last executing test programs: 1.338504032s ago: executing program 4 (id=3786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 1.309231364s ago: executing program 4 (id=3788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001200ffff27bd7000fbdbdf2500000000feab12b2", @ANYBLOB="715a0300231a05001400128009000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20040040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) 1.20947141s ago: executing program 4 (id=3791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000001400)={0x23, 0x20, 0xfc, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 1.167201243s ago: executing program 4 (id=3793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.115683907s ago: executing program 4 (id=3796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.115154857s ago: executing program 3 (id=3798): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 1.073834269s ago: executing program 4 (id=3799): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) 1.073275179s ago: executing program 1 (id=3800): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f0000000240)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) 1.017063504s ago: executing program 3 (id=3801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pause() 611.27133ms ago: executing program 2 (id=3819): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 557.909314ms ago: executing program 2 (id=3821): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x5, 0x0, {0xa, 0xfffe, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 557.563843ms ago: executing program 2 (id=3823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) 517.774926ms ago: executing program 2 (id=3825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/29) 517.312627ms ago: executing program 2 (id=3827): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r3}, 0x20) 517.225436ms ago: executing program 2 (id=3828): r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x101) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) 377.204416ms ago: executing program 0 (id=3838): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 364.569856ms ago: executing program 0 (id=3839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000006619fc0db30cfc7bfd00000000000000", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="01000000ffffffff0000"], 0x50) 257.059923ms ago: executing program 1 (id=3840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 244.161464ms ago: executing program 3 (id=3841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 236.980025ms ago: executing program 1 (id=3842): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 227.324515ms ago: executing program 3 (id=3843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0x106a, 0x22, 0x0, 0x0) 172.387209ms ago: executing program 1 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 172.071559ms ago: executing program 3 (id=3845): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 171.899769ms ago: executing program 3 (id=3846): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f820", 0xf) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 171.708869ms ago: executing program 0 (id=3847): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) 155.95577ms ago: executing program 0 (id=3848): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) 137.573061ms ago: executing program 0 (id=3849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x9f, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x8, 0x0, r1, 0x0}]) 399.25µs ago: executing program 0 (id=3850): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0xc2f1788970f1e6ef) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x80}, &(0x7f0000000100)=0x90) 147.2µs ago: executing program 1 (id=3851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0xff, 0x2a4, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) fdatasync(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 0s ago: executing program 1 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x2c}}, 0x4c002) kernel console output (not intermixed with test programs): p=0x7f846a25eec9 code=0x7ffc0000 [ 50.091583][ T4733] loop4: detected capacity change from 0 to 1024 [ 50.098777][ T4733] EXT4-fs: Ignoring removed orlov option [ 50.115755][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.304886][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.490380][ T4771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 50.497031][ T4771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.504760][ T4771] vhci_hcd vhci_hcd.0: Device attached [ 50.522910][ T4777] ALSA: seq fatal error: cannot create timer (-22) [ 50.573801][ T4772] vhci_hcd: connection closed [ 50.574062][ T4400] vhci_hcd: stop threads [ 50.583143][ T4400] vhci_hcd: release socket [ 50.587567][ T4400] vhci_hcd: disconnect device [ 51.283623][ T4870] loop2: detected capacity change from 0 to 8192 [ 51.312743][ T4870] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.567921][ T4900] IPVS: Scheduler module ip_vs_ not found [ 51.621159][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 51.664999][ T4915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 51.872616][ T4949] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 51.897446][ T4949] hsr_slave_0: left promiscuous mode [ 51.915255][ T4949] hsr_slave_1: left promiscuous mode [ 51.961557][ T4958] atomic_op ffff88811e05f528 conn xmit_atomic 0000000000000000 [ 52.001915][ T4960] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.115152][ T1028] hid_parser_main: 19 callbacks suppressed [ 52.115170][ T1028] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.206688][ T1028] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.301275][ T4983] netlink: 256 bytes leftover after parsing attributes in process `syz.0.613'. [ 52.340823][ T4990] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 52.348768][ T4990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.616'. [ 52.362026][ T4990] team0: Port device geneve1 added [ 52.715171][ T4434] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 52.819201][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 52.885052][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 52.894491][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.636'. [ 53.174911][ T5057] netlink: 'syz.4.646': attribute type 10 has an invalid length. [ 53.182821][ T5057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.646'. [ 53.196632][ T5057] team0: Port device geneve1 added [ 53.448739][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 53.465315][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 53.641651][ T5109] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 53.649475][ T5109] netlink: 'syz.0.670': attribute type 6 has an invalid length. [ 53.657183][ T5109] netlink: 'syz.0.670': attribute type 3 has an invalid length. [ 53.665019][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'. [ 53.700835][ T5103] SELinux: failed to load policy [ 53.713230][ T5118] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 53.721176][ T5118] veth0_vlan: entered allmulticast mode [ 53.765973][ T5118] veth0_vlan: left promiscuous mode [ 53.773077][ T5118] veth0_vlan: entered promiscuous mode [ 53.781061][ T5118] team0: Device veth0_vlan failed to register rx_handler [ 53.813090][ T5126] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 53.826315][ T5123] netlink: 5388 bytes leftover after parsing attributes in process `syz.2.675'. [ 53.900698][ T5133] lo speed is unknown, defaulting to 1000 [ 53.981556][ T5140] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 54.018177][ T5140] team0: Port device dummy0 added [ 54.039421][ T5140] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 54.068136][ T5140] team0: Port device dummy0 removed [ 54.087958][ T5140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.189915][ T5152] atomic_op ffff88811a245528 conn xmit_atomic 0000000000000000 [ 54.390469][ T5166] xt_l2tp: missing protocol rule (udp|l2tpip) [ 54.418852][ T5168] program syz.3.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.458364][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 54.458381][ T29] audit: type=1400 audit(1759857694.798:863): avc: denied { append } for pid=5173 comm="syz.2.699" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.509492][ T29] audit: type=1400 audit(1759857694.861:864): avc: denied { mount } for pid=5178 comm="syz.4.702" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.534281][ T5179] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.544528][ T29] audit: type=1400 audit(1759857694.882:865): avc: denied { relabelto } for pid=5178 comm="syz.4.702" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 54.570566][ T29] audit: type=1400 audit(1759857694.882:866): avc: denied { associate } for pid=5178 comm="syz.4.702" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 54.647708][ T29] audit: type=1400 audit(1759857694.956:867): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.730198][ T29] audit: type=1400 audit(1759857695.083:868): avc: denied { mount } for pid=5197 comm="syz.3.711" name="/" dev="ramfs" ino=9182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.794588][ T5202] netlink: 'syz.2.713': attribute type 3 has an invalid length. [ 55.122031][ T5219] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 55.153352][ T5222] veth0_vlan: entered allmulticast mode [ 55.190698][ T5222] veth0_vlan: left promiscuous mode [ 55.214282][ T5222] veth0_vlan: entered promiscuous mode [ 55.237013][ T5222] team0: Device veth0_vlan failed to register rx_handler [ 55.266690][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.276715][ T5219] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 55.428678][ T5233] veth0_vlan: entered allmulticast mode [ 55.466657][ T5233] veth0_vlan: left promiscuous mode [ 55.472890][ T5233] veth0_vlan: entered promiscuous mode [ 55.482686][ T5233] team0: Device veth0_vlan failed to register rx_handler [ 55.505632][ T5237] loop3: detected capacity change from 0 to 1024 [ 55.541684][ T5237] EXT4-fs: Ignoring removed orlov option [ 55.572620][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.604234][ T5243] lo speed is unknown, defaulting to 1000 [ 55.640780][ T29] audit: type=1400 audit(1759857696.033:869): avc: denied { mounton } for pid=5244 comm="syz.2.732" path="/176/file0/file0" dev="tmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.715267][ T29] audit: type=1400 audit(1759857696.118:870): avc: denied { read open } for pid=5236 comm="syz.3.729" path="/153/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.737956][ T29] audit: type=1400 audit(1759857696.118:871): avc: denied { write } for pid=5236 comm="syz.3.729" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.865416][ T29] audit: type=1326 audit(1759857696.286:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a26feec9 code=0x7ffc0000 [ 56.070490][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.126566][ T5263] veth0: entered promiscuous mode [ 56.164240][ T5267] pim6reg: entered allmulticast mode [ 56.181636][ T5267] pim6reg: left allmulticast mode [ 56.293120][ T5276] ALSA: seq fatal error: cannot create timer (-19) [ 56.430024][ T5302] loop4: detected capacity change from 0 to 1024 [ 56.442405][ T5302] EXT4-fs: Ignoring removed orlov option [ 56.502942][ T5302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.533033][ T5302] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.541462][ T5312] sctp: [Deprecated]: syz.2.757 (pid 5312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.541462][ T5312] Use struct sctp_sack_info instead [ 56.581460][ T4400] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.598269][ T4400] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 56.610619][ T4400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.610619][ T4400] [ 56.632674][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.725169][ T5325] veth1_macvtap: left promiscuous mode [ 57.345726][ T5342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5342 comm=syz.1.768 [ 57.538407][ T5376] __nla_validate_parse: 7 callbacks suppressed [ 57.538422][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 57.557928][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 57.671591][ T5382] loop4: detected capacity change from 0 to 8192 [ 57.885117][ T5411] unsupported nla_type 52263 [ 57.905412][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 57.920435][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 57.921380][ T4402] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.938424][ T4402] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.952218][ T4402] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.976410][ T4402] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.989930][ T5413] SELinux: ebitmap: map size 1701273968 does not match my size 64 (high bit was 7364973) [ 58.016414][ T5413] SELinux: failed to load policy [ 58.040572][ T5421] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 58.256914][ T5453] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.827'. [ 58.282399][ T5455] lo speed is unknown, defaulting to 1000 [ 58.350059][ T5462] loop4: detected capacity change from 0 to 512 [ 58.364918][ T3405] IPVS: starting estimator thread 0... [ 58.409457][ T5462] EXT4-fs (loop4): 1 orphan inode deleted [ 58.427153][ T4434] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:41: Failed to release dquot type 1 [ 58.433487][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.477242][ T5467] IPVS: using max 2064 ests per chain, 103200 per kthread [ 58.496543][ T5462] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.562699][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.837'. [ 58.678657][ T5491] netlink: 168 bytes leftover after parsing attributes in process `syz.0.842'. [ 58.687877][ T5491] tipc: Started in network mode [ 58.692783][ T5491] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 58.701965][ T5491] tipc: Enabling of bearer rejected, failed to enable media [ 58.771720][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 58.814328][ T5502] lo speed is unknown, defaulting to 1000 [ 58.839630][ T5505] lo speed is unknown, defaulting to 1000 [ 58.901729][ T5127] IPVS: starting estimator thread 0... [ 58.908403][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.988962][ T5508] IPVS: using max 2304 ests per chain, 115200 per kthread [ 59.137425][ T5527] SELinux: ebitmap: map size 1701273968 does not match my size 64 (high bit was 7364973) [ 59.148218][ T5527] SELinux: failed to load policy [ 59.348276][ C0] hrtimer: interrupt took 22111 ns [ 59.368595][ T5552] sg_write: data in/out 8156/120 bytes for SCSI command 0x0-- guessing data in; [ 59.368595][ T5552] program syz.4.869 not setting count and/or reply_len properly [ 59.542951][ T5560] 9pnet: p9_errstr2errno: server reported unknown error 9YTPX: [ 59.548445][ T5563] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 59.560750][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.609216][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 59.609238][ T29] audit: type=1400 audit(1759857700.234:972): avc: denied { read } for pid=5565 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.660376][ T29] audit: type=1326 audit(1759857700.234:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.683724][ T29] audit: type=1326 audit(1759857700.234:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.707105][ T29] audit: type=1326 audit(1759857700.234:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.730436][ T29] audit: type=1326 audit(1759857700.245:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.753708][ T29] audit: type=1400 audit(1759857700.245:977): avc: denied { wake_alarm } for pid=5567 comm="syz.2.878" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.774824][ T29] audit: type=1326 audit(1759857700.245:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.798078][ T29] audit: type=1326 audit(1759857700.245:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.821360][ T29] audit: type=1326 audit(1759857700.245:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.844635][ T29] audit: type=1326 audit(1759857700.245:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 59.897849][ T5585] batadv_slave_1: entered promiscuous mode [ 59.905038][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.886'. [ 59.916908][ T5584] batadv_slave_1: left promiscuous mode [ 59.923186][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.886'. [ 60.138344][ T5627] batadv_slave_1: entered promiscuous mode [ 60.149858][ T5624] batadv_slave_1: left promiscuous mode [ 60.186994][ T5634] program syz.4.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.219843][ T5635] uprobe: syz.0.903:5635 failed to unregister, leaking uprobe [ 61.741292][ T5761] validate_nla: 2 callbacks suppressed [ 61.741309][ T5761] netlink: 'syz.1.958': attribute type 13 has an invalid length. [ 61.894338][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.901680][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.000954][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.015443][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.113475][ T4460] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.122484][ T4460] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.147917][ T4460] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.156911][ T4460] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.217661][ T4460] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.226806][ T4460] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.273086][ T4460] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.282139][ T4460] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.396331][ T5810] __nla_validate_parse: 5 callbacks suppressed [ 62.396349][ T5810] netlink: 51 bytes leftover after parsing attributes in process `syz.0.978'. [ 62.829453][ T5846] loop3: detected capacity change from 0 to 512 [ 63.071612][ T5869] syzkaller1: entered promiscuous mode [ 63.077320][ T5869] syzkaller1: entered allmulticast mode [ 63.222418][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 63.233057][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 63.318840][ T5891] lo speed is unknown, defaulting to 1000 [ 63.460155][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 63.534111][ T5911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.056427][ T5931] netlink: 'syz.4.1034': attribute type 2 has an invalid length. [ 64.064275][ T5931] netlink: 'syz.4.1034': attribute type 3 has an invalid length. [ 64.405092][ T5966] netlink: 5420 bytes leftover after parsing attributes in process `syz.3.1049'. [ 64.474436][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 64.474453][ T29] audit: type=1326 audit(1759857705.373:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.504391][ T29] audit: type=1326 audit(1759857705.383:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.527883][ T29] audit: type=1326 audit(1759857705.383:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.551764][ T29] audit: type=1326 audit(1759857705.383:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.552178][ T5984] : renamed from bond0 (while UP) [ 64.575276][ T29] audit: type=1326 audit(1759857705.383:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.603917][ T29] audit: type=1326 audit(1759857705.383:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.627377][ T29] audit: type=1326 audit(1759857705.383:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.668108][ T29] audit: type=1400 audit(1759857705.457:1626): avc: denied { ioctl } for pid=5983 comm="syz.4.1059" path="socket:[13318]" dev="sockfs" ino=13318 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.694126][ T29] audit: type=1326 audit(1759857705.510:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.717748][ T29] audit: type=1326 audit(1759857705.510:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 64.825478][ T6001] loop4: detected capacity change from 0 to 1024 [ 64.836589][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.849938][ T6001] EXT4-fs: Ignoring removed orlov option [ 64.874693][ T6001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.899007][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.105693][ T6023] capability: warning: `syz.1.1076' uses deprecated v2 capabilities in a way that may be insecure [ 65.242099][ T6044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6044 comm=syz.0.1085 [ 65.254714][ T6044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6044 comm=syz.0.1085 [ 65.410702][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.465224][ T6067] lo speed is unknown, defaulting to 1000 [ 65.537298][ T6080] syzkaller1: entered promiscuous mode [ 65.542971][ T6080] syzkaller1: entered allmulticast mode [ 65.636470][ T6087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1106'. [ 65.645981][ T6087] unsupported nlmsg_type 40 [ 65.863466][ T6103] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.877356][ T6102] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.898189][ T6114] netlink: 'syz.4.1113': attribute type 29 has an invalid length. [ 65.927379][ T6114] netlink: 'syz.4.1113': attribute type 29 has an invalid length. [ 65.942286][ T6114] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1113'. [ 66.442711][ T6195] loop4: detected capacity change from 0 to 1024 [ 66.454382][ T6195] EXT4-fs: Ignoring removed orlov option [ 66.473970][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.501181][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.514425][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.520303][ T1105] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.530018][ T1105] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.537836][ T1105] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.545568][ T1105] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.552993][ T1105] rtc rtc0: __rtc_set_alarm: err=-22 [ 66.588184][ T6214] : renamed from bond0 (while UP) [ 66.689780][ T6222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6222 comm=syz.2.1155 [ 66.702337][ T6222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6222 comm=syz.2.1155 [ 66.795794][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.869759][ T6256] : renamed from bond0 (while UP) [ 66.966231][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 66.989223][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 67.046922][ T6277] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1169'. [ 67.333653][ T6314] hub 9-0:1.0: USB hub found [ 67.348791][ T6314] hub 9-0:1.0: 8 ports detected [ 67.479379][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1191'. [ 67.582092][ T3398] Process accounting resumed [ 69.334874][ T6358] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.374938][ T6354] lo speed is unknown, defaulting to 1000 [ 69.423934][ T6375] netlink: 'syz.2.1207': attribute type 29 has an invalid length. [ 69.448842][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 69.488646][ T6375] netlink: 'syz.2.1207': attribute type 29 has an invalid length. [ 69.533082][ T6375] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1207'. [ 69.601872][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 69.601889][ T29] audit: type=1326 audit(1759857710.773:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.631565][ T29] audit: type=1326 audit(1759857710.773:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.690007][ T6410] Falling back ldisc for ptm0. [ 69.726465][ T6428] loop3: detected capacity change from 0 to 128 [ 69.734786][ T6428] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.748094][ T29] audit: type=1326 audit(1759857710.836:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.771671][ T29] audit: type=1326 audit(1759857710.836:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.795124][ T29] audit: type=1326 audit(1759857710.836:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.818611][ T29] audit: type=1326 audit(1759857710.836:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.842138][ T29] audit: type=1326 audit(1759857710.836:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.865651][ T29] audit: type=1326 audit(1759857710.836:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.889160][ T29] audit: type=1326 audit(1759857710.836:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.912690][ T29] audit: type=1326 audit(1759857710.836:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 69.982453][ T6428] syz.3.1218: attempt to access beyond end of device [ 69.982453][ T6428] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 70.034181][ T4395] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 70.085689][ T5127] Process accounting resumed [ 70.234502][ T6472] loop3: detected capacity change from 0 to 256 [ 70.308564][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.316583][ T6472] FAT-fs (loop3): Filesystem has been set read-only [ 70.326927][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.335324][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.343806][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.361059][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.369767][ T6472] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 70.461078][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 70.470046][ T6497] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1246'. [ 70.493649][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 70.532111][ T6509] loop3: detected capacity change from 0 to 512 [ 70.540560][ T6509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.593828][ T6509] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1253: EA inode hash validation failed [ 70.606908][ T6509] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.629534][ T6509] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.1253: corrupted inode contents [ 70.652604][ T6526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1258'. [ 70.662491][ T6509] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.1253: mark_inode_dirty error [ 70.678655][ T6509] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.1253: corrupted inode contents [ 70.691091][ T6509] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1253: mark_inode_dirty error [ 70.705215][ T6509] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1253: mark inode dirty (error -117) [ 70.718324][ T6509] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 70.727984][ T6509] EXT4-fs (loop3): 1 orphan inode deleted [ 70.734541][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.813060][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.995341][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 71.004557][ T6579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1281'. [ 71.323273][ T6639] netlink: 'syz.1.1303': attribute type 3 has an invalid length. [ 71.331200][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 71.471783][ T6654] netlink: '+}[@': attribute type 1 has an invalid length. [ 71.565641][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.582020][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.591112][ T6666] bond0: (slave batadv0): Releasing backup interface [ 71.718577][ T6675] netlink: 'syz.4.1318': attribute type 12 has an invalid length. [ 71.755475][ T6682] loop4: detected capacity change from 0 to 1024 [ 71.762848][ T6682] EXT4-fs: Ignoring removed orlov option [ 71.772185][ T6682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.049275][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.077839][ T6716] loop3: detected capacity change from 0 to 1024 [ 72.101368][ T6716] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.112395][ T6716] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.125813][ T6723] netlink: 'syz.1.1338': attribute type 7 has an invalid length. [ 72.133767][ T6723] netlink: 'syz.1.1338': attribute type 7 has an invalid length. [ 72.147312][ T6716] JBD2: no valid journal superblock found [ 72.153138][ T6716] EXT4-fs (loop3): Could not load journal inode [ 72.187500][ T6716] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 72.348620][ T6746] hub 8-0:1.0: USB hub found [ 72.360160][ T6746] hub 8-0:1.0: 8 ports detected [ 72.455239][ T5127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5127 comm=kworker/0:4 [ 72.479825][ T6765] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 72.589084][ T6787] __nla_validate_parse: 1 callbacks suppressed [ 72.589104][ T6787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1361'. [ 72.601547][ T6786] SELinux: ebitmap: truncated map [ 72.611277][ T6786] SELinux: failed to load policy [ 72.614713][ T6781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1361'. [ 72.686615][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.694297][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.702435][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.710037][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.058459][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 73.426968][ T6859] pim6reg1: entered promiscuous mode [ 73.432510][ T6859] pim6reg1: entered allmulticast mode [ 74.066724][ T6903] hub 8-0:1.0: USB hub found [ 74.071581][ T6903] hub 8-0:1.0: 8 ports detected [ 74.324716][ T6946] netem: incorrect gi model size [ 74.329787][ T6946] netem: change failed [ 74.356732][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 74.356750][ T29] audit: type=1400 audit(1759857715.791:2171): avc: denied { write } for pid=6952 comm="syz.2.1427" path="socket:[15767]" dev="sockfs" ino=15767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.392706][ T29] audit: type=1326 audit(1759857715.791:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.416431][ T29] audit: type=1326 audit(1759857715.791:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.439934][ T29] audit: type=1326 audit(1759857715.791:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.463755][ T29] audit: type=1326 audit(1759857715.791:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.487333][ T29] audit: type=1326 audit(1759857715.791:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.510953][ T29] audit: type=1326 audit(1759857715.791:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.534521][ T29] audit: type=1326 audit(1759857715.791:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.558015][ T29] audit: type=1326 audit(1759857715.791:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.581455][ T29] audit: type=1326 audit(1759857715.791:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 74.610101][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 74.722901][ T6984] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 74.766792][ T6984] bond3: entered promiscuous mode [ 74.785175][ T6984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.849825][ T6984] bond3: (slave bridge1): making interface the new active one [ 74.857384][ T6984] bridge1: entered promiscuous mode [ 74.864116][ T6984] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 74.940554][ T7038] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.010081][ T7055] netem: incorrect gi model size [ 75.015140][ T7055] netem: change failed [ 75.128440][ T7076] loop3: detected capacity change from 0 to 512 [ 75.176690][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.176831][ T7076] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.246554][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.349644][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 75.448577][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'. [ 75.538723][ T3418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3418 comm=kworker/1:6 [ 75.538816][ T7112] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 75.592051][ T7124] capability: warning: `syz.1.1478' uses 32-bit capabilities (legacy support in use) [ 75.669666][ T7131] lo speed is unknown, defaulting to 1000 [ 75.745601][ T7144] syz.2.1486 (7144) used greatest stack depth: 9984 bytes left [ 75.861271][ T7162] lo speed is unknown, defaulting to 1000 [ 75.903827][ T7184] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 75.992153][ T7210] loop3: detected capacity change from 0 to 128 [ 75.992688][ T7210] EXT4-fs: Ignoring removed nobh option [ 75.994022][ T7210] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.022746][ T7210] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.049831][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 76.065636][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.108600][ T7222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7222 comm=syz.0.1501 [ 76.121361][ T7222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7222 comm=syz.0.1501 [ 76.249484][ T7254] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 76.259499][ T7254] IPVS: Error connecting to the multicast addr [ 76.369349][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 76.882807][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1538'. [ 76.918383][ T7327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7327 comm=syz.2.1541 [ 77.033701][ T7353] team0: Caught tx_queue_len zero misconfig [ 77.097222][ T7363] 9pnet: p9_errstr2errno: server reported unknown error 1 [ 77.156899][ T7370] sit0: entered allmulticast mode [ 77.416484][ T7422] netlink: 'syz.4.1582': attribute type 21 has an invalid length. [ 77.425310][ T7421] netlink: 'syz.0.1579': attribute type 3 has an invalid length. [ 77.434468][ T7421] netlink: 'syz.0.1579': attribute type 3 has an invalid length. [ 77.449374][ T7422] __nla_validate_parse: 3 callbacks suppressed [ 77.449391][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1582'. [ 77.483980][ T7423] lo speed is unknown, defaulting to 1000 [ 77.654729][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 77.873602][ T7505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7505 comm=syz.0.1606 [ 77.993956][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 78.006445][ T7525] vlan2: entered promiscuous mode [ 78.011923][ T7525] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 78.093597][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 78.315871][ T7578] pimreg: entered allmulticast mode [ 78.324033][ T7578] pimreg: left allmulticast mode [ 78.336038][ T7584] netlink: 'syz.2.1636': attribute type 3 has an invalid length. [ 78.446703][ T7606] netlink: 'syz.4.1644': attribute type 3 has an invalid length. [ 78.454565][ T7606] netlink: 'syz.4.1644': attribute type 3 has an invalid length. [ 78.500209][ T7615] SELinux: failed to load policy [ 78.559872][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 78.734175][ T7667] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1667'. [ 79.132663][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 79.132677][ T29] audit: type=1326 audit(1759857720.829:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.178287][ T29] audit: type=1326 audit(1759857720.861:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.201870][ T29] audit: type=1326 audit(1759857720.861:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.226578][ T29] audit: type=1326 audit(1759857720.924:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.250101][ T29] audit: type=1326 audit(1759857720.924:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.304577][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 79.319046][ T7702] vlan2: entered promiscuous mode [ 79.326065][ T7702] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 79.336411][ T29] audit: type=1400 audit(1759857720.956:2559): avc: denied { create } for pid=7691 comm="syz.4.1677" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.357183][ T29] audit: type=1326 audit(1759857720.977:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.380779][ T29] audit: type=1326 audit(1759857720.977:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.404502][ T29] audit: type=1326 audit(1759857720.977:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.428023][ T29] audit: type=1326 audit(1759857720.977:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 79.806953][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 80.053840][ T7793] random: crng reseeded on system resumption [ 80.126184][ T3398] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.140678][ T3398] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.256902][ T7816] SELinux: ebitmap: truncated map [ 80.270609][ T7816] SELinux: failed to load policy [ 80.409372][ T7849] sd 0:0:1:0: device reset [ 80.498809][ T7866] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1751'. [ 80.545050][ T7874] program syz.2.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.745808][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.753318][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.760804][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.768292][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.775756][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.783278][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.790715][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.798116][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.805549][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.815786][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 81.057571][ T7941] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1781'. [ 81.321173][ T7961] syzkaller1: entered promiscuous mode [ 81.409755][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.432659][ T7983] sd 0:0:1:0: device reset [ 81.473035][ T7992] netlink: 'syz.2.1799': attribute type 21 has an invalid length. [ 81.547470][ T8003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8003 comm=+}[@ [ 81.559558][ T8003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8003 comm=+}[@ [ 81.649416][ T8011] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.649416][ T8011] program syz.1.1806 not setting count and/or reply_len properly [ 81.858854][ T8048] IPVS: Error connecting to the multicast addr [ 82.003791][ T3398] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.268869][ T8093] netlink: 'syz.0.1839': attribute type 12 has an invalid length. [ 82.377520][ T8098] vhci_hcd: invalid port number 96 [ 82.382764][ T8098] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 82.689367][ T8127] __nla_validate_parse: 2 callbacks suppressed [ 82.689386][ T8127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1850'. [ 82.830051][ T8145] SELinux: security_context_str_to_sid (-Xܘ7.H\ %uGPL) failed with errno=-22 [ 82.855611][ T8149] netlink: 'syz.0.1862': attribute type 21 has an invalid length. [ 83.026826][ T8163] syz.3.1868 (8163) used greatest stack depth: 9744 bytes left [ 83.115572][ T4408] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xdd [ 83.131445][ T8181] loop4: detected capacity change from 0 to 164 [ 83.571722][ T8239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8239 comm=syz.4.1894 [ 83.602764][ T8243] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.906517][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 83.906536][ T29] audit: type=1326 audit(1759857725.855:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 83.936219][ T29] audit: type=1326 audit(1759857725.855:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 83.966232][ T29] audit: type=1326 audit(1759857725.918:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 83.989873][ T29] audit: type=1326 audit(1759857725.918:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 84.013316][ T29] audit: type=1326 audit(1759857725.918:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 84.082888][ T29] audit: type=1326 audit(1759857726.013:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 84.106417][ T29] audit: type=1326 audit(1759857726.013:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 84.129850][ T29] audit: type=1326 audit(1759857726.013:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.2.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 84.143037][ T8278] syzkaller1: entered promiscuous mode [ 84.153347][ T29] audit: type=1326 audit(1759857726.024:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a26feec9 code=0x7ffc0000 [ 84.182216][ T29] audit: type=1326 audit(1759857726.024:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a26feec9 code=0x7ffc0000 [ 84.394208][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'. [ 84.408194][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'. [ 84.582734][ T8366] team_slave_0: entered promiscuous mode [ 84.588575][ T8366] team_slave_1: entered promiscuous mode [ 84.606824][ T8366] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 84.638117][ T8375] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 84.756457][ T8401] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.823566][ T8405] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 85.016891][ T4462] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xdd [ 85.066406][ T8444] loop3: detected capacity change from 0 to 2048 [ 85.109335][ T8444] Alternate GPT is invalid, using primary GPT. [ 85.115738][ T8444] loop3: p1 p2 p3 [ 85.304616][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 85.313866][ T8490] netem: change failed [ 85.337169][ T8494] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 85.361223][ T8494] bond0: entered promiscuous mode [ 85.366865][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.391495][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.399099][ T8494] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.409348][ T8494] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 85.421457][ T8494] bond0: (slave vxcan3): making interface the new active one [ 85.428908][ T8494] vxcan3: entered promiscuous mode [ 85.435618][ T8494] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 85.490023][ T8545] loop3: detected capacity change from 0 to 512 [ 85.500567][ T8545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.513262][ T8545] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.562842][ T8554] program syz.4.2001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.574422][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.779283][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 85.791152][ T8585] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2013'. [ 85.999376][ T8610] loop3: detected capacity change from 0 to 2048 [ 86.040638][ T8610] loop3: p1 p2 p3 [ 86.050904][ T8610] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2024'. [ 86.079982][ T8625] netlink: 'syz.3.2025': attribute type 21 has an invalid length. [ 86.088135][ T8625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2025'. [ 86.297740][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'. [ 86.306905][ T8643] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2032'. [ 86.589510][ T8667] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 86.597682][ T8667] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 86.982933][ T8724] SELinux: failed to load policy [ 87.027820][ T8732] loop4: detected capacity change from 0 to 128 [ 87.049079][ T8732] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.064679][ T8732] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.103895][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.194561][ T8761] xt_bpf: check failed: parse error [ 87.250815][ T8767] loop4: detected capacity change from 0 to 512 [ 87.304914][ T8767] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 87.324108][ T8767] EXT4-fs (loop4): mount failed [ 87.599931][ T8819] __nla_validate_parse: 6 callbacks suppressed [ 87.599945][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 87.654287][ T8819] veth0_macvtap: left promiscuous mode [ 87.925125][ T8835] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2101'. [ 88.066312][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 88.093752][ T8847] qrtr: Invalid version 255 [ 88.395907][ T8888] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2121'. [ 88.406141][ T8888] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2121'. [ 88.443041][ T8896] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 88.510402][ T8913] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.510402][ T8913] program syz.3.2129 not setting count and/or reply_len properly [ 88.583738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.665914][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 88.665928][ T29] audit: type=1400 audit(1759857730.869:2925): avc: denied { mac_admin } for pid=8922 comm="syz.1.2133" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.717078][ T29] audit: type=1400 audit(1759857730.869:2926): avc: denied { relabelto } for pid=8922 comm="syz.1.2133" name="421" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 88.743546][ T29] audit: type=1400 audit(1759857730.869:2927): avc: denied { associate } for pid=8922 comm="syz.1.2133" name="421" dev="tmpfs" ino=2169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 88.781825][ T29] audit: type=1400 audit(1759857730.922:2928): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 88.809026][ T29] audit: type=1400 audit(1759857730.922:2929): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="421" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 89.023148][ T8941] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 89.096979][ T29] audit: type=1400 audit(1759857731.333:2930): avc: denied { connect } for pid=8948 comm="syz.4.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.120477][ T29] audit: type=1326 audit(1759857731.333:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.3.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 89.144350][ T29] audit: type=1326 audit(1759857731.333:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.3.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 89.168058][ T29] audit: type=1326 audit(1759857731.333:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.3.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 89.192030][ T29] audit: type=1326 audit(1759857731.333:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.3.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 89.346932][ T8974] sd 0:0:1:0: device reset [ 89.372991][ T8975] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 89.404337][ T8983] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.447693][ T8987] block device autoloading is deprecated and will be removed. [ 89.493499][ T8997] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2164'. [ 89.506294][ T8999] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 89.668043][ T9021] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 89.819547][ T9034] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2180'. [ 89.964931][ T9054] loop0: detected capacity change from 0 to 512 [ 89.976581][ T9054] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.2190: inode #0: comm syz.0.2190: iget: illegal inode # [ 89.992695][ T9054] EXT4-fs (loop0): get orphan inode failed [ 90.000043][ T9054] EXT4-fs (loop0): mount failed [ 90.108496][ T9069] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 90.150793][ T9064] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2193'. [ 90.254377][ T9088] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 90.260946][ T9088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.268581][ T9088] vhci_hcd vhci_hcd.0: Device attached [ 90.281120][ T9088] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 90.287672][ T9088] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.295453][ T9088] vhci_hcd vhci_hcd.0: Device attached [ 90.306314][ T9088] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.315161][ T9088] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.325020][ T9088] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.341773][ T9095] loop4: detected capacity change from 0 to 2048 [ 90.350181][ T9088] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 90.356875][ T9088] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.364612][ T9088] vhci_hcd vhci_hcd.0: Device attached [ 90.371425][ T9092] vhci_hcd: connection closed [ 90.371673][ T4462] vhci_hcd: stop threads [ 90.372679][ T9097] vhci_hcd: connection closed [ 90.376374][ T4462] vhci_hcd: release socket [ 90.376385][ T4462] vhci_hcd: disconnect device [ 90.394784][ T9089] vhci_hcd: connection closed [ 90.415138][ T4462] vhci_hcd: stop threads [ 90.424176][ T4462] vhci_hcd: release socket [ 90.428668][ T4462] vhci_hcd: disconnect device [ 90.440410][ T9095] EXT4-fs (loop4): failed to initialize system zone (-117) [ 90.448289][ T4462] vhci_hcd: stop threads [ 90.452560][ T4462] vhci_hcd: release socket [ 90.454272][ T9095] EXT4-fs (loop4): mount failed [ 90.457055][ T4462] vhci_hcd: disconnect device [ 90.466985][ T9100] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 90.501794][ T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 90.509195][ T9] usb 1-1: enqueue for inactive port 0 [ 90.515137][ T9] usb 1-1: enqueue for inactive port 0 [ 90.521061][ T9] usb 1-1: enqueue for inactive port 0 [ 90.587355][ T9] vhci_hcd: vhci_device speed not set [ 90.880473][ T9140] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 90.906625][ T9147] SELinux: failed to load policy [ 90.929058][ T9150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2221'. [ 91.456462][ T9184] netlink: 'syz.1.2237': attribute type 3 has an invalid length. [ 91.497675][ T9186] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 91.554462][ T9197] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.564610][ T9200] netlink: 'syz.4.2246': attribute type 25 has an invalid length. [ 91.572536][ T9200] netlink: 'syz.4.2246': attribute type 28 has an invalid length. [ 91.622479][ T9209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9209 comm=syz.3.2250 [ 91.635399][ T9209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9209 comm=syz.3.2250 [ 91.720218][ T9216] vhci_hcd: invalid port number 96 [ 91.725404][ T9216] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 91.912939][ T9266] veth0_macvtap: left promiscuous mode [ 91.976167][ T9275] loop4: detected capacity change from 0 to 2048 [ 91.986662][ T9270] lo speed is unknown, defaulting to 1000 [ 92.012350][ T9275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.039896][ T9275] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.135318][ T9294] bridge_slave_0: left allmulticast mode [ 92.141068][ T9294] bridge_slave_0: left promiscuous mode [ 92.147052][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.174728][ T9294] bridge_slave_1: left allmulticast mode [ 92.180502][ T9294] bridge_slave_1: left promiscuous mode [ 92.186204][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.223582][ T9294] : (slave bond_slave_0): Releasing backup interface [ 92.235833][ T9294] : (slave bond_slave_1): Releasing backup interface [ 92.243955][ T9299] EXT4-fs (loop4): shut down requested (2) [ 92.251458][ T9294] team0: Port device team_slave_0 removed [ 92.270251][ T9294] team0: Port device team_slave_1 removed [ 92.284735][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.292199][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.315348][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.322881][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.334945][ T9294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.376059][ T36] syz!: Port: 1 Link DOWN [ 92.532650][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.571417][ T9340] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 92.633297][ T9342] ALSA: seq fatal error: cannot create timer (-19) [ 92.741665][ T9362] __nla_validate_parse: 7 callbacks suppressed [ 92.741685][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 92.905750][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 92.914768][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2316'. [ 93.117279][ T9449] loop0: detected capacity change from 0 to 2048 [ 93.133627][ T9449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.146169][ T9449] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.209158][ T9461] EXT4-fs (loop0): shut down requested (2) [ 93.271560][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.311693][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 93.419985][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 93.420001][ T29] audit: type=1400 audit(1759857735.882:3111): avc: denied { write } for pid=9486 comm="syz.0.2348" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.488332][ T9493] tap0: tun_chr_ioctl cmd 1074025675 [ 93.493736][ T9493] tap0: persist disabled [ 93.503915][ T9491] vhci_hcd: invalid port number 11 [ 93.509091][ T9491] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 93.821644][ T9517] lo speed is unknown, defaulting to 1000 [ 93.893710][ T9547] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.971913][ T29] audit: type=1326 audit(1759857736.461:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9554 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 93.995502][ T29] audit: type=1326 audit(1759857736.461:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9554 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.029225][ T29] audit: type=1326 audit(1759857736.514:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9554 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.052693][ T29] audit: type=1326 audit(1759857736.514:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9554 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.076116][ T29] audit: type=1326 audit(1759857736.514:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9554 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.108332][ T29] audit: type=1326 audit(1759857736.598:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.135215][ T29] audit: type=1326 audit(1759857736.619:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.158695][ T29] audit: type=1326 audit(1759857736.619:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.182228][ T29] audit: type=1326 audit(1759857736.619:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21936eeec9 code=0x7ffc0000 [ 94.334411][ T9585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2375'. [ 94.698284][ T9608] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.738943][ T9633] lo speed is unknown, defaulting to 1000 [ 94.801825][ T9643] SELinux: failed to load policy [ 94.920261][ T9675] @0: renamed from bond_slave_1 [ 94.951530][ T9680] IPv6: Can't replace route, no match found [ 95.774744][ T9832] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 96.048470][ T9863] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2468'. [ 96.401775][ T9937] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 96.695081][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.706659][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.425528][T10055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.755076][T10116] loop4: detected capacity change from 0 to 1024 [ 97.762550][T10116] EXT4-fs: Ignoring removed nobh option [ 97.768211][T10116] EXT4-fs: inline encryption not supported [ 97.796072][T10116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.833946][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.899140][T10150] syz_tun: entered promiscuous mode [ 97.904560][T10150] macvtap0: entered promiscuous mode [ 97.915594][T10150] syz_tun: left promiscuous mode [ 97.999625][T10171] lo speed is unknown, defaulting to 1000 [ 98.131175][T10211] loop4: detected capacity change from 0 to 512 [ 98.133033][ T3405] hid_parser_main: 36 callbacks suppressed [ 98.133053][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.148240][T10211] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.150763][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.164727][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.172207][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.179691][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.187143][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.194540][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.201985][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.209426][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.216844][ T3405] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.228743][T10211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.241762][T10211] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.252836][ T3405] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 98.351458][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.377441][T10228] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2582'. [ 98.394332][T10228] !60X: renamed from caif0 [ 98.425048][T10228] !60X: entered allmulticast mode [ 98.432381][T10228] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 98.629351][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 98.660538][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2593'. [ 98.925892][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 98.925918][ T29] audit: type=1326 audit(1759857741.662:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 98.955860][ T29] audit: type=1326 audit(1759857741.662:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 98.979534][ T29] audit: type=1326 audit(1759857741.662:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 99.003137][ T29] audit: type=1326 audit(1759857741.662:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 99.096673][T10304] syz_tun: entered promiscuous mode [ 99.103192][T10304] macvtap1: entered promiscuous mode [ 99.117920][ T29] audit: type=1326 audit(1759857741.820:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.141691][ T29] audit: type=1326 audit(1759857741.820:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.165447][ T29] audit: type=1326 audit(1759857741.820:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.189100][ T29] audit: type=1326 audit(1759857741.820:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.212632][ T29] audit: type=1326 audit(1759857741.820:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.236489][ T29] audit: type=1326 audit(1759857741.820:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 99.272924][T10304] syz_tun: left promiscuous mode [ 99.315937][T10324] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2614'. [ 99.477491][T10342] bridge0: entered promiscuous mode [ 99.490077][T10342] macsec0: entered promiscuous mode [ 99.498670][T10342] bridge0: port 3(macsec0) entered blocking state [ 99.505225][T10342] bridge0: port 3(macsec0) entered disabled state [ 99.511947][T10342] macsec0: entered allmulticast mode [ 99.517389][T10342] bridge0: entered allmulticast mode [ 99.524166][T10342] macsec0: left allmulticast mode [ 99.529302][T10342] bridge0: left allmulticast mode [ 99.535355][T10342] bridge0: left promiscuous mode [ 99.633864][T10374] syz_tun: entered promiscuous mode [ 99.655461][T10374] macvtap0: entered promiscuous mode [ 99.663509][T10374] syz_tun: left promiscuous mode [ 99.671552][T10386] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2635'. [ 99.711234][T10386] !60X: renamed from caif0 [ 99.718138][T10386] !60X: entered allmulticast mode [ 99.723565][T10386] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 99.798972][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 99.808537][T10409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2644'. [ 99.838343][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2647'. [ 99.855222][T10415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.900875][T10422] lo speed is unknown, defaulting to 1000 [ 99.992136][T10456] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2653'. [ 100.001802][T10456] !60X: renamed from caif0 [ 100.016098][T10456] !60X: entered allmulticast mode [ 100.021693][T10456] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 100.115337][T10468] syz_tun: entered promiscuous mode [ 100.134095][T10468] macvtap0: entered promiscuous mode [ 100.152286][T10468] syz_tun: left promiscuous mode [ 100.169435][T10479] loop4: detected capacity change from 0 to 512 [ 100.186051][T10479] EXT4-fs: inline encryption not supported [ 100.192497][T10479] EXT4-fs: Ignoring removed nobh option [ 100.200382][T10479] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.212010][T10479] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 100.222168][T10479] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2662: Corrupt directory, running e2fsck is recommended [ 100.240237][T10479] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 100.250414][T10479] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2662: corrupted in-inode xattr: invalid ea_ino [ 100.265667][T10479] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2662: couldn't read orphan inode 15 (err -117) [ 100.294773][T10479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.312292][T10491] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2667'. [ 100.326913][T10479] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.330960][T10491] !60X: renamed from caif0 [ 100.338570][T10479] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 100.338593][T10479] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2662: Corrupt directory, running e2fsck is recommended [ 100.368560][T10491] !60X: entered allmulticast mode [ 100.368797][T10479] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2662: path /548/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 100.374262][T10491] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 100.412341][T10479] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 8: comm syz.4.2662: path /548/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 100.470200][T10508] wireguard0: entered promiscuous mode [ 100.475879][T10508] wireguard0: entered allmulticast mode [ 100.522711][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.632111][T10545] loop4: detected capacity change from 0 to 1024 [ 100.670819][T10545] EXT4-fs: Ignoring removed orlov option [ 100.693389][T10545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.714708][T10545] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.728297][T10545] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2679: Freeing blocks not in datazone - block = 0, count = 16 [ 100.801268][ T4408] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 100.831895][ T4408] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.844222][ T4408] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.844222][ T4408] [ 100.848943][T10566] SELinux: failed to load policy [ 100.853924][ T4408] EXT4-fs (loop4): Total free blocks count 0 [ 100.864897][ T4408] EXT4-fs (loop4): Free/Dirty block details [ 100.870889][ T4408] EXT4-fs (loop4): free_blocks=4293918736 [ 100.876642][ T4408] EXT4-fs (loop4): dirty_blocks=16 [ 100.881782][ T4408] EXT4-fs (loop4): Block reservation details [ 100.887910][ T4408] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 100.895312][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.904945][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.913685][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.146051][T10602] pim6reg: entered allmulticast mode [ 101.153411][T10602] pim6reg: left allmulticast mode [ 101.515206][T10664] lo speed is unknown, defaulting to 1000 [ 101.783774][T10706] netlink: 'syz.1.2738': attribute type 6 has an invalid length. [ 101.918995][T10718] lo speed is unknown, defaulting to 1000 [ 101.971770][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.986203][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.156153][T10769] lo speed is unknown, defaulting to 1000 [ 102.433460][T10819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10819 comm=syz.2.2767 [ 102.446065][T10819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10819 comm=syz.2.2767 [ 102.708595][T10853] wireguard0: entered promiscuous mode [ 102.714177][T10853] wireguard0: entered allmulticast mode [ 102.814284][T10870] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.251474][T10907] lo speed is unknown, defaulting to 1000 [ 103.363998][T10935] lo speed is unknown, defaulting to 1000 [ 103.438750][T10952] __nla_validate_parse: 3 callbacks suppressed [ 103.438768][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2805'. [ 103.617926][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 103.631167][T10985] xfrm1: entered promiscuous mode [ 103.636364][T10985] xfrm1: entered allmulticast mode [ 103.642263][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 103.672006][T10991] program syz.2.2817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.919022][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'. [ 104.039128][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2831'. [ 104.048189][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 104.048205][ T29] audit: type=1400 audit(2000000002.876:3401): avc: denied { map } for pid=11037 comm="syz.1.2832" path="socket:[25924]" dev="sockfs" ino=25924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.101680][ T29] audit: type=1400 audit(2000000002.939:3402): avc: denied { mounton } for pid=11039 comm="syz.1.2833" path="/573/file0" dev="cgroup" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 104.130191][ T29] audit: type=1400 audit(2000000002.970:3403): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 104.194536][ T29] audit: type=1400 audit(2000000003.033:3404): avc: denied { setattr } for pid=11047 comm="syz.1.2837" name="timer" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 104.393823][ T29] audit: type=1400 audit(2000000003.243:3405): avc: denied { create } for pid=11061 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.419330][ T29] audit: type=1400 audit(2000000003.243:3406): avc: denied { write } for pid=11061 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.476565][ T29] audit: type=1400 audit(2000000003.327:3407): avc: denied { relabelfrom } for pid=11073 comm="syz.4.2846" name="NETLINK" dev="sockfs" ino=25992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.501356][ T29] audit: type=1400 audit(2000000003.327:3408): avc: denied { relabelto } for pid=11073 comm="syz.4.2846" name="NETLINK" dev="sockfs" ino=25992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 104.555141][ T29] audit: type=1326 audit(2000000003.390:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.1.2847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00a26feec9 code=0x0 [ 104.600708][T11083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2850'. [ 104.668221][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 104.677259][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 104.763185][ T29] audit: type=1326 audit(2000000003.621:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 104.764917][T11100] loop4: detected capacity change from 0 to 512 [ 104.793933][T11100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.816545][T11100] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.834472][T11100] EXT4-fs (loop4): 1 truncate cleaned up [ 104.840642][T11100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.877195][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.917668][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 105.110176][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 105.192154][T11168] SELinux: Context system_u:object_r:ldconfig_exec_t:s0 is not valid (left unmapped). [ 105.205589][T11170] IPVS: Unknown mcast interface: ipvlan1 [ 105.598882][T11216] lo speed is unknown, defaulting to 1000 [ 105.843280][T11254] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 106.809136][T11363] macvlan2: entered promiscuous mode [ 106.837189][T11371] loop4: detected capacity change from 0 to 512 [ 106.855207][T11371] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.870484][T11371] EXT4-fs (loop4): mount failed [ 106.982229][T11392] lo speed is unknown, defaulting to 1000 [ 107.006544][T11398] netlink: 'syz.0.2956': attribute type 6 has an invalid length. [ 107.176248][T11442] syzkaller1: entered promiscuous mode [ 107.181904][T11442] syzkaller1: entered allmulticast mode [ 107.359593][T11483] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 107.427464][T11523] netlink: 'syz.3.2980': attribute type 13 has an invalid length. [ 107.465151][T11524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.478395][ T4395] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.561879][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.569130][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.672503][ T9] lo speed is unknown, defaulting to 1000 [ 107.675767][T11533] geneve2: entered promiscuous mode [ 107.678359][ T9] syz2: Port: 1 Link DOWN [ 107.683568][T11533] geneve2: entered allmulticast mode [ 107.685513][ T4395] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.703581][ T4395] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.712761][ T4395] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.722020][ T4395] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.731239][ T4395] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.740405][ T4395] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.972790][T11578] loop4: detected capacity change from 0 to 128 [ 107.980038][T11578] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.011235][ T4408] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.157249][T11596] loop4: detected capacity change from 0 to 164 [ 108.170050][T11596] syz.4.3008: attempt to access beyond end of device [ 108.170050][T11596] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 108.184843][T11596] syz.4.3008: attempt to access beyond end of device [ 108.184843][T11596] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 108.456493][T11628] netlink: 'syz.4.3020': attribute type 1 has an invalid length. [ 108.629570][T11651] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 108.942794][T11524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.953114][T11524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.986180][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 108.986197][ T29] audit: type=1326 audit(2000000008.062:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.032808][ T29] audit: type=1326 audit(2000000008.062:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.056359][ T29] audit: type=1326 audit(2000000008.062:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.079897][ T29] audit: type=1326 audit(2000000008.062:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.103431][ T29] audit: type=1326 audit(2000000008.072:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.127075][ T29] audit: type=1326 audit(2000000008.072:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.150578][ T29] audit: type=1326 audit(2000000008.072:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.174136][ T29] audit: type=1326 audit(2000000008.072:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.197628][ T29] audit: type=1326 audit(2000000008.072:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.221136][ T29] audit: type=1326 audit(2000000008.072:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 109.259103][T11524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.269505][T11524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.322259][T11693] __nla_validate_parse: 12 callbacks suppressed [ 109.322284][T11693] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3043'. [ 109.380449][T11524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.390851][T11524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.409687][T11693] batadv0: entered promiscuous mode [ 109.415149][T11693] batadv0: entered allmulticast mode [ 109.423923][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 109.452951][ T4435] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.461304][ T4435] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.473122][ T4435] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.481563][ T4435] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.494308][T11706] SELinux: failed to load policy [ 109.510066][ T4408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.518427][ T4408] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.544318][ T4408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.552726][ T4408] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.648870][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 109.661062][T11734] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 109.696008][ T3418] hid_parser_main: 33 callbacks suppressed [ 109.696029][ T3418] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 109.730462][T11734] netlink: 'syz.4.3057': attribute type 4 has an invalid length. [ 109.754390][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 109.764961][ T3418] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.813072][T11752] netlink: 'syz.1.3062': attribute type 27 has an invalid length. [ 109.839097][T11752] !60X: left allmulticast mode [ 109.846510][T11752] veth0_vlan: left allmulticast mode [ 109.877391][T11759] atomic_op ffff88810ac89928 conn xmit_atomic 0000000000000000 [ 109.907738][T11752] bond3: left promiscuous mode [ 109.912681][T11752] bridge1: left promiscuous mode [ 109.941436][T11766] ALSA: seq fatal error: cannot create timer (-22) [ 109.972569][T11763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.988160][T11763] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 110.113831][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3080'. [ 110.164653][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 110.323877][T11838] SELinux: failed to load policy [ 110.397887][T11848] netlink: 'syz.0.3097': attribute type 13 has an invalid length. [ 110.419971][T11847] SELinux: failed to load policy [ 110.460649][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 110.469717][T11852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3097'. [ 110.609424][T11852] geneve2: entered promiscuous mode [ 110.614745][T11852] geneve2: entered allmulticast mode [ 110.751304][T11881] rdma_op ffff88810ac89180 conn xmit_rdma 0000000000000000 [ 110.776139][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 110.785391][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 110.808435][T11890] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 110.854515][T11896] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 111.063312][T11939] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.093541][T11944] binfmt_misc: register: failed to install interpreter file ./file0 [ 111.327061][T11981] netlink: 'syz.4.3153': attribute type 1 has an invalid length. [ 111.348994][T11981] bond1: entered promiscuous mode [ 111.354866][T11981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.382676][T11981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.391327][T11981] bond1: (slave bond2): making interface the new active one [ 111.398761][T11981] bond2: entered promiscuous mode [ 111.404950][T11981] bond1: (slave bond2): Enslaving as an active interface with an up link [ 111.534500][T12067] loop4: detected capacity change from 0 to 512 [ 111.541639][T12067] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.567185][T12067] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 111.577246][T12067] FAT-fs (loop4): Filesystem has been set read-only [ 111.599094][T12067] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.199575][T12149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.199575][T12149] program syz.2.3196 not setting count and/or reply_len properly [ 112.289787][T12167] block device autoloading is deprecated and will be removed. [ 112.358847][T12180] rdma_op ffff88811e5f3180 conn xmit_rdma 0000000000000000 [ 112.616297][T12235] loop4: detected capacity change from 0 to 512 [ 112.624167][T12235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.637140][T12235] EXT4-fs (loop4): 1 truncate cleaned up [ 112.643639][T12235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.656093][T12241] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 112.687405][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.907639][T12275] lo speed is unknown, defaulting to 1000 [ 113.641106][T12391] netlink: 'syz.2.3288': attribute type 1 has an invalid length. [ 113.659117][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.681648][T12391] bond0: (slave geneve3): making interface the new active one [ 113.691679][T12391] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 113.765600][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 113.765618][ T29] audit: type=1400 audit(2000000013.091:3698): avc: denied { lock } for pid=12442 comm="syz.2.3296" path="socket:[29065]" dev="sockfs" ino=29065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 113.773593][T12445] netlink: 'syz.3.3297': attribute type 27 has an invalid length. [ 113.805655][T12445] !60X: left allmulticast mode [ 113.813720][T12445] geneve2: left promiscuous mode [ 113.818816][T12445] geneve2: left allmulticast mode [ 113.824195][T12447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12447 comm=syz.2.3298 [ 113.825083][ T4395] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.836863][T12447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12447 comm=syz.2.3298 [ 113.859170][ T29] audit: type=1326 audit(2000000013.185:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 113.883116][ T4395] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.892474][ T4395] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.915681][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.925467][T12445] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 113.942991][ T36] lo speed is unknown, defaulting to 1000 [ 113.948843][ T36] syz2: Port: 1 Link ACTIVE [ 113.953713][ T4395] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.983390][ T29] audit: type=1326 audit(2000000013.311:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.3.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.017072][ T29] audit: type=1326 audit(2000000013.342:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.3.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.040670][ T29] audit: type=1326 audit(2000000013.342:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.3.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.064745][T12457] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 114.074969][ T29] audit: type=1400 audit(2000000013.405:3703): avc: denied { relabelto } for pid=12456 comm="syz.3.3303" name="NETLINK" dev="sockfs" ino=29756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 114.136684][ T29] audit: type=1326 audit(2000000013.479:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.161917][ T29] audit: type=1326 audit(2000000013.479:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.185622][ T29] audit: type=1326 audit(2000000013.489:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 114.209144][ T29] audit: type=1326 audit(2000000013.489:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a25eec9 code=0x7ffc0000 [ 115.033592][T12517] macvtap0: refused to change device tx_queue_len [ 115.255922][T12529] netlink: 'syz.0.3328': attribute type 27 has an invalid length. [ 115.268840][T12529] veth0_vlan: left allmulticast mode [ 115.283570][T12529] geneve2: left promiscuous mode [ 115.288652][T12529] geneve2: left allmulticast mode [ 115.314759][ T4395] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.361388][T12535] 8021q: adding VLAN 0 to HW filter on device  [ 115.392998][T12535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.418026][ T4395] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.433992][ T4395] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.443575][ T4395] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.550261][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.557767][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.565280][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.572791][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.580233][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.587735][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.595181][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.602643][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.610074][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.617505][ T9] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 115.630461][ T9] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 115.648648][T12579] __nla_validate_parse: 7 callbacks suppressed [ 115.648666][T12579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3349'. [ 115.826905][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 115.836037][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 115.846486][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 115.855466][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 115.926204][T12635] loop3: detected capacity change from 0 to 1024 [ 115.933362][T12635] EXT4-fs: Ignoring removed oldalloc option [ 115.941770][T12635] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 115.970378][T12635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.986609][T12635] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.029262][T12635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3371: bg 0: block 3: invalid block bitmap [ 116.089388][T12635] EXT4-fs (loop3): Remounting filesystem read-only [ 116.145964][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.219239][T12656] loop3: detected capacity change from 0 to 512 [ 116.262304][T12656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.303673][T12656] ext4 filesystem being mounted at /628/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.359612][T12656] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.3378: corrupted inode contents [ 116.417482][T12656] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.3378: mark_inode_dirty error [ 116.480980][T12656] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.3378: corrupted inode contents [ 116.511483][T12670] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.3378: corrupted inode contents [ 116.558288][T12670] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.3378: mark_inode_dirty error [ 116.570603][T12670] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.3378: corrupted inode contents [ 116.619582][T12670] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3378: mark_inode_dirty error [ 116.632733][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 116.641705][T12686] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3392'. [ 116.650974][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 116.659876][T12686] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3392'. [ 116.669431][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 116.692436][T12670] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.3378: corrupted inode contents [ 116.704891][T12670] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.3378: mark_inode_dirty error [ 116.799898][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.008997][T12723] program syz.2.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.376814][T12755] syz!: rxe_newlink: already configured on team_slave_0 [ 117.970254][T12823] netlink: 'syz.0.3446': attribute type 29 has an invalid length. [ 117.979431][T12823] netlink: 'syz.0.3446': attribute type 29 has an invalid length. [ 118.258241][T12851] batman_adv: batadv0: Adding interface: ipvlan3 [ 118.264612][T12851] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.290039][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.300615][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.310498][T12851] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 118.338272][T12851] batman_adv: batadv0: Adding interface: ipvlan4 [ 118.344703][T12851] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.370161][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.380621][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.390604][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 118.400554][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.410551][T12851] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 118.519819][T12874] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 118.617216][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 118.617231][ T29] audit: type=1400 audit(2000000018.172:3779): avc: denied { associate } for pid=12884 comm="syz.1.3471" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.663347][T12888] netlink: 'syz.1.3472': attribute type 2 has an invalid length. [ 118.904516][ T29] audit: type=1400 audit(2000000018.466:3780): avc: denied { write } for pid=12901 comm="syz.2.3478" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 119.706867][T12909] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.781534][T12922] loop3: detected capacity change from 0 to 1024 [ 119.798988][T12922] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 119.808201][T12922] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 119.817662][T12922] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3483: Failed to acquire dquot type 0 [ 119.829967][T12922] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 119.844556][T12922] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3483: corrupted inode contents [ 119.857358][T12922] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #13: comm syz.3.3483: mark_inode_dirty error [ 119.869116][T12922] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3483: corrupted inode contents [ 119.894869][T12922] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.3483: mark_inode_dirty error [ 119.917465][T12922] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3483: corrupted inode contents [ 119.934372][T12922] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 119.953346][T12922] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #13: comm syz.3.3483: corrupted inode contents [ 119.989726][T12922] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.3483: mark_inode_dirty error [ 120.003756][T12922] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 120.024511][T12922] EXT4-fs (loop3): 1 truncate cleaned up [ 120.033890][T12922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.052699][ T29] audit: type=1400 audit(2000000019.683:3781): avc: denied { remount } for pid=12919 comm="syz.3.3483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.082396][T12922] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.102633][T12946] lo speed is unknown, defaulting to 1000 [ 120.113903][ T29] audit: type=1326 audit(2000000019.746:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 120.137449][ T29] audit: type=1326 audit(2000000019.746:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 120.160887][ T29] audit: type=1326 audit(2000000019.746:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 120.184516][ T29] audit: type=1326 audit(2000000019.746:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feed6a1d710 code=0x7ffc0000 [ 120.208035][ T29] audit: type=1326 audit(2000000019.746:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed6a1eec9 code=0x7ffc0000 [ 120.267225][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.409833][T12985] netlink: 'syz.2.3502': attribute type 10 has an invalid length. [ 120.418014][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.425346][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.448309][T12988] netlink: 'syz.3.3503': attribute type 21 has an invalid length. [ 120.462415][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.467118][T12989] __nla_validate_parse: 4 callbacks suppressed [ 120.467136][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3502'. [ 120.469583][T12985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.491882][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.499057][T12985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.510344][T12985] : (slave bridge0): Enslaving as an active interface with an up link [ 120.534990][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3504'. [ 120.544379][T12993] IPVS: Error connecting to the multicast addr [ 120.558704][T12995] loop4: detected capacity change from 0 to 512 [ 120.566130][T12989] bridge_slave_1: left allmulticast mode [ 120.571895][T12989] bridge_slave_1: left promiscuous mode [ 120.577670][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.595589][T12995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.608500][T12995] ext4 filesystem being mounted at /708/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.648466][T12989] bridge_slave_0: left allmulticast mode [ 120.654156][T12989] bridge_slave_0: left promiscuous mode [ 120.660061][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.672819][T13007] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3511'. [ 120.682881][T13007] netlink: 'syz.3.3511': attribute type 9 has an invalid length. [ 120.690738][T13007] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3511'. [ 120.699858][T13007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3511'. [ 120.723785][T12989] : (slave bridge0): Releasing backup interface [ 120.744433][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.770309][T13018] 9pnet_fd: Insufficient options for proto=fd [ 120.858236][T13034] ip6gre1: entered allmulticast mode [ 120.947999][T13052] loop4: detected capacity change from 0 to 512 [ 120.967217][T13052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.001491][T13052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.018197][T13052] ext4 filesystem being mounted at /711/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.036613][T13052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.080389][T13078] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3537'. [ 121.258764][T13106] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3551'. [ 121.268352][T13106] 0X: renamed from !60X [ 121.275356][T13106] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 121.427508][T13119] syzkaller0: entered promiscuous mode [ 121.433067][T13119] syzkaller0: entered allmulticast mode [ 121.584005][T13149] loop3: detected capacity change from 0 to 1024 [ 121.648147][T13149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.686725][T13149] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 121.736077][T13161] loop4: detected capacity change from 0 to 1024 [ 121.771656][T13161] EXT4-fs: Ignoring removed bh option [ 121.793580][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.810731][T13161] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.859929][T13174] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 121.876956][T13161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.917529][T13186] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3575'. [ 121.929919][T13183] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 121.988821][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.185951][T13226] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 122.407700][T13254] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 122.472641][T13264] loop4: detected capacity change from 0 to 128 [ 122.595437][ T1105] Process accounting resumed [ 123.585262][T13377] netlink: 'syz.1.3651': attribute type 3 has an invalid length. [ 123.675108][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 123.675124][ T29] audit: type=1326 audit(2000000023.484:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.705044][ T29] audit: type=1326 audit(2000000023.484:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.729001][ T29] audit: type=1326 audit(2000000023.547:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.752644][ T29] audit: type=1326 audit(2000000023.547:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.776367][ T29] audit: type=1326 audit(2000000023.547:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.802642][ T29] audit: type=1400 audit(2000000023.578:3941): avc: denied { mounton } for pid=13389 comm="syz.1.3655" path="/719/file0" dev="tmpfs" ino=3699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 123.826084][ T29] audit: type=1326 audit(2000000023.620:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.849737][ T29] audit: type=1326 audit(2000000023.631:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.873442][ T29] audit: type=1326 audit(2000000023.631:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13386 comm="syz.2.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34509deec9 code=0x7ffc0000 [ 123.990505][T13398] loop4: detected capacity change from 0 to 8192 [ 124.007371][ T29] audit: type=1400 audit(2000000023.840:3945): avc: denied { create } for pid=13397 comm="syz.4.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.137169][T13427] pim6reg1: entered promiscuous mode [ 124.142514][T13427] pim6reg1: entered allmulticast mode [ 124.465370][T13468] loop3: detected capacity change from 0 to 128 [ 124.472180][T13468] msdos: Bad value for 'dmask' [ 124.635608][T13503] vxlan0: entered promiscuous mode [ 124.643572][ T4403] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.662508][ T4403] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.672020][ T4403] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.681850][ T4403] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.722299][T13516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.038187][T13547] loop4: detected capacity change from 0 to 1024 [ 125.046483][T13547] EXT4-fs: Ignoring removed orlov option [ 125.067031][T13547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.117441][T13547] lo speed is unknown, defaulting to 1000 [ 125.334551][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.419587][T13601] SELinux: failed to load policy [ 125.438467][T13610] __nla_validate_parse: 17 callbacks suppressed [ 125.438487][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'. [ 125.522318][T13625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3733'. [ 125.531869][T13625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3733'. [ 125.590348][T13637] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 125.590727][T13635] loop4: detected capacity change from 0 to 2048 [ 125.607700][T13637] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.619065][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 125.628121][T13637] bridge_slave_1: left allmulticast mode [ 125.633856][T13637] bridge_slave_1: left promiscuous mode [ 125.639681][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.640542][T13635] Alternate GPT is invalid, using primary GPT. [ 125.653188][T13635] loop4: p1 p2 p3 [ 125.657503][T13637] bridge_slave_0: left allmulticast mode [ 125.663410][T13637] bridge_slave_0: left promiscuous mode [ 125.669155][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.680570][T13637] bond0: (slave bridge0): Releasing backup interface [ 125.929560][T13675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3751'. [ 126.003334][T13683] syz.4.3754 (13683) used greatest stack depth: 9552 bytes left [ 126.243365][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 126.272733][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 126.391089][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3781'. [ 126.484879][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 126.493863][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 126.517162][T13758] lo speed is unknown, defaulting to 1000 [ 126.831735][T13828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.873500][T13828] batman_adv: batadv0: Removing interface: ipvlan3 [ 126.887903][T13828] batman_adv: batadv0: Removing interface: ipvlan4 [ 126.904396][T13828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.015656][T13856] netlink: 'syz.0.3817': attribute type 1 has an invalid length. [ 127.601951][T13918] loop3: detected capacity change from 0 to 128 [ 127.881653][T13918] ================================================================== [ 127.889811][T13918] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 127.892994][T13926] syz.3.3846: attempt to access beyond end of device [ 127.892994][T13926] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.897935][T13918] [ 127.897944][T13918] write to 0xffff888122971468 of 8 bytes by task 13926 on cpu 1: [ 127.897964][T13918] filemap_splice_read+0x4f4/0x740 [ 127.911351][T13926] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 127.913660][T13918] splice_direct_to_actor+0x26f/0x680 [ 127.940350][T13918] do_splice_direct+0xda/0x150 [ 127.945208][T13918] do_sendfile+0x380/0x650 [ 127.949638][T13918] __x64_sys_sendfile64+0x105/0x150 [ 127.954854][T13918] x64_sys_call+0x2bb4/0x3000 [ 127.959544][T13918] do_syscall_64+0xd2/0x200 [ 127.964071][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.969987][T13918] [ 127.972329][T13918] write to 0xffff888122971468 of 8 bytes by task 13918 on cpu 0: [ 127.980067][T13918] filemap_splice_read+0x4f4/0x740 [ 127.985192][T13918] splice_direct_to_actor+0x26f/0x680 [ 127.990851][T13918] do_splice_direct+0xda/0x150 [ 127.995645][T13918] do_sendfile+0x380/0x650 [ 128.000072][T13918] __x64_sys_sendfile64+0x105/0x150 [ 128.005282][T13918] x64_sys_call+0x2bb4/0x3000 [ 128.009966][T13918] do_syscall_64+0xd2/0x200 [ 128.014482][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.020385][T13918] [ 128.022718][T13918] value changed: 0x0000000000003cb7 -> 0x0000000000003cc6 [ 128.029827][T13918] [ 128.032149][T13918] Reported by Kernel Concurrency Sanitizer on: [ 128.038311][T13918] CPU: 0 UID: 0 PID: 13918 Comm: syz.3.3846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.048121][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.058208][T13918] ================================================================== [ 128.068055][T13918] syz.3.3846: attempt to access beyond end of device [ 128.068055][T13918] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.081625][T13918] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 128.629731][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 128.630010][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110