last executing test programs: 1m6.306075986s ago: executing program 3 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01060000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 1m6.269675356s ago: executing program 3 (id=101): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 1m6.188699238s ago: executing program 3 (id=103): pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000, 0x800, 0x0, 0x100000, 0x8000000}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000008000000000000000100008406"], 0x0, 0x42, 0x0, 0x2}, 0x28) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m5.337562735s ago: executing program 3 (id=144): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 1m5.156690658s ago: executing program 3 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000240)=""/61}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setuid(0xee01) 1m4.780864265s ago: executing program 3 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 1m4.780716865s ago: executing program 32 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 1.425007912s ago: executing program 5 (id=3145): r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='contention_end\x00') 1.398961953s ago: executing program 5 (id=3148): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 1.336052404s ago: executing program 5 (id=3153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 1.303374645s ago: executing program 5 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.253321955s ago: executing program 5 (id=3159): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1}, 0x0) 1.239254846s ago: executing program 5 (id=3162): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700210095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 1.091746969s ago: executing program 1 (id=3173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)) 1.091503938s ago: executing program 1 (id=3174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', r0, 0x0, 0x200000000}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) 1.057138899s ago: executing program 1 (id=3175): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.03356588s ago: executing program 1 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.01691071s ago: executing program 1 (id=3177): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r1, 0xffffffffffffffff, 0x0) 243.673345ms ago: executing program 4 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000007c0)={0xf97cff8c, 0x8}, 0x10) 243.456425ms ago: executing program 0 (id=3184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x3, 0x2) 243.265515ms ago: executing program 4 (id=3185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', r0, 0x0, 0x200000000}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) 241.944785ms ago: executing program 0 (id=3186): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1}, 0x0) 203.929566ms ago: executing program 0 (id=3187): r0 = socket$kcm(0x10, 0x2, 0x0) getpid() syncfs(r0) tee(r0, 0xffffffffffffffff, 0x2, 0x4) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 197.677096ms ago: executing program 2 (id=3188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x24004041}, 0x4040000) 193.668826ms ago: executing program 4 (id=3189): socket$inet6_sctp(0xa, 0x1, 0x84) timerfd_create(0x0, 0x0) r0 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 151.407067ms ago: executing program 4 (id=3190): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 147.332877ms ago: executing program 2 (id=3191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="79010000000000007c0006"], 0x20}}, 0x24008050) 145.344697ms ago: executing program 1 (id=3192): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 139.632967ms ago: executing program 0 (id=3193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 104.134568ms ago: executing program 0 (id=3194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 103.629588ms ago: executing program 4 (id=3195): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332abd70000000478d15000000080099"], 0x30}}, 0x0) 94.794488ms ago: executing program 2 (id=3196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 39.656809ms ago: executing program 4 (id=3197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 39.379979ms ago: executing program 0 (id=3198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 39.197169ms ago: executing program 2 (id=3199): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000"], 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 28.044499ms ago: executing program 2 (id=3200): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 0s ago: executing program 2 (id=3201): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800000002"], 0x0) kernel console output (not intermixed with test programs): 88][ T4603] __nla_validate_parse: 12 callbacks suppressed [ 49.687807][ T4603] netlink: 3 bytes leftover after parsing attributes in process `syz.1.461'. [ 49.712473][ T4603] 0ªX¹¦À: renamed from caif0 [ 49.734491][ T4603] 0ªX¹¦À: entered allmulticast mode [ 49.739772][ T4603] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 49.757737][ T4607] loop5: detected capacity change from 0 to 164 [ 49.828613][ T4619] loop1: detected capacity change from 0 to 1024 [ 49.873185][ T4619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.975667][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.992661][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.041863][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.075436][ T4643] 9p: Unknown access argument : -22 [ 50.129676][ T4639] loop2: detected capacity change from 0 to 8192 [ 50.214603][ T4649] loop2: detected capacity change from 0 to 128 [ 50.223869][ T4647] loop1: detected capacity change from 0 to 256 [ 50.323416][ T4657] random: crng reseeded on system resumption [ 50.329676][ T4655] loop4: detected capacity change from 0 to 164 [ 50.336105][ T4657] vhci_hcd: invalid port number 23 [ 50.374976][ T4660] netlink: '+}[@': attribute type 1 has an invalid length. [ 50.382335][ T4660] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 50.464324][ T4674] 9p: Unknown access argument : -22 [ 50.581456][ T4683] netlink: 'GPL': attribute type 29 has an invalid length. [ 50.594215][ T4683] netlink: 'GPL': attribute type 29 has an invalid length. [ 50.644476][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 50.656804][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 50.666858][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 50.684691][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 50.694189][ T4685] usb usb8: usbfs: process 4685 (syz.2.497) did not claim interface 0 before use [ 50.735036][ T4699] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.798369][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.810246][ T4711] loop5: detected capacity change from 0 to 2048 [ 50.820285][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.841845][ T4722] netlink: 340 bytes leftover after parsing attributes in process `syz.4.515'. [ 50.851104][ T4722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.515'. [ 51.025884][ T4747] loop1: detected capacity change from 0 to 1024 [ 51.061612][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.114307][ T4759] loop4: detected capacity change from 0 to 128 [ 51.182925][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 51.231422][ T4763] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 51.257366][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.269257][ T4763] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 51.290173][ T4766] bridge0: entered promiscuous mode [ 51.304765][ T4766] bridge0: port 3(macsec1) entered blocking state [ 51.311342][ T4766] bridge0: port 3(macsec1) entered disabled state [ 51.318314][ T4766] macsec1: entered allmulticast mode [ 51.323648][ T4766] bridge0: entered allmulticast mode [ 51.329965][ T4766] macsec1: left allmulticast mode [ 51.335343][ T4766] bridge0: left allmulticast mode [ 51.347165][ T4766] bridge0: left promiscuous mode [ 51.444968][ T4779] loop1: detected capacity change from 0 to 8192 [ 51.544618][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 51.623307][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 51.623325][ T29] audit: type=1326 audit(1757669482.981:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8075ffada9 code=0x7ffc0000 [ 51.652869][ T29] audit: type=1326 audit(1757669482.981:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 51.676430][ T29] audit: type=1326 audit(1757669482.981:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 51.712814][ T29] audit: type=1400 audit(1757669483.081:845): avc: denied { create } for pid=4811 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.749547][ T4812] loop4: detected capacity change from 0 to 512 [ 51.768081][ T4817] loop1: detected capacity change from 0 to 512 [ 51.775821][ T4817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.800396][ T4817] EXT4-fs (loop1): 1 truncate cleaned up [ 51.805797][ T29] audit: type=1400 audit(1757669483.111:846): avc: denied { map } for pid=4813 comm="syz.1.557" path="socket:[8977]" dev="sockfs" ino=8977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.829253][ T29] audit: type=1400 audit(1757669483.111:847): avc: denied { read } for pid=4813 comm="syz.1.557" path="socket:[8977]" dev="sockfs" ino=8977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.852643][ T29] audit: type=1400 audit(1757669483.111:848): avc: denied { map } for pid=4813 comm="syz.1.557" path="socket:[8978]" dev="sockfs" ino=8978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 51.852979][ T4817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.875473][ T29] audit: type=1400 audit(1757669483.141:849): avc: denied { mounton } for pid=4816 comm="syz.1.558" path="/129/bus" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.875505][ T29] audit: type=1400 audit(1757669483.151:850): avc: denied { mounton } for pid=4816 comm="syz.1.558" path="/129/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.935135][ T4821] program syz.0.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.935405][ T4820] loop5: detected capacity change from 0 to 1024 [ 51.961815][ T4817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.977837][ T4812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.991537][ T4812] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.004116][ T4820] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.015325][ T4820] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.025007][ T29] audit: type=1326 audit(1757669483.361:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7156eba9 code=0x7ffc0000 [ 52.027670][ T4820] JBD2: no valid journal superblock found [ 52.054390][ T4820] EXT4-fs (loop5): Could not load journal inode [ 52.074810][ T4825] loop0: detected capacity change from 0 to 1024 [ 52.107982][ T4825] EXT4-fs: Ignoring removed bh option [ 52.115194][ T4825] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.125945][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.128638][ T4820] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 52.163053][ T4825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.228897][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.357830][ T4867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.434182][ T4875] loop0: detected capacity change from 0 to 512 [ 52.459271][ T4880] loop2: detected capacity change from 0 to 1024 [ 52.472881][ T4880] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.485109][ T4880] EXT4-fs: inline encryption not supported [ 52.487049][ T4875] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.507544][ T4880] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.521535][ T4875] EXT4-fs (loop0): mount failed [ 52.583777][ T4880] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.585: bad orphan inode 11 [ 52.598768][ T4898] program syz.1.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.639269][ T4900] 0ªX¹¦À: renamed from caif0 [ 52.651999][ T4880] ext4_test_bit(bit=10, block=4) = 1 [ 52.657369][ T4880] is_bad_inode(inode)=0 [ 52.661560][ T4880] NEXT_ORPHAN(inode)=3254779904 [ 52.666556][ T4880] max_ino=32 [ 52.669762][ T4880] i_nlink=0 [ 52.678332][ T4880] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.585: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.702241][ T4900] 0ªX¹¦À: entered allmulticast mode [ 52.707581][ T4900] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.715904][ T4902] sd 0:0:1:0: device reset [ 52.728432][ T4880] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.585: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.743735][ T4880] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.585: Failed to acquire dquot type 0 [ 52.773031][ T4880] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 52.782869][ T4880] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.585: mark_inode_dirty error [ 52.795667][ T4880] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 52.808198][ T4880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.821338][ T4880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.830879][ T4880] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.585: Invalid inode table block 1 in block_group 0 [ 52.845080][ T4880] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 52.858898][ T4880] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.585: mark_inode_dirty error [ 53.213273][ T4913] loop1: detected capacity change from 0 to 32768 [ 53.252116][ T4913] loop1: p1 p3 < > [ 53.305156][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.316559][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.566666][ T4972] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 53.604104][ T4974] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 53.636916][ T4974] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 53.650001][ T4988] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 53.697948][ T4986] loop0: detected capacity change from 0 to 8192 [ 54.065430][ T5060] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.098584][ T5059] loop4: detected capacity change from 0 to 512 [ 54.121306][ T5069] netlink: 'syz.5.666': attribute type 21 has an invalid length. [ 54.141860][ T5059] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.203391][ T5059] EXT4-fs (loop4): mount failed [ 54.274606][ T5080] 0ªX¹¦À: renamed from caif0 [ 54.289738][ T5084] netlink: 'syz.5.673': attribute type 1 has an invalid length. [ 54.303128][ T5080] 0ªX¹¦À: entered allmulticast mode [ 54.308362][ T5080] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.350961][ T5088] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 54.359287][ T5088] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 54.433688][ T5101] loop4: detected capacity change from 0 to 1024 [ 54.439026][ T5102] can0: slcan on ttyS3. [ 54.446087][ T5101] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.453653][ T5101] EXT4-fs: inline encryption not supported [ 54.475987][ T5101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.486882][ T5101] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.681: bad orphan inode 11 [ 54.497519][ T5101] ext4_test_bit(bit=10, block=4) = 1 [ 54.502920][ T5101] is_bad_inode(inode)=0 [ 54.503326][ T5102] can0 (unregistered): slcan off ttyS3. [ 54.507271][ T5101] NEXT_ORPHAN(inode)=3254779904 [ 54.516163][ T5107] can0: slcan on ttyS3. [ 54.517860][ T5101] max_ino=32 [ 54.525185][ T5101] i_nlink=0 [ 54.544702][ T5101] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.681: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.559234][ T5101] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.681: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.574259][ T5101] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.681: Failed to acquire dquot type 0 [ 54.586738][ T5101] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 54.606441][ T5101] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.681: mark_inode_dirty error [ 54.614655][ T5109] bond2: entered promiscuous mode [ 54.622684][ T5109] bond2: entered allmulticast mode [ 54.629083][ T5101] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 54.629359][ T5109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.647547][ T5100] can0 (unregistered): slcan off ttyS3. [ 54.655869][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.684888][ T5101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.698462][ T5112] __nla_validate_parse: 5 callbacks suppressed [ 54.698483][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 54.716930][ T5109] bond2 (unregistering): Released all slaves [ 54.723920][ T5101] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.681: Invalid inode table block 1 in block_group 0 [ 54.742069][ T5101] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 54.753399][ T5101] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.681: mark_inode_dirty error [ 54.784469][ T5112] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 54.812660][ T5112] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 54.881248][ T5118] netlink: 'syz.1.687': attribute type 13 has an invalid length. [ 54.893897][ T5118] gretap0: refused to change device tx_queue_len [ 54.901321][ T5118] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.926930][ T5121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.978683][ T5124] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 54.987008][ T5124] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 55.020464][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 55.058452][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.693'. [ 55.067651][ T1084] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.084282][ T1084] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.109912][ T1084] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.138795][ T1084] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.175882][ T5142] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 55.390208][ T5165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'. [ 55.413403][ T5170] netlink: 2 bytes leftover after parsing attributes in process `syz.5.712'. [ 55.443958][ T5175] can0: slcan on ttyS3. [ 55.491850][ T5175] can0 (unregistered): slcan off ttyS3. [ 55.505611][ T5175] can0: slcan on ttyS3. [ 55.552726][ T5173] can0 (unregistered): slcan off ttyS3. [ 55.674570][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 55.738619][ T5213] loop2: detected capacity change from 0 to 512 [ 55.768628][ T5213] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.790999][ T5216] can0: slcan on ttyS3. [ 55.811931][ T5213] EXT4-fs (loop2): mount failed [ 55.863228][ T5216] can0 (unregistered): slcan off ttyS3. [ 55.884159][ T5225] can0: slcan on ttyS3. [ 55.991849][ T5215] can0 (unregistered): slcan off ttyS3. [ 56.014122][ T5205] loop0: detected capacity change from 0 to 32768 [ 56.033407][ T5246] loop4: detected capacity change from 0 to 512 [ 56.042782][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.055575][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.060093][ T5246] Invalid ELF header magic: != ELF [ 56.071554][ T5205] loop0: p1 p2 p3 < p5 p6 > [ 56.077015][ T5205] loop0: p2 size 16775168 extends beyond EOD, truncated [ 56.084946][ T5205] loop0: p5 start 4294970168 is beyond EOD, truncated [ 56.114495][ T5250] loop2: detected capacity change from 0 to 1024 [ 56.122092][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 56.131959][ T5250] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.143027][ T5250] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.161820][ T5249] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 56.174344][ T5249] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 56.194481][ T5250] JBD2: no valid journal superblock found [ 56.200296][ T5250] EXT4-fs (loop2): Could not load journal inode [ 56.225104][ T5250] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 56.348123][ T5267] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 56.370958][ T5267] SELinux: failed to load policy [ 56.393142][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.406663][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.432769][ T5285] 9pnet_fd: Insufficient options for proto=fd [ 56.451305][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 56.464905][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 56.471892][ T1084] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.482667][ T1084] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.492222][ T1084] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.501060][ T1084] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.517279][ T5290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 56.555703][ T5294] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 56.567322][ T5294] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 56.595609][ T5300] bond2: entered promiscuous mode [ 56.600756][ T5300] bond2: entered allmulticast mode [ 56.606196][ T5300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.616166][ T5300] bond2 (unregistering): Released all slaves [ 56.642804][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 56.642822][ T29] audit: type=1400 audit(1757669488.021:1122): avc: denied { ioctl } for pid=5304 comm="syz.5.771" path="socket:[10824]" dev="sockfs" ino=10824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.710464][ T29] audit: type=1326 audit(1757669488.081:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.735216][ T29] audit: type=1326 audit(1757669488.091:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.758913][ T29] audit: type=1326 audit(1757669488.091:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.782523][ T29] audit: type=1326 audit(1757669488.091:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.806094][ T29] audit: type=1326 audit(1757669488.091:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.829627][ T29] audit: type=1326 audit(1757669488.091:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.853188][ T29] audit: type=1326 audit(1757669488.091:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.876637][ T29] audit: type=1326 audit(1757669488.091:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.900006][ T29] audit: type=1326 audit(1757669488.101:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 56.932914][ T5314] can0: slcan on ttyS3. [ 56.961845][ T5314] can0 (unregistered): slcan off ttyS3. [ 56.971265][ T5314] can0: slcan on ttyS3. [ 57.031469][ T5323] loop2: detected capacity change from 0 to 512 [ 57.037865][ T5313] can0 (unregistered): slcan off ttyS3. [ 57.073561][ T5323] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.121292][ T5323] EXT4-fs (loop2): mount failed [ 57.144262][ T5336] loop1: detected capacity change from 0 to 512 [ 57.164893][ T5336] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.180758][ T5342] SELinux: policydb version -25284851 does not match my version range 15-35 [ 57.190156][ T5342] SELinux: failed to load policy [ 57.232113][ T5336] EXT4-fs (loop1): mount failed [ 57.233570][ T5346] SELinux: failed to load policy [ 57.321300][ T5355] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 57.335544][ T5359] sd 0:0:1:0: device reset [ 57.405524][ T5365] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 57.426836][ T5369] loop0: detected capacity change from 0 to 512 [ 57.443385][ T5371] 9p: Unknown access argument kæ¹: -22 [ 57.474282][ T5369] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.499683][ T5373] loop1: detected capacity change from 0 to 512 [ 57.518742][ T5373] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.798: corrupted in-inode xattr: invalid ea_ino [ 57.534766][ T5369] EXT4-fs (loop0): mount failed [ 57.550489][ T5373] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.798: couldn't read orphan inode 15 (err -117) [ 57.569898][ T5379] loop2: detected capacity change from 0 to 764 [ 57.596416][ T5373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.609646][ T5379] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.632083][ T5379] Symlink component flag not implemented [ 57.642855][ T5379] Symlink component flag not implemented (7) [ 57.694702][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.774762][ T5395] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 57.803154][ T5395] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 57.836255][ T5406] loop5: detected capacity change from 0 to 512 [ 57.854215][ T5406] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.869374][ T5406] EXT4-fs (loop5): mount failed [ 57.928853][ T5416] syz_tun: entered allmulticast mode [ 57.942571][ T5415] syz_tun: left allmulticast mode [ 57.974977][ T5424] loop5: detected capacity change from 0 to 512 [ 57.975503][ T5423] loop1: detected capacity change from 0 to 512 [ 57.994555][ T5423] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.010809][ T5424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.026530][ T5423] EXT4-fs (loop1): mount failed [ 58.037427][ T5424] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.067528][ T5431] sd 0:0:1:0: device reset [ 58.086757][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.124655][ T5435] rdma_op ffff88811abea180 conn xmit_rdma 0000000000000000 [ 58.139444][ T5437] loop1: detected capacity change from 0 to 512 [ 58.148692][ T5437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.160605][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.186458][ T5437] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.819: corrupted xattr block 19: overlapping e_value [ 58.203539][ T5437] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 58.217570][ T5446] loop5: detected capacity change from 0 to 128 [ 58.226029][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.254648][ T5448] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 58.266983][ T5448] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 59.043155][ T5473] can0: slcan on ttyS3. [ 59.046128][ T5471] hub 9-0:1.0: USB hub found [ 59.052080][ T5471] hub 9-0:1.0: 8 ports detected [ 59.081815][ T5473] can0 (unregistered): slcan off ttyS3. [ 59.095791][ T5473] can0: slcan on ttyS3. [ 59.133005][ T5484] loop1: detected capacity change from 0 to 1024 [ 59.140048][ T5484] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.150986][ T5484] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.161137][ T5470] can0 (unregistered): slcan off ttyS3. [ 59.177372][ T5484] JBD2: no valid journal superblock found [ 59.183196][ T5484] EXT4-fs (loop1): Could not load journal inode [ 59.221268][ T5484] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 59.364205][ T5507] syz_tun: entered allmulticast mode [ 59.371890][ T5488] loop2: detected capacity change from 0 to 32768 [ 59.374745][ T5506] syz_tun: left allmulticast mode [ 59.403430][ T5510] loop1: detected capacity change from 0 to 256 [ 59.411630][ T5488] loop2: p1 p2 p3 < p5 p6 > [ 59.416889][ T5488] loop2: p2 size 16775168 extends beyond EOD, truncated [ 59.419469][ T5510] bio_check_eod: 4 callbacks suppressed [ 59.419492][ T5510] syz.1.851: attempt to access beyond end of device [ 59.419492][ T5510] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 59.431177][ T5488] loop2: p5 start 4294970168 is beyond EOD, truncated [ 59.450113][ T5510] syz.1.851: attempt to access beyond end of device [ 59.450113][ T5510] loop1: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 59.637116][ T5527] sd 0:0:1:0: device reset [ 59.803041][ T5545] loop2: detected capacity change from 0 to 512 [ 59.826032][ T5545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.826156][ T5545] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.856047][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.859321][ T5549] can0: slcan on ttyS3. [ 59.912625][ T5549] can0 (unregistered): slcan off ttyS3. [ 59.916167][ T5549] can0: slcan on ttyS3. [ 59.933729][ T5555] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 59.980370][ T5548] can0 (unregistered): slcan off ttyS3. [ 60.082096][ T5571] loop2: detected capacity change from 0 to 512 [ 60.089824][ T5571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.097210][ T5571] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.880: iget: bad extended attribute block 1 [ 60.097480][ T5571] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.880: couldn't read orphan inode 15 (err -117) [ 60.098273][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 60.112207][ T5573] loop4: detected capacity change from 0 to 512 [ 60.145886][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.187079][ T5573] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.215929][ T5583] loop0: detected capacity change from 0 to 1024 [ 60.216248][ T5583] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.260971][ T5583] EXT4-fs: inline encryption not supported [ 60.263153][ T5583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.265639][ T5583] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.885: bad orphan inode 11 [ 60.265756][ T5583] ext4_test_bit(bit=10, block=4) = 1 [ 60.265850][ T5583] is_bad_inode(inode)=0 [ 60.265859][ T5583] NEXT_ORPHAN(inode)=3254779904 [ 60.265869][ T5583] max_ino=32 [ 60.265876][ T5583] i_nlink=0 [ 60.266577][ T5583] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.885: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.266927][ T5583] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.885: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.267025][ T5583] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.885: Failed to acquire dquot type 0 [ 60.267196][ T5583] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 60.267342][ T5583] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.885: mark_inode_dirty error [ 60.267432][ T5583] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 60.269967][ T5583] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.885: Invalid inode table block 1 in block_group 0 [ 60.431878][ T5583] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 60.431979][ T5583] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.885: mark_inode_dirty error [ 60.633644][ T5612] hub 9-0:1.0: USB hub found [ 60.661235][ T5612] hub 9-0:1.0: 8 ports detected [ 60.758404][ T5625] loop1: detected capacity change from 0 to 1024 [ 60.765165][ T5622] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 60.782576][ T5625] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.795885][ T5627] ipvlan2: entered promiscuous mode [ 60.797670][ T5625] EXT4-fs: inline encryption not supported [ 60.813522][ T5630] __nla_validate_parse: 4 callbacks suppressed [ 60.813538][ T5630] netlink: 32 bytes leftover after parsing attributes in process `syz.5.906'. [ 60.823252][ T5627] bridge0: port 1(ipvlan2) entered blocking state [ 60.835208][ T5627] bridge0: port 1(ipvlan2) entered disabled state [ 60.842262][ T5630] netlink: 48 bytes leftover after parsing attributes in process `syz.5.906'. [ 60.851493][ T5625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.862992][ T5627] ipvlan2: entered allmulticast mode [ 60.864390][ T5625] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.903: bad orphan inode 11 [ 60.868327][ T5627] bridge0: entered allmulticast mode [ 60.882834][ T5625] ext4_test_bit(bit=10, block=4) = 1 [ 60.888870][ T5625] is_bad_inode(inode)=0 [ 60.893141][ T5625] NEXT_ORPHAN(inode)=3254779904 [ 60.898029][ T5625] max_ino=32 [ 60.901236][ T5625] i_nlink=0 [ 60.905113][ T5627] ipvlan2: left allmulticast mode [ 60.910216][ T5627] bridge0: left allmulticast mode [ 60.916175][ T5625] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.903: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.934190][ T5625] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.903: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.955307][ T5633] SELinux: truncated policydb string identifier [ 60.961902][ T5633] SELinux: failed to load policy [ 60.968844][ T5625] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.903: Failed to acquire dquot type 0 [ 60.991405][ T5635] loop4: detected capacity change from 0 to 512 [ 60.993794][ T5625] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 61.007972][ T5625] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.903: mark_inode_dirty error [ 61.019368][ T5635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.028554][ T5625] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 61.047367][ T3380] Process accounting resumed [ 61.049569][ T5625] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.903: Invalid inode table block 1 in block_group 0 [ 61.065072][ T5625] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 61.075274][ T5625] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.903: mark_inode_dirty error [ 61.087575][ T5635] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.908: corrupted xattr block 19: overlapping e_value [ 61.106322][ T5635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.269429][ T5669] loop5: detected capacity change from 0 to 512 [ 61.287839][ T5669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.309715][ T5671] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 61.318525][ T5671] SELinux: failed to load policy [ 61.327005][ T5669] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.924: corrupted xattr block 19: overlapping e_value [ 61.352195][ T5669] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 61.433684][ T5696] loop2: detected capacity change from 0 to 512 [ 61.452025][ T5688] loop5: detected capacity change from 0 to 1024 [ 61.458728][ T5688] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.467974][ T5688] EXT4-fs: inline encryption not supported [ 61.473705][ T5696] Invalid ELF header magic: != ELF [ 61.482366][ T5688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.500642][ T5688] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.928: bad orphan inode 11 [ 61.520603][ T5688] ext4_test_bit(bit=10, block=4) = 1 [ 61.525998][ T5688] is_bad_inode(inode)=0 [ 61.530184][ T5688] NEXT_ORPHAN(inode)=3254779904 [ 61.535159][ T5688] max_ino=32 [ 61.538454][ T5688] i_nlink=0 [ 61.542722][ T5688] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.928: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.557104][ T5688] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.928: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.572748][ T5688] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.928: Failed to acquire dquot type 0 [ 61.584247][ T5688] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 61.594775][ T5688] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.928: mark_inode_dirty error [ 61.607859][ T5688] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 61.623833][ T5688] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.928: Invalid inode table block 1 in block_group 0 [ 61.661881][ T5688] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 61.671511][ T5688] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.928: mark_inode_dirty error [ 61.706140][ T5721] loop1: detected capacity change from 0 to 2048 [ 61.721545][ T5726] loop0: detected capacity change from 0 to 512 [ 61.730034][ T5726] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 61.740111][ T5726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 61.749308][ T5726] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.950: corrupted in-inode xattr: e_value size too large [ 61.752632][ T5721] loop1: p1 < > p4 [ 61.768571][ T5726] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.950: couldn't read orphan inode 15 (err -117) [ 61.785478][ T5721] loop1: p4 size 8388608 extends beyond EOD, truncated [ 61.796978][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 61.797023][ T29] audit: type=1400 audit(1757669493.171:1299): avc: denied { create } for pid=5725 comm="syz.0.950" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.905930][ T5734] netlink: 212 bytes leftover after parsing attributes in process `syz.2.953'. [ 62.008470][ T5738] rdma_op ffff888118575180 conn xmit_rdma 0000000000000000 [ 62.026432][ T29] audit: type=1326 audit(1757669493.401:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 62.026462][ T29] audit: type=1326 audit(1757669493.401:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 62.026486][ T29] audit: type=1326 audit(1757669493.401:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 62.026508][ T29] audit: type=1326 audit(1757669493.401:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.2.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 62.185104][ T5766] loop2: detected capacity change from 0 to 1024 [ 62.262138][ T5766] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.262211][ T5766] EXT4-fs: inline encryption not supported [ 62.263636][ T5766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.325539][ T29] audit: type=1326 audit(1757669493.691:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 62.325629][ T29] audit: type=1326 audit(1757669493.691:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 62.325653][ T29] audit: type=1326 audit(1757669493.691:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 62.325679][ T29] audit: type=1326 audit(1757669493.691:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 62.325742][ T29] audit: type=1326 audit(1757669493.691:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5771 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 62.350845][ T5766] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.965: bad orphan inode 11 [ 62.351940][ T5766] ext4_test_bit(bit=10, block=4) = 1 [ 62.351957][ T5766] is_bad_inode(inode)=0 [ 62.351966][ T5766] NEXT_ORPHAN(inode)=3254779904 [ 62.351974][ T5766] max_ino=32 [ 62.351981][ T5766] i_nlink=0 [ 62.358323][ T5766] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.965: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.358486][ T5766] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.965: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.358608][ T5766] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.965: Failed to acquire dquot type 0 [ 62.358706][ T5766] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 62.358822][ T5766] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.965: mark_inode_dirty error [ 62.359031][ T5766] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 62.362791][ T5766] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.965: Invalid inode table block 1 in block_group 0 [ 62.362897][ T5766] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 62.362982][ T5766] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.965: mark_inode_dirty error [ 62.390370][ T5777] loop1: detected capacity change from 0 to 512 [ 62.623971][ T5777] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.624158][ T5777] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.971: iget: bad extended attribute block 1 [ 62.624426][ T5777] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.971: couldn't read orphan inode 15 (err -117) [ 62.666796][ T5782] loop5: detected capacity change from 0 to 512 [ 62.688941][ T5782] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 62.688978][ T5782] System zones: 0-7 [ 62.786954][ T5791] wireguard0: entered promiscuous mode [ 62.786978][ T5791] wireguard0: entered allmulticast mode [ 62.890882][ T5801] loop0: detected capacity change from 0 to 512 [ 62.949636][ T5805] netlink: 'syz.2.982': attribute type 3 has an invalid length. [ 62.955963][ T5801] Invalid ELF header magic: != ELF [ 62.957437][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 63.079233][ T5803] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.114761][ T5803] SELinux: failed to load policy [ 63.190749][ T5814] SELinux: unknown common r [ 63.195636][ T5814] SELinux: failed to load policy [ 63.285920][ T5821] netlink: 'syz.5.990': attribute type 21 has an invalid length. [ 63.293844][ T5821] netlink: 156 bytes leftover after parsing attributes in process `syz.5.990'. [ 63.552899][ T5832] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.707684][ T5843] loop1: detected capacity change from 0 to 764 [ 63.749084][ T5845] loop5: detected capacity change from 0 to 2048 [ 63.775788][ T5843] Symlink component flag not implemented [ 63.781570][ T5843] Symlink component flag not implemented (129) [ 63.790520][ T5843] rock: directory entry would overflow storage [ 63.797095][ T5843] rock: sig=0x4f50, size=4, remaining=3 [ 63.802725][ T5843] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.853862][ T5845] loop5: p1 < > p4 [ 63.859286][ T5845] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.974744][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'. [ 64.226155][ T5868] loop5: detected capacity change from 0 to 1024 [ 64.293666][ T5868] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1012: Allocating blocks 385-513 which overlap fs metadata [ 64.384616][ T5868] EXT4-fs (loop5): pa ffff888107194150: logic 16, phys. 129, len 24 [ 64.392678][ T5868] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 64.492356][ T5880] wireguard0: entered promiscuous mode [ 64.497897][ T5880] wireguard0: entered allmulticast mode [ 64.702031][ T5888] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1020'. [ 64.824284][ T5895] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.845547][ T5895] FAT-fs (loop11): unable to read boot sector [ 65.106583][ T5909] 9pnet_fd: p9_fd_create_unix (5909): problem connecting socket: ./file0: -2 [ 65.246874][ T5922] bridge0: port 3(hsr_slave_1) entered blocking state [ 65.253869][ T5922] bridge0: port 3(hsr_slave_1) entered disabled state [ 65.281485][ T5922] hsr_slave_1: entered allmulticast mode [ 65.292578][ T5922] hsr_slave_1: left allmulticast mode [ 65.365893][ T5932] loop4: detected capacity change from 0 to 1024 [ 65.404568][ T5932] EXT4-fs: Ignoring removed orlov option [ 65.450972][ T5934] loop5: detected capacity change from 0 to 4096 [ 65.520454][ T5941] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1043'. [ 65.581620][ T5949] netlink: 'syz.5.1046': attribute type 10 has an invalid length. [ 65.586398][ T5951] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 65.589645][ T5949] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1046'. [ 65.610101][ T5948] loop4: detected capacity change from 0 to 1024 [ 65.618119][ T5949] batman_adv: batadv0: Adding interface: veth1_vlan [ 65.624794][ T5949] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.653107][ T5949] batman_adv: batadv0: Interface activated: veth1_vlan [ 65.664102][ T5948] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.686660][ T5955] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.715227][ T5948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1047: bg 0: block 393: padding at end of block bitmap is not set [ 65.722426][ T5955] FAT-fs (loop5): unable to read boot sector [ 65.735976][ T5948] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 65.748715][ T5948] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.748715][ T5948] [ 65.982715][ T36] IPVS: starting estimator thread 0... [ 66.081852][ T5974] IPVS: using max 2880 ests per chain, 144000 per kthread [ 66.093244][ T5988] netlink: 'syz.0.1065': attribute type 13 has an invalid length. [ 66.101206][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 66.119995][ T51] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.120140][ T5988] netlink: 'syz.0.1065': attribute type 13 has an invalid length. [ 66.134376][ T51] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.136674][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 66.146629][ T51] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.165253][ T51] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.339016][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1081'. [ 66.480663][ T6044] loop1: detected capacity change from 0 to 1024 [ 66.504896][ T6044] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1092: Allocating blocks 385-513 which overlap fs metadata [ 66.525241][ T6044] EXT4-fs (loop1): pa ffff888107194230: logic 16, phys. 129, len 24 [ 66.533416][ T6044] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 66.644580][ T6063] rdma_op ffff888118576580 conn xmit_rdma 0000000000000000 [ 66.672293][ T6061] syzkaller1: entered promiscuous mode [ 66.677839][ T6061] syzkaller1: entered allmulticast mode [ 66.697979][ T6065] IPv6: Can't replace route, no match found [ 66.774996][ T6074] sctp: [Deprecated]: syz.5.1105 (pid 6074) Use of int in max_burst socket option deprecated. [ 66.774996][ T6074] Use struct sctp_assoc_value instead [ 66.791441][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 66.797795][ T6080] loop4: detected capacity change from 0 to 1024 [ 66.801962][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 66.847911][ T6080] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1108: Allocating blocks 385-513 which overlap fs metadata [ 66.891720][ T6090] syzkaller1: entered promiscuous mode [ 66.895451][ T6080] EXT4-fs (loop4): pa ffff8881072790e0: logic 16, phys. 129, len 24 [ 66.897346][ T6090] syzkaller1: entered allmulticast mode [ 66.905377][ T6080] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 66.937090][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 66.937107][ T29] audit: type=1400 audit(1757669498.311:1352): avc: denied { read } for pid=6093 comm="syz.1.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.978444][ T6098] syzkaller1: entered promiscuous mode [ 66.984558][ T6098] syzkaller1: entered allmulticast mode [ 67.075892][ T6106] sctp: [Deprecated]: syz.4.1120 (pid 6106) Use of int in max_burst socket option deprecated. [ 67.075892][ T6106] Use struct sctp_assoc_value instead [ 67.143914][ T29] audit: type=1326 audit(1757669498.511:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 67.167491][ T29] audit: type=1326 audit(1757669498.511:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 67.190955][ T29] audit: type=1326 audit(1757669498.511:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 67.217906][ T6114] syzkaller1: entered promiscuous mode [ 67.223678][ T6114] syzkaller1: entered allmulticast mode [ 67.249521][ T6122] loop0: detected capacity change from 0 to 512 [ 67.281650][ T6125] loop0: detected capacity change from 0 to 1024 [ 67.302465][ T6123] vhci_hcd: invalid port number 11 [ 67.307627][ T6123] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 67.320715][ T6125] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1128: Allocating blocks 385-513 which overlap fs metadata [ 67.359702][ T6125] EXT4-fs (loop0): pa ffff888107279150: logic 16, phys. 129, len 24 [ 67.367862][ T6125] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 67.438577][ T6134] syzkaller1: entered promiscuous mode [ 67.444261][ T6134] syzkaller1: entered allmulticast mode [ 67.561471][ T6139] loop4: detected capacity change from 0 to 2048 [ 67.616165][ T6139] Alternate GPT is invalid, using primary GPT. [ 67.623413][ T6139] loop4: p2 p3 p7 [ 67.684230][ T29] audit: type=1326 audit(1757669499.061:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.707701][ T29] audit: type=1326 audit(1757669499.061:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.747182][ T29] audit: type=1326 audit(1757669499.061:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.770873][ T29] audit: type=1326 audit(1757669499.061:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.794598][ T29] audit: type=1326 audit(1757669499.061:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.818129][ T29] audit: type=1326 audit(1757669499.071:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f807605eba9 code=0x7ffc0000 [ 67.903727][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 67.913050][ T6163] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1155'. [ 68.151529][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 68.410691][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.432066][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.717096][ T6240] loop0: detected capacity change from 0 to 512 [ 68.733808][ T6240] EXT4-fs: Ignoring removed oldalloc option [ 68.748938][ T6240] EXT4-fs: Ignoring removed bh option [ 68.808246][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1184'. [ 68.820417][ T6240] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1180: corrupted in-inode xattr: e_value size too large [ 68.836185][ T6240] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1180: couldn't read orphan inode 15 (err -117) [ 68.862341][ T6240] EXT4-fs mount: 34 callbacks suppressed [ 68.862358][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.887631][ T6255] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 68.923142][ T6255] bridge0: port 3(dummy0) entered disabled state [ 68.930712][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.936550][ T6255] dummy0: left allmulticast mode [ 68.944943][ T6255] dummy0: left promiscuous mode [ 68.950137][ T6255] bridge0: port 3(dummy0) entered disabled state [ 68.981100][ T6255] team0: Port device dummy0 added [ 68.988178][ T6266] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 68.999076][ T6266] team0: Port device dummy0 removed [ 69.007420][ T6266] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.070093][ T6274] capability: warning: `syz.2.1194' uses 32-bit capabilities (legacy support in use) [ 69.099182][ T6281] loop1: detected capacity change from 0 to 2048 [ 69.143953][ T6281] Alternate GPT is invalid, using primary GPT. [ 69.150632][ T6281] loop1: p1 p2 p3 [ 69.158705][ T6294] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 69.222852][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 69.255055][ T6302] bridge0: port 3(batadv1) entered blocking state [ 69.261572][ T6302] bridge0: port 3(batadv1) entered disabled state [ 69.278871][ T6302] batadv1: entered allmulticast mode [ 69.284937][ T6302] batadv1: entered promiscuous mode [ 69.410059][ T6315] loop5: detected capacity change from 0 to 2048 [ 69.526403][ T6315] Alternate GPT is invalid, using primary GPT. [ 69.533150][ T6315] loop5: p2 p3 p7 [ 69.561052][ T6333] loop1: detected capacity change from 0 to 1024 [ 69.584371][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.601985][ T6333] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.675536][ T6333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1219: bg 0: block 393: padding at end of block bitmap is not set [ 69.698504][ T6333] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 69.711319][ T6333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.711319][ T6333] [ 69.757586][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.766676][ T2295] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 69.775970][ T2295] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 69.819684][ T6366] loop0: detected capacity change from 0 to 2048 [ 69.876185][ T6366] Alternate GPT is invalid, using primary GPT. [ 69.882598][ T6366] loop0: p1 p2 p3 [ 70.013448][ T6380] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 70.077973][ T6380] 8021q: adding VLAN 0 to HW filter on device bond4 [ 70.089567][ T6382] loop5: detected capacity change from 0 to 512 [ 70.134009][ T6389] bond4: (slave geneve0): making interface the new active one [ 70.147817][ T6382] EXT4-fs (loop5): too many log groups per flexible block group [ 70.155629][ T6382] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 70.164397][ T6382] EXT4-fs (loop5): mount failed [ 70.170851][ T6389] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 70.287558][ T6407] loop5: detected capacity change from 0 to 2048 [ 70.355229][ T6425] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 70.376009][ T6407] Alternate GPT is invalid, using primary GPT. [ 70.382419][ T6407] loop5: p1 p2 p3 [ 70.390453][ T6425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 70.430976][ T6432] SELinux: ebitmap: truncated map [ 70.442725][ T6432] SELinux: failed to load policy [ 70.622250][ T6451] loop1: detected capacity change from 0 to 2048 [ 70.654983][ T6451] Alternate GPT is invalid, using primary GPT. [ 70.661385][ T6451] loop1: p2 p3 p7 [ 70.661420][ T6456] loop4: detected capacity change from 0 to 512 [ 70.684330][ T6456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.753380][ T6456] EXT4-fs (loop4): 1 truncate cleaned up [ 70.759510][ T6456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.803128][ T6456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.905977][ T6486] loop1: detected capacity change from 0 to 512 [ 70.916621][ T6486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.937701][ T6486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1285: invalid indirect mapped block 4294967295 (level 0) [ 70.957402][ T6486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1285: invalid indirect mapped block 4294967295 (level 1) [ 70.973814][ T6486] EXT4-fs (loop1): 1 orphan inode deleted [ 70.979628][ T6486] EXT4-fs (loop1): 1 truncate cleaned up [ 70.987017][ T6486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.118176][ T6512] loop4: detected capacity change from 0 to 2048 [ 71.125279][ T6514] mmap: syz.2.1297 (6514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.128504][ T6486] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.1285: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 71.179435][ T6516] loop2: detected capacity change from 0 to 1024 [ 71.187025][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.192467][ T6512] Alternate GPT is invalid, using primary GPT. [ 71.202356][ T6512] loop4: p1 p2 p3 [ 71.203147][ T6516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 71.215011][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.243496][ T6516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1298: bg 0: block 88: padding at end of block bitmap is not set [ 71.285901][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.300205][ T6528] loop4: detected capacity change from 0 to 1024 [ 71.308983][ T6528] EXT4-fs: Ignoring removed bh option [ 71.315495][ T6528] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.384811][ T6528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.438341][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.500956][ T6542] loop1: detected capacity change from 0 to 164 [ 71.501909][ T6541] SELinux: ebitmap: truncated map [ 71.516787][ T6541] SELinux: failed to load policy [ 71.523369][ T6542] iso9660: Unknown parameter '18446744073709551615ã)-Çô껑¡Bè' [ 71.591277][ T6551] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 71.604164][ T6551] team0: Port device dummy0 added [ 71.616465][ T6551] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 71.631015][ T6551] team0: Port device dummy0 removed [ 71.639827][ T6551] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.708312][ T6563] __nla_validate_parse: 2 callbacks suppressed [ 71.708333][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 71.746837][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 71.781393][ T6570] loop2: detected capacity change from 0 to 1024 [ 71.834974][ T6580] loop1: detected capacity change from 0 to 512 [ 71.850546][ T6570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.869166][ T6570] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1321: Allocating blocks 385-513 which overlap fs metadata [ 71.879234][ T6592] netlink: 'syz.0.1329': attribute type 4 has an invalid length. [ 71.885305][ T6580] EXT4-fs (loop1): too many log groups per flexible block group [ 71.898847][ T6580] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 71.908821][ T6580] EXT4-fs (loop1): mount failed [ 71.917543][ T6569] EXT4-fs (loop2): pa ffff8881071942a0: logic 16, phys. 129, len 24 [ 71.925722][ T6569] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 71.945635][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.965796][ T6597] loop0: detected capacity change from 0 to 1024 [ 71.972711][ T6597] EXT4-fs: Ignoring removed bh option [ 72.004850][ T6597] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 72.025465][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.063919][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 72.063938][ T29] audit: type=1326 audit(1757669503.441:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.093739][ T29] audit: type=1326 audit(1757669503.441:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.117480][ T29] audit: type=1326 audit(1757669503.441:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.140960][ T29] audit: type=1326 audit(1757669503.441:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.164442][ T29] audit: type=1326 audit(1757669503.441:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.188002][ T29] audit: type=1326 audit(1757669503.441:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.211569][ T29] audit: type=1326 audit(1757669503.441:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.235060][ T29] audit: type=1326 audit(1757669503.441:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.258585][ T29] audit: type=1326 audit(1757669503.471:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.259568][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.282149][ T29] audit: type=1326 audit(1757669503.471:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 72.394241][ T6619] loop2: detected capacity change from 0 to 512 [ 72.401820][ T6619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.413475][ T6619] EXT4-fs (loop2): 1 truncate cleaned up [ 72.423266][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.450025][ T6619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.707927][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1349'. [ 72.776579][ T6642] netlink: 'syz.5.1351': attribute type 1 has an invalid length. [ 72.831334][ T6642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.906646][ T6646] bond2: (slave geneve2): making interface the new active one [ 72.955676][ T6657] loop2: detected capacity change from 0 to 512 [ 72.973415][ T6657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.985715][ T6646] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 72.998328][ T6657] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1359: invalid indirect mapped block 4294967295 (level 0) [ 73.034424][ T6657] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1359: invalid indirect mapped block 4294967295 (level 1) [ 73.055123][ T6657] EXT4-fs (loop2): 1 orphan inode deleted [ 73.060897][ T6657] EXT4-fs (loop2): 1 truncate cleaned up [ 73.104913][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.196127][ T6657] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.1359: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 73.227021][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.244119][ T6677] loop1: detected capacity change from 0 to 256 [ 73.279107][ T6684] loop1: detected capacity change from 0 to 1024 [ 73.294004][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.321299][ T6684] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 73.355990][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.632390][ T6707] loop0: detected capacity change from 0 to 512 [ 73.646322][ T6707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.658802][ T6707] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1378: invalid indirect mapped block 4294967295 (level 0) [ 73.674184][ T6707] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1378: invalid indirect mapped block 4294967295 (level 1) [ 73.688888][ T6707] EXT4-fs (loop0): 1 orphan inode deleted [ 73.694771][ T6707] EXT4-fs (loop0): 1 truncate cleaned up [ 73.702828][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.760340][ T6714] loop1: detected capacity change from 0 to 256 [ 73.796375][ T6716] loop1: detected capacity change from 0 to 128 [ 73.806697][ T6716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1383'. [ 73.813276][ T6707] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1378: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 73.816123][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1383'. [ 73.858166][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.866479][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 73.876488][ T6716] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1383'. [ 73.885819][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'. [ 73.894922][ T6716] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1383'. [ 74.098476][ T6743] tipc: Started in network mode [ 74.103550][ T6743] tipc: Node identity ac14140f, cluster identity 4711 [ 74.110564][ T6743] tipc: New replicast peer: 255.255.255.255 [ 74.116656][ T6743] tipc: Enabled bearer , priority 10 [ 74.160262][ T6751] loop1: detected capacity change from 0 to 1024 [ 74.181186][ T6751] EXT4-fs: Ignoring removed nobh option [ 74.187483][ T6751] EXT4-fs: Ignoring removed bh option [ 74.215898][ T6751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.252582][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.299177][ T6765] SELinux: failed to load policy [ 74.340381][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 74.340883][ T6776] tipc: Started in network mode [ 74.354481][ T6776] tipc: Node identity ac14140f, cluster identity 4711 [ 74.361706][ T6776] tipc: New replicast peer: 255.255.255.255 [ 74.367900][ T6776] tipc: Enabled bearer , priority 10 [ 74.541719][ T6794] loop2: detected capacity change from 0 to 1024 [ 74.590954][ T6794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.624831][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.865827][ T6810] loop5: detected capacity change from 0 to 512 [ 74.884312][ T6810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.901713][ T6810] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1421: invalid indirect mapped block 4294967295 (level 0) [ 74.919662][ T6810] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1421: invalid indirect mapped block 4294967295 (level 1) [ 74.932389][ T6818] SELinux: Context Ü is not valid (left unmapped). [ 74.935684][ T6810] EXT4-fs (loop5): 1 orphan inode deleted [ 74.946503][ T6810] EXT4-fs (loop5): 1 truncate cleaned up [ 74.950020][ T6818] SELinux: Context attr/f is not valid (left unmapped). [ 74.954839][ T6810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.000887][ T6821] loop2: detected capacity change from 0 to 512 [ 75.014479][ T6821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.066884][ T6827] loop0: detected capacity change from 0 to 512 [ 75.073697][ T6827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.079239][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.098165][ T6830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.098737][ T6821] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.117140][ T6810] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.1421: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 75.143339][ T6821] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1427: corrupted xattr block 19: overlapping e_value [ 75.157800][ T6827] EXT4-fs (loop0): filesystem is read-only [ 75.163966][ T6827] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.174951][ T6821] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 75.177399][ T6827] EXT4-fs (loop0): filesystem is read-only [ 75.184071][ T6821] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1427: corrupted xattr block 19: overlapping e_value [ 75.189995][ T6827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.204421][ T6821] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 75.212328][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.219462][ T6827] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1430: iget: bad i_size value: 648518346341360424 [ 75.231498][ T6821] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1427: corrupted xattr block 19: overlapping e_value [ 75.241145][ T3380] tipc: Node number set to 2886997007 [ 75.260700][ T6827] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1430: couldn't read orphan inode 16 (err -117) [ 75.278399][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.303719][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.340577][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.423764][ T6847] loop0: detected capacity change from 0 to 128 [ 75.436142][ T6847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 75.447709][ T6847] System zones: 1-3, 19-19, 35-36 [ 75.453702][ T6847] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 75.466574][ T6847] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.498753][ T3380] tipc: Node number set to 2886997007 [ 75.523980][ T6847] EXT4-fs (loop0): shut down requested (0) [ 75.524305][ T6856] loop5: detected capacity change from 0 to 1024 [ 75.544164][ T6856] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 75.554748][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.570101][ T6856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.709216][ T6871] loop4: detected capacity change from 0 to 2048 [ 75.727934][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.782637][ T6871] loop4: p1 < > p4 [ 75.789632][ T6871] loop4: p4 size 8388608 extends beyond EOD, truncated [ 75.848852][ T6886] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 75.866645][ T6886] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 75.909515][ T6895] netlink: 'syz.5.1459': attribute type 30 has an invalid length. [ 76.038424][ T6910] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 76.092437][ T6914] netlink: 'syz.5.1478': attribute type 6 has an invalid length. [ 76.439891][ T6958] loop4: detected capacity change from 0 to 512 [ 76.456522][ T6958] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.500175][ T6958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.529242][ T6958] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.570314][ T6958] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1491: corrupted xattr block 19: overlapping e_value [ 76.595969][ T6958] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 76.634240][ T6958] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1491: corrupted xattr block 19: overlapping e_value [ 76.655920][ T6958] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 76.666472][ T6958] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1491: corrupted xattr block 19: overlapping e_value [ 76.693134][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.797508][ T6987] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.866830][ T6993] loop4: detected capacity change from 0 to 2048 [ 76.880040][ T6997] __nla_validate_parse: 7 callbacks suppressed [ 76.880056][ T6997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1507'. [ 76.920021][ T6999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6999 comm=syz.1.1509 [ 76.955145][ T6993] EXT4-fs: inline encryption not supported [ 76.994277][ T6993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.029792][ T6993] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1505: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 77.098623][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.119761][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 77.119778][ T29] audit: type=1400 audit(1757669508.491:1794): avc: denied { create } for pid=7010 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.150554][ T29] audit: type=1400 audit(1757669508.521:1795): avc: denied { write } for pid=7010 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.170771][ T29] audit: type=1400 audit(1757669508.521:1796): avc: denied { nlmsg_write } for pid=7010 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.181760][ T6923] syz.0.1472 (6923) used greatest stack depth: 6408 bytes left [ 77.236606][ T7022] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1520'. [ 77.314133][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'. [ 77.329120][ T29] audit: type=1400 audit(1757669508.701:1797): avc: denied { create } for pid=7029 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.350846][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 77.439893][ T7040] loop0: detected capacity change from 0 to 1024 [ 77.451088][ T7042] tls_set_device_offload_rx: netdev not found [ 77.493539][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.526648][ T29] audit: type=1400 audit(1757669508.901:1798): avc: denied { read write } for pid=7039 comm="syz.0.1526" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.528800][ T7040] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 77.549370][ T29] audit: type=1400 audit(1757669508.901:1799): avc: denied { open } for pid=7039 comm="syz.0.1526" path="/275/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.561699][ T7040] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.561699][ T7040] [ 77.594379][ T7040] EXT4-fs (loop0): Total free blocks count 0 [ 77.600384][ T7040] EXT4-fs (loop0): Free/Dirty block details [ 77.606398][ T7040] EXT4-fs (loop0): free_blocks=0 [ 77.611359][ T7040] EXT4-fs (loop0): dirty_blocks=0 [ 77.616433][ T7040] EXT4-fs (loop0): Block reservation details [ 77.618780][ T7046] SELinux: ebitmap: truncated map [ 77.622487][ T7040] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 77.639592][ T7046] SELinux: failed to load policy [ 77.651393][ T29] audit: type=1400 audit(1757669509.021:1800): avc: denied { read } for pid=7049 comm="syz.1.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.681237][ T29] audit: type=1326 audit(1757669509.051:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.5.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 77.711641][ T29] audit: type=1326 audit(1757669509.081:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.5.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 77.767597][ T29] audit: type=1326 audit(1757669509.091:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.5.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5621d1eba9 code=0x7ffc0000 [ 77.769717][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.832068][ T7062] Falling back ldisc for ttyS3. [ 77.881126][ T7074] pimreg: entered allmulticast mode [ 77.899206][ T7074] pimreg: left allmulticast mode [ 77.935310][ T7081] loop4: detected capacity change from 0 to 1024 [ 77.942510][ T7081] EXT4-fs: Ignoring removed bh option [ 77.948076][ T7081] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.962937][ T7081] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 78.007632][ T7083] loop1: detected capacity change from 0 to 1024 [ 78.015744][ T7081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.017141][ T7083] EXT4-fs: Ignoring removed i_version option [ 78.037685][ T7083] EXT4-fs: Ignoring removed orlov option [ 78.046891][ T7083] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 78.065701][ T7083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.078962][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.079148][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1551'. [ 78.157636][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.295327][ T7126] SELinux: failed to load policy [ 78.310004][ T7133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.318942][ T7135] loop4: detected capacity change from 0 to 512 [ 78.335185][ T7135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.348514][ T7135] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.410238][ T7147] pim6reg: entered allmulticast mode [ 78.417913][ T7147] pim6reg: left allmulticast mode [ 78.441626][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.525323][ T7155] batadv1: entered promiscuous mode [ 78.619203][ T7160] loop5: detected capacity change from 0 to 512 [ 78.630092][ T7160] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1579: Invalid inode bitmap blk 4 in block_group 0 [ 78.643341][ T7160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.667299][ T7160] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 78.704198][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.807225][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.814569][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.863380][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.873627][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.891151][ T7179] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 78.915770][ T7193] netlink: 'syz.2.1595': attribute type 21 has an invalid length. [ 78.916241][ T31] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.923662][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 78.941427][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.950604][ T31] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.959656][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.979229][ T7193] netlink: 'syz.2.1595': attribute type 21 has an invalid length. [ 78.987173][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 78.990373][ T31] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.005121][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.019215][ T31] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.028670][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.042657][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.051576][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.074647][ T7201] capability: warning: `syz.0.1598' uses deprecated v2 capabilities in a way that may be insecure [ 79.078673][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.094435][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.232026][ T7219] loop2: detected capacity change from 0 to 2048 [ 79.274734][ T7226] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1611'. [ 79.292401][ T7219] loop2: p1 < > p4 [ 79.300959][ T7219] loop2: p4 size 8388608 extends beyond EOD, truncated [ 79.367691][ T7243] loop5: detected capacity change from 0 to 128 [ 79.376293][ T7243] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.389842][ T7243] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.452827][ T3864] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.748127][ T7298] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.768205][ T7298] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.860893][ T7305] loop0: detected capacity change from 0 to 8192 [ 79.884861][ T7305] loop0: p1 p2 < > p3 p4 < p5 > [ 79.889879][ T7305] loop0: partition table partially beyond EOD, truncated [ 79.921109][ T7305] loop0: p1 size 100663296 extends beyond EOD, truncated [ 79.976020][ T7305] loop0: p2 start 591104 is beyond EOD, truncated [ 79.982613][ T7305] loop0: p3 start 33572980 is beyond EOD, truncated [ 80.003671][ T7305] loop0: p5 size 100663296 extends beyond EOD, truncated [ 80.094282][ T7337] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1656'. [ 80.131441][ T7341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.141902][ T7341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.153063][ T7343] loop0: detected capacity change from 0 to 2048 [ 80.205898][ T7341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.216328][ T7341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.228218][ T7343] EXT4-fs (loop0): failed to initialize system zone (-117) [ 80.252900][ T7343] EXT4-fs (loop0): mount failed [ 80.272211][ T7356] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1665'. [ 80.335073][ T7341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.345496][ T7341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.476529][ T7341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.486982][ T7341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.645030][ T1084] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.653373][ T1084] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.671481][ T7394] loop0: detected capacity change from 0 to 2048 [ 80.678440][ T1084] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.686868][ T1084] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.704134][ T1084] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.712405][ T1084] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725071][ T7394] loop0: p1 < > p4 [ 80.729574][ T7394] loop0: p4 size 8388608 extends beyond EOD, truncated [ 80.736909][ T1084] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.745145][ T1084] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.779916][ T7409] netlink: 'syz.4.1686': attribute type 10 has an invalid length. [ 80.794312][ T7409] dummy0: entered promiscuous mode [ 80.801142][ T7409] bond0: (slave dummy0): Releasing backup interface [ 80.810720][ T7409] bridge0: port 3(dummy0) entered blocking state [ 80.817330][ T7409] bridge0: port 3(dummy0) entered disabled state [ 80.825397][ T7409] dummy0: entered allmulticast mode [ 80.912908][ T7420] SELinux: failed to load policy [ 81.010365][ T7438] loop4: detected capacity change from 0 to 512 [ 81.029651][ T7438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.077271][ T7438] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.208357][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.338802][ T7453] loop0: detected capacity change from 0 to 128 [ 81.383907][ T7460] loop4: detected capacity change from 0 to 128 [ 81.390748][ T7460] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.404558][ T7460] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.430193][ T1084] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.491112][ T7470] SELinux: failed to load policy [ 81.530017][ T7481] siw: device registration error -23 [ 81.544908][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.552255][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.611577][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.621344][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.657117][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.676493][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.691432][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.731165][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.930540][ T7537] SELinux: failed to load policy [ 81.995987][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.003464][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.048288][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.058781][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.099828][ T7556] __nla_validate_parse: 3 callbacks suppressed [ 82.099847][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 82.115445][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 82.124814][ T1084] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.133886][ T1084] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.152032][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 82.152048][ T29] audit: type=1326 audit(1757669513.531:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 82.162052][ T1084] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.182405][ T29] audit: type=1326 audit(1757669513.531:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415f40eba9 code=0x7ffc0000 [ 82.191112][ T1084] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.195741][ T1084] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.232933][ T1084] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.242810][ T1084] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.252293][ T1084] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.300346][ T29] audit: type=1400 audit(1757669513.651:2080): avc: denied { read } for pid=7559 comm="syz.2.1749" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.325443][ T29] audit: type=1400 audit(1757669513.651:2081): avc: denied { open } for pid=7559 comm="syz.2.1749" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.364857][ T29] audit: type=1400 audit(1757669513.731:2082): avc: denied { watch } for pid=7561 comm="syz.0.1748" path="/328/file0" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.419628][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1752'. [ 82.544306][ T7588] loop2: detected capacity change from 0 to 512 [ 82.554080][ T7588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.568672][ T7588] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.636153][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.684017][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 82.702318][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 82.711342][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 82.739523][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 82.762290][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 82.781610][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 82.862232][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 83.241388][ T29] audit: type=1400 audit(1757669514.611:2083): avc: denied { create } for pid=7622 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.261282][ T29] audit: type=1400 audit(1757669514.611:2084): avc: denied { connect } for pid=7622 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.314694][ T29] audit: type=1400 audit(1757669514.661:2085): avc: denied { ioctl } for pid=7622 comm="syz.0.1775" path="socket:[18513]" dev="sockfs" ino=18513 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.402509][ T29] audit: type=1400 audit(1757669514.781:2086): avc: denied { create } for pid=7626 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.451864][ T29] audit: type=1400 audit(1757669514.801:2087): avc: denied { connect } for pid=7626 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.574236][ T7637] loop0: detected capacity change from 0 to 1024 [ 83.593795][ T7637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.610043][ T7637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 83.619473][ T7637] System zones: 0-1, 3-36 [ 83.625664][ T7637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.662460][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.827515][ T7665] loop4: detected capacity change from 0 to 512 [ 83.835767][ T7665] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1795: Invalid inode bitmap blk 4 in block_group 0 [ 83.852382][ T7665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.885298][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.947484][ T7672] loop0: detected capacity change from 0 to 128 [ 83.956585][ T7672] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 83.969825][ T7672] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.035290][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.264895][ T7708] netlink: 'syz.0.1813': attribute type 22 has an invalid length. [ 84.274912][ T7708] netlink: 'syz.0.1813': attribute type 22 has an invalid length. [ 84.331590][ T7714] loop0: detected capacity change from 0 to 1024 [ 84.342073][ T7714] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.353144][ T7714] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.364042][ T7714] JBD2: no valid journal superblock found [ 84.369840][ T7714] EXT4-fs (loop0): Could not load journal inode [ 84.382609][ T7714] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 84.473948][ T7736] loop4: detected capacity change from 0 to 1024 [ 84.480739][ T7736] EXT4-fs: Ignoring removed orlov option [ 84.486472][ T7736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.737869][ T2958] syz1: Port: 1 Link DOWN [ 84.737893][ T51] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.750942][ T51] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.761641][ T7787] loop4: detected capacity change from 0 to 256 [ 84.762445][ T51] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.776827][ T51] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.787162][ T7787] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.799587][ T7787] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.805882][ T51] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.818429][ T51] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.827019][ T51] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.835494][ T51] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.319113][ T7816] usb usb1: usbfs: process 7816 (syz.5.1862) did not claim interface 4 before use [ 85.333553][ T7818] loop4: detected capacity change from 0 to 512 [ 85.340315][ T7818] EXT4-fs: Ignoring removed oldalloc option [ 85.346966][ T7818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.358453][ T7818] EXT4-fs (loop4): 1 truncate cleaned up [ 85.511311][ T7834] netlink: 'syz.4.1868': attribute type 16 has an invalid length. [ 85.538664][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.551175][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.561161][ T7834] bridge0: port 3(dummy0) entered blocking state [ 85.567650][ T7834] bridge0: port 3(dummy0) entered forwarding state [ 85.581058][ T7834] 0ªX¹¦À: left allmulticast mode [ 85.586372][ T7834] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 85.754445][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.761982][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.785210][ T7859] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.785210][ T7859] program syz.4.1877 not setting count and/or reply_len properly [ 85.935029][ T7868] SELinux: failed to load policy [ 85.944839][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.958005][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.047746][ T2295] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.057187][ T2295] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.075784][ T2295] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.084952][ T2295] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.116584][ T2295] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.125567][ T2295] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.154884][ T2295] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.164016][ T2295] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.303753][ T7908] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 86.303753][ T7908] program syz.0.1902 not setting count and/or reply_len properly [ 87.198222][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 87.198313][ T29] audit: type=1400 audit(1757669518.571:2240): avc: denied { map_create } for pid=7973 comm="syz.0.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.239033][ T29] audit: type=1400 audit(1757669518.601:2241): avc: denied { prog_load } for pid=7973 comm="syz.0.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.258192][ T29] audit: type=1400 audit(1757669518.601:2242): avc: denied { create } for pid=7973 comm="syz.0.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 87.278040][ T29] audit: type=1400 audit(1757669518.611:2243): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.303075][ T29] audit: type=1400 audit(1757669518.651:2244): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.327426][ T29] audit: type=1400 audit(1757669518.651:2245): avc: denied { map_create } for pid=7977 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.346844][ T29] audit: type=1400 audit(1757669518.651:2246): avc: denied { prog_load } for pid=7977 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.366178][ T29] audit: type=1400 audit(1757669518.651:2247): avc: denied { prog_load } for pid=7977 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 87.385677][ T29] audit: type=1400 audit(1757669518.651:2248): avc: denied { create } for pid=7977 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 87.405446][ T29] audit: type=1400 audit(1757669518.671:2249): avc: denied { module_request } for pid=7975 comm="syz.0.1934" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 87.564542][ T8009] __nla_validate_parse: 11 callbacks suppressed [ 87.564564][ T8009] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1949'. [ 87.864054][ T8045] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1967'. [ 88.658813][ T8161] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 88.691398][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 88.700353][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 89.282767][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 89.299351][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 89.309240][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 89.326479][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 89.340675][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 89.687215][ T8377] netlink: 'syz.2.2128': attribute type 3 has an invalid length. [ 89.695221][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 89.713435][ T8381] macvtap0: refused to change device tx_queue_len [ 90.950273][ T8622] bridge0: port 3(dummy0) entered disabled state [ 91.482310][ T8743] netlink: 'syz.4.2305': attribute type 3 has an invalid length. [ 91.490264][ T8743] netlink: 'syz.4.2305': attribute type 3 has an invalid length. [ 91.736218][ T8792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8792 comm=syz.5.2329 [ 91.861073][ T8813] netem: unknown loss type 0 [ 91.865779][ T8813] netem: change failed [ 92.166573][ T8869] 1ªX¹¦À: renamed from 60ªX¹¦À [ 92.173274][ T8869] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.204562][ T29] kauditd_printk_skb: 1771 callbacks suppressed [ 92.204581][ T29] audit: type=1400 audit(1757669523.581:4021): avc: denied { map_create } for pid=8870 comm="syz.0.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.231943][ T29] audit: type=1400 audit(1757669523.581:4022): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.256471][ T29] audit: type=1400 audit(1757669523.581:4023): avc: denied { map_create } for pid=8870 comm="syz.0.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.275607][ T29] audit: type=1400 audit(1757669523.581:4024): avc: denied { prog_load } for pid=8870 comm="syz.0.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.294820][ T29] audit: type=1400 audit(1757669523.581:4025): avc: denied { create } for pid=8870 comm="syz.0.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 92.314428][ T29] audit: type=1400 audit(1757669523.611:4026): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.340069][ T29] audit: type=1400 audit(1757669523.721:4027): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.371725][ T29] audit: type=1400 audit(1757669523.741:4028): avc: denied { map_create } for pid=8875 comm="syz.2.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.390949][ T29] audit: type=1400 audit(1757669523.741:4029): avc: denied { prog_load } for pid=8875 comm="syz.2.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.410291][ T29] audit: type=1400 audit(1757669523.741:4030): avc: denied { prog_load } for pid=8875 comm="syz.2.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.362150][ T9033] __nla_validate_parse: 5 callbacks suppressed [ 93.362171][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 94.514918][ T9161] netlink: 'GPL': attribute type 4 has an invalid length. [ 95.042731][ T9200] netlink: 'GPL': attribute type 4 has an invalid length. [ 95.756368][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 95.760569][ T9304] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 96.196682][ T9371] $Hÿ: renamed from bond0 [ 96.202864][ T9371] $Hÿ: entered promiscuous mode [ 96.207935][ T9371] bond_slave_0: entered promiscuous mode [ 96.213727][ T9371] bond_slave_1: entered promiscuous mode [ 96.219554][ T9371] dummy0: entered promiscuous mode [ 96.409799][ T9392] veth3: entered promiscuous mode [ 96.913204][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2637'. [ 97.192202][ T9482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9482 comm=syz.5.2659 [ 97.212781][ T29] kauditd_printk_skb: 1128 callbacks suppressed [ 97.212858][ T29] audit: type=1400 audit(1757669528.591:5159): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.251721][ T29] audit: type=1400 audit(1757669528.591:5160): avc: denied { map_create } for pid=9484 comm="syz.1.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.271119][ T29] audit: type=1400 audit(1757669528.591:5161): avc: denied { prog_load } for pid=9484 comm="syz.1.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.290322][ T29] audit: type=1400 audit(1757669528.591:5162): avc: denied { prog_load } for pid=9484 comm="syz.1.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.309530][ T29] audit: type=1400 audit(1757669528.591:5163): avc: denied { sys_module } for pid=9484 comm="syz.1.2660" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 97.325480][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 97.331391][ T29] audit: type=1400 audit(1757669528.591:5164): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.374128][ T29] audit: type=1400 audit(1757669528.631:5165): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.398995][ T29] audit: type=1400 audit(1757669528.651:5166): avc: denied { prog_load } for pid=9488 comm="syz.1.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.418191][ T29] audit: type=1326 audit(1757669528.651:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9488 comm="syz.1.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 97.441774][ T29] audit: type=1326 audit(1757669528.651:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9488 comm="syz.1.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48456eba9 code=0x7ffc0000 [ 98.616399][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2759'. [ 98.824445][ T9724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 98.831296][ T9724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.838868][ T9724] vhci_hcd vhci_hcd.0: Device attached [ 98.848002][ T9724] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 98.854541][ T9724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.862309][ T9724] vhci_hcd vhci_hcd.0: Device attached [ 98.871901][ T9724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.880374][ T9724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.890077][ T9724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.899039][ T9724] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 98.905719][ T9724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.913426][ T9724] vhci_hcd vhci_hcd.0: Device attached [ 98.923175][ T9729] vhci_hcd: connection closed [ 98.923357][ T1084] vhci_hcd: stop threads [ 98.932592][ T1084] vhci_hcd: release socket [ 98.937279][ T1084] vhci_hcd: disconnect device [ 98.943077][ T9727] vhci_hcd: connection closed [ 98.943217][ T9725] vhci_hcd: connection closed [ 98.948574][ T1084] vhci_hcd: stop threads [ 98.957918][ T1084] vhci_hcd: release socket [ 98.962474][ T1084] vhci_hcd: disconnect device [ 98.967701][ T1084] vhci_hcd: stop threads [ 98.972046][ T1084] vhci_hcd: release socket [ 98.976612][ T1084] vhci_hcd: disconnect device [ 99.031824][ T3380] vhci_hcd: vhci_device speed not set [ 99.564073][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 99.574108][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 99.823665][ T9864] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2838'. [ 100.279579][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 100.288894][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 100.298037][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 100.311034][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 100.320078][ T9940] netlink: 'syz.2.2875': attribute type 6 has an invalid length. [ 100.329935][ T9948] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2880'. [ 101.003382][ T9994] ip6erspan0: entered promiscuous mode [ 101.010983][ T9996] $Hÿ: renamed from bond0 [ 101.016946][ T9996] $Hÿ: entered promiscuous mode [ 101.022200][ T9996] bond_slave_0: entered promiscuous mode [ 101.027913][ T9996] bond_slave_1: entered promiscuous mode [ 101.279651][T10038] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 101.553638][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 101.677247][T10112] netlink: 'syz.4.2959': attribute type 6 has an invalid length. [ 101.918370][T10160] ALSA: seq fatal error: cannot create timer (-22) [ 102.223851][ T29] kauditd_printk_skb: 1553 callbacks suppressed [ 102.223870][ T29] audit: type=1400 audit(1757669533.601:6722): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.254685][ T29] audit: type=1400 audit(1757669533.631:6723): avc: denied { prog_load } for pid=10218 comm="syz.1.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.274508][ T29] audit: type=1400 audit(1757669533.631:6724): avc: denied { prog_load } for pid=10218 comm="syz.1.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.274549][ T29] audit: type=1400 audit(1757669533.631:6725): avc: denied { map_create } for pid=10220 comm="syz.2.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.274571][ T29] audit: type=1400 audit(1757669533.631:6726): avc: denied { prog_load } for pid=10220 comm="syz.2.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.274593][ T29] audit: type=1400 audit(1757669533.631:6727): avc: denied { execmem } for pid=10220 comm="syz.2.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 102.274657][ T29] audit: type=1400 audit(1757669533.651:6728): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.277399][ T29] audit: type=1400 audit(1757669533.651:6729): avc: denied { prog_load } for pid=10223 comm="syz.2.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.278158][ T29] audit: type=1400 audit(1757669533.651:6730): avc: denied { prog_load } for pid=10223 comm="syz.2.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.278368][ T29] audit: type=1400 audit(1757669533.651:6731): avc: denied { read write } for pid=10223 comm="syz.2.3012" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 102.327541][T10231] sch_fq: defrate 4294967295 ignored. [ 102.458146][T10232] ipvlan2: entered promiscuous mode [ 102.463995][T10232] bridge0: port 1(ipvlan2) entered blocking state [ 102.470558][T10232] bridge0: port 1(ipvlan2) entered disabled state [ 102.478641][T10232] ipvlan2: entered allmulticast mode [ 102.484042][T10232] bridge0: entered allmulticast mode [ 102.498074][T10232] ipvlan2: left allmulticast mode [ 102.503219][T10232] bridge0: left allmulticast mode [ 102.635479][T10254] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 102.642030][T10254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.649700][T10254] vhci_hcd vhci_hcd.0: Device attached [ 102.657934][T10254] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 102.658345][T10258] netlink: 'syz.2.3027': attribute type 3 has an invalid length. [ 102.664581][T10254] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.664710][T10254] vhci_hcd vhci_hcd.0: Device attached [ 102.684400][T10254] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.685638][T10258] netlink: 'syz.2.3027': attribute type 4 has an invalid length. [ 102.704540][T10254] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.713647][T10254] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.735489][T10254] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 102.742131][T10254] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.749772][T10254] vhci_hcd vhci_hcd.0: Device attached [ 102.760140][T10255] vhci_hcd: connection closed [ 102.760338][T10260] vhci_hcd: connection closed [ 102.760345][ T1084] vhci_hcd: stop threads [ 102.760358][ T1084] vhci_hcd: release socket [ 102.765277][T10265] vhci_hcd: connection closed [ 102.769776][ T1084] vhci_hcd: disconnect device [ 102.788972][ T1084] vhci_hcd: stop threads [ 102.793303][ T1084] vhci_hcd: release socket [ 102.795501][T10270] ipvlan2: entered promiscuous mode [ 102.797732][ T1084] vhci_hcd: disconnect device [ 102.803581][T10270] bridge0: port 4(ipvlan2) entered blocking state [ 102.814430][T10270] bridge0: port 4(ipvlan2) entered disabled state [ 102.821475][T10270] ipvlan2: entered allmulticast mode [ 102.821834][ T1084] vhci_hcd: stop threads [ 102.826853][T10270] bridge0: entered allmulticast mode [ 102.831103][ T1084] vhci_hcd: release socket [ 102.836474][ T2958] vhci_hcd: vhci_device speed not set [ 102.846264][ T1084] vhci_hcd: disconnect device [ 102.851825][T10270] ipvlan2: left allmulticast mode [ 102.856869][T10270] bridge0: left allmulticast mode [ 103.025559][T10297] tun0: tun_chr_ioctl cmd 1074025675 [ 103.030911][T10297] tun0: persist disabled [ 103.114403][T10311] bridge: RTM_NEWNEIGH with invalid ether address [ 104.328347][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.336563][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.345731][T10480] batman_adv: batadv0: Removing interface: veth1_vlan [ 104.581168][T10520] __nla_validate_parse: 7 callbacks suppressed [ 104.581185][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 104.598081][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 104.607753][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 104.631998][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 104.666800][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 104.729914][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 104.738989][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3163'. [ 104.747982][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 104.765099][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3163'. [ 104.774144][T10549] netlink: 'syz.1.3163': attribute type 6 has an invalid length. [ 104.857842][T10572] netlink: 'syz.1.3174': attribute type 4 has an invalid length. [ 104.865656][T10572] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3174'. [ 105.712005][T10598] netlink: 'syz.4.3185': attribute type 4 has an invalid length. [ 105.756941][T10603] netlink: 'syz.0.3187': attribute type 21 has an invalid length. [ 105.890641][T10610] ================================================================== [ 105.898782][T10610] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 105.907412][T10610] [ 105.909789][T10610] write to 0xffff88811851a768 of 8 bytes by task 10624 on cpu 1: [ 105.917528][T10610] shmem_file_splice_read+0x470/0x600 [ 105.923224][T10610] splice_direct_to_actor+0x26f/0x680 [ 105.928800][T10610] do_splice_direct+0xda/0x150 [ 105.933584][T10610] do_sendfile+0x380/0x650 [ 105.938043][T10610] __x64_sys_sendfile64+0x105/0x150 [ 105.943294][T10610] x64_sys_call+0x2bb0/0x2ff0 [ 105.948003][T10610] do_syscall_64+0xd2/0x200 [ 105.952552][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.958558][T10610] [ 105.960901][T10610] write to 0xffff88811851a768 of 8 bytes by task 10610 on cpu 0: [ 105.968666][T10610] shmem_file_splice_read+0x470/0x600 [ 105.974081][T10610] splice_direct_to_actor+0x26f/0x680 [ 105.979479][T10610] do_splice_direct+0xda/0x150 [ 105.984275][T10610] do_sendfile+0x380/0x650 [ 105.988720][T10610] __x64_sys_sendfile64+0x105/0x150 [ 105.993954][T10610] x64_sys_call+0x2bb0/0x2ff0 [ 105.998652][T10610] do_syscall_64+0xd2/0x200 [ 106.003376][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.009385][T10610] [ 106.011721][T10610] value changed: 0x0000000000012000 -> 0x0000000000012052 [ 106.018836][T10610] [ 106.021169][T10610] Reported by Kernel Concurrency Sanitizer on: [ 106.027427][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.1.3192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.037256][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.047327][T10610] ==================================================================