bond1 (unregistering): Released all slaves [ 97.793920][ T51] tipc: Disabling bearer [ 97.798948][ T51] tipc: Left network mode [ 97.828162][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 97.858841][ T51] batadv_slave_0: left promiscuous mode [ 97.868080][ T51] hsr_slave_0: left promiscuous mode [ 97.874525][ T51] hsr_slave_1: left promiscuous mode [ 97.882172][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.890568][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.957138][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.086314][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.166715][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.174072][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.194126][ T9509] bridge_slave_0: entered allmulticast mode [ 98.201529][ T9509] bridge_slave_0: entered promiscuous mode [ 98.213853][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.220983][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.229922][ T9509] bridge_slave_1: entered allmulticast mode [ 98.237621][ T9509] bridge_slave_1: entered promiscuous mode [ 98.261288][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.272984][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.307346][ T9509] team0: Port device team_slave_0 added [ 98.315806][ T9509] team0: Port device team_slave_1 added [ 98.341679][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.348714][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.374914][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.387375][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.394418][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.420378][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.481153][ T9509] hsr_slave_0: entered promiscuous mode [ 98.507577][ T9509] hsr_slave_1: entered promiscuous mode [ 98.513624][ T9509] debugfs: 'hsr0' already exists in 'hsr' [ 98.519399][ T9509] Cannot create hsr debugfs directory [ 98.528443][ T51] IPVS: stop unused estimator thread 0... [ 98.982726][ T9637] macvlan1: entered promiscuous mode [ 98.988596][ T9637] ipvlan0: entered promiscuous mode [ 98.994374][ T9637] ipvlan0: left promiscuous mode [ 99.000429][ T9637] macvlan1: left promiscuous mode [ 99.041133][ T9509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.052723][ T9654] syzkaller1: entered promiscuous mode [ 99.058228][ T9654] syzkaller1: entered allmulticast mode [ 99.064992][ T9509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.084030][ T9509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.095464][ T9509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.164474][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.174994][ T9675] tipc: Started in network mode [ 99.179898][ T9675] tipc: Node identity ac14140f, cluster identity 4711 [ 99.188336][ T9675] tipc: New replicast peer: 255.255.255.255 [ 99.194612][ T9675] tipc: Enabled bearer , priority 10 [ 99.206736][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.228073][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.235220][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.256105][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.263222][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.295884][ T9682] hub 9-0:1.0: USB hub found [ 99.312467][ T9682] hub 9-0:1.0: 8 ports detected [ 99.373831][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.756254][ T9509] veth0_vlan: entered promiscuous mode [ 99.767846][ T9509] veth1_vlan: entered promiscuous mode [ 99.809361][ T9509] veth0_macvtap: entered promiscuous mode [ 99.820907][ T9509] veth1_macvtap: entered promiscuous mode [ 99.845783][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.860928][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.877445][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.887040][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.896934][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.906607][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.021482][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 100.021579][ T29] audit: type=1400 audit(1756931807.103:4589): avc: denied { mounton } for pid=9509 comm="syz-executor" path="/root/syzkaller.9c21mN/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.052248][ T29] audit: type=1400 audit(1756931807.113:4590): avc: denied { mounton } for pid=9509 comm="syz-executor" path="/root/syzkaller.9c21mN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.079079][ T29] audit: type=1400 audit(1756931807.113:4591): avc: denied { mounton } for pid=9509 comm="syz-executor" path="/root/syzkaller.9c21mN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.106913][ T29] audit: type=1400 audit(1756931807.113:4592): avc: denied { mounton } for pid=9509 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.129975][ T29] audit: type=1400 audit(1756931807.113:4593): avc: denied { mount } for pid=9509 comm="syz-executor" name="/" dev="gadgetfs" ino=4805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.259693][ T2957] tipc: Node number set to 2886997007 [ 100.426136][ T9733] SELinux: failed to load policy [ 100.515063][ T29] audit: type=1326 audit(1756931807.691:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 100.538823][ T29] audit: type=1326 audit(1756931807.691:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 100.578941][ T29] audit: type=1326 audit(1756931807.743:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 100.602527][ T29] audit: type=1326 audit(1756931807.743:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 100.626230][ T29] audit: type=1326 audit(1756931807.743:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 100.772479][ T9768] validate_nla: 2 callbacks suppressed [ 100.772497][ T9768] netlink: 'syz.2.2693': attribute type 3 has an invalid length. [ 101.468321][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.483989][ T9849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.533184][ T9856] block device autoloading is deprecated and will be removed. [ 101.733913][ T9878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2712'. [ 102.088309][ T9917] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 102.353247][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2741'. [ 102.402740][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2743'. [ 102.538851][ T9951] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.555829][ T9951] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.800475][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 102.809493][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 103.001366][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'. [ 103.010570][T10006] netem: change failed [ 103.147974][T10018] SELinux: failed to load policy [ 103.197599][T10023] macsec1: entered promiscuous mode [ 103.206787][T10023] bridge0: port 3(macsec1) entered blocking state [ 103.213403][T10023] bridge0: port 3(macsec1) entered disabled state [ 103.224780][T10023] macsec1: entered allmulticast mode [ 103.230138][T10023] bridge0: entered allmulticast mode [ 103.236205][T10023] macsec1: left allmulticast mode [ 103.241342][T10023] bridge0: left allmulticast mode [ 103.331912][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 103.361163][T10035] msdos: Unknown parameter '' [ 103.375629][T10037] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 103.718372][T10081] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2810'. [ 103.777099][T10092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'. [ 104.040718][T10120] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 104.143628][T10133] loop5: detected capacity change from 0 to 1024 [ 104.154449][T10133] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.165496][T10133] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.177427][T10133] JBD2: no valid journal superblock found [ 104.183185][T10133] EXT4-fs (loop5): Could not load journal inode [ 104.202039][T10133] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 104.308011][T10143] loop5: detected capacity change from 0 to 8192 [ 104.331805][T10154] macsec1: entered promiscuous mode [ 104.348018][T10154] bridge0: port 3(macsec1) entered blocking state [ 104.354505][T10154] bridge0: port 3(macsec1) entered disabled state [ 104.390506][T10154] macsec1: entered allmulticast mode [ 104.395922][T10154] bridge0: entered allmulticast mode [ 104.401834][T10154] macsec1: left allmulticast mode [ 104.401853][T10154] bridge0: left allmulticast mode [ 104.463672][T10173] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 105.117522][T10209] bridge0: entered promiscuous mode [ 105.122837][T10209] macsec1: entered promiscuous mode [ 105.130255][T10209] bridge0: port 3(macsec1) entered blocking state [ 105.136885][T10209] bridge0: port 3(macsec1) entered disabled state [ 105.152747][T10209] macsec1: entered allmulticast mode [ 105.158176][T10209] bridge0: entered allmulticast mode [ 105.186509][T10209] macsec1: left allmulticast mode [ 105.191595][T10209] bridge0: left allmulticast mode [ 105.211182][T10209] bridge0: left promiscuous mode [ 105.218965][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 105.218982][ T29] audit: type=1326 audit(1756931812.625:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.248755][ T29] audit: type=1326 audit(1756931812.625:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.272256][ T29] audit: type=1326 audit(1756931812.625:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.296069][ T29] audit: type=1326 audit(1756931812.625:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.319619][ T29] audit: type=1326 audit(1756931812.625:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.343789][ T29] audit: type=1326 audit(1756931812.762:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.367452][ T29] audit: type=1326 audit(1756931812.762:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.391056][ T29] audit: type=1326 audit(1756931812.762:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.415187][ T29] audit: type=1326 audit(1756931812.835:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.438964][ T29] audit: type=1326 audit(1756931812.835:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f962ebe9 code=0x7ffc0000 [ 105.488191][T10227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2870'. [ 106.013264][T10334] only policy match revision 0 supported [ 106.013279][T10334] unable to load match [ 106.090444][T10352] loop2: detected capacity change from 0 to 164 [ 106.116795][T10356] ALSA: seq fatal error: cannot create timer (-22) [ 106.348791][T10381] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2804284406/2804284408 [ 106.358214][T10381] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2804284406/2804284408 [ 106.709731][ T2957] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 106.712427][T10450] only policy match revision 0 supported [ 106.717413][T10450] unable to load match [ 106.717542][ T2957] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 106.735289][ T2957] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 106.744295][ T2957] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.808444][T10457] macsec1: entered promiscuous mode [ 106.813849][T10457] bridge0: entered promiscuous mode [ 106.820572][T10457] bridge0: port 3(macsec1) entered blocking state [ 106.827252][T10457] bridge0: port 3(macsec1) entered disabled state [ 106.835672][T10457] macsec1: entered allmulticast mode [ 106.841067][T10457] bridge0: entered allmulticast mode [ 106.848574][T10457] macsec1: left allmulticast mode [ 106.854182][T10457] bridge0: left allmulticast mode [ 106.859914][T10457] bridge0: left promiscuous mode [ 106.873661][T10460] __nla_validate_parse: 2 callbacks suppressed [ 106.873677][T10460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2956'. [ 107.023545][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'. [ 107.033435][T10481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.044227][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2967'. [ 107.145058][T10496] bridge2: entered promiscuous mode [ 107.193210][T10501] only policy match revision 0 supported [ 107.193227][T10501] unable to load match [ 107.208204][T10502] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.276713][T10515] netlink: 4 bytes leftover after parsing attributes in process `wޡ'. [ 107.396352][T10529] random: crng reseeded on system resumption [ 107.606526][T10558] loop5: detected capacity change from 0 to 512 [ 107.652825][T10558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.682666][T10558] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.760823][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.295040][T10681] random: crng reseeded on system resumption [ 108.363905][T10692] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.417837][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 108.437466][T10698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.593721][T10710] Falling back ldisc for ttyS3. [ 108.788882][T10733] macsec0: entered allmulticast mode [ 108.867900][T10742] rdma_op ffff888104707180 conn xmit_rdma 0000000000000000 [ 109.163682][T10775] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3064'. [ 109.484613][T10810] loop9: detected capacity change from 0 to 7 [ 109.497474][T10810] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.505561][T10810] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.513546][T10810] loop9: unable to read partition table [ 109.519707][T10810] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 109.519707][T10810] ) failed (rc=-5) [ 109.574447][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.588555][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.648573][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.670279][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.679918][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.687975][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.705564][T10818] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.362964][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 110.362983][ T29] audit: type=1326 audit(1756931818.032:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04684debe9 code=0x7ffc0000 [ 110.374372][T10830] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.427981][ T29] audit: type=1326 audit(1756931818.064:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f04684debe9 code=0x7ffc0000 [ 110.451627][ T29] audit: type=1326 audit(1756931818.064:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04684debe9 code=0x7ffc0000 [ 110.475160][ T29] audit: type=1326 audit(1756931818.074:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.6.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04684debe9 code=0x7ffc0000 [ 110.498672][ T29] audit: type=1326 audit(1756931818.074:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.522294][ T29] audit: type=1326 audit(1756931818.074:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.545866][ T29] audit: type=1326 audit(1756931818.074:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.569748][ T29] audit: type=1326 audit(1756931818.074:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.593352][ T29] audit: type=1326 audit(1756931818.074:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.617089][ T29] audit: type=1326 audit(1756931818.074:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad6e6eebe9 code=0x7ffc0000 [ 110.681362][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 110.748250][T10882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10882 comm=syz.5.3093 [ 110.761552][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 111.075285][T10936] netlink: 'syz.6.3103': attribute type 7 has an invalid length. [ 111.377673][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 111.457272][T11016] loop2: detected capacity change from 0 to 164 [ 111.478095][T11016] syz.2.3113: attempt to access beyond end of device [ 111.478095][T11016] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 111.494251][T11016] syz.2.3113: attempt to access beyond end of device [ 111.494251][T11016] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 111.556108][T11022] hub 9-0:1.0: USB hub found [ 111.561545][T11022] hub 9-0:1.0: 8 ports detected [ 111.568962][T11020] pim6reg1: entered promiscuous mode [ 111.574310][T11020] pim6reg1: entered allmulticast mode [ 111.614709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a39d400: rx timeout, send abort [ 111.623355][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a39d400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.637751][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a39da00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.858589][T11061] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 111.920789][T11065] atomic_op ffff88810da8f928 conn xmit_atomic 0000000000000000 [ 111.969877][T11075] loop5: detected capacity change from 0 to 512 [ 111.975539][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.985945][T11075] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.991430][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.015004][T11075] EXT4-fs (loop5): 1 truncate cleaned up [ 112.021260][T11075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.041492][T11088] syzkaller1: entered promiscuous mode [ 112.047071][T11088] syzkaller1: entered allmulticast mode [ 112.066441][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.120798][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 112.152485][T11100] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.271258][T11121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11121 comm=syz.5.3153 [ 112.533779][T11155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.589596][T11155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.635479][T11155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.670138][T11168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11168 comm=syz.0.3176 [ 112.714896][T11155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.754982][ T9577] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.766342][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.777702][ T51] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.790218][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.009864][T11198] loop9: detected capacity change from 0 to 7 [ 113.017664][T11198] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.025748][T11198] loop9: unable to read partition table [ 113.031625][T11198] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.031625][T11198] ) failed (rc=-5) [ 113.248467][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'. [ 113.283022][T11225] SELinux: failed to load policy [ 113.318730][T11231] loop9: detected capacity change from 0 to 7 [ 113.341547][T11231] loop9: unable to read partition table [ 113.348332][T11231] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.348332][T11231] ) failed (rc=-5) [ 113.429783][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 113.439023][T11246] pim6reg1: entered promiscuous mode [ 113.444492][T11246] pim6reg1: entered allmulticast mode [ 113.465575][T11243] team1: entered promiscuous mode [ 113.470764][T11243] team1: entered allmulticast mode [ 113.999995][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3233'. [ 114.092272][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3240'. [ 114.101349][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3240'. [ 114.799338][T11404] netlink: 'syz.2.3266': attribute type 1 has an invalid length. [ 114.869646][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 114.878748][T11408] loop2: detected capacity change from 0 to 1024 [ 114.895109][T11410] team1: entered promiscuous mode [ 114.900358][T11410] team1: entered allmulticast mode [ 114.935231][T11408] EXT4-fs: inline encryption not supported [ 114.941790][T11408] EXT4-fs: Ignoring removed bh option [ 114.958520][T11408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.046842][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.548385][T11438] SELinux: Context @ is not valid (left unmapped). [ 115.555635][ T29] kauditd_printk_skb: 714 callbacks suppressed [ 115.555648][ T29] audit: type=1400 audit(1756931823.482:5786): avc: denied { relabelto } for pid=11437 comm="syz.6.3280" name="blkio.bfq.time_recursive" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 115.587539][ T29] audit: type=1400 audit(1756931823.482:5787): avc: denied { associate } for pid=11437 comm="syz.6.3280" name="blkio.bfq.time_recursive" dev="tmpfs" ino=626 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 115.734887][ T29] audit: type=1400 audit(1756931823.597:5788): avc: denied { unlink } for pid=9509 comm="syz-executor" name="blkio.bfq.time_recursive" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 115.826681][ T29] audit: type=1400 audit(1756931823.744:5789): avc: denied { write } for pid=11445 comm="syz.6.3284" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.877899][T11450] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 116.009435][T11462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3292'. [ 116.293053][ T29] audit: type=1400 audit(1756931824.258:5790): avc: denied { create } for pid=11488 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.317617][T11489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.325848][T11489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.333313][ T29] audit: type=1400 audit(1756931824.279:5791): avc: denied { write } for pid=11488 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.513940][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3310'. [ 116.601249][T11503] atomic_op ffff888104704128 conn xmit_atomic 0000000000000000 [ 116.642491][T11505] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 116.753383][T11513] serio: Serial port ttyS3 [ 116.895209][ T29] audit: type=1326 audit(1756931824.888:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 116.921502][ T29] audit: type=1326 audit(1756931824.920:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 116.945096][ T29] audit: type=1326 audit(1756931824.920:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 116.968832][ T29] audit: type=1326 audit(1756931824.920:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 116.996270][T11528] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.041103][T11530] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3324'. [ 117.167547][T11544] SELinux: failed to load policy [ 117.174048][T11543] serio: Serial port ttyS3 [ 117.305442][T11568] loop5: detected capacity change from 0 to 1024 [ 117.321911][T11571] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.322378][T11568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.337558][T11571] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 117.369049][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.443411][T11581] pimreg: entered allmulticast mode [ 117.451154][T11581] pimreg: left allmulticast mode [ 117.493516][T11586] siw: device registration error -23 [ 117.533028][T11590] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3351'. [ 117.587210][T11594] SELinux: failed to load policy [ 118.734510][T11663] netlink: 'syz.1.3385': attribute type 3 has an invalid length. [ 118.809516][T11676] netlink: 'syz.1.3392': attribute type 2 has an invalid length. [ 118.817297][T11676] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 118.825166][T11676] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3392'. [ 119.080038][T11710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=12 sclass=netlink_audit_socket pid=11710 comm=syz.1.3406 [ 119.087542][T11712] loop5: detected capacity change from 0 to 512 [ 119.101374][T11712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.114082][T11712] EXT4-fs (loop5): 1 truncate cleaned up [ 119.121889][T11712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.153945][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.227705][T11727] vlan2: entered allmulticast mode [ 119.230137][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'. [ 119.264584][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 119.294326][T11738] loop2: detected capacity change from 0 to 512 [ 119.310656][T11738] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.3419: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 119.329103][T11738] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3419: Bad quota inode: 3, type: 0 [ 119.341394][T11738] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 119.360020][T11738] EXT4-fs (loop2): mount failed [ 119.436172][T11750] vlan2: entered allmulticast mode [ 119.469673][T11753] loop5: detected capacity change from 0 to 8192 [ 119.478368][T11753] syz.5.3421: attempt to access beyond end of device [ 119.478368][T11753] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 119.492748][T11753] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 119.500621][T11753] FAT-fs (loop5): Filesystem has been set read-only [ 119.512308][T11753] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 119.527442][T11753] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 119.529148][T11758] ref_ctr increment failed for inode: 0xf73 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810a4ef8c0 [ 119.551568][T11757] uprobe: syz.1.3426:11757 failed to unregister, leaking uprobe [ 120.112970][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3453'. [ 120.155484][T11821] loop2: detected capacity change from 0 to 128 [ 120.172124][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3455'. [ 120.238173][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 120.246060][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 120.260348][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.268179][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.275884][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.283755][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.291593][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.299615][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.307351][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.315184][ T2957] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 120.361584][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 120.361600][ T29] audit: type=1326 audit(1756931828.532:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.392263][ T29] audit: type=1326 audit(1756931828.532:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.415825][ T29] audit: type=1326 audit(1756931828.532:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.439430][ T29] audit: type=1326 audit(1756931828.532:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.463800][ T2957] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.474620][ T29] audit: type=1326 audit(1756931828.637:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.498300][ T29] audit: type=1326 audit(1756931828.637:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.521843][ T29] audit: type=1326 audit(1756931828.637:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.545488][ T29] audit: type=1326 audit(1756931828.637:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.569283][ T29] audit: type=1326 audit(1756931828.637:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.592984][ T29] audit: type=1326 audit(1756931828.637:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11836 comm="syz.0.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a759ebe9 code=0x7ffc0000 [ 120.747855][T11859] loop2: detected capacity change from 0 to 512 [ 120.754921][T11859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.767889][T11859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.780589][T11859] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.825731][T11859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 120.844960][T11859] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 120.857361][T11859] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.857361][T11859] [ 120.867281][T11859] EXT4-fs (loop2): Total free blocks count 0 [ 120.873458][T11859] EXT4-fs (loop2): Free/Dirty block details [ 120.879523][T11859] EXT4-fs (loop2): free_blocks=39626 [ 120.884864][T11859] EXT4-fs (loop2): dirty_blocks=16 [ 120.890027][T11859] EXT4-fs (loop2): Block reservation details [ 120.896037][T11859] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 121.119530][T11876] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.137473][T11868] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 121.399788][T11902] syz_tun: entered allmulticast mode [ 121.405867][T11901] syz_tun: left allmulticast mode [ 121.439456][T11907] vlan0: entered allmulticast mode [ 121.498716][T11919] pimreg: entered allmulticast mode [ 121.528326][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3503'. [ 122.405530][T11985] netlink: 'syz.6.3527': attribute type 21 has an invalid length. [ 122.414848][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3527'. [ 122.423949][T11985] netlink: 'syz.6.3527': attribute type 1 has an invalid length. [ 122.447638][T11989] 9pnet: p9_errstr2errno: server reported unknown error [ 122.539109][T11991] SELinux: failed to load policy [ 122.542223][T12005] netlink: 'syz.6.3539': attribute type 2 has an invalid length. [ 122.579205][T12011] syz_tun: entered allmulticast mode [ 122.585951][T12008] syz_tun: left allmulticast mode [ 122.643124][T12017] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.765676][T12029] netlink: 'syz.1.3559': attribute type 21 has an invalid length. [ 122.773674][T12029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3559'. [ 122.782865][T12029] netlink: 'syz.1.3559': attribute type 1 has an invalid length. [ 122.898493][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3552'. [ 123.022147][T12046] ref_ctr increment failed for inode: 0xf3e offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881043a3980 [ 123.034844][T12044] uprobe: syz.0.3556:12044 failed to unregister, leaking uprobe [ 123.167286][T12060] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3565'. [ 123.179076][T12060] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3565'. [ 123.259566][T12066] block device autoloading is deprecated and will be removed. [ 123.319458][T12070] loop0: detected capacity change from 0 to 1024 [ 123.336068][T12070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.360670][T12070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.417795][T12074] ================================================================== [ 123.425908][T12074] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 123.434524][T12074] [ 123.436899][T12074] write to 0xffff888104460fa8 of 8 bytes by task 12080 on cpu 1: [ 123.444626][T12074] shmem_file_splice_read+0x470/0x600 [ 123.450018][T12074] splice_direct_to_actor+0x26c/0x680 [ 123.455429][T12074] do_splice_direct+0xda/0x150 [ 123.460216][T12074] do_sendfile+0x380/0x650 [ 123.464659][T12074] __x64_sys_sendfile64+0x105/0x150 [ 123.469917][T12074] x64_sys_call+0x2bb0/0x2ff0 [ 123.474617][T12074] do_syscall_64+0xd2/0x200 [ 123.479147][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.485058][T12074] [ 123.487396][T12074] write to 0xffff888104460fa8 of 8 bytes by task 12074 on cpu 0: [ 123.495121][T12074] shmem_file_splice_read+0x470/0x600 [ 123.500515][T12074] splice_direct_to_actor+0x26c/0x680 [ 123.505904][T12074] do_splice_direct+0xda/0x150 [ 123.510682][T12074] do_sendfile+0x380/0x650 [ 123.515128][T12074] __x64_sys_sendfile64+0x105/0x150 [ 123.520334][T12074] x64_sys_call+0x2bb0/0x2ff0 [ 123.525028][T12074] do_syscall_64+0xd2/0x200 [ 123.529557][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.535477][T12074] [ 123.537820][T12074] value changed: 0x00000000000022b2 -> 0x00000000000022bc [ 123.544931][T12074] [ 123.547264][T12074] Reported by Kernel Concurrency Sanitizer on: [ 123.553450][T12074] CPU: 0 UID: 0 PID: 12074 Comm: syz.6.3572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.563278][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.573347][T12074] ================================================================== [ 123.612724][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.